LeakIX - Host 13.225.78.103

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.20
Domain: lmb49.fr
Port: 443
URL: https://lmb49.fr

First seen 2022-10-21 10:25
Last seen 2026-01-02 17:09
Open for 1169 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network/about.php
/wp-admin/network/admin.php
/wp-admin/network/content.txt
/wp-admin/network/credits.php
/wp-admin/network/edit.php
/wp-admin/network/freedoms.php
/wp-admin/network/index.php
/wp-admin/network/menu.php
/wp-admin/network/plugin-editor.php
/wp-admin/network/plugin-install.php
/wp-admin/network/plugins.php
/wp-admin/network/privacy.php
/wp-admin/network/profile.php
/wp-admin/network/settings.php
/wp-admin/network/setup.php
/wp-admin/network/site-info.php
/wp-admin/network/site-new.php
/wp-admin/network/site-settings.php
/wp-admin/network/site-themes.php
/wp-admin/network/site-users.php
/wp-admin/network/sites.php
/wp-admin/network/stats-scripts
/wp-admin/network/theme-editor.php
/wp-admin/network/theme-install.php
/wp-admin/network/themes.php
/wp-admin/network/update-core.php
/wp-admin/network/update.php
/wp-admin/network/upgrade.php
/wp-admin/network/user-edit.php
/wp-admin/network/user-new.php
/wp-admin/network/users.php
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php

Found on 2026-01-02 17:09

Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5

Found 119 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-12-01 09:58

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.205.79
Domain: www.splitlightglass.com
Port: 443
URL: https://www.splitlightglass.com

First seen 2022-10-29 02:47
Last seen 2026-01-02 12:59
Open for 1161 days

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447730fdda075a0a3c19624f72fb51de279

Found 18 files trough .DS_Store spidering:

/images
/images/bath-3.jpeg
/images/bath-4.jpeg
/images/featured
/images/featured/1.JPG
/images/featured/2.JPG
/images/featured/3.JPG
/images/featured/4.JPG
/images/featured/5.JPG
/images/featured/6.JPG
/images/IMG_20201126_154235.jpg
/images/jen1.jpg
/images/kaleidescope.jpeg
/images/logo.png
/images/repair.jpeg
/images/sid1.jpg
/images/sid2.jpg
/images/smalllogo.png

Found on 2026-01-02 12:59

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a9a32b07b386d9c90007a7b0c6280c48c

Found 19 files trough .DS_Store spidering:

/images
/images/bath-3.jpeg
/images/bath-4.jpeg
/images/celia-wigzell-iA5t1XVOcKQ-unsplash.jpg
/images/featured
/images/featured/1.JPG
/images/featured/2.JPG
/images/featured/3.JPG
/images/featured/4.JPG
/images/featured/5.JPG
/images/featured/6.JPG
/images/IMG_20201126_154235.jpg
/images/jen1.jpg
/images/kimberly-eschenbauch-03Eu7zSySPo-unsplash.jpg
/images/logan-cameron-vrr-nnei4pE-unsplash.jpg
/images/logo.png
/images/sid1.jpg
/images/sid2.jpg
/images/smalllogo.png

Found on 2023-11-06 02:06

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146beeb5935c820ca19bbd8f31ef95c93358

Found 21 files trough .DS_Store spidering:

/images
/images/bath-1.jpeg
/images/bath-2.jpeg
/images/bath-3.jpeg
/images/bath-4.jpeg
/images/celia-wigzell-iA5t1XVOcKQ-unsplash.jpg
/images/featured
/images/featured/1.JPG
/images/featured/2.JPG
/images/featured/3.JPG
/images/featured/4.JPG
/images/featured/5.JPG
/images/featured/6.JPG
/images/IMG_20201126_154235.jpg
/images/jen1.jpg
/images/kimberly-eschenbauch-03Eu7zSySPo-unsplash.jpg
/images/logan-cameron-vrr-nnei4pE-unsplash.jpg
/images/logo.png
/images/sid1.jpg
/images/sid2.jpg
/images/smalllogo.png

Found on 2022-10-29 02:47

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.85.65.18
Domain: console.staging.piconext.com
Port: 443
URL: https://console.staging.piconext.com

First seen 2024-02-05 07:31
Last seen 2026-01-02 12:23
Open for 697 days

Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc751fe8e75aa795a856a14653e480dc0c
```
Found 4 files trough .DS_Store spidering:

/audio
/emoji
/fonts
/icons
```
Found on 2026-01-02 12:23
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df251dcc2f251dcc2f251dcc2f251dcc2
```
Found 1 files trough .DS_Store spidering:

/emoji
```
Found on 2025-01-05 06:55

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.154.107
Domain: yuushimizu.com
Port: 443
URL: https://yuushimizu.com

First seen 2023-02-28 15:44
Last seen 2026-01-02 10:17
Open for 1038 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c0ac411c00ac411c074b09625c0ee167e49931141cb581754

Found 88 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/images/10-pichu-mimicu.png
/gallery/images/11-anzuchang.png
/gallery/images/12-biriridama.png
/gallery/images/13-totoro.png
/gallery/images/14-nazonokusa.png
/gallery/images/15-renchon.png
/gallery/images/16-ahiruchan.png
/gallery/images/17-sowakachan.png
/gallery/images/18-mew.png
/gallery/images/19-chocobo.png
/gallery/images/20-sushineko.png
/gallery/images/20210831-nekopoi.png
/gallery/images/20210902-kame.png
/gallery/images/20210904-mochi.png
/gallery/images/20210905-tabekko.png
/gallery/images/20210907-girlneko.png
/gallery/images/20210910-momonja.jpg
/gallery/images/20210911-shinobazunoike.jpg
/gallery/images/20210914-shimarin.jpg
/gallery/images/20210916-hamburger.png
/gallery/images/20210923-batou.jpg
/gallery/images/20210924-face1.png
/gallery/images/20210924-face2.png
/gallery/images/20210924-face3-history-1.png
/gallery/images/20210924-face3-history-2.png
/gallery/images/20210924-face3-history-3.png
/gallery/images/20210924-face3-history-4.png
/gallery/images/20210924-face3.png
/gallery/images/20210924-face4-ex1.png
/gallery/images/20210924-face4-history-1.png
/gallery/images/20210924-face4-history-10.png
/gallery/images/20210924-face4-history-11.png
/gallery/images/20210924-face4-history-12.png
/gallery/images/20210924-face4-history-13.png
/gallery/images/20210924-face4-history-14.png
/gallery/images/20210924-face4-history-2.png
/gallery/images/20210924-face4-history-3.png
/gallery/images/20210924-face4-history-4.png
/gallery/images/20210924-face4-history-5.png
/gallery/images/20210924-face4-history-6.png
/gallery/images/20210924-face4-history-7.png
/gallery/images/20210924-face4-history-8.png
/gallery/images/20210924-face4-history-9.png
/gallery/images/20210924-face4.png
/gallery/images/20210929-tree.png
/gallery/images/20211011-daruchino.png
/gallery/images/20211012-sea.jpg
/gallery/images/20211013-kamaitachi.png
/gallery/images/3-picachu.png
/gallery/images/4-kinoko.png
/gallery/images/5-mimicu.png
/gallery/images/6-mimic.png
/gallery/images/7-oomimizu.png
/gallery/images/8-gabriel.png
/gallery/images/9-pichu.png
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/images/balls.png
/images/bento.png
/images/cookie.png
/images/donut.png
/images/favicon.png
/images/goat.png
/images/gohan.png
/images/grass.png
/images/ika.png
/images/lolipop.png
/images/matan.png
/images/scroll.png
/images/stars.png
/images/wave.png
/logs
/logs/images
/muni
/pixelarts
/pixelarts/images
/sandbox
/sandbox/comitia145
/stylesheets
/tantone
/tree
/uugb

Found on 2026-01-02 10:17

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe71942834dd25ef8847f35324628288b271d

Found 16 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/logs
/muni
/pixelarts
/sandbox
/stylesheets
/tantone
/tree
/uugb

Found on 2025-11-30 16:42

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc61b3f3700a671009471a691b30bdc2ade5

Found 85 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/images/10-pichu-mimicu.png
/gallery/images/11-anzuchang.png
/gallery/images/12-biriridama.png
/gallery/images/13-totoro.png
/gallery/images/14-nazonokusa.png
/gallery/images/15-renchon.png
/gallery/images/16-ahiruchan.png
/gallery/images/17-sowakachan.png
/gallery/images/18-mew.png
/gallery/images/19-chocobo.png
/gallery/images/20-sushineko.png
/gallery/images/20210831-nekopoi.png
/gallery/images/20210902-kame.png
/gallery/images/20210904-mochi.png
/gallery/images/20210905-tabekko.png
/gallery/images/20210907-girlneko.png
/gallery/images/20210910-momonja.jpg
/gallery/images/20210911-shinobazunoike.jpg
/gallery/images/20210914-shimarin.jpg
/gallery/images/20210916-hamburger.png
/gallery/images/20210923-batou.jpg
/gallery/images/20210924-face1.png
/gallery/images/20210924-face2.png
/gallery/images/20210924-face3-history-1.png
/gallery/images/20210924-face3-history-2.png
/gallery/images/20210924-face3-history-3.png
/gallery/images/20210924-face3-history-4.png
/gallery/images/20210924-face3.png
/gallery/images/20210924-face4-ex1.png
/gallery/images/20210924-face4-history-1.png
/gallery/images/20210924-face4-history-10.png
/gallery/images/20210924-face4-history-11.png
/gallery/images/20210924-face4-history-12.png
/gallery/images/20210924-face4-history-13.png
/gallery/images/20210924-face4-history-14.png
/gallery/images/20210924-face4-history-2.png
/gallery/images/20210924-face4-history-3.png
/gallery/images/20210924-face4-history-4.png
/gallery/images/20210924-face4-history-5.png
/gallery/images/20210924-face4-history-6.png
/gallery/images/20210924-face4-history-7.png
/gallery/images/20210924-face4-history-8.png
/gallery/images/20210924-face4-history-9.png
/gallery/images/20210924-face4.png
/gallery/images/20210929-tree.png
/gallery/images/20211011-daruchino.png
/gallery/images/20211012-sea.jpg
/gallery/images/20211013-kamaitachi.png
/gallery/images/3-picachu.png
/gallery/images/4-kinoko.png
/gallery/images/5-mimicu.png
/gallery/images/6-mimic.png
/gallery/images/7-oomimizu.png
/gallery/images/8-gabriel.png
/gallery/images/9-pichu.png
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/images/balls.png
/images/bento.png
/images/cookie.png
/images/donut.png
/images/favicon.png
/images/goat.png
/images/gohan.png
/images/grass.png
/images/ika.png
/images/lolipop.png
/images/matan.png
/images/scroll.png
/images/stars.png
/images/wave.png
/logs
/muni
/pixelarts
/sandbox
/stylesheets
/tantone
/tree
/uugb

Found on 2025-11-28 14:09

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c6c66a1e871f21d6d818ead34f0a517e3f

Found 86 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/images/10-pichu-mimicu.png
/gallery/images/11-anzuchang.png
/gallery/images/12-biriridama.png
/gallery/images/13-totoro.png
/gallery/images/14-nazonokusa.png
/gallery/images/15-renchon.png
/gallery/images/16-ahiruchan.png
/gallery/images/17-sowakachan.png
/gallery/images/18-mew.png
/gallery/images/19-chocobo.png
/gallery/images/20-sushineko.png
/gallery/images/20210831-nekopoi.png
/gallery/images/20210902-kame.png
/gallery/images/20210904-mochi.png
/gallery/images/20210905-tabekko.png
/gallery/images/20210907-girlneko.png
/gallery/images/20210910-momonja.jpg
/gallery/images/20210911-shinobazunoike.jpg
/gallery/images/20210914-shimarin.jpg
/gallery/images/20210916-hamburger.png
/gallery/images/20210923-batou.jpg
/gallery/images/20210924-face1.png
/gallery/images/20210924-face2.png
/gallery/images/20210924-face3-history-1.png
/gallery/images/20210924-face3-history-2.png
/gallery/images/20210924-face3-history-3.png
/gallery/images/20210924-face3-history-4.png
/gallery/images/20210924-face3.png
/gallery/images/20210924-face4-ex1.png
/gallery/images/20210924-face4-history-1.png
/gallery/images/20210924-face4-history-10.png
/gallery/images/20210924-face4-history-11.png
/gallery/images/20210924-face4-history-12.png
/gallery/images/20210924-face4-history-13.png
/gallery/images/20210924-face4-history-14.png
/gallery/images/20210924-face4-history-2.png
/gallery/images/20210924-face4-history-3.png
/gallery/images/20210924-face4-history-4.png
/gallery/images/20210924-face4-history-5.png
/gallery/images/20210924-face4-history-6.png
/gallery/images/20210924-face4-history-7.png
/gallery/images/20210924-face4-history-8.png
/gallery/images/20210924-face4-history-9.png
/gallery/images/20210924-face4.png
/gallery/images/20210929-tree.png
/gallery/images/20211011-daruchino.png
/gallery/images/20211012-sea.jpg
/gallery/images/20211013-kamaitachi.png
/gallery/images/3-picachu.png
/gallery/images/4-kinoko.png
/gallery/images/5-mimicu.png
/gallery/images/6-mimic.png
/gallery/images/7-oomimizu.png
/gallery/images/8-gabriel.png
/gallery/images/9-pichu.png
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/images/balls.png
/images/bento.png
/images/cookie.png
/images/donut.png
/images/favicon.png
/images/goat.png
/images/gohan.png
/images/grass.png
/images/ika.png
/images/lolipop.png
/images/matan.png
/images/scroll.png
/images/stars.png
/images/wave.png
/logs
/logs/images
/muni
/pixelarts
/sandbox
/stylesheets
/tantone
/tree
/uugb

Found on 2025-11-16 06:56

Severity: medium
Fingerprint: 5f32cf5d6962f09cb7af8d83b7af8d8306af2ef8c38be8358793984af5c0f62c

Found 87 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/images/10-pichu-mimicu.png
/gallery/images/11-anzuchang.png
/gallery/images/12-biriridama.png
/gallery/images/13-totoro.png
/gallery/images/14-nazonokusa.png
/gallery/images/15-renchon.png
/gallery/images/16-ahiruchan.png
/gallery/images/17-sowakachan.png
/gallery/images/18-mew.png
/gallery/images/19-chocobo.png
/gallery/images/20-sushineko.png
/gallery/images/20210831-nekopoi.png
/gallery/images/20210902-kame.png
/gallery/images/20210904-mochi.png
/gallery/images/20210905-tabekko.png
/gallery/images/20210907-girlneko.png
/gallery/images/20210910-momonja.jpg
/gallery/images/20210911-shinobazunoike.jpg
/gallery/images/20210914-shimarin.jpg
/gallery/images/20210916-hamburger.png
/gallery/images/20210923-batou.jpg
/gallery/images/20210924-face1.png
/gallery/images/20210924-face2.png
/gallery/images/20210924-face3-history-1.png
/gallery/images/20210924-face3-history-2.png
/gallery/images/20210924-face3-history-3.png
/gallery/images/20210924-face3-history-4.png
/gallery/images/20210924-face3.png
/gallery/images/20210924-face4-ex1.png
/gallery/images/20210924-face4-history-1.png
/gallery/images/20210924-face4-history-10.png
/gallery/images/20210924-face4-history-11.png
/gallery/images/20210924-face4-history-12.png
/gallery/images/20210924-face4-history-13.png
/gallery/images/20210924-face4-history-14.png
/gallery/images/20210924-face4-history-2.png
/gallery/images/20210924-face4-history-3.png
/gallery/images/20210924-face4-history-4.png
/gallery/images/20210924-face4-history-5.png
/gallery/images/20210924-face4-history-6.png
/gallery/images/20210924-face4-history-7.png
/gallery/images/20210924-face4-history-8.png
/gallery/images/20210924-face4-history-9.png
/gallery/images/20210924-face4.png
/gallery/images/20210929-tree.png
/gallery/images/20211011-daruchino.png
/gallery/images/20211012-sea.jpg
/gallery/images/20211013-kamaitachi.png
/gallery/images/3-picachu.png
/gallery/images/4-kinoko.png
/gallery/images/5-mimicu.png
/gallery/images/6-mimic.png
/gallery/images/7-oomimizu.png
/gallery/images/8-gabriel.png
/gallery/images/9-pichu.png
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/images/balls.png
/images/bento.png
/images/cookie.png
/images/donut.png
/images/favicon.png
/images/goat.png
/images/gohan.png
/images/grass.png
/images/ika.png
/images/lolipop.png
/images/matan.png
/images/scroll.png
/images/stars.png
/images/wave.png
/logs
/logs/images
/muni
/pixelarts
/pixelarts/images
/sandbox
/stylesheets
/tantone
/tree
/uugb

Found on 2025-11-14 06:51

Severity: medium
Fingerprint: 5f32cf5d6962f09c8ef2655c8ef2655c4e3fa5e108fdfd9a815ffc8580ee081e

Found 71 files trough .DS_Store spidering:

/battle
/colombia
/gallery
/gallery/images
/gallery/images/10-pichu-mimicu.png
/gallery/images/11-anzuchang.png
/gallery/images/12-biriridama.png
/gallery/images/13-totoro.png
/gallery/images/14-nazonokusa.png
/gallery/images/15-renchon.png
/gallery/images/16-ahiruchan.png
/gallery/images/17-sowakachan.png
/gallery/images/18-mew.png
/gallery/images/19-chocobo.png
/gallery/images/20-sushineko.png
/gallery/images/20210831-nekopoi.png
/gallery/images/20210902-kame.png
/gallery/images/20210904-mochi.png
/gallery/images/20210905-tabekko.png
/gallery/images/20210907-girlneko.png
/gallery/images/20210910-momonja.jpg
/gallery/images/20210911-shinobazunoike.jpg
/gallery/images/20210914-shimarin.jpg
/gallery/images/20210916-hamburger.png
/gallery/images/20210923-batou.jpg
/gallery/images/20210924-face1.png
/gallery/images/20210924-face2.png
/gallery/images/20210924-face3-history-1.png
/gallery/images/20210924-face3-history-2.png
/gallery/images/20210924-face3-history-3.png
/gallery/images/20210924-face3-history-4.png
/gallery/images/20210924-face3.png
/gallery/images/20210924-face4-ex1.png
/gallery/images/20210924-face4-history-1.png
/gallery/images/20210924-face4-history-10.png
/gallery/images/20210924-face4-history-11.png
/gallery/images/20210924-face4-history-12.png
/gallery/images/20210924-face4-history-13.png
/gallery/images/20210924-face4-history-14.png
/gallery/images/20210924-face4-history-2.png
/gallery/images/20210924-face4-history-3.png
/gallery/images/20210924-face4-history-4.png
/gallery/images/20210924-face4-history-5.png
/gallery/images/20210924-face4-history-6.png
/gallery/images/20210924-face4-history-7.png
/gallery/images/20210924-face4-history-8.png
/gallery/images/20210924-face4-history-9.png
/gallery/images/20210924-face4.png
/gallery/images/20210929-tree.png
/gallery/images/20211011-daruchino.png
/gallery/images/20211012-sea.jpg
/gallery/images/20211013-kamaitachi.png
/gallery/images/3-picachu.png
/gallery/images/4-kinoko.png
/gallery/images/5-mimicu.png
/gallery/images/6-mimic.png
/gallery/images/7-oomimizu.png
/gallery/images/8-gabriel.png
/gallery/images/9-pichu.png
/gallery/notes
/gallery/thumbnails
/game-effects
/images
/logs
/muni
/pixelarts
/sandbox
/stylesheets
/tantone
/tree
/uugb

Found on 2025-10-23 15:00

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.205.106
Domain: www.tententhsgourmet.com
Port: 443
URL: https://www.tententhsgourmet.com

First seen 2023-03-01 17:07
Last seen 2026-01-02 07:49
Open for 1037 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df86b19daf

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/collins/f-logo.png
/img/collins/favicon.ico
/img/collins/logo.png
/img/collins/no-img-product.png
/img/collins/noimg-400x400.png
/img/collins/noimg-470x240.jpg
/img/collins/ogimage.png
/img/collins/stripe_logo.png
/img/danghongpho
/img/dessertsandbites
/img/dessertsandbites/f-logo.png
/img/dessertsandbites/favicon.ico
/img/dessertsandbites/logo.png
/img/dessertsandbites/no-img-product.png
/img/dessertsandbites/noimg-400x400.png
/img/dessertsandbites/noimg-470x240.jpg
/img/dessertsandbites/ogimage.png
/img/dessertsandbites/stripe_logo.png
/img/dohaven
/img/dohaven/f-logo.png

Found on 2026-01-02 07:49

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df2763afba

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg

Found on 2025-12-01 07:16

Severity: medium
Fingerprint: 5f32cf5d6962f09cacbf01a6acbf01a63408a7fedf2ad38a67d40fee1f15fa9e

Found 118 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/blackcherry
/img/blackcherryroastery
/img/breakfasthola
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu
/img/parisvanjava
/img/payment.png
/img/pita-bakery
/img/pita-bakery-wholesale
/img/pitahouse
/img/rbliciouz
/img/restaurant
/img/retail
/img/roddee
/img/saigonquan
/img/sampanman
/img/samrang
/img/soonhuatsg
/img/sultanpalace
/img/sycamore-sg
/img/teasocialsg
/img/tententhsgourmet
/img/thecurryclub
/img/thekindbowl
/img/theparteegolf
/img/thesapling
/img/uncleauntykitchen
/img/unigallery
/img/wangdaebakbbq
/img/wangdaebakbbqholland
/img/weekee
/img/yenneysg
/img/yevolutionsg
/img/youtube.svg
/index.html
/js
/logo.png
/manifest.json

Found on 2025-11-28 16:59

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3dfac7ed2e9

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop

Found on 2025-11-27 02:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df23f4a020

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/collins/f-logo.png
/img/collins/favicon.ico
/img/collins/logo.png
/img/collins/no-img-product.png
/img/collins/noimg-400x400.png
/img/collins/noimg-470x240.jpg
/img/collins/ogimage.png
/img/collins/stripe_logo.png
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill

Found on 2025-11-10 21:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df4e01c56b

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu
/img/parisvanjava
/img/payment.png
/img/pita-bakery
/img/pita-bakery-wholesale
/img/pitahouse
/img/rbliciouz
/img/restaurant
/img/retail

Found on 2025-09-18 12:06

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df664154e1

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/breakfasthola
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu
/img/parisvanjava
/img/payment.png
/img/pita-bakery
/img/pita-bakery-wholesale
/img/pitahouse
/img/rbliciouz
/img/restaurant
/img/retail
/img/roddee
/img/saigonquan
/img/sampanman
/img/samrang
/img/soonhuatsg
/img/sultanpalace
/img/sycamore-sg
/img/teasocialsg

Found on 2025-09-15 00:50

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df861af565

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu

Found on 2025-08-20 13:49

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df1fd69603

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/collins/f-logo.png
/img/collins/favicon.ico
/img/collins/logo.png
/img/collins/no-img-product.png
/img/collins/noimg-400x400.png
/img/collins/noimg-470x240.jpg
/img/collins/ogimage.png
/img/collins/stripe_logo.png
/img/danghongpho
/img/dessertsandbites
/img/dessertsandbites/f-logo.png
/img/dessertsandbites/favicon.ico
/img/dessertsandbites/logo.png
/img/dessertsandbites/no-img-product.png
/img/dessertsandbites/noimg-400x400.png
/img/dessertsandbites/noimg-470x240.jpg
/img/dessertsandbites/ogimage.png
/img/dessertsandbites/stripe_logo.png
/img/dohaven
/img/enterprise

Found on 2025-05-12 15:43

Severity: low
Fingerprint: 5f32cf5d6962f09c026392ab026392ab8b46cfcb2fbdbe7b715af0bb601dc6cc
```
Found 7 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/index.html
/js
/logo.png
/manifest.json
```
Found on 2025-02-14 13:35

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3dfdd63a76a

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/botanict.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/horsebg.jpg
/img/bg/index.html
/img/bg/koomi1.jpg
/img/bg/koomi2.jpg
/img/bg/koomi3.jpg
/img/bg/koomi4.jpg
/img/bg/masterbriyani.jpg
/img/bg/popularfood.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/bg/xinglemalahotpot.jpg
/img/blackcherry
/img/blackcherryroastery
/img/breakfasthola
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu
/img/parisvanjava
/img/payment.png
/img/pita-bakery
/img/pita-bakery-wholesale
/img/pitahouse
/img/rbliciouz
/img/restaurant
/img/retail
/img/roddee
/img/saigonquan
/img/sampanman
/img/samrang
/img/soonhuatsg
/img/sultanpalace
/img/sycamore-sg
/img/teasocialsg
/img/tententhsgourmet
/img/thecurryclub
/img/thekindbowl
/img/theparteegolf
/img/thesapling
/img/uncleauntykitchen
/img/unigallery
/img/wangdaebakbbq

Found on 2025-02-12 07:56

Severity: medium
Fingerprint: 5f32cf5d6962f09c575112a7575112a74868524f73ab30e71e03912f0f41f97b

Found 102 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/beamarry
/img/betsubara
/img/bg
/img/blackcherry
/img/blackcherryroastery
/img/breakfasthola
/img/byfleur
/img/chulop
/img/collins
/img/danghongpho
/img/dessertsandbites
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/farrerhorse
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery
/img/hatsu
/img/hungrybbq
/img/instagram.svg
/img/juparocoffee
/img/jusignatures
/img/juzscooop
/img/jyugae
/img/kazoku
/img/lemonsquarebakerytreats
/img/livetoeat
/img/lukchang
/img/maduras
/img/magicthaikitchen
/img/makanduluseafoodsg
/img/masterbriyani
/img/meatywestern
/img/meile
/img/meowmee
/img/myserembanbeefnoodles
/img/nelsonbar
/img/ninjaent
/img/olulu
/img/parisvanjava
/img/payment.png
/img/pita-bakery
/img/pita-bakery-wholesale
/img/pitahouse
/img/rbliciouz
/img/restaurant
/img/retail
/img/roddee
/img/saigonquan
/img/sampanman
/img/samrang
/img/soonhuatsg
/img/sultanpalace
/img/sycamore-sg
/img/teasocialsg
/img/tententhsgourmet
/img/thecurryclub
/img/thekindbowl
/img/theparteegolf
/img/thesapling
/img/uncleauntykitchen
/img/unigallery
/img/wangdaebakbbq
/img/wangdaebakbbqholland
/img/weekee
/img/yenneysg
/img/yevolutionsg
/img/youtube.svg
/index.html
/js
/logo.png
/manifest.json

Found on 2024-08-28 14:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3dffc6755e6

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/masterbriyani.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/collins/f-logo.png
/img/collins/favicon.ico
/img/collins/logo.png
/img/collins/no-img-product.png
/img/collins/noimg-400x400.png
/img/collins/noimg-470x240.jpg
/img/collins/ogimage.png
/img/collins/stripe_logo.png
/img/danghongpho
/img/dessertsandbites
/img/dessertsandbites/f-logo.png
/img/dessertsandbites/favicon.ico
/img/dessertsandbites/logo.png
/img/dessertsandbites/no-img-product.png
/img/dessertsandbites/noimg-400x400.png
/img/dessertsandbites/noimg-470x240.jpg
/img/dessertsandbites/ogimage.png
/img/dessertsandbites/stripe_logo.png
/img/dohaven
/img/enterprise
/img/facebook.svg
/img/florist
/img/fluffbakery
/img/foodbarn
/img/footer
/img/fuxiaoxiansg
/img/germanburgergrill
/img/gopalsholycow
/img/grocery

Found on 2023-03-01 17:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5ff25d5e97fa1ae3df328d10b8

Found 128 files trough .DS_Store spidering:

/css
/favicon.ico
/img
/img/a1indiancurry
/img/a1indiancurry/f-logo.png
/img/a1indiancurry/favicon.ico
/img/a1indiancurry/logo.png
/img/a1indiancurry/no-img-product.png
/img/a1indiancurry/noimg-400x400.png
/img/a1indiancurry/noimg-470x240.jpg
/img/a1indiancurry/ogimage.png
/img/a1indiancurry/stripe_logo.png
/img/abumubarakmandirice
/img/allo
/img/appamaunty
/img/appamaunty/f-logo.png
/img/appamaunty/favicon.ico
/img/appamaunty/logo.png
/img/appamaunty/no-img-product.png
/img/appamaunty/noimg-400x400.png
/img/appamaunty/noimg-470x240.jpg
/img/appamaunty/ogimage.png
/img/appamaunty/stripe_logo.png
/img/banhmimiss
/img/banhmimiss/f-logo.png
/img/banhmimiss/favicon.ico
/img/banhmimiss/logo.png
/img/banhmimiss/no-img-product.png
/img/banhmimiss/noimg-400x400.png
/img/banhmimiss/noimg-470x240.jpg
/img/banhmimiss/ogimage.png
/img/banhmimiss/stripe_logo.png
/img/beamarry
/img/betsubara
/img/betsubara/f-logo.png
/img/betsubara/favicon.ico
/img/betsubara/logo.png
/img/betsubara/no-img-product.png
/img/betsubara/noimg-400x400.png
/img/betsubara/noimg-470x240.jpg
/img/betsubara/ogimage.png
/img/betsubara/stripe_logo.png
/img/bg
/img/bg/a1indiancurry.jpg
/img/bg/farrerhorse.jpg
/img/bg/florist.jpg
/img/bg/grocery.jpg
/img/bg/masterbriyani.jpg
/img/bg/restaurant.jpg
/img/bg/retail.jpg
/img/bg/sampanman.jpg
/img/bg/sultanpalace.jpg
/img/bg/vintage-background.jpg
/img/blackcherry
/img/blackcherry/f-logo.png
/img/blackcherry/favicon.ico
/img/blackcherry/logo.png
/img/blackcherry/no-img-product.png
/img/blackcherry/noimg-400x400.png
/img/blackcherry/noimg-470x240.jpg
/img/blackcherry/ogimage.png
/img/blackcherry/stripe_logo.png
/img/blackcherryroastery
/img/blackcherryroastery/f-logo.png
/img/blackcherryroastery/favicon.ico
/img/blackcherryroastery/logo.png
/img/blackcherryroastery/no-img-product.png
/img/blackcherryroastery/noimg-400x400.png
/img/blackcherryroastery/noimg-470x240.jpg
/img/blackcherryroastery/ogimage.png
/img/blackcherryroastery/stripe_logo.png
/img/breakfasthola
/img/breakfasthola/f-logo.png
/img/breakfasthola/favicon.ico
/img/breakfasthola/logo.png
/img/breakfasthola/no-img-product.png
/img/breakfasthola/noimg-400x400.png
/img/breakfasthola/noimg-470x240.jpg
/img/breakfasthola/ogimage.png
/img/breakfasthola/stripe_logo.png
/img/byfleur
/img/byfleur/f-logo.png
/img/byfleur/favicon.ico
/img/byfleur/logo.png
/img/byfleur/no-img-product.png
/img/byfleur/noimg-400x400.png
/img/byfleur/noimg-470x240.jpg
/img/byfleur/ogimage.png
/img/byfleur/stripe_logo.png
/img/chulop
/img/chulop/f-logo.png
/img/chulop/favicon.ico
/img/chulop/logo.png
/img/chulop/no-img-product.png
/img/chulop/noimg-400x400.png
/img/chulop/noimg-470x240.jpg
/img/chulop/ogimage.png
/img/chulop/stripe_logo.png
/img/collins
/img/collins/f-logo.png
/img/collins/favicon.ico
/img/collins/logo.png
/img/collins/no-img-product.png
/img/collins/noimg-400x400.png
/img/collins/noimg-470x240.jpg
/img/collins/ogimage.png
/img/collins/stripe_logo.png
/img/danghongpho
/img/dessertsandbites
/img/dessertsandbites/f-logo.png
/img/dessertsandbites/favicon.ico
/img/dessertsandbites/logo.png
/img/dessertsandbites/no-img-product.png
/img/dessertsandbites/noimg-400x400.png
/img/dessertsandbites/noimg-470x240.jpg
/img/dessertsandbites/ogimage.png
/img/dessertsandbites/stripe_logo.png
/img/dohaven
/img/dohaven/f-logo.png
/img/dohaven/favicon.ico
/img/dohaven/logo.png
/img/dohaven/no-img-product.png
/img/dohaven/noimg-400x400.png
/img/dohaven/noimg-470x240.jpg
/img/dohaven/ogimage.png
/img/dohaven/stripe_logo.png
/img/enterprise
/img/facebook.svg

Found on 2023-03-01 17:07

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.122.11
Domain: static.kontentinoservices.com
Port: 443
URL: https://static.kontentinoservices.com

First seen 2023-03-01 12:43
Last seen 2025-12-30 14:20
Open for 1035 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522425eb0c8

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3NnMUtCcEhqYkt0ZkVaZGJyWlltbUE4ZXZQSUNvQzIzdnQ2Mg==

Found on 2025-12-30 14:20

379 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a62bfa21

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzl0NE5LaEo3eEUwTzE0djJmd3ZNdmU5VDBTeU1MMDFGV0pOMQ==

Found on 2025-02-18 04:26

379 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522bb03f37a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0tJTndGNGU1YW55bkdVcmRXeVBpR3k0eXpFd2VoazRVd3pINA==

Found on 2024-10-28 07:54

379 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e95d9c07

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0s0RGoxZU5xeEMzd09CV2Q2SUhCT1ZRYXE1U3J0WTNFZHpVMw==

Found on 2023-09-23 04:56

379 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a7195c87

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3Z3UmxxdkdxT01Rc2lrRXZYdmZiRDBxV0t1MXlWMzNpQ1dHbg==

Found on 2023-09-19 04:27

379 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223f07d40b

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/kontentino/static-kontentinoservices-com
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX001Z2h1VGRweHNBZkNVSnBCOGg1WWNEUGNvV1oxcjQ5VzVjTw==

Found on 2023-03-01 12:43

379 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 4.187.214.193
Domain: smebazaar.co.in
Port: 443
URL: https://smebazaar.co.in

First seen 2023-03-13 19:26
Last seen 2025-12-30 12:51
Open for 1022 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224adacd36

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	longpaths = true
[remote "origin"]
	url = https://github.com/BigfixIndia/sme-bazaar
	fetch = +refs/heads/*:refs/remotes/origin/*
[extensions]
	worktreeConfig = true
[gc]
	auto = 0
[http]
	version = HTTP/1.1

Found on 2025-12-30 12:51

300 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb8df49588

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[submodule]
	active = .
[remote "origin"]
	url = https://github.com/iamuvg/sme-bazaar.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[lfs]
	repositoryformatversion = 0
[branch "beta-version"]
	remote = origin
	merge = refs/heads/beta-version

Found on 2024-04-09 09:01

432 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: app.riverside.fm
Port: 80
URL: http://app.riverside.fm

First seen 2023-03-01 02:55
Last seen 2025-12-23 06:33
Open for 1028 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e05597282267f63ba5d8c55cb97f6
```
Found 5 files trough .DS_Store spidering:

/css
/ffmpeg
/static
/static/js
/worklet
```
Found on 2025-12-23 06:33

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: we-truck.de
Port: 443
URL: https://we-truck.de

First seen 2023-03-01 16:31
Last seen 2025-11-29 03:15
Open for 1003 days

Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c515fc99fca06c058ff5bbc13
```
Found 4 files trough .DS_Store spidering:

/css
/fonts
/images
/scss
```
Found on 2025-11-29 03:15

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.16
Domain: aslp-basket.fr
Port: 443
URL: https://aslp-basket.fr

First seen 2022-10-21 10:25
Last seen 2025-11-12 06:52
Open for 1117 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network/about.php
/wp-admin/network/admin.php
/wp-admin/network/content.txt
/wp-admin/network/credits.php
/wp-admin/network/edit.php
/wp-admin/network/freedoms.php
/wp-admin/network/index.php
/wp-admin/network/menu.php
/wp-admin/network/plugin-editor.php
/wp-admin/network/plugin-install.php
/wp-admin/network/plugins.php
/wp-admin/network/privacy.php
/wp-admin/network/profile.php
/wp-admin/network/settings.php
/wp-admin/network/setup.php
/wp-admin/network/site-info.php
/wp-admin/network/site-new.php
/wp-admin/network/site-settings.php
/wp-admin/network/site-themes.php
/wp-admin/network/site-users.php
/wp-admin/network/sites.php
/wp-admin/network/stats-scripts
/wp-admin/network/theme-editor.php
/wp-admin/network/theme-install.php
/wp-admin/network/themes.php
/wp-admin/network/update-core.php
/wp-admin/network/update.php
/wp-admin/network/upgrade.php
/wp-admin/network/user-edit.php
/wp-admin/network/user-new.php
/wp-admin/network/users.php
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php

Found on 2025-11-12 06:52

Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5

Found 119 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-11-07 09:14

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: gitsentry.com
Port: 443
URL: https://gitsentry.com

First seen 2023-02-07 05:20
Last seen 2025-11-11 04:02
Open for 1007 days

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf1a65cde432a3793aa2a3793aa
```
Found 3 files trough .DS_Store spidering:

/assets
/assets/twitter
/assets/twitter/bootstrap
```
Found on 2025-11-11 04:02

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.66.77
Domain: oer-foot.fr
Port: 443
URL: https://oer-foot.fr

First seen 2022-10-21 10:25
Last seen 2025-11-11 00:53
Open for 1116 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network/about.php
/wp-admin/network/admin.php
/wp-admin/network/content.txt
/wp-admin/network/credits.php
/wp-admin/network/edit.php
/wp-admin/network/freedoms.php
/wp-admin/network/index.php
/wp-admin/network/menu.php
/wp-admin/network/plugin-editor.php
/wp-admin/network/plugin-install.php
/wp-admin/network/plugins.php
/wp-admin/network/privacy.php
/wp-admin/network/profile.php
/wp-admin/network/settings.php
/wp-admin/network/setup.php
/wp-admin/network/site-info.php
/wp-admin/network/site-new.php
/wp-admin/network/site-settings.php
/wp-admin/network/site-themes.php
/wp-admin/network/site-users.php
/wp-admin/network/sites.php
/wp-admin/network/stats-scripts
/wp-admin/network/theme-editor.php
/wp-admin/network/theme-install.php
/wp-admin/network/themes.php
/wp-admin/network/update-core.php
/wp-admin/network/update.php
/wp-admin/network/upgrade.php
/wp-admin/network/user-edit.php
/wp-admin/network/user-new.php
/wp-admin/network/users.php
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php

Found on 2025-11-11 00:53

Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5

Found 119 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-11-10 21:34

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: aws.demo.scorenco.com
Port: 443
URL: https://aws.demo.scorenco.com

First seen 2022-10-21 10:25
Last seen 2025-09-23 11:58
Open for 1068 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5

Found 119 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-09-23 11:58

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network/about.php
/wp-admin/network/admin.php
/wp-admin/network/content.txt
/wp-admin/network/credits.php
/wp-admin/network/edit.php
/wp-admin/network/freedoms.php
/wp-admin/network/index.php
/wp-admin/network/menu.php
/wp-admin/network/plugin-editor.php
/wp-admin/network/plugin-install.php
/wp-admin/network/plugins.php
/wp-admin/network/privacy.php
/wp-admin/network/profile.php
/wp-admin/network/settings.php
/wp-admin/network/setup.php
/wp-admin/network/site-info.php
/wp-admin/network/site-new.php
/wp-admin/network/site-settings.php
/wp-admin/network/site-themes.php
/wp-admin/network/site-users.php
/wp-admin/network/sites.php
/wp-admin/network/stats-scripts
/wp-admin/network/theme-editor.php
/wp-admin/network/theme-install.php
/wp-admin/network/themes.php
/wp-admin/network/update-core.php
/wp-admin/network/update.php
/wp-admin/network/upgrade.php
/wp-admin/network/user-edit.php
/wp-admin/network/user-new.php
/wp-admin/network/users.php
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php

Found on 2024-12-08 20:40

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea96367f45a4a7c70ac2369658b4e222993

Found 23 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2024-05-26 10:14

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.108
Domain: ententedesabers.bzh
Port: 443
URL: https://ententedesabers.bzh

First seen 2022-10-21 10:25
Last seen 2025-09-23 11:58
Open for 1068 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530

Found 128 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network/about.php
/wp-admin/network/admin.php
/wp-admin/network/content.txt
/wp-admin/network/credits.php
/wp-admin/network/edit.php
/wp-admin/network/freedoms.php
/wp-admin/network/index.php
/wp-admin/network/menu.php
/wp-admin/network/plugin-editor.php
/wp-admin/network/plugin-install.php
/wp-admin/network/plugins.php
/wp-admin/network/privacy.php
/wp-admin/network/profile.php
/wp-admin/network/settings.php
/wp-admin/network/setup.php
/wp-admin/network/site-info.php
/wp-admin/network/site-new.php
/wp-admin/network/site-settings.php
/wp-admin/network/site-themes.php
/wp-admin/network/site-users.php
/wp-admin/network/sites.php
/wp-admin/network/stats-scripts
/wp-admin/network/theme-editor.php
/wp-admin/network/theme-install.php
/wp-admin/network/themes.php
/wp-admin/network/update-core.php
/wp-admin/network/update.php
/wp-admin/network/upgrade.php
/wp-admin/network/user-edit.php
/wp-admin/network/user-new.php
/wp-admin/network/users.php
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php

Found on 2025-09-23 11:58

Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5

Found 119 files trough .DS_Store spidering:

/index.php
/license.txt
/nginx.conf
/readme.html
/README.md
/wp
/wp-activate.php
/wp-admin
/wp-admin/about.php
/wp-admin/admin-ajax.php
/wp-admin/admin-footer.php
/wp-admin/admin-functions.php
/wp-admin/admin-header.php
/wp-admin/admin-post.php
/wp-admin/admin.php
/wp-admin/async-upload.php
/wp-admin/authorize-application.php
/wp-admin/comment.php
/wp-admin/credits.php
/wp-admin/css
/wp-admin/custom-background.php
/wp-admin/custom-header.php
/wp-admin/customize.php
/wp-admin/edit-comments.php
/wp-admin/edit-form-advanced.php
/wp-admin/edit-form-blocks.php
/wp-admin/edit-form-comment.php
/wp-admin/edit-link-form.php
/wp-admin/edit-tag-form.php
/wp-admin/edit-tags.php
/wp-admin/edit.php
/wp-admin/erase-personal-data.php
/wp-admin/export-personal-data.php
/wp-admin/export.php
/wp-admin/freedoms.php
/wp-admin/images
/wp-admin/import.php
/wp-admin/includes
/wp-admin/index.php
/wp-admin/install-helper.php
/wp-admin/install.php
/wp-admin/js
/wp-admin/link-add.php
/wp-admin/link-manager.php
/wp-admin/link-parse-opml.php
/wp-admin/link.php
/wp-admin/load-scripts.php
/wp-admin/load-styles.php
/wp-admin/maint
/wp-admin/media-new.php
/wp-admin/media-upload.php
/wp-admin/media.php
/wp-admin/menu-header.php
/wp-admin/menu.php
/wp-admin/moderation.php
/wp-admin/ms-admin.php
/wp-admin/ms-delete-site.php
/wp-admin/ms-edit.php
/wp-admin/ms-options.php
/wp-admin/ms-sites.php
/wp-admin/ms-themes.php
/wp-admin/ms-upgrade-network.php
/wp-admin/ms-users.php
/wp-admin/my-sites.php
/wp-admin/nav-menus.php
/wp-admin/network
/wp-admin/network.php
/wp-admin/options-discussion.php
/wp-admin/options-general.php
/wp-admin/options-head.php
/wp-admin/options-media.php
/wp-admin/options-permalink.php
/wp-admin/options-privacy.php
/wp-admin/options-reading.php
/wp-admin/options-writing.php
/wp-admin/options.php
/wp-admin/plugin-editor.php
/wp-admin/plugin-install.php
/wp-admin/plugins.php
/wp-admin/post-new.php
/wp-admin/post.php
/wp-admin/press-this.php
/wp-admin/privacy-policy-guide.php
/wp-admin/privacy.php
/wp-admin/profile.php
/wp-admin/revision.php
/wp-admin/setup-config.php
/wp-admin/site-health-info.php
/wp-admin/site-health.php
/wp-admin/term.php
/wp-admin/theme-editor.php
/wp-admin/theme-install.php
/wp-admin/themes.php
/wp-admin/tools.php
/wp-admin/update-core.php
/wp-admin/update.php
/wp-admin/upgrade-functions.php
/wp-admin/upgrade.php
/wp-admin/upload.php
/wp-admin/user
/wp-admin/user-edit.php
/wp-admin/user-new.php
/wp-admin/users.php
/wp-admin/widgets.php
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-09-23 11:58

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: skookle.com
Port: 443
URL: https://skookle.com

First seen 2022-12-11 04:30
Last seen 2025-09-09 03:59
Open for 1002 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
Found on 2025-09-09 03:59

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: anchoragefood.org
Port: 443
URL: https://anchoragefood.org

First seen 2022-10-30 03:04
Last seen 2025-07-31 02:56
Open for 1004 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e05599c29be26aa9a886246247dbf
```
Found 5 files trough .DS_Store spidering:

/css
/doc
/img
/js
/js/vendor
```
Found on 2025-07-31 02:56

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: cdn1.liveaboard-diving.com
Port: 443
URL: https://cdn1.liveaboard-diving.com

First seen 2022-10-30 03:36
Last seen 2025-07-30 00:41
Open for 1003 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dfaa18764faa18764faa18764faa18764
```
Found 1 files trough .DS_Store spidering:

/media
```
Found on 2025-07-30 00:41

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.summitstructuresinc.com
Port: 443
URL: https://www.summitstructuresinc.com

First seen 2022-11-02 06:52
Last seen 2025-07-29 04:25
Open for 999 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbba75bd31e

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://novationsystems@dev.azure.com/novationsystems/SummitStructures/_git/SummitStructures
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0

Found on 2025-07-29 04:25

290 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: staging.dashboard.sitehive.co
Port: 443
URL: https://staging.dashboard.sitehive.co

First seen 2022-10-26 04:13
Last seen 2025-07-25 03:24
Open for 1002 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a3325a36ee325a36ee325a36ee
```
Found 2 files trough .DS_Store spidering:

/images
/images/ios
```
Found on 2025-07-25 03:24

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: www.gobooking.travel
Port: 443
URL: https://www.gobooking.travel

First seen 2022-10-25 05:19
Last seen 2025-07-24 03:09
Open for 1002 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8b9feed88b9feed88b9feed88b9feed8
```
Found 1 files trough .DS_Store spidering:

/dl
```
Found on 2025-07-24 03:09

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: probiotrial.org
Port: 443
URL: https://probiotrial.org

First seen 2023-03-01 14:55
Last seen 2025-07-06 03:02
Open for 857 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633607b323d1781ba153d3dc71b

Found 9 files trough .DS_Store spidering:

/assets
/assets/css
/assets/image
/assets/image/figure
/assets/image/presentation
/assets/image/slider
/assets/image/team
/assets/svg
/data

Found on 2025-07-06 03:02

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e975a091b75eb34fe906e697f10f6d56eb
```
Found 5 files trough .DS_Store spidering:

/assets
/assets/css
/assets/image
/assets/svg
/data
```
Found on 2023-03-01 14:55

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: m.sarava.co.kr
Port: 443
URL: https://m.sarava.co.kr

First seen 2023-02-23 00:22
Last seen 2025-05-17 02:58
Open for 814 days

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3af8132f4d8795b5efb0478e6d7c5b23e

Found 29 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/js/pageable
/js/sarava.js
/mobile.html
/page
/page/SaravaInfo.html
/page/UserInfo.html

Found on 2025-05-17 02:58

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dc7912d962d85b028ab724b70fc812d8f

Found 27 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/js/pageable
/js/sarava.js
/mobile.html
/page

Found on 2024-12-05 02:32

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c850af11a294402362c99d561f

Found 25 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/mobile.html
/page

Found on 2024-11-30 22:50

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fdb294238acbc40d2eb5f1252172b251f

Found 10 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/index.html
/js
/mobile.html
/page

Found on 2024-08-18 16:33

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247255468757ece33ff80e7c40c985b78f728

Found 9 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/index.html
/js
/mobile.html
/page

Found on 2023-02-23 00:22

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: www.sarava.co.kr
Port: 443
URL: https://www.sarava.co.kr

First seen 2023-02-23 00:22
Last seen 2025-05-17 02:58
Open for 814 days

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3af8132f4d8795b5efb0478e6d7c5b23e

Found 29 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/js/pageable
/js/sarava.js
/mobile.html
/page
/page/SaravaInfo.html
/page/UserInfo.html

Found on 2025-05-17 02:58

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dc7912d962d85b028ab724b70fc812d8f

Found 27 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/js/pageable
/js/sarava.js
/mobile.html
/page

Found on 2024-12-08 23:48

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c850af11a294402362c99d561f

Found 25 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/img/web/1-0.png
/img/web/2-1.png
/img/web/2-2.png
/img/web/3-1.png
/img/web/3-2.png
/img/web/4-1.png
/img/web/5-1.png
/img/web/5-2.png
/img/web/aos-btn.png
/img/web/down_btn.png
/img/web/down_btn2.png
/img/web/ios-btn.png
/img/web/logo.png
/img/web/logo2.png
/img/web/top_btn.png
/index.html
/js
/mobile.html
/page

Found on 2024-11-12 13:07

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247255468757ece33ff80e7c40c985b78f728

Found 9 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/index.html
/js
/mobile.html
/page

Found on 2024-09-01 16:40

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fdb294238acbc40d2eb5f1252172b251f

Found 10 files trough .DS_Store spidering:

/.git
/.idea
/css
/css/sarava.css
/img
/img/web
/index.html
/js
/mobile.html
/page

Found on 2024-08-22 06:42

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80ea47a45a0184e17bc82d8bf578cfd85
```
Found 8 files trough .DS_Store spidering:

/.git
/.idea
/css
/img
/index.html
/js
/mobile.html
/page
```
Found on 2023-02-23 00:22

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.sarava.co.kr
Port: 443
URL: https://www.sarava.co.kr

First seen 2022-08-14 15:46
Last seen 2025-05-17 02:58
Open for 1006 days

Severity: medium
Fingerprint: 2580fa947178c89780d63b8b63515f6f5c38cbc55c38cbc55c38cbc55c38cbc5

[remote "origin"]
	url = https://git-codecommit.ap-northeast-2.amazonaws.com/v1/repos/sarava-homepage
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2025-05-17 02:58

147 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: app.riverside.fm
Port: 443
URL: https://app.riverside.fm

First seen 2023-03-01 02:55
Last seen 2025-03-08 04:27
Open for 738 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e05597282267f63ba5d8c55cb97f6
```
Found 5 files trough .DS_Store spidering:

/css
/ffmpeg
/static
/static/js
/worklet
```
Found on 2025-03-08 04:27

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: catch-the-nut.com
Port: 443
URL: https://catch-the-nut.com

First seen 2023-03-01 17:30
Last seen 2025-03-04 09:41
Open for 733 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f482103d5b36103d5b36103d5b36
```
Found 2 files trough .DS_Store spidering:

/css
/img
```
Found on 2025-03-04 09:41

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 13.225.78.103
Domain: sgcs-login.cloudworkengine.net
Port: 443
URL: https://sgcs-login.cloudworkengine.net

First seen 2024-02-01 00:32
Last seen 2024-12-09 00:50
Open for 312 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d727cce27d5

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 09-Dec-2024 00:50:13 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  18 days 19 hours 2 minutes 13 seconds
Server load: 1.72 2.76 2.96
Total accesses: 279592 - Total Traffic: 1.2 GB - Total Duration: 123311225
CPU Usage: u21.6 s30.51 cu114.05 cs51.15 - .0134% CPU load
.172 requests/sec - 823 B/second - 4780 B/request - 441.04 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0252830/388/5776_
4.91716022204030.01.5625.93
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0252830/359/5737_
4.98182528107910.01.4326.10
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdpS

0-0252830/381/5897_
4.944063827553120.01.5326.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0252830/490/5840_
4.94358026251180.02.0126.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/script.js HTTP/1.1

0-0252830/347/5531_
4.97240224577010.01.4125.50
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0252830/345/5583_
4.9883724360380.01.3724.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0252830/329/5778_
4.9920024693540.01.3225.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0252830/370/5491_
4.92621224782810.01.4825.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0252830/425/5521_
4.92648027884350.01.6124.95
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0252830/451/5646_
4.9256731326272110.01.7525.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNjtsgFEZfxTtWGOL8t

0-0252830/403/5545_
4.9820027194040.01.6225.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0252830/353/5594_
4.95339023148440.01.4225.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0252830/340/5577_
4.95339518751840.01.3925.80
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

0-0252830/401/5621_
4.97220226298670.01.6224.81
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0252830/379/5308_
4.94379319850560.01.5024.31
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0252830/368/5721_
4.94412122393030.01.3926.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0252830/326/5571_
4.9812023227539240.01.7325.42
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_52c70b938f7bb

0-0252830/384/5463_
4.9819517222801290.01.6725.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_9fce194695c06

0-0252830/397/5736_
4.9725310226780640.01.7026.03
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_6835e26235d82

0-0252830/298/5455_
4.91734826117620.01.1724.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0252830/304/5351_
4.916914026881170.01.2224.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0cef572d5c16c

0-0252830/347/5516_
4.925331223185160.01.3825.28
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYzrV

0-0252830/326/5482_
4.96319219246690.01.3025.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0252830/353/5490_
4.92481166626607920.01.5224.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHLvZE

0-0252830/319/5427_
4.92552027982080.01.2924.45
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

1-0254050/343/5472_
4.87674530546120.01.3325.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0254050/382/5578_
4.877064929065350.01.5824.95
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_efbc48001e4f8

1-0254050/408/6042_
4.8771787924913560.01.6327.64
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0254050/258/5721_
4.9326928452310.00.9824.65
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0254059/359/5481W
4.9300235602012.81.4424.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0254050/364/5557_
4.936049024163300.01.4925.65
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wjg

1-0254050/399/5590_
4.87631622224900.01.5325.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHLtpo

1-0254050/409/5793_
4.87602621474140.01.7025.48
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbAbt

1-0254050/371/5832_
4.88552123382930.01.4325.44
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0254050/353/5566_
4.88548021931200.01.3625.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0254050/371/5641_
4.895113621829170.01.4626.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0a5eaa0dbfb81

1-0254050/328/5536_
4.89448624154800.01.3024.78
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYjrR

1-0254050/437/5750_
4.903923620133620.01.7827.77
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_2d1e1730348ae

1-0254050/421/5692_
4.92358824049660.01.6426.53
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0254050/351/5441_
4.90409826782410.01.3724.51
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0254050/344/5750_
4.923504822200460.01.3825.83
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0254050/387/5354_
4.92338928283650.01.5223.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0254050/336/5607_
4.922995623669610.01.6827.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0254050/361/5365_
4.923285025127060.01.3523.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0254050/448/5848_
4.9323010920595110.01.8828.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b5747805f8e11

1-0

Found on 2024-12-09 00:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d722af0d1ed

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 06-Dec-2024 22:29:01 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 16 hours 41 minutes 1 second
Server load: 0.89 1.22 1.52
Total accesses: 254863 - Total Traffic: 1.1 GB - Total Duration: 117170642
CPU Usage: u38 s35.35 cu87.2 cs38.86 - .0138% CPU load
.177 requests/sec - 853 B/second - 4828 B/request - 459.74 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0116800/1344/5259_
17.47774421088120.05.8523.83
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJsmU

0-0116800/1217/5240_
17.51116526763600.05.5724.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWJSe

0-0116800/1355/5398_
17.487426726497740.05.7024.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_5ab4528262945

0-0116800/1238/5223_
17.5023324524704620.05.2724.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

0-0116800/1143/5021_
17.50176422773780.05.1723.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0116800/1124/5117_
17.502834523669830.04.8522.88
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0116800/1184/5340_
17.48460124013710.05.1323.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0116800/1123/4999_
17.48331123239290.05.2123.11
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0116800/1057/4939_
17.485483026891310.04.4722.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f0c2472862c89

0-0116800/1120/5094_
17.483372824975070.04.8023.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b9b5cbb16274d

0-0116800/1167/4973_
17.49324125695510.05.9323.39
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0116800/1137/5127_
17.50270321811880.05.0823.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0116800/1251/5139_
17.503033817580740.05.5424.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0116800/1129/5079_
17.503092925508680.04.8322.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0116800/1101/4757_
17.48417518692960.05.3022.09
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmIS0V

0-0116800/1260/5241_
17.51262821364040.06.1725.04
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_99835bcf149ba

0-0116800/1268/5111_
17.4864237026152990.05.3623.10
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMduQ

0-0116800/1142/4969_
17.501474221346550.05.7822.99
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0116800/1299/5211_
17.5154424909210.05.7423.81
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0116800/1183/5016_
17.47800329924722700.05.2121.85
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLsZ

0-0116800/1127/4897_
17.485032825479580.05.0822.54
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_94ff3bf5db54e

0-0116800/1076/5022_
17.48596821828490.04.7823.25
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEID%2FSt94aln

0-0116800/1092/5051_
17.47838418468070.04.5323.93
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/1191/5010_
17.48430725164270.05.3022.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0116800/1176/4970_
17.48687626960860.05.1522.50
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpF

1-0117790/1170/5016_
17.9156624129849530.05.3523.43
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

1-0117790/1110/5063_
17.916183227974690.04.8722.81
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_dff87a640db70

1-0117790/1362/5530_
17.91471123949650.06.1325.60
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0117790/1256/5330_
17.953163227457910.05.2323.05
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0117790/1265/5013_
17.93331722468510.05.5522.36
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0117790/1159/5087_
17.91518723208740.05.2823.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKemC

1-0117790/1182/5074_
17.924304020837330.05.3023.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0117790/1303/5250_
17.92423020109070.05.4223.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0117790/1122/5327_
17.92357421964200.04.6423.48
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLiZ

1-0117790/1148/5063_
17.95309120442550.04.8723.07
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0117790/1296/5153_
17.95148120521390.06.0824.17
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0117790/1214/5070_
17.9529624123198020.05.7222.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

1-0117790/1203/5178_
17.95283818917660.05.7725.38
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0117790/1402/5174_
17.95324422815420.06.5624.53
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

1-0117790/1151/4972_
17.95255425827580.04.9822.66
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0117790/1311/5286_
17.964411520910950.05.8923.96
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d8c7722c06e35

1-0117790/1165/4851_
17.908311727065330.05.6421.72
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0117790/1297/5148_
17.951842621892750.06.7925.33
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b0702c6aa7762

1-0117790/987/4894_
17.95133023738140.04.1822.03
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0117798/1147/5257W
17.960</

Found on 2024-12-06 22:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d728ce65fca

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 04-Dec-2024 16:40:26 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  14 days 10 hours 52 minutes 27 seconds
Server load: 0.58 1.61 1.92
Total accesses: 218683 - Total Traffic: 1010.5 MB - Total Duration: 109394669
CPU Usage: u21.2 s25.79 cu87.2 cs38.86 - .0139% CPU load
.175 requests/sec - 848 B/second - 4845 B/request - 500.243 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0116800/568/4483_
6.87580419626980.02.3520.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtxm

0-0116800/509/4532_
6.8767025225141710.02.3821.00
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLiL

0-0116800/558/4601_
6.8751275424551440.02.1320.99
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbuMgFEZfxTtWNv5La

0-0116800/434/4419_
6.86851723258670.01.9121.05
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyaZ

0-0116800/514/4392_
6.87791421386570.02.3420.51
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduR

0-0116800/416/4409_
6.868963121912780.01.7319.75
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_68e30cc329fc1

0-0116800/419/4575_
6.8971522729230.01.7920.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/434/4310_
6.86956522157720.01.9719.87
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0116800/449/4331_
6.8912424725728690.02.0420.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0116800/416/4390_
6.8510703123246990.01.8320.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f73a52627563d

0-0116800/437/4243_
6.8610443824439920.02.3819.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_cdc0dcdbd21dc

0-0116800/471/4461_
6.869303120088190.02.1120.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_fc9b2a73baa93

0-0116800/480/4368_
6.85112227315791620.02.1820.66
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpN

0-0116800/405/4355_
6.861001623718860.01.7619.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/414/4070_
6.8913517485590.01.8118.60
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtxE

0-0116800/508/4489_
6.87761619618540.02.3721.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/547/4390_
6.87461624648940.02.2019.94
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLdua

0-0116800/459/4286_
6.87700919428650.02.4019.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHDc

0-0116800/451/4363_
6.8761110022905970.02.0520.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzHa

0-0116800/437/4270_
6.874292723055000.01.8718.51
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b47a5cea14132

0-0116800/426/4196_
6.872462723705590.01.9719.43
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_287ef2ac7a268

0-0116800/394/4340_
6.8737124120284590.01.6920.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctbTd3

0-0116800/438/4397_
6.87422516948640.01.8321.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/456/4275_
6.8731025123646100.02.0419.44
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0116800/491/4285_
6.8718425925685820.02.2519.60
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHS

1-0117790/469/4315_
7.017792928575030.02.2320.31
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_fa91176d030d3

1-0117790/404/4357_
7.0181824726567960.01.8519.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0117790/419/4587_
7.0173223921965650.01.8521.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb5swFIb%2FCne%2BM

1-0117790/509/4583_
7.01486225803100.01.9019.72
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0117790/432/4180_
7.016812820431650.01.8918.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_2a826ebc7362f

1-0117790/466/4394_
7.01641421752540.02.1220.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbDnp

1-0117790/481/4373_
7.0158716518775470.02.2220.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c7999d98405b1

1-0117790/598/4545_
7.01547418538210.02.3520.17
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

1-0117790/383/4588_
7.02441120686460.01.5620.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0117790/473/4388_
7.024333118703180.02.0620.26
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ac403cad999bc

1-0117790/551/4408_
7.02160618953190.02.4520.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-0117790/392/4248_
7.02340621535030.01.8319.00
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXo

1-0117790/446/4421_
7.022952817606480.02.4022.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f3abc6208f7d2

1-0117790/546/4318_
7.02401720805060.02.5020.47
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0117790/447/4268_
7.02221424295320.01.9319.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWziO

1-0117790/572/4547_
7.023924319242740.02.6020.67
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0117790/488/4174_
7.011092425690030.02.2318.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWInT

1-01177912/491/4342W
7.0300203877626.62.6821.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0117790/337/4244_
7.0299422136380.01.4219.27
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbt

Found on 2024-12-04 16:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d722326032b

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 02-Dec-2024 17:22:19 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  12 days 11 hours 34 minutes 19 seconds
Server load: 0.39 0.73 0.99
Total accesses: 185902 - Total Traffic: 858.2 MB - Total Duration: 93326326
CPU Usage: u33.96 s29.38 cu59.06 cs25.8 - .0137% CPU load
.172 requests/sec - 834 B/second - 4840 B/request - 502.019 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0311280/1083/3687_
17.53112615112280.04.5016.98
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdq6Z

0-0311280/1197/3808_
17.546351920756340.05.3517.49
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0311280/1239/3798_
17.51877320514010.05.4517.66
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0311280/1091/3797_
17.532112821338350.05.3318.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_50c04d13743fd

0-0311280/1028/3742_
17.53174418312910.04.7617.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTiMhFIZfZe64YuiMr

0-0311280/1211/3829_
17.51936018795880.05.0317.25
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0311280/1262/3913_
17.51979418678890.05.5917.58
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

0-0311280/1164/3709_
17.518473219053870.05.3417.02
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_5636ea6f3e6c1

0-0311280/1242/3726_
17.51911223257400.06.0217.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0311280/1121/3795_
17.51713520308440.05.1117.88
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0311280/1114/3606_
17.5162322321326990.04.8716.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2cSkj

0-0311280/1154/3799_
17.518033515581390.04.9017.68
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtx5

0-0311280/1243/3706_
17.515993013270700.06.2517.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ccb6e421177d9

0-0311280/1215/3736_
17.5168424021208630.05.2816.78
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/1088/3496_
17.5422715205130.05.0216.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0311280/1172/3787_
17.51745516366190.04.9317.48
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdp2

0-0311280/1068/3714_
17.51569121194870.04.8917.04
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0311280/1062/3602_
17.51503615764440.04.3216.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

0-0311280/1128/3673_
17.51554419972970.04.8216.88
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLqN

0-0311280/1140/3558_
17.52413717043510.04.6615.35
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Lh

0-0311280/1033/3611_
17.524583320000480.04.4116.72
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_6f4efbdca82e1

0-0311280/1225/3737_
17.53263617081360.05.6417.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb%2BMgFEb%2FinesM

0-0311280/1106/3710_
17.53323415033380.05.1818.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0311280/1092/3603_
17.52380203820951160.04.9516.33
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgV

0-0311280/1143/3643_
17.533428423527170.04.8116.54
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_3e9a8389c5512

1-0311720/1181/3587_
17.23352824722780.05.1716.92
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/1225/3757_
17.252012922970520.05.2316.97
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_fe47ce2e4f394

1-0311720/1365/3993_
17.2194930519791290.06.1318.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=343&StateId=

1-0311720/1290/3904_
17.2552620554950.05.4617.08
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLqJ

1-0311720/1146/3559_
17.2514325117454870.04.8815.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyTt

1-0311720/1100/3773_
17.234273518188930.04.7717.77
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2dheV

1-0311720/1073/3701_
17.22833415904020.04.7017.49
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/1134/3783_
17.21894416236930.04.4617.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0311720/1260/3983_
17.23532517349880.05.3317.77
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDsut

1-0311720/1056/3689_
17.22692216569250.04.2816.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0311720/1137/3700_
17.2277322915116390.05.0817.42
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWziJ

1-0311720/1101/3660_
17.226118618915090.04.6816.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d8c7080668211

1-0311720/1051/3683_
17.2355923913733390.04.5317.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXk

1-0311720/1126/3541_
17.258236417512180.04.8816.41
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHJNAg

1-0311720/1220/3662_
17.23407222271700.05.5916.77
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0311728/1114/3800W
17.250016732709.64.8017.27
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0311720/1165/3526_
17.228592921077520.04.6415.41
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_5daa5842db2ca

1-0311720/1083/3610_
17.234683117354470.04.7916.97
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f64ef08bc39a1

1-0311720/1081/3743_
17.2328243919755640.04.8717.14
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

Found on 2024-12-02 17:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72a6a337ef

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 30-Nov-2024 15:28:35 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 9 hours 40 minutes 35 seconds
Server load: 0.91 0.99 1.01
Total accesses: 155364 - Total Traffic: 726.1 MB - Total Duration: 85313932
CPU Usage: u20.03 s20.87 cu59.06 cs25.8 - .014% CPU load
.173 requests/sec - 847 B/second - 4900 B/request - 549.123 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0311280/520/3124_
8.6549430713949510.02.2914.76
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbCdN

0-0311280/590/3201_
8.65404519350030.02.7014.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0311280/652/3211_
8.65466418974640.03.0215.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0311280/533/3239_
8.64673519893070.02.7615.81
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/494/3208_
8.647583316296820.02.1714.96
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_464537b36bbec

0-0311280/471/3089_
8.6461335217016400.01.9614.18
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOmJDET

0-0311280/580/3231_
8.655663417294930.02.6614.65
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_a682f3e4e9c47

0-0311280/551/3096_
8.6528424617528420.02.6814.35
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/663/3147_
8.66132521949030.03.1614.48
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BIwEIb%2FSm4%2

0-0311280/500/3174_
8.6534528217916610.02.0814.85
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDc%2

0-0311280/498/2990_
8.65255519255390.02.1213.81
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0311280/577/3222_
8.66211213889980.02.5015.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0311280/575/3038_
8.6614512009990.03.2914.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0311280/584/3105_
8.631155520099960.02.5514.04
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdONrbjj

0-0311280/500/2908_
8.66164514395130.02.1913.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYQx10

0-0311280/537/3152_
8.666426615280670.02.3014.84
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0311280/553/3199_
8.63106829320345830.02.7614.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYzjV

0-0311280/538/3078_
8.631111114106720.02.2814.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0311280/546/3091_
8.631010518284520.02.3914.45
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYKTt

0-0311280/499/2917_
8.649583015822480.02.0412.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_32e20246765f3

0-0311280/464/3042_
8.64883418058530.02.0514.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWI77

0-0311280/473/2985_
8.649283415379480.02.1913.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_13590315d4b9b

0-0311280/595/3199_
8.64793412258550.02.7115.66
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtNU

0-0311280/563/3074_
8.648253118647630.02.7414.12
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_1632baf6d17c9

0-0311280/548/3048_
8.647113321784260.02.3314.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_9db147f3c28ce

1-0311720/539/2945_
8.2897829223087130.02.3714.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdONraTa

1-0311720/572/3104_
8.288074621596610.02.4114.15
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ab5383ecf3d17

1-0311720/671/3299_
8.28554418482920.03.1915.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYzjN

1-0311720/615/3229_
8.28734519061410.02.5514.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0311720/474/2887_
8.2876431616028810.02.0312.99
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0311720/490/3163_
8.27113034416300360.02.0615.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0311720/492/3120_
8.294333113881510.02.2415.02
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_3cb45c46f2a4f

1-0311720/460/3109_
8.29375614971530.01.8014.35
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/595/3318_
8.29193415817150.02.6615.10
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLXy

1-0311720/448/3081_
8.293141815213580.01.8714.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/457/3020_
8.2921724713375060.01.9514.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0311720/493/3052_
8.301373117805060.02.1513.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d23b32342eae5

1-0311728/532/3164W
8.310012154429.62.1415.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0311720/517/2932_
8.28643616178260.02.1713.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHS

1-0311720/558/3000_
8.281101419487030.02.8414.02
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYUzqV

1-0311720/466/3152_
8.2869126915445320.01.9614.43
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0311720/536/2897_
8.28586619588920.02.1912.96
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0311720/501/3028_
8.281032516223500.02.4114.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2YQ4X

1-0311720/476/3138_
8.28943517002050.02.2814.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService

Found on 2024-11-30 15:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d720c4b7f12

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 28-Nov-2024 18:25:05 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 12 hours 37 minutes 5 seconds
Server load: 2.04 1.67 1.64
Total accesses: 128877 - Total Traffic: 606.4 MB - Total Duration: 78781408
CPU Usage: u6.97 s12.74 cu59.06 cs25.8 - .0142% CPU load
.175 requests/sec - 863 B/second - 4933 B/request - 611.291 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0311280/5/2609_
0.037433112835870.00.0212.50
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_005dc480f5eed

0-0311280/9/2620_
0.02807218017871860.00.0412.18
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0311280/5/2564_
0.02852917063110.00.0212.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYKby

0-0311280/2/2708_
0.0282524718528100.00.0113.05
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/2/2716_
0.02886414923700.00.0112.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuMwFEZfJTuvEicht

0-0311280/4/2622_
0.02768445615577070.00.0212.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0311280/2/2653_
0.03705816152930.00.0111.99
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2RjHS

0-0311280/8/2553_
0.03583516209820.00.0311.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGOMkr

0-0311280/5/2489_
0.034836320364770.00.0211.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_023288995a8c6

0-0311280/2/2676_
0.03646416596880.00.0112.77
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbuMgFEZfxTtWmNh1%

0-0311280/4/2496_
0.04461417610370.00.0111.71
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzP3

0-0311280/2/2647_
0.03523412751780.00.0112.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4s

0-0311280/2/2465_
0.0439239110715860.00.0111.33
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLfT8MgEID%2Flb7x1LJ

0-0311280/2/2523_
0.0430823717442840.00.0111.50
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/6/2414_
0.04344413494080.00.0211.07
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wth

0-0311280/2/2617_
0.04257413843050.00.0112.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0311280/2/2648_
0.04195517620830.00.0112.15
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdps

0-0311280/5/2545_
0.041422912906380.00.0211.94
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_cda3b2668ee66

0-0311280/7/2552_
0.04104417256960.00.0312.09
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0311280/2/2420_
0.047724414387790.00.0110.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/3/2581_
0.0434617034900.00.0112.33
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0311280/2/2514_
0.041048214402280.00.0111.43
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j8R8s35M

0-0311280/8/2612_
0.021034411036650.00.0312.98
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0311280/1/2512_
0.0297423517308520.00.0011.39
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyar

0-0311280/1/2501_
0.02914920687300.00.0011.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

1-0311720/6/2412_
0.042243020672190.00.0211.78
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_1ad5588f2fbe6

1-0311720/2/2534_
0.02945520602370.00.0111.74
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0311720/1/2629_
0.021004816699910.00.0012.50
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNups

1-0311728/9/2623W
0.050017677769.60.0211.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0311720/5/2418_
0.0517814841650.00.0210.98
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOmMVxX

1-0311720/2/2675_
0.03374414833780.00.0113.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0311720/4/2632_
0.02766412683180.00.0112.80
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvEhM

1-0311720/2/2651_
0.02736413926840.00.0112.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/3/2726_
0.0267624314475430.00.0112.44
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0311720/6/2639_
0.026142814489140.00.0212.46
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_9ba7f48363639

1-0311720/3/2566_
0.02551284812353090.00.0112.35
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYKTu

1-0311720/3/2562_
0.02495416518010.00.0111.65
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0311720/7/2639_
0.024703911253690.00.0313.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c67c7f1b101fc

1-0311720/1/2416_
0.0284810815162810.00.0011.53
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0311720/5/2447_
0.033343418324180.00.0211.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_e425b520319e7

1-0311720/4/2690_
0.028723014202920.00.0212.48
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_807ebc9aae7b4

1-0311720/4/2365_
0.028952918444480.00.0210.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ec988bc9e0683

1-0311720/6/2533_
0.04128415230130.00.0212.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWqSp

1-0311720/7/2669_
0.04155115660660.00.0312.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0311720/9/2694_
0.0588401

Found on 2024-11-28 18:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72dea28ebd

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 26-Nov-2024 15:37:57 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 9 hours 49 minutes 58 seconds
Server load: 0.65 0.84 0.92
Total accesses: 95830 - Total Traffic: 450.6 MB - Total Duration: 61963822
CPU Usage: u22.55 s16.57 cu27.06 cs12.01 - .0141% CPU load
.173 requests/sec - 853 B/second - 4930 B/request - 646.602 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0123540/733/1974_
12.14102725010107040.03.259.25
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dj

0-0123540/685/1882_
12.17187154114838940.03.138.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0123540/878/1972_
12.175928413153960.04.319.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHa

0-0123540/717/1934_
12.17173218514235090.03.659.35
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0123540/805/1996_
12.17238511476670.04.149.55
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpy

0-0123540/647/1964_
12.164313912031820.03.289.41
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f754cc9b3ff4d

0-0123540/683/1947_
12.163271111177030.03.379.14
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWJiZ

0-0123540/676/1812_
12.162742812670440.03.138.11
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_134ee16af434e

0-0123540/659/1864_
12.17120516281140.03.028.52
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9MwFED%2FSt785Lh

0-0123540/815/1994_
12.1489423712772650.04.159.47
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvEpPch

0-0123540/669/1880_
12.17147442813913690.03.058.74
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0123540/741/1931_
12.14975359475730.03.879.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_a3b4a72c5d6ad

0-01235413/658/1773W
12.170068382629.93.008.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

0-0123540/624/1874_
12.158463413755750.02.718.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_637ebc22d75f3

0-0123540/610/1792_
12.141064210044050.02.668.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0123540/719/1984_
12.158153011185770.03.649.64
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsR

0-0123540/701/1961_
12.149373114222460.02.968.92
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whj

0-0123540/767/1960_
12.16570510005430.03.508.98
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0123540/851/1901_
12.1575525314892790.04.619.18
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWo3S

0-0123540/664/1800_
12.156893511498480.02.898.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_1a3383bea02c3

0-0123540/717/1924_
12.15596114237180.03.579.05
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0123540/725/1935_
12.156433312165510.03.348.80
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWInb

0-0123540/821/2006_
12.1647958511730.04.7110.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuMwFEZfJTuvEidpC

0-0123540/704/1903_
12.16390914076880.03.408.82
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJm

0-0123540/716/1853_
12.16540517896660.03.018.22
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuswEEB%2FJTuvEjc

1-0123850/662/1871_
12.218283217240440.03.529.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_3e5ef0d1c66b4

1-0123850/795/1931_
12.219553517443210.03.969.02
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_74f05cb194d80

1-0123850/628/1928_
12.23161310012861250.03.089.53
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0123850/740/1927_
12.2010783114814980.03.378.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_bad970a63df27

1-0123850/725/1849_
12.2389612713410.03.388.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0123850/726/2000_
12.21783610965520.03.299.18
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpC

1-0123850/724/1938_
12.2170348644920.03.429.03
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHMc

1-0123850/659/1894_
12.218763010461030.03.379.11
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhJ3

1-0123850/663/1998_
12.21917611846900.03.329.22
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefHDfet

1-0123850/798/2012_
12.21672512206640.04.169.66
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGJs43

1-0123850/726/1920_
12.22559359784000.03.929.52
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_e0e95fc987003

1-0123850/679/1852_
12.209983312920030.03.068.47
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

1-0123850/751/2064_
12.2163357659600.03.9610.11
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0123850/623/1822_
12.225102719884690.02.738.38
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOs

1-0123850/687/1911_
12.22342214032350.02.968.58
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0123850/715/2024_
12.22420511981730.03.149.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4s

1-0123850/608/1693_
12.224413814572900.02.797.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_02bf987ab8056

1-0123850/607/1843_
12.2157827412375160.03.419.09
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2QTby

1-0123850/798/2025_
12.2230059773420.03.969.41
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGJvYa

1-0123850/751/196

Found on 2024-11-26 15:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7284345b18

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 24-Nov-2024 14:52:26 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 9 hours 4 minutes 27 seconds
Server load: 1.09 0.97 1.10
Total accesses: 59289 - Total Traffic: 274.3 MB - Total Duration: 37774968
CPU Usage: u30.18 s18.3 cu0 cs0 - .0128% CPU load
.157 requests/sec - 760 B/second - 4850 B/request - 637.133 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/1223/1223_
18.9996364089310.05.935.93
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0340/1179/1179_
19.01813110116340.05.495.49
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0aa9960e10e0e

0-0340/1078/1078_
19.00175306946090.04.864.86
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_efc2169fb9b5a

0-0340/1198/1198_
19.024410338480.05.635.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpa

0-0340/1166/1166_
19.0045567930800.05.325.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefHDdut

0-0340/1294/1294_
19.0051547789430.06.046.04
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2cSO6

0-0340/1231/1231_
18.99102377547960.05.655.65
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcmU

0-0340/1105/1105_
18.9965769108710.04.864.86
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNchr

0-0340/1189/1189_
19.00324112614870.05.445.44
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0340/1164/1164_
19.002132596777280.05.265.26
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbuMgFEZfxTtWmPina

0-0340/1191/1191_
19.003543310092400.05.625.62
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_aea1bb0148806

0-0340/1176/1176_
19.0026175366590.05.405.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJt

0-0340/1085/1085_
18.991161323305370.05.015.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_aa2ad1198d882

0-0340/1238/1238_
18.9981448050280.05.865.86
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHz

0-0340/1165/1165_
18.997552885347360.05.585.58
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsS

0-0340/1252/1252_
19.022366779100.05.955.95
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/1244/1244_
18.99111558826080.05.905.90
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0340/1169/1169_
18.998962834790210.05.405.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0340/1035/1035_
18.996052768751150.04.524.52
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/1110/1110_
18.9969655637290.05.175.17
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchi

0-0340/1182/1182_
18.9910532678542350.05.385.38
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp2

0-0340/1192/1192_
18.9957547296550.05.395.39
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEjdp2

0-0340/1167/1167_
18.9984454709950.05.605.60
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpo

0-0340/1183/1183_
19.00388319891310.05.365.36
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_04f54add8bfa8

0-0340/1122/1122_
19.0012425613092410.05.165.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/1194/1194_
19.466328811153380.05.785.78
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0350/1109/1109_
19.46245410444500.04.964.96
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0350/1279/1279_
19.469367653790.06.376.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDcht

1-0358/1163/1163W
19.46009374479.65.265.26
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

1-0350/1105/1105_
19.4615448012650.04.884.88
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdau2

1-0350/1257/1257_
19.42108544679290.05.825.82
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhxv

1-0350/1200/1200_
19.4612314728880.05.565.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_3fb19c4b3bfd1

1-0350/1224/1224_
19.4211432735148800.05.705.70
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdJt

1-0350/1308/1308_
19.43833317329120.05.795.79
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_24b74acf15cb9

1-0350/1188/1188_
19.4385775993930.05.405.40
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0350/1182/1182_
19.43718335906000.05.565.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ded504a593186

1-0350/1144/1144_
19.46335410302580.05.305.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHb

1-0350/1297/1297_
19.421033354055840.06.096.09
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_16ec94c76a6da

1-0350/1182/1182_
19.43969323906090.05.595.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_aae9a04b8961a

1-0350/1209/1209_
19.44476318507030.05.565.56
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_afd5ad12f2b54

1-0350/1287/1287_
19.44686366431220.06.156.15
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_edab2ae56a4fe

1-0350/1059/1059_
19.445432509638240.04.854.85
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpa

1-0350/1215/1215_
19.44366510328660.05.605.60
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0350/1208/1208_
19.4393464958360.05.385.38
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/1191/1191_

Found on 2024-11-24 14:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7200e04ce5

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 22-Nov-2024 11:50:06 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 6 hours 2 minutes 6 seconds
Server load: 1.87 2.60 2.76
Total accesses: 34498 - Total Traffic: 170.8 MB - Total Duration: 9772714
CPU Usage: u18.48 s10.27 cu0 cs0 - .0148% CPU load
.177 requests/sec - 920 B/second - 5.1 kB/request - 283.284 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/666/666_
11.7682601680960.03.583.58
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0340/690/690_
11.7933461818530.03.493.49
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_6431845ff69e2

0-0349/641/641W
11.790021216512.83.003.00
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /server-status HTTP/1.1

0-0340/688/688_
11.78205761880110.03.613.61
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c8cbe08cada5b

0-0340/728/728_
11.78331322021560.03.573.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_dc82902a9d517

0-0340/759/759_
11.78101332667070.03.853.85
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b095232bdebce

0-0340/772/772_
11.7817402198090.03.763.76
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0340/607/607_
11.7492451756940.02.872.87
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWI7X

0-0340/754/754_
11.776462521906600.03.733.73
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGEO86

0-0340/702/702_
11.74106941706870.03.443.44
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

0-0340/798/798_
11.775852482024910.04.084.08
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpq

0-0340/663/663_
11.7496042171500.03.193.19
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHX

0-0340/610/610_
11.7682601365980.03.053.05
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0340/765/765_
11.7489851901590.03.803.80
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/708/708_
11.7769461813530.03.683.68
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWIna

0-0340/720/720_
11.741005381886180.03.573.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0e41f816ed518

0-0340/678/678_
11.785652407460.03.413.41
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/637/637_
11.7676561191670.03.073.07
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wgT

0-0340/592/592_
11.775052802157980.02.682.68
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/617/617_
11.774152691620820.03.163.16
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbDjr

0-0340/705/705_
11.7822811231921350.03.493.49
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEP2VyPvETii9x

0-0340/698/698_
11.7735132390070.03.433.43
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0340/678/678_
11.777362731709230.03.393.39
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNjx1

0-0340/677/677_
11.78294752077730.03.343.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCehR

0-0340/668/668_
11.77460373034700.03.233.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_7ab7ecf151000

1-0350/684/684_
11.7925752123219290.03.583.58
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85tVm

1-0350/602/602_
11.7844641735220.02.832.83
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0350/708/708_
11.80432952149290.03.693.69
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHNf

1-0350/635/635_
11.802662253910.03.063.06
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOQ

1-0350/638/638_
11.8014771330090.03.013.01
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/719/719_
11.807401465770.03.593.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0350/718/718_
11.761049502011510.03.643.64
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_33db99b81e733

1-0350/759/759_
11.76107961967730.03.833.83
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2QTbV

1-0350/832/832_
11.76932351763850.03.873.87
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_afa39789f3fe6

1-0350/729/729_
11.768712671281170.03.573.57
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0350/657/657_
11.769915961690.03.373.37
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

1-0350/615/615_
11.7683712771560.02.922.92
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0350/696/696_
11.76903341357480.03.453.45
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_8ea0f181f77cb

1-0350/695/695_
11.768072551506320.03.533.53
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWqcR

1-0350/675/675_
11.7856922618010.03.293.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0350/791/791_
11.767561861782930.04.044.04
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owFIXf%2BRWV3xM

1-0350/616/616_
11.78676351801210.02.972.97
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOmJhYb

1-0350/685/685_
11.784722302430960.03.293.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_760b44ec72a86

1-0350/639/639_
11.76719331935250.03.093.09
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d69675d70d49d

1-0350/728/728_
11.78604341928470.03.633.63
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f8e0ae21d1f54

Found on 2024-11-22 11:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7266c1a393

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 20-Nov-2024 09:48:04 UTC
Restart Time: Wednesday, 20-Nov-2024 05:47:59 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 hours 4 seconds
Server load: 1.00 1.29 1.69
Total accesses: 2378 - Total Traffic: 11.5 MB - Total Duration: 754678
CPU Usage: u1.31 s.72 cu0 cs0 - .0141% CPU load
.165 requests/sec - 838 B/second - 5076 B/request - 317.358 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/41/41_
0.8516779100480.00.590.59
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-0340/36/36_
0.755045209500.00.140.14
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0340/48/48_
0.75546252134560.00.270.27
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXT

0-0340/64/64_
0.746435139440.00.290.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/74/74_
0.746814773370.00.420.42
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/49/49_
0.7373139184780.00.230.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0ec79786fc31f

0-0340/50/50_
0.746124272090.00.200.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXT

0-0340/53/53_
0.773257216330.00.270.27
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuMwFEZfJTuvHLdpB

0-0340/40/40_
0.851407224870.00.150.15
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEjdp2

0-0340/56/56_
0.7543143118860.00.280.28
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/47/47_
0.771866112100.00.240.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/accountinfo/check.php?username=cjh5346%40hotmai

0-0340/37/37_
0.764035214860.00.230.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/56/56_
0.7725725282100.00.280.28
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/44/44_
0.772764538430.00.210.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/47/47_
0.77220745300.00.210.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0340/51/51_
0.764038150020.00.270.27
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/35/35_
0.75474266204620.00.130.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0340/67/67_
0.86118197134890.00.300.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/42/42_
0.861048867760.00.180.18
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0f0dcf5a98417

0-0340/47/47_
0.86527197450.00.220.22
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dg

0-0340/59/59_
0.737915213310.00.200.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLtp

0-0340/22/22_
0.73840241800.00.080.08
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0340/34/34_
0.8660114810.00.120.12
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET / HTTP/1.1

0-0340/30/30_
0.738814188290.00.120.12
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/66/66_
0.7390437423140.00.340.34
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_66a96c8a2a4e4

1-0350/61/61_
0.7465839173800.00.300.30
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_e74733abd55a1

1-0350/63/63_
0.74670475060.00.320.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNi1Y

1-0350/45/45_
0.746342124750.00.210.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0350/55/55_
0.745735169280.00.320.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/60/60_
0.765254154350.00.290.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/43/43_
0.764873050000.00.170.17
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f539dff664816

1-0350/47/47_
0.764466211450.00.240.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeB0

1-0350/58/58_
0.76423857930.00.290.29
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/53/53_
0.76403176610.00.210.21
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/41/41_
0.77386464620.00.190.19
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsR

1-0350/55/55_
0.77295583560.00.220.22
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGGNHq

1-0350/52/52_
0.77269764440.00.240.24
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0350/45/45_
0.7722637105130.00.200.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c2edc3144ce11

1-0350/64/64_
0.772134156120.00.330.33
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0350/53/53_
0.7717517259380.00.230.23
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/29/29_
0.77167185500.00.110.11
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/nextmail/password-strength.js HTTP/1.1

1-0350/61/61_
0.771264249990.00.320.32
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/accountinfo/complete.php HTTP/1.1

1-0350/34/34_
0.7710277433580.00.130.13
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_3d86f7b083b2c

1-0350/43/43_
0.77804143040.00.200.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

1-0350/38/38_
0.7722735262960.00.170.17
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0357/41/41W
0.7800281047.90.200.20
127.0.0.1http/1.1ip-10-1-95-72.ap-southeast-2.coGET /

Found on 2024-11-20 09:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72312ea882

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 18-Nov-2024 06:55:06 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 23 hours 43 minutes 26 seconds
Server load: 2.45 2.09 2.28
Total accesses: 959993 - Total Traffic: 4.0 GB - Total Duration: 643505500
CPU Usage: u77.93 s119.96 cu366.1 cs186.55 - .0124% CPU load
.159 requests/sec - 705 B/second - 4445 B/request - 670.323 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0258970/1001/18858_
15.392174126207710.04.3779.77
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0258970/1003/19190_
15.3918542143723760.04.0880.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc6fc337d3d31

0-0258970/894/18885_
15.375778127823140.03.8680.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0258970/1012/19162_
15.383976129491710.04.2580.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLjr

0-0258970/1024/18721_
15.3843232127583100.04.8180.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed70f3071244f

0-0258970/960/19684_
15.366684135327050.03.9983.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFED%2FCm99KgW

0-0258970/933/19353_
15.39245268125242880.03.9281.86
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchL

0-0258970/979/19432_
15.392740110823970.03.8981.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0258970/1108/19133_
15.3831740132035780.04.8180.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7b12e89b76c4

0-0258970/994/18938_
15.401077135411400.04.3781.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0258970/944/18823_
15.40654132589510.03.9180.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0258970/979/19673_
15.401246136904030.04.0284.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0258978/966/19480W
15.4000112701329.54.0083.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0258970/889/19443_
15.402745122137350.03.5583.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a04208da0f39

0-0258970/832/19276_
15.358515114691860.03.5282.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0258970/1049/18427_
15.3673538130130190.04.2877.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_002c817363113

0-0258970/906/18603_
15.357884133545340.04.0079.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lg

0-0258970/880/19324_
15.366975132510360.03.6181.35
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtY2

0-0258970/877/18836_
15.36632743121698430.03.6580.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0258970/994/19462_
15.3589132140572070.04.2381.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8ab4f8088d94c

0-0258970/1030/19397_
15.375062121342360.04.4084.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0258970/840/19156_
15.3754076142911780.03.4581.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e2d52315aa758

0-0258970/931/19110_
15.374888128276280.03.7779.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0258970/917/18814_
15.37456299121193270.03.8280.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0258970/889/19516_
15.383665137303380.03.6682.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDfZp

1-0261080/1073/18337_
15.428184115167550.05.1279.02
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0261080/943/17724_
15.429376112437060.03.8175.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefEpNAg

1-0261080/875/17852_
15.427278119056330.03.6275.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJfT%2FMgFIe%2FSu%2B

1-0261080/886/17350_
15.4554115112520.03.6873.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBb9sgFMe%2Fim%2BcM

1-0261080/958/18196_
15.4511437110166640.04.0975.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7a7f8b9445c1b

1-0261080/946/18234_
15.4589352137066220.03.7275.71
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0261080/943/18261_
15.42754197120054670.03.9379.43
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEiYG0W

1-0261080/932/17669_
15.428747117223110.03.9174.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0261080/976/17916_
15.43606272115063000.04.3575.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEEB%2FJTefHCc

1-0261080/974/17890_
15.436401117483390.04.0775.35
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0261080/850/18728_
15.4268138110843790.03.6579.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3bc4f5dc34732

1-0261080/901/17997_
15.44455331123291980.04.0675.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=588&StateId=

1-0261080/1003/18005_
15.435157116845970.04.1976.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHI

1-0261080/995/17971_
15.4356165119824790.04.1175.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3c30969fd43f

1-0261080/1029/18229_
15.454254120252060.04.3078.48
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCcho

1-0261080/989/18425_
15.45375445137024170.04.1677.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb6MwEP0ryHcwUFKxV

1-0261080/982/18197_
15.444480124840790.04.0978.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0261080/912/18111_
15.4448150131509840.03.7475.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0261080/916/17480_
15.45308274117637910.03.8473.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.c

Found on 2024-11-18 06:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7291c43750

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 16-Nov-2024 08:51:04 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 1 hour 39 minutes 25 seconds
Server load: 0.94 1.70 1.92
Total accesses: 932314 - Total Traffic: 3.9 GB - Total Duration: 633659049
CPU Usage: u64.53 s110.64 cu366.1 cs186.55 - .0124% CPU load
.159 requests/sec - 705 B/second - 4447 B/request - 679.663 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0258970/485/18342_
6.57856251123947970.02.1577.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0258970/414/18601_
6.57897161141335360.01.7178.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6628c7d6fa44

0-0258970/357/18348_
6.594413367125579280.01.5478.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0258970/402/18552_
6.593732127816170.01.7277.98
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_734c002e6e31a

0-0258970/454/18151_
6.599424125823830.02.3877.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW79k

0-0258970/377/19101_
6.5820649133329800.01.5681.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4a934d49eda0

0-0258970/366/18786_
6.5777835122818290.01.5479.48
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_303b1d8947df0

0-0258970/373/18826_
6.578265108518350.01.5479.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJu

0-0258970/486/18511_
6.577374130756940.02.1578.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9Kh2

0-0258970/423/18367_
6.57707273133617480.01.8778.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0258970/380/18259_
6.576765130227810.01.5578.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpl

0-0258970/364/19058_
6.57646249135089550.01.5082.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdOW

0-0258970/454/18968_
6.58492256111121840.02.0181.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHd

0-0258970/385/18939_
6.57584259120149930.01.5681.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0258970/373/18817_
6.583765112372640.01.5480.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbusgEEZfxTtWmNhxo

0-0258970/419/17797_
6.584222128105740.01.7475.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0258970/393/18090_
6.582542667131817360.01.7077.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0258970/361/18805_
6.583085130493640.01.4579.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHJMAD

0-0258970/350/18309_
6.581743179119866260.01.5277.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0258970/450/18918_
6.58531137138860790.01.9179.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_96f1ae121891d

0-0258970/468/18835_
6.581324119085570.02.0682.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEED%2Fim%2B

0-0258970/330/18646_
6.5815342140363490.01.3979.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_83ea879101b50

0-0258970/395/18574_
6.591065126343790.01.6377.38
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWKcp

0-0258970/387/18284_
6.59779391118866620.01.6077.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0258970/398/19025_
6.569390135289700.01.6780.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0261080/441/17705_
6.506016113388880.02.3676.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHCc

1-0261080/392/17173_
6.4968230110803970.01.5372.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6316f4bf4344

1-0261080/349/17326_
6.505565116946290.01.4373.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchp

1-0261080/391/16855_
6.497312113748340.01.6371.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0261080/360/17598_
6.4984631108306110.01.6172.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb6df1f2ae33f

1-0261080/375/17663_
6.497961134200610.01.5073.49
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0261080/393/17711_
6.5065632118405110.01.6877.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ccc370d3fe50f

1-0261080/413/17150_
6.505265115445960.01.8172.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYQxJs

1-0261080/439/17379_
6.5039830113185930.02.1273.59
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_088c60be9e330

1-0261080/400/17316_
6.50333104115070980.01.7072.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9e87da549dad2

1-0261080/336/18214_
6.504656108970210.01.4277.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhOW

1-0261080/360/17456_
6.51195708121272640.01.5172.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0261080/433/17435_
6.5028185114764340.01.9074.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3fe5447ccb6d

1-0261080/417/17393_
6.51216635118057130.01.7372.67
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVFLb4JAEP4rZO%2ByD5D

1-0261080/373/17573_
6.511363427118311430.01.5275.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0261080/401/17837_
6.511164728134907610.01.6475.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0261080/403/17618_
6.51956627123056740.01.6975.68
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0261080/344/17543_
6.511562572129761550.01.3973.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0261080/352/16916_
6.52414114952750.01.4170.63
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

1-0

Found on 2024-11-16 08:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7276d2115c

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 14-Nov-2024 23:09:05 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  66 days 15 hours 57 minutes 26 seconds
Server load: 1.40 2.82 2.80
Total accesses: 915352 - Total Traffic: 3.8 GB - Total Duration: 627857608
CPU Usage: u56.2 s104.28 cu366.1 cs186.55 - .0124% CPU load
.159 requests/sec - 706 B/second - 4448 B/request - 685.919 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0258970/54/17911_
1.024592905122513790.00.2575.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEP2VyPvESSgls

0-0258970/79/18266_
1.02447127140558810.00.3477.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0258970/43/18034_
1.01489143124497610.00.2076.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01c2eccdf92ec

0-0258970/59/18209_
1.01502236126908500.00.2976.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c61963c343d12

0-0258970/19/17716_
1.015221124661450.00.4575.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0258970/55/18779_
1.05137192131891900.00.2780.13
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNb4JAEIb%2FCtm7LCw

0-0258970/61/18481_
1.03427936121777930.00.2478.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

0-0258970/52/18505_
1.03408188107820320.00.2677.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0258970/144/18169_
1.033509129523800.00.8176.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0258970/83/18027_
1.033991468132770900.00.3877.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0258970/73/17952_
1.033732129219640.00.2877.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0258970/38/18732_
1.033015133290970.00.1780.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpQ

0-0258970/107/18621_
1.0422535110165220.00.5179.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f35b1d958da98

0-0258970/85/18639_
1.032771118988400.00.3479.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0258970/50/18494_
1.04201180111800620.00.2078.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913vH

0-0258970/46/17424_
1.041814127060810.00.2573.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9Kh0

0-0258970/31/17728_
1.0416918130650080.00.1475.67
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0258970/30/18474_
1.051571128397260.00.1577.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0258970/45/18004_
1.0541161116999630.00.2976.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nZJRb9sgFIX%2FisW7jbF

0-0258970/67/18535_
1.051238137865760.00.3178.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0258970/108/18475_
1.05805117848430.00.4980.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0258970/27/18343_
1.057182139198570.00.1477.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEqQkUr

0-0258970/33/18212_
1.015222124325180.00.1575.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0258970/36/17933_
1.015270117654020.00.1776.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0258970/32/18659_
1.015220134308320.00.1779.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0261080/118/17382_
0.96386908112634850.00.6074.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94whi

1-0261080/70/16851_
0.9447392109865410.00.3071.50
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0261080/57/17034_
0.964350115851880.00.2572.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0261080/40/16504_
0.944765112809610.00.1869.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0261080/31/17269_
0.925280107552990.00.1971.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0261080/51/17339_
0.935211133272410.00.2772.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0261080/30/17348_
0.964536117475810.00.1575.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0261080/69/16806_
0.9640812114510290.00.3771.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0261080/93/17033_
0.973432080111999730.00.5271.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0261080/72/16988_
0.982700114107200.00.3471.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0261080/27/17905_
0.964215107755710.00.1276.16
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8MgFID%2FSt94oqy

1-0261080/64/17160_
0.973285119393490.00.3671.59
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2Rg7z

1-0261080/44/17046_
0.982675113785860.00.2372.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0261080/31/17007_
0.9921033117191230.00.1271.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0261080/39/17239_
0.99201173117147480.00.1374.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98R

1-0261080/97/17533_
1.0014933133716040.00.4173.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0261080/69/17284_
0.9916979121532400.00.3374.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0261080/29/17228_
1.001571128826460.00.1372.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0261080/63/16627_
1.01109395113651880.00.2869.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNj4IwEIb%2FCuld%2B

1-0261080/59/16820_
1.011020120039820.00.2771.87
127.0.0.1</

Found on 2024-11-14 23:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72702358e2

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 12-Nov-2024 21:30:56 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  64 days 14 hours 19 minutes 17 seconds
Server load: 8.88 4.08 2.80
Total accesses: 881071 - Total Traffic: 3.6 GB - Total Duration: 617165478
CPU Usage: u67.29 s108.26 cu337.76 cs171.35 - .0123% CPU load
.158 requests/sec - 700 B/second - 4439 B/request - 700.472 ms/request
1 requests currently being processed, 49 idle workers
_______W__________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083620/706/17269_
11.138532120339230.03.2472.98
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083620/748/17604_
11.129846139334490.03.1574.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083620/720/17314_
11.101812122689790.03.0473.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-083620/674/17573_
11.101570124950520.02.8773.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083620/616/17011_
11.136851122407820.02.6571.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083620/696/17956_
11.13881129367860.02.7476.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-083620/763/17762_
11.1111140118659540.03.1875.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ceea8af0cc64a

0-083628/666/17795W
11.1300105025809.52.6074.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-083620/697/17411_
11.076225127100930.02.9173.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4kSo

0-083620/814/17351_
11.0666635130976530.03.4874.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f1d83c818d916

0-083620/722/17247_
11.0750033126268900.03.0274.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

0-083620/668/18061_
11.075890131734730.03.1977.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-083620/582/17824_
11.133653107505040.02.4175.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYQzJ1

0-083620/742/17883_
11.084772116728680.03.1576.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-083620/730/17847_
11.084411109176240.03.0675.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-083620/649/16828_
11.07557170125658980.02.7670.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBb4MwDIX%2FCsq9hCS

0-083620/665/17092_
11.075814129025650.02.7472.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzaL

0-083620/711/17773_
11.084520126281960.02.8174.86
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083620/932/17341_
11.09256243115440120.03.6573.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRb9owEMbf%2BSsqvyc

0-083620/675/17809_
11.102136136445910.02.8274.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPj9owEMXvfIqV74njN

0-083620/734/17733_
11.09354433115180650.03.0477.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNj4IwEIb%2FCuldCrV

0-083620/722/17666_
11.0939630137339610.03.1674.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_589c17a7eef9f

0-083620/690/17568_
11.09326182122148760.02.8573.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfE%

0-083620/630/17292_
11.092295115709620.02.5273.58
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemS

0-083620/774/18096_
11.0931235132481520.03.0677.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-084440/678/16698_
11.351965110813130.02.9071.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913jX

1-084440/758/16207_
11.352802107460740.03.6268.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-084440/701/16268_
11.344260113904450.02.9469.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-084440/707/15747_
11.33491246110819190.02.9666.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGIO9k

1-084440/697/16654_
11.353175105695210.02.9268.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLBbuIwFLzzFVXuiZOQN

1-084440/861/16622_
11.353704130780890.03.5069.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-084440/725/16588_
11.353435115795460.03.1972.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHOMAS

1-084440/788/16127_
11.351455111870040.03.3268.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefEiemo

1-084440/743/16349_
11.352225110038230.03.1668.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzWL

1-084440/722/16313_
11.3524237111642330.03.1068.71
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf184b59e9dca

1-084440/898/17239_
11.351822105828930.03.6473.30
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-084440/754/16499_
11.37411424116916210.03.1668.79
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNj4IwEIb%2FCuldSls

1-084440/695/16411_
11.35989111397790.02.9569.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-084440/719/16324_
11.35889114914100.03.0068.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-084440/625/16634_
11.3768180114982600.02.5471.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVFNb4JAEP0rZO%2Byy%2

1-084440/759/16741_
11.3257536131797180.03.1670.27
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-084440/692/16658_
11.351261119647630.03.0271.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-084440/699/16598_
11.325831126274030.03.0369.67
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-084440/741/15932_
11.3266340111306800.02.8866.41
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4baf1754c5967

1-084440/707/16160_
11.38917511791435

Found on 2024-11-12 21:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72950f7d8d

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 10-Nov-2024 20:56:57 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  62 days 13 hours 45 minutes 18 seconds
Server load: 1.32 1.46 1.51
Total accesses: 849625 - Total Traffic: 3.5 GB - Total Duration: 604080011
CPU Usage: u52.78 s97.6 cu337.76 cs171.35 - .0122% CPU load
.157 requests/sec - 697 B/second - 4440 B/request - 710.996 ms/request
1 requests currently being processed, 49 idle workers
_________________________________W________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083620/68/16631_
1.25788259116747340.00.2670.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzX7

0-083620/98/16954_
1.267286136069290.00.3971.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-083620/96/16690_
1.258710120063880.00.3871.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083620/84/16983_
1.26697104122969770.00.3271.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGOM4S

0-083620/68/16463_
1.266462023119264990.00.2669.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVFLb4JAEP4rZO%2ByDwF

0-083620/102/17362_
1.266385127124410.00.3874.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-083620/89/17088_
1.2659171116323210.00.3472.16
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-083620/90/17219_
1.2652943102617410.00.3372.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083620/67/16781_
1.265854124662750.00.2670.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-083620/92/16629_
1.265710126977640.00.3571.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083620/109/16634_
1.265008123503590.00.4471.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083620/86/17479_
1.334578129219170.00.7275.48
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083620/69/17311_
1.3343332104807970.00.2673.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5e458a227f8d7

0-083620/94/17235_
1.333808114083230.00.3673.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083620/85/17202_
1.3435430106729650.00.3373.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a44d9af102221

0-083620/69/16248_
1.343385123872930.00.2568.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-083620/92/16519_
1.3430734127250180.00.3670.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb38014949f26

0-083620/102/17164_
1.343009123916740.00.3972.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083620/108/16517_
1.352460111656360.00.3870.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-083620/114/17248_
1.36525133472730.00.4672.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9owFIb%2FSu585Tg

0-083620/105/17104_
1.3521034112488940.00.4374.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2ba5f5c514a9e

0-083620/73/17017_
1.351135134870710.00.3072.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXn

0-083620/82/16960_
1.3515033118848970.00.3270.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_16eac3d96713e

0-083620/71/16733_
1.36235113220700.00.2971.34
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-083620/102/17424_
1.2583434130792410.00.3874.35
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6d84478d2f7ad

1-084440/84/16104_
1.231424107102140.00.3268.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNtNm

1-084440/79/15528_
1.232765104989270.00.3065.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-084440/83/15650_
1.232508111649070.00.3566.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-084440/64/15104_
1.23171256108136680.00.2463.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWziN

1-084440/82/16039_
1.2383296103591210.00.3466.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wti

1-084440/106/15867_
1.223295128228590.00.3865.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fstileapp

1-084440/74/15937_
1.232900112826270.00.2769.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-084440/107/15446_
1.2336154109640600.00.4765.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1

1-084449/93/15699W
1.23001080611812.70.3666.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

1-084440/64/15655_
1.198195109762560.00.2665.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-084440/132/16473_
1.19848743103492800.00.5470.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-084440/72/15817_
1.197596112848440.00.2865.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-084440/80/15796_
1.1971232109508320.00.3466.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d85180fddc3a8

1-084440/94/15699_
1.206679113494010.00.3565.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-084440/59/16068_
1.206450111760740.00.2369.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-084440/77/16059_
1.2060254127622420.00.3067.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d50a9b785b90

1-084440/79/16045_
1.205917117475680.00.3668.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-084440/80/15979_
1.215484123150560.00.3166.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYxLl

1-084440/94/15285_
1.215710109171070.00.3563.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-084440/66/15519_
1.21517388115287630.00.2565.86
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.c

Found on 2024-11-10 20:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72e14b483b

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 08-Nov-2024 18:43:14 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  60 days 11 hours 31 minutes 35 seconds
Server load: 1.33 1.35 1.58
Total accesses: 824518 - Total Traffic: 3.4 GB - Total Duration: 583959534
CPU Usage: u65.08 s101.51 cu313.72 cs158.3 - .0122% CPU load
.158 requests/sec - 701 B/second - 4444 B/request - 708.244 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0302630/639/16174_
11.9395834112981290.02.7068.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7c25d1c6b4e2

0-0302630/558/16456_
11.9483131129143670.02.2869.33
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c2aa7149dc29d

0-0302630/709/16196_
11.9311235116199130.02.9169.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0302630/798/16479_
11.9489032118555770.03.4069.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2906ecc326828

0-0302630/746/16012_
11.931076253115005250.03.0567.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0302630/769/16871_
11.96167237123516350.03.2672.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0302630/665/16605_
11.947303111406630.02.7670.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0302630/722/16700_
11.945793197489060.03.2170.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGDtOF

0-0302630/664/16327_
11.948055120925200.02.9468.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzPq

0-0302630/679/16095_
11.9463941123911570.03.3969.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0302630/655/16121_
11.946984119894640.02.8069.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNiJ2

0-0302630/789/16997_
11.9536833126191400.03.2573.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_66e2a49c5823e

0-0302630/760/16830_
11.954594103009010.03.3171.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpg

0-0302630/652/16704_
11.946114109545820.02.7871.65
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0302630/728/16749_
11.962303102577110.03.1871.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0302630/705/15809_
11.9451949117866080.03.2366.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0302630/770/15996_
11.96155411124540610.03.3668.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0302630/727/16597_
11.9530034119673890.03.1970.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e19534af7ea5e

0-0302630/747/16004_
11.961294109354410.03.2468.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0302630/743/16763_
11.9611428126337450.03.0170.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dbb562c18167b

0-0302630/699/16549_
11.96586776108041510.03.4172.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0302630/794/16468_
11.9311676131373690.03.5369.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-03026312/715/16436W
11.97001159011526.62.9668.41
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0302630/713/16260_
11.96784693109970820.03.1369.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0302630/739/16891_
11.9310168126046660.03.1672.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDcph

1-0303140/664/15630_
12.201212492105082770.02.7766.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0303140/745/15017_
12.1926022101917340.03.3663.16
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0303140/787/15160_
12.201614107171260.03.3064.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0303140/690/14633_
12.2018428103739370.02.9061.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_874bd76101408

1-0303140/729/15495_
12.1942932100547790.03.1263.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCcho

1-0303140/655/15280_
12.187614123150010.02.6863.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2dhu0

1-0303140/806/15407_
12.201361825108226370.03.5367.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0303140/796/14971_
12.193314106367850.03.3063.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTq

1-0303140/714/15161_
12.20704104899150.03.0063.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb%2BMgFEb%2FinesM

1-0303140/728/15154_
12.20399403104292460.03.2863.68
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0303140/958/15921_
12.171136399012780.04.1667.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHCchp

1-0303140/742/15320_
12.17104240110443320.03.1163.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c5b77b8e11e79

1-0303140/782/15307_
12.17118334105288580.03.3664.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2f6591c2becf

1-0303140/681/15204_
12.1711064108923360.02.8063.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0303140/821/15553_
12.17987249105352820.03.6767.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYwTp

1-0303140/774/15575_
12.188674123550870.03.2965.45
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpY

1-0303140/675/15585_
12.1792730112252360.03.0066.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0303140/716/15522_
12.18713104117987550.02.8665.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8642d248f1648

1-0303140/651/14735_
12.188214104529250.02.7061.65
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2

Found on 2024-11-08 18:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72c3cd75c7

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 06-Nov-2024 08:22:14 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  58 days 1 hour 10 minutes 34 seconds
Server load: 1.26 1.37 1.53
Total accesses: 789126 - Total Traffic: 3.3 GB - Total Duration: 564444086
CPU Usage: u47.63 s89.07 cu313.72 cs158.3 - .0121% CPU load
.157 requests/sec - 698 B/second - 4441 B/request - 715.278 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0302630/22/15557_
0.314612109835210.00.0965.61
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0302630/8/15906_
0.315054125545650.00.0367.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0302630/16/15503_
0.315344113129290.00.0666.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOmOBEj

0-0302630/19/15700_
0.315722114837490.00.0865.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0302630/15/15281_
0.305945112167900.00.0664.77
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGExT1

0-0302630/15/16117_
0.3087255118839640.00.0968.95
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0302630/11/15951_
0.314394107317210.00.0467.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2Bcb

0-0302630/18/15996_
0.31426094669640.00.0767.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0302630/33/15696_
0.313764904118024120.00.1465.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGGMn6

0-0302630/28/15444_
0.322877120608250.00.1765.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0302630/9/15475_
0.323234116736590.00.0366.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb9sgFID%2Fit94wth

0-0302630/40/16248_
0.3227645121650040.00.1170.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_07d206a64d01e

0-0302630/28/16098_
0.33243111100409630.00.1168.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92bfa832ef4d4

0-0302630/23/16075_
0.33205250107007530.00.1068.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpF

0-0302630/13/16034_
0.331552698160830.00.0468.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0302630/30/15134_
0.3311931114886880.00.1263.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e2a13b7e4e1c1

0-0302630/37/15263_
0.34844120189900.00.1465.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0302630/13/15883_
0.34544116374340.00.0467.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYybp

0-03026313/30/15287W
0.34001048531329.80.0965.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0302630/22/16042_
0.289382121843950.00.1267.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0302630/24/15874_
0.298951103732110.00.1369.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0302630/23/15697_
0.308255128297110.00.1066.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfI

0-0302630/32/15753_
0.3078038111445870.00.1365.58
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92aa2abbcdb43

0-0302630/7/15554_
0.30713278104620480.00.0266.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGBMnU

0-0302630/25/16177_
0.3064646121478240.00.1069.11
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7113aa0872426

1-0303140/19/14985_
0.3016336100084280.00.0863.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGGOnU

1-0303140/20/14292_
0.302343998115420.00.0859.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0303140/14/14387_
0.302644102250420.00.0561.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0303140/29/13972_
0.30275099476210.00.1158.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0303140/20/14786_
0.3029393696809780.00.0860.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0303140/21/14646_
0.2851630119160390.00.0961.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_960e94095e525

1-0303140/14/14615_
0.30144240105244140.00.0663.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNvxp

1-0303140/18/14193_
0.301054103372530.00.0760.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzSW

1-0303140/18/14465_
0.307023999573850.00.0661.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPc9owEMXvfIqM7rZsY

1-0303140/16/14442_
0.302532100070320.00.0760.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0303140/19/14982_
0.269343593514110.00.0863.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_056ad64dd01a5

1-0303140/20/14598_
0.269165104665790.00.0860.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHIcQU

1-0303140/31/14556_
0.278855102239210.00.1161.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0303140/24/14547_
0.278405105238220.00.0860.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0303140/13/14745_
0.27794265101712610.00.0563.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRwnT

1-0303140/36/14837_
0.2776333120281200.00.1462.30
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0bce2424da822

1-0303140/21/14931_
0.286825108340970.00.0863.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp6

1-0303140/10/14816_
0.286244113648470.00.0462.38
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwnb

1-0303140/11/14095_
0.28586281101115920.00.0458.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4miq

1-0303140/22/14393

Found on 2024-11-06 08:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7263c35c34

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 04-Nov-2024 07:51:10 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  56 days 39 minutes 30 seconds
Server load: 1.25 1.81 2.07
Total accesses: 756894 - Total Traffic: 3.1 GB - Total Duration: 551803266
CPU Usage: u57.22 s91.96 cu288.53 cs144.85 - .012% CPU load
.156 requests/sec - 694 B/second - 4442 B/request - 729.036 ms/request
1 requests currently being processed, 49 idle workers
____________________W_____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



</SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0143170/533/14927_
9.183545108077530.02.3163.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDuhh

0-0143170/627/15300_
9.19112284122857730.02.5564.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNuxW

0-0143170/596/14948_
9.18685383110310450.02.4163.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/595/14943_
9.185936672112249010.02.6262.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/517/14654_
9.20544109924070.02.1662.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0143170/535/15373_
9.18622271115473390.02.2366.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0143170/647/15375_
9.1917554103739380.02.7264.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2ac2b750b8e1

0-0143170/519/15245_
9.19153492325450.02.1564.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsS

0-0143170/627/15010_
9.1684735115449820.02.5062.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_21d030ba27707

0-0143170/590/14793_
9.187145117659790.02.3663.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbusgEEZfxTtWGNuxk

0-0143170/644/14767_
9.20254114593540.02.7763.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzHS

0-0143170/551/15566_
9.1853338119010750.02.4067.30
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_289cd6776b551

0-0143170/738/15270_
9.1874925997528780.03.0665.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0143170/604/15397_
9.183154104818200.02.6265.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefHDchL

0-0143170/693/15360_
9.192798796370910.02.9865.02
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57bdaaf8ea445

0-0143170/585/14485_
9.18561294113248300.02.4760.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchg

0-0143170/567/14680_
9.185113117180880.02.3362.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNux4

0-0143170/534/15105_
9.185749397114356190.02.2864.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/579/14651_
9.183994102604320.02.4362.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0143170/653/15423_
9.184244119318890.02.3965.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0143179/769/15127W
9.20001019522212.83.1365.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0143170/490/15103_
9.18473301126157330.01.9963.77
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

0-0143170/543/15112_
9.186482627109016530.02.1762.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/659/14982_
9.1882136101456180.02.4063.80
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6a77a9de720b

0-0143170/611/15598_
9.192324118469210.02.4866.75
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzHa

1-0144000/575/14270_
9.0883598254630.02.2860.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYezYy

1-0144000/553/13703_
9.084353595646780.02.1957.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ce26717854f3a

1-0144000/662/13693_
9.066962999691180.02.7458.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_93bcfd1d78695

1-0144000/500/13378_
9.09162996261000.02.0456.41
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_30d118c0a5bb5

1-0144000/540/14070_
9.081624794930650.02.1758.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2481de9835c1e

1-0144000/546/14067_
9.068644116212930.02.2058.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0144000/550/13982_
9.081449102660990.02.3261.16
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0144000/543/13549_
9.085036100581020.02.1357.48
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpt

1-0144000/615/13819_
9.07592497231640.02.4158.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLie

1-0144000/563/13832_
9.08334598519750.02.3858.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEX3%2FoqAe4m

1-0144000/611/14339_
9.08294690316970.02.5760.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0144000/563/14029_
9.081941065102886450.02.3758.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEED%2Fim%2B

1-0144000/559/14027_
9.084092999940160.02.3259.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d19d50cff945e

1-0144000/542/14004_
9.068026101577650.02.3458.61
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdONrbjK

1-0144000/745/14221_
9.06743498799860.03.0161.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0144000/622/14099_
9.0755313356118176500.02.6159.45
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0144000/601/14196_
9.08262475105861980.02.5460.80
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzit

1-0144000/617/14213_
9.066303365110928110.02.5759.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0144000/624/13556_
9.07611487898510940.02.4456.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

Found on 2024-11-04 07:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d723dd843c9

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 02-Nov-2024 23:50:02 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  54 days 16 hours 38 minutes 23 seconds
Server load: 1.08 1.39 1.62
Total accesses: 734135 - Total Traffic: 3.0 GB - Total Duration: 471530450
CPU Usage: u47.15 s84.72 cu288.53 cs144.85 - .012% CPU load
.155 requests/sec - 690 B/second - 4446 B/request - 642.294 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0143170/150/14544_
2.195443093173620.00.7061.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a2d37cff2248f

0-0143170/151/14824_
2.1957031104635590.00.6462.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d41c137f3689

0-0143170/127/14479_
2.197336003690952420.00.5161.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/124/14472_
2.179953100447920.00.5060.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0143170/142/14279_
2.197605668790607160.00.5960.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143178/133/14971W
2.2200101114309.60.4964.34
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0143170/163/14891_
2.204533086006840.00.6362.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4fad99b2084dd

0-0143170/158/14884_
2.179117475697870.00.6862.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/168/14551_
2.195054297598510.00.6361.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0143170/137/14340_
2.2132829100577170.00.5261.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6e8f0140484b

0-0143170/156/14279_
2.2049777795006150.00.6161.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0143170/146/15161_
2.22173481101739030.00.6365.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfE2aDIa

0-0143170/139/14671_
2.21391485746510.00.5862.80
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI912zu

0-0143170/139/14932_
2.18863689670830.00.5763.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0143170/141/14808_
2.19665483403580.00.5662.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzib

0-0143170/142/14042_
2.20425596310370.00.5958.82
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0143170/178/14291_
2.212443101682330.00.7660.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbusgEEZfxTtWGNtx1

0-0143170/136/14707_
2.179464599143590.00.5362.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ace88f3a9f90

0-0143170/165/14237_
2.197748191666720.00.6760.24
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0143170/128/14898_
2.228330101332840.00.5063.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ae6fda0e0a03

0-0143170/168/14526_
2.2244289314440.00.6963.53
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0143170/119/14732_
2.221244109631620.00.4862.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpA

0-0143170/142/14711_
2.212973092718620.00.5761.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a273715780871

0-0143170/156/14479_
2.18844487160330.00.6562.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWJst

0-0143170/155/15142_
2.19719256104001190.00.6464.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefHCdpU

1-0144000/161/13856_
2.13148683337170.00.6459.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BIwEIb%2FSm4%2

1-0144000/129/13279_
2.11901478316000.00.5155.63
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

1-0144000/152/13183_
2.11929287957180.00.6256.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0144000/135/13013_
2.118032882664630.00.5654.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_54e1ca59667af

1-0144000/143/13673_
2.12505677438670.00.5656.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0144000/128/13649_
2.12514396898430.00.5257.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2Rjb7

1-0144000/156/13588_
2.12604384917130.00.6659.50
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0144000/154/13160_
2.127605668587694390.00.6155.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0144000/155/13359_
2.1110018086465500.00.5856.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0144000/117/13386_
2.124313182740940.00.4656.11
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e3c902ff385c1

1-0144000/144/13872_
2.1254428075481900.00.5958.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOenj

1-0144000/140/13606_
2.12755484841860.00.5656.80
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRySx

1-0144000/139/13607_
2.118016003685176420.00.5957.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0144000/133/13595_
2.11784491968070.00.5156.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdJW

1-0144000/140/13616_
2.12390078247320.00.5759.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0144000/133/13610_
2.139548597046000.00.5657.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdOm

1-0144000/152/13747_
2.132118091160690.00.6058.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a3f59026f70b5

1-0144000/142/13738_
2.12364691801220.00.5657.80
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0144000/138/13070_
2.1458580727210.00.5954.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

1-0144000/145/13257_
2.12485

Found on 2024-11-02 23:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d723a36cad2

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 01-Nov-2024 17:33:06 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  53 days 10 hours 21 minutes 27 seconds
Server load: 1.55 1.90 1.56
Total accesses: 718826 - Total Traffic: 3.0 GB - Total Duration: 381166532
CPU Usage: u65.06 s92.05 cu263.84 cs131.82 - .012% CPU load
.156 requests/sec - 692 B/second - 4450 B/request - 530.263 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-06640/918/14223_
16.12683476591810.03.7960.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-06640/1035/14524_
16.11985282693660.04.1561.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-06640/1050/14176_
16.128123276409450.04.5860.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_375b43ea91753

0-06640/872/14224_
16.1452580897290.03.5959.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYxTx

0-06640/1047/13986_
16.14142475139070.04.5159.30
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-06640/1101/14702_
16.11102014382426980.05.0763.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6f32823decb96

0-06640/958/14577_
16.1289478671680790.04.0061.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNubO

0-06640/939/14540_
16.12775466571740.04.0061.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

0-06640/906/14248_
16.12623575120980.03.7659.89
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BMwFEb%2FSnZeJ

0-06640/1076/14091_
16.127073179538760.04.6260.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad87e94b52dc4

0-06640/979/13973_
16.135643078252940.04.4460.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2a8a551c90c4

0-06640/1046/14856_
16.13383680922300.04.5264.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-06640/954/14385_
16.135282970164700.04.0761.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c580514a8162

0-06640/1013/14630_
16.13472570350740.04.4062.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDduu

0-06640/1015/14533_
16.134213672947720.04.4061.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09d911f1cf600

0-06640/923/13752_
16.13293375673990.03.9257.58
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

0-06640/1085/13962_
16.1434382892660.05.1459.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_282d8404ce60a

0-06640/869/14379_
16.132583080630710.03.5161.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a49f67e2d8ee

0-06640/967/13819_
16.13320868913520.04.1758.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGONES

0-06640/963/14524_
16.14105321579187390.04.0961.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpI

0-06640/908/14188_
16.14203474165140.03.8161.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhpl

0-06640/1044/14480_
16.11954392334090.04.4461.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJfT%2BsgGIe%2FSu%2B

0-06640/1164/14390_
16.111073374803130.05.0059.98
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9owFED%2FSt785Dg

0-06640/962/14131_
16.11110327071542740.04.1060.59
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-06640/1065/14877_
16.128443083559840.04.5663.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9da37a36312d7

1-07930/1076/13503_
16.6310853067346460.04.5157.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3c4809db497d

1-07930/1000/12986_
16.643093363351830.04.3854.45
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_119a271fb2e24

1-07938/991/12883W
16.650071517759.64.0554.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

1-07930/937/12722_
16.64337365057450.04.0153.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWw3q

1-07930/1035/13323_
16.6583358752260.04.3555.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLjN

1-07930/1028/13355_
16.6383325275219320.04.2256.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whj

1-07930/972/13260_
16.631036286868859190.05.1058.13
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-07930/1076/12849_
16.63980370749010.04.5354.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2Rg3S

1-07930/947/13048_
16.652184269461330.04.1755.49
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-07930/920/13136_
16.6513218260374950.03.8855.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_70ef6f39e7631

1-07930/1083/13534_
16.63926357213370.04.9557.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT%2BQgFIb%2FSu%2B

1-07930/985/13303_
16.631012368164000.03.9955.61
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMehL

1-07930/954/13291_
16.63864461528250.04.0556.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwnq

1-07930/1027/13319_
16.6374224569400400.04.1255.68
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-07930/1117/13296_
16.6465324564906710.04.9057.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

1-07930/1117/13331_
16.64594375412470.04.7756.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtowFIZfJXe%2Bchw

1-07930/960/13428_
16.643893370264470.04.1657.58
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_50f9a07615998

1-07930/1096/13405_
16.64443974271400.04.6156.49
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-07930/956/12792_
16.63804464946790.03.8453.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.c<

Found on 2024-11-01 17:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72284fb55f

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 30-Oct-2024 20:15:51 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  51 days 13 hours 4 minutes 11 seconds
Server load: 1.03 1.45 1.57
Total accesses: 691444 - Total Traffic: 2.9 GB - Total Duration: 370037670
CPU Usage: u51.65 s82.82 cu263.84 cs131.82 - .0119% CPU load
.155 requests/sec - 690 B/second - 4448 B/request - 535.167 ms/request
1 requests currently being processed, 49 idle workers
_W________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-06640/442/13747_
7.347785274663310.01.8158.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4873fd413f818

0-06648/469/13958W
7.380081077839.61.9259.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-06640/453/13579_
7.3482186774425250.01.9057.98
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dh

0-06640/439/13791_
7.3774177985920.01.7957.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-06640/536/13475_
7.36257672269970.02.3157.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06640/443/14044_
7.3629026980306930.02.3760.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGOwkT

0-06640/422/14041_
7.338801973468884420.01.6959.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-06640/427/14028_
7.3485628864824620.01.7959.16
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0c0ad5594664

0-06640/417/13759_
7.357393372801390.01.6657.78
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_231183d182278

0-06640/441/13456_
7.3567123578146260.01.9457.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-06640/463/13457_
7.35621375201000.01.8857.61
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-06640/455/14265_
7.35548679010320.01.9261.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06640/399/13830_
7.3558727167615990.01.6659.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKNK

0-06640/474/14091_
7.36530368314560.02.0960.38
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-06640/427/13945_
7.35570671129040.01.8358.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06640/461/13290_
7.3643726273894820.01.8855.54
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJs43

0-06640/469/13346_
7.36382480376360.02.0356.50
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzid

0-06640/410/13920_
7.36502578549190.01.6359.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbCdx

0-06640/413/13265_
7.3648318466895560.01.7156.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

0-06640/454/14015_
7.36352576710560.01.9859.86
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94whD

0-06640/451/13731_
7.36201472648960.01.9959.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-06640/538/13974_
7.3614327990318190.02.2659.07
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-06640/527/13753_
7.36165671854400.02.2357.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06640/496/13665_
7.3774669612370.02.0558.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-06640/503/14315_
7.3839331280625800.02.2061.49
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-07930/475/12902_
7.59321465716400.01.9855.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpC

1-07930/494/12480_
7.593643360546920.02.1552.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c578bb3e91691

1-07930/444/12336_
7.6025276369761640.01.8952.67
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-07930/439/12224_
7.574693463907780.01.8551.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-07930/457/12745_
7.574923254946810.01.8952.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84bd1836fea8c

1-07930/449/12776_
7.55884345473757560.01.8853.70
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwnT

1-07930/442/12730_
7.6115378266661770.02.1255.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-07930/507/12280_
7.61113467587340.02.1552.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-07930/456/12557_
7.611654166580450.01.9853.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-07930/434/12650_
7.60233458375230.01.8153.06
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-07930/543/12994_
7.614212755381960.02.6755.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7e48c77e013c4

1-07930/471/12789_
7.6174165947990.01.8853.49
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-07930/431/12768_
7.5591225660032290.01.9054.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ed750b192504

1-07930/447/12739_
7.627544067537200.01.9453.50
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-07930/452/12631_
7.56771462627310.02.2655.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wti

1-07930/518/12732_
7.56794272506190.02.1553.62
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-07930/453/12921_
7.566473067596470.01.9455.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_afff2451fc14d

1-07930/480/12789_
7.567123171536180.01.9753.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDtJq

1-07930/374/12210_
7.55849463149570.01.5251.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8MgFID%2FSt94onT

1-07930/473/12321_
7.5661135

Found on 2024-10-30 20:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72245586a8

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 26-Oct-2024 16:58:50 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 9 hours 47 minutes 10 seconds
Server load: 0.60 0.81 1.09
Total accesses: 629708 - Total Traffic: 2.6 GB - Total Duration: 312424168
CPU Usage: u46.1 s74.79 cu240.04 cs119.03 - .0117% CPU load
.154 requests/sec - 682 B/second - 4442 B/request - 496.141 ms/request
3 requests currently being processed, 47 idle workers
_____________________W__________W______W__________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215480/373/12539_
6.10566461120550.01.4952.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLrJ

0-0215480/405/12673_
6.106213967202380.01.6953.77
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_19686e51377ca

0-0215480/317/12289_
6.0980128561790160.01.6952.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdONglJ0

0-0215480/340/12562_
6.09680562480200.01.3652.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWxi1

0-0215480/363/12245_
6.098803162706000.01.4651.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7aec04af06552

0-0215480/463/12872_
6.111353068035490.01.9455.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e69e37f3e04e2

0-0215480/360/12864_
6.1047627660353680.01.4554.12
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDtJW

0-0215480/421/12787_
6.10536556282270.01.7653.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0215480/382/12610_
6.113393262819530.01.4953.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_72ee54a74602f

0-0215480/493/12285_
6.1137025467972890.01.7052.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9MwEIb%2FSm4%2BO

0-0215480/398/12227_
6.114263161287540.01.7252.48
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9bf3018abb21

0-0215480/356/13023_
6.1123627568983480.01.3755.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzPa

0-0215480/418/12488_
6.11206555595570.01.7853.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94sok

0-0215480/444/12717_
6.113053257768820.02.1554.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4c965403fb63

0-0215480/381/12768_
6.1189336560903780.01.6153.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/376/12132_
6.11110182662894690.01.5850.59
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/372/12053_
6.1165661668922590.01.5750.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/377/12795_
6.12438666290540.01.5354.43
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/442/12123_
6.11341336154860590.01.8251.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/428/12847_
6.1262737767325030.01.6154.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0215480/456/12570_
6.12173158036270.01.8854.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_50f9c8df775f9

0-0215482/410/12663W
6.120078478262.11.6853.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

0-0215480/400/12548_
6.09745461521380.01.5852.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0215480/408/12397_
6.098363659161650.01.7553.27
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94wtg

0-0215480/395/13033_
6.099173366708080.01.5655.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0216060/450/11498_
5.9097249249849110.01.8348.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/392/11266_
5.901773550601190.01.5647.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHCf

1-0216060/364/11139_
5.89265457831220.01.4747.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpa

1-0216060/339/10980_
5.9011652852733740.01.2846.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/445/11374_
5.89326546339030.01.4747.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpk

1-0216060/386/11488_
5.89357459954100.01.4848.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgV

1-0216060/363/11484_
5.9049936052300910.01.5349.65
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216062/357/11152W
5.908056672513.41.3847.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/423/11308_
5.90191911754225970.01.7747.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/536/11440_
5.9028549448810.02.1347.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Lh

1-0216060/431/11674_
5.9076471343354780.01.6849.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/396/11496_
5.8982011955583250.01.6948.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52ef9ccfbcf09

1-0216060/385/11557_
5.889353351279690.01.6349.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7149714e529f2

1-0216060/396/11536_
5.88867557533910.01.6348.27
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0216062/410/11409W
5.902052841754.31.7049.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0216060/357/11415_
5.88898457273640.01.4648.17
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2Bcb

1-0216060/374/11687_
5.89778554754450.01.5250.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhxr

1-0216060/363/11454_
5.89714556405940.01.4248.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzip

1-0216060/371/11092_
5.89596653833760.01.5146.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLXi

1-0216060/404/11162_
5.89656

Found on 2024-10-26 16:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72f393bd80

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 24-Oct-2024 19:23:51 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 12 hours 12 minutes 12 seconds
Server load: 0.72 0.86 1.03
Total accesses: 602883 - Total Traffic: 2.5 GB - Total Duration: 293874649
CPU Usage: u63.45 s80.12 cu210.43 cs104.63 - .0117% CPU load
.153 requests/sec - 681 B/second - 4445 B/request - 487.449 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-045320/1073/12034_
19.41886358831880.04.9750.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c159dab6ba98

0-045320/1412/12084_
19.43110264127410.06.0551.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-045320/1116/11856_
19.4341558583920.04.8950.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduq

0-045320/1220/11991_
19.43130558159790.05.0350.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/1213/11756_
19.4331024757140500.04.9949.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzie

0-045320/1258/12304_
19.43371463801440.05.3652.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHJMQQ

0-045320/1187/12331_
19.41694455632260.04.9351.90
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=parentlounge_01&RelayS

0-045320/1269/12283_
19.416273052785260.05.4051.71
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b43d157280d82

0-045320/1282/12083_
19.41581557899170.05.7050.94
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-045320/1174/11688_
19.4151417664158150.04.8550.39
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b925543ab281

0-045320/1068/11638_
19.43220456969000.05.3049.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-045320/1337/12524_
19.43280564101200.05.8854.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzH8

0-045320/1271/11952_
19.4370450659430.05.4551.08
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGNux0

0-045320/1158/12113_
19.431743153418720.04.6551.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01071bb94dc18

0-045320/1189/12256_
19.42472356157434780.04.8951.75
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-045320/1138/11637_
19.391161659172860.04.8348.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-045320/1103/11565_
19.424286864749030.04.7048.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0cbc908857ee2

0-045320/1358/12306_
19.40971862233080.05.9152.37
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/1292/11523_
19.3910584052307650.05.7749.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a37a02a64a67e

0-045320/1225/12269_
19.40100121662850670.05.1452.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCchU

0-045320/1136/11940_
19.3911212754451160.05.0252.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXa

0-045320/1195/12096_
19.419212973927460.04.9851.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3108248f10d7

0-045320/1328/11963_
19.417923257708270.05.6049.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpS

0-045320/1196/11891_
19.417523355408590.05.0951.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_24e7ea07f474b

0-045320/1141/12437_
19.41850463741460.04.7853.46
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-046040/1260/10889_
20.08111446072240.05.3146.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-046040/1117/10723_
20.077703947674210.04.5544.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c162e779208c2

1-046040/1318/10648_
20.068743354523040.06.0745.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7018e9d26bfa4

1-046040/1302/10505_
20.061151547743830.05.6244.13
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-046040/1220/10736_
20.06911642117850.05.0944.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2dhOU

1-046048/1320/10921W
20.090057609599.65.9245.97
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

1-046040/1209/11028_
20.082944048846310.05.7347.68
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0dbb508d64d8b

1-046040/1114/10673_
20.07487451957710.05.0145.21
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-046040/1305/10794_
20.0610313249980390.05.7745.79
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzXa

1-046040/1165/10808_
20.07458547127930.04.7345.34
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt78lDj

1-046040/1377/11119_
20.08159541310870.05.9846.87
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtMwEIZfJTefHCchW

1-046040/1256/10991_
20.0810025452133440.05.2945.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzmp

1-046040/1308/10972_
20.08190648325970.05.9746.60
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-046040/1160/11049_
20.0610923653979270.04.9446.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

1-046040/1280/10874_
20.09583349983570.05.2747.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f80680a89aa07

1-046040/1140/10933_
20.06978453531380.04.7846.15
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7584a2885e0df

1-046040/1284/11243_
20.082363450454730.05.5048.22
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab6c3303ec9fc

1-046040/1312/10867_
20.08340852589410.05.6845.88
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-046040/1320/10542_
20.069412949236160.05.6944.63
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.c

Found on 2024-10-24 19:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d727fe0eafd

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 22-Oct-2024 23:20:34 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 16 hours 8 minutes 54 seconds
Server load: 1.05 1.64 2.17
Total accesses: 576779 - Total Traffic: 2.4 GB - Total Duration: 285277432
CPU Usage: u50.47 s71.21 cu210.43 cs104.63 - .0116% CPU load
.153 requests/sec - 679 B/second - 4442 B/request - 494.604 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-045320/640/11601_
10.9673457688590.03.1149.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94a

0-045320/837/11509_
10.952148162564520.03.5648.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1f8be55a0601

0-045320/611/11351_
10.95258556966120.02.5147.83
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdc2QSSJ

0-045320/681/11452_
10.94354556700400.02.7847.79
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-045320/654/11197_
10.9441916255788210.02.6547.50
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3fQrkfeLEl

0-045320/730/11776_
10.94568461613280.03.1050.40
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-045320/651/11795_
10.9269348653139010.02.6649.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=39&StateId=_

0-045320/732/11746_
10.92606051774100.03.2549.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-045320/683/11484_
10.9264719255787260.02.9448.18
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZLdatwwEEZfxajXtiTb2

0-045320/671/11185_
10.945743662367840.02.6848.23
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_28d04dede5862

0-045320/623/11193_
10.9444226355476960.02.6947.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb%2BIwFLzzK6rcE%2

0-045320/810/11997_
10.9444815362501410.03.5251.64
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

0-045320/744/11425_
10.9430213648522560.03.1248.75
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4a1413d181d04

0-045320/668/11623_
10.943881151704050.02.7049.34
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-045320/718/11785_
10.9449418756021570.03.0049.85
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNb4JAEIb%2FCtm7LLt

0-045320/628/11127_
10.94373657392510.02.7146.34
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/649/11111_
10.94536562728020.02.8046.96
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/754/11702_
10.96143959848710.03.3149.76
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-045320/736/10967_
10.94290250161780.03.4446.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-045320/704/11748_
10.9617714462008880.02.9250.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzSb

0-045320/690/11494_
10.9620292853246090.03.2350.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

0-045320/731/11632_
10.961073772979110.03.1149.31
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbDjq

0-045320/747/11382_
10.9657156125870.03.1347.27
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-045320/715/11410_
10.962222354224560.03.0749.03
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-045320/675/11971_
10.9650461319680.02.7651.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BMwFEb%2FSnZeO

1-046040/711/10340_
11.33479544627470.03.0444.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4s

1-046040/659/10265_
11.36653345992590.02.7043.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f484c6d9e494e

1-046040/792/10122_
11.3519565152540610.03.4742.44
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPj9owEMXvfIqV74kTU

1-046040/790/9993_
11.343613145877310.03.4141.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7320f482b8058

1-046040/693/10209_
11.35274239928100.02.8842.51
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-046040/735/10336_
11.34328456038720.03.5343.58
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJuka

1-046040/650/10469_
11.32574547229210.02.7444.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpK

1-046040/615/10174_
11.32680050409790.02.9843.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-046040/735/10224_
11.3521816048197270.03.4043.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9cc1fd7e8a207

1-046040/709/10352_
11.3262418545665020.02.9143.52
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=Cloudworks_TK&RelaySta

1-046040/725/10467_
11.3254419638941670.03.1644.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swFIXf%2ByuQ3xM

1-046040/726/10461_
11.3339716250021070.03.1043.75
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEX3%2FoqAe4k

1-046040/821/10485_
11.33436547054000.03.9344.56
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

1-046040/650/10539_
11.35299871752514200.02.7244.02
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIbv8ysq7m1s4

1-046040/757/10351_
11.3338096948656840.03.0344.84
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-046040/634/10427_
11.35227251547410.02.7844.14
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-046040/791/10750_
11.33448448751110.03.3846.11
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbqMwEIZfhZtPxkAIU

1-046040/736/10291_
11.3250793350405740.03.1243.32
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94whi

1-046040/844/10066_
11.36151247324830.03.7242.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-046040/

Found on 2024-10-22 23:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d728871a15a

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 20-Oct-2024 20:20:37 UTC
Restart Time: Monday, 09-Sep-2024 07:11:39 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 13 hours 8 minutes 57 seconds
Server load: 0.42 0.93 1.11
Total accesses: 542350 - Total Traffic: 2.2 GB - Total Duration: 275030931
CPU Usage: u34.06 s60.55 cu210.43 cs104.63 - .0114% CPU load
.151 requests/sec - 670 B/second - 4437 B/request - 507.11 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-045320/23/10984_
0.281063355674980.00.0945.99
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_25bd6a9d2bfe8

0-045320/22/10694_
0.2826210960162520.00.0945.19
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-045320/16/10756_
0.2817531255332280.00.0645.38
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-045320/23/10794_
0.2831619654838630.00.0945.09
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6b9439a6bae1

0-045320/21/10564_
0.273733054042500.00.0744.92
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_646255fb8ffba

0-045320/16/11062_
0.26607558792640.00.0647.36
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

0-045320/19/11163_
0.257932951214390.00.0747.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6407503fb6d90

0-045320/24/11038_
0.25745550184780.00.0946.41
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFED%2Fit94whC

0-045320/14/10815_
0.2568124454013880.00.0545.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbCX1

0-045320/31/10545_
0.256182760409250.00.1145.66
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2cb962752c0c0

0-045320/14/10584_
0.26444654052930.00.0544.67
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWxsq

0-045320/20/11207_
0.26565559976480.00.0748.20
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDsmF

0-045320/31/10712_
0.263892846688840.00.1545.77
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff843033f9982

0-045320/12/10967_
0.28233450018500.00.0446.68
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/14/11081_
0.26544054045240.00.0546.91
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-045320/22/10521_
0.264893256075800.00.0843.72
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2da50372f5e54

0-045320/24/10486_
0.2650816860981150.00.1044.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_41eb9e4d1fb6f

0-045320/32/10980_
0.258102857687070.00.1546.61
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fab55bc4ea0c7

0-045320/27/10258_
0.28297148639790.00.1043.47
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-045320/20/11064_
0.28642758639020.00.0747.63
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd8687f7ca056

0-045320/27/10831_
0.282523451385750.00.0847.27
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNtJV

0-045320/13/10914_
0.231015470282010.00.0546.25
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-045320/38/10673_
0.23953553797810.00.1644.29
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-045320/18/10713_
0.2389123452003300.00.0946.05
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-045320/15/11311_
0.23861459323510.00.0548.73
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbCTZ

1-046040/23/9652_
0.231283442669090.00.0941.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJvG2

1-046040/26/9632_
0.226072743716270.00.1140.55
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a8d130449d81a

1-046040/12/9342_
0.22700550409620.00.0539.01
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbDnT

1-046040/14/9217_
0.2198030943311830.00.0538.57
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-046040/16/9532_
0.21774537978430.00.0639.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-046040/14/9615_
0.21816053382060.00.0540.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-046040/24/9843_
0.222408245660020.00.0942.04
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e125e7ee04202

1-046040/15/9574_
0.22287448686060.00.0640.26
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-046040/19/9508_
0.22655546167060.00.0840.10
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYbCTN

1-046040/12/9655_
0.22306443693940.00.0440.65
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-046040/24/9766_
0.231944237356260.00.1241.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_835ce36a95d8a

1-046040/24/9759_
0.2350648497730.00.1040.74
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0460412/23/9687W
0.2300448329526.00.0640.69
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /server-status HTTP/1.1

1-046040/10/9899_
0.21922449646580.00.0341.33
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJfT%2FMgFIe%2FSu%2B

1-046040/24/9618_
0.218782846434760.00.1141.93
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_20423fb50d725

1-046040/15/9808_
0.21834448699840.00.0641.42
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWySL

1-046040/24/9983_
0.22354446465770.00.0942.81
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemY

1-046040/21/9576_
0.2377548712450.00.0840.28
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbuMgFEZfxTtWNjZ2q

1-046040/16/9238_
0.22595645192750.00.0639.00
127.0.0.1http/1.1ip-10-1-92-134.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-046040/16

Found on 2024-10-20 20:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72293812a4

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 06-Jun-2024 14:31:39 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  99 days 7 hours 32 minutes 4 seconds
Server load: 1.37 1.34 1.28
Total accesses: 981007 - Total Traffic: 4.5 GB - Total Duration: 789626512
CPU Usage: u113.03 s139.48 cu382.36 cs178.45 - .00948% CPU load
.114 requests/sec - 560 B/second - 4904 B/request - 804.914 ms/request
1 requests currently being processed, 49 idle workers
______________W___________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0207440/1268/18819_
19.578520157829180.05.8189.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a5370bb7c86c

0-0207440/1353/18930_
19.5610211133138390.06.1689.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dac4a08d282e0

0-0207440/1416/19392_
19.5611911133942930.06.4089.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36669fb423069

0-0207440/1402/19216_
19.561539142711070.05.8588.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_01cbf6855a5aa

0-0207440/1230/19190_
19.574210139446650.05.3190.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2a0ccd342b782

0-0207440/1280/19305_
19.542959136985930.05.4791.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0dd9b475d361b

0-0207440/1481/18880_
19.534392462136491950.06.5788.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0207440/1457/19452_
19.534149133423760.06.5191.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9c0bad04680d4

0-0207440/1331/19219_
19.575810125531380.06.1690.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cb2235f18c789

0-0207440/1307/19044_
19.5725237135324340.06.1987.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfArkO3H

0-0207440/1357/19047_
19.533909134217310.05.8191.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_329b6020471c1

0-0207440/1356/19127_
19.534273390137663060.06.2888.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0207440/1376/18972_
19.542789133453910.06.1189.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c80d50da26090

0-0207440/1345/19223_
19.543616125908990.05.7489.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6b3efa9ab94a4

0-02074412/1384/18918W
19.57001415019625.66.0187.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0207440/1255/19195_
19.543469135223960.05.5791.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5f788deff468a

0-0207440/1501/19256_
19.543128137397760.06.5989.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14c61677a8c0e

0-0207440/1350/19082_
19.5521010140438940.06.5288.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a3dfdf9c6103

0-0207440/1378/18858_
19.561769141069020.06.1188.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d91eeb23656f7

0-0207440/1453/19297_
19.5524410149451900.07.1988.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c97112472c332

0-0207440/1322/18987_
19.552279147112980.06.1889.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_41b0f408b9db7

0-0207440/1269/19210_
19.5613610141519360.05.6390.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8cea00e33f21f

0-0207440/1458/19403_
19.543299132056650.06.4889.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_898a4c5026c95

0-0207440/1266/19018_
19.5526110132635070.05.5789.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e99c73e39ac2b

0-0207440/1345/19430_
19.5519312149475180.05.9292.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_50dd593259d72

1-0257670/1105/18951_
17.031879129993440.04.8188.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_77a9c13399fe6

1-0257670/1167/19057_
17.013239134816700.05.4087.61
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2bd766c2ebbe8

1-0257670/1121/19065_
17.022559132779190.05.1288.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_44b96d4381fd6

1-0257670/1242/19343_
17.032049130249590.05.3789.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_98fc5114a774e

1-0257670/1209/18888_
17.0227211132189710.05.6586.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c3a629d4454c5

1-0257670/1159/18565_
17.0134011146247950.05.1988.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ecdf194252740

1-0257670/1159/18906_
17.022898139130690.05.7289.04
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_182534a693f7d

1-0257670/1258/19289_
17.004249145234040.05.5189.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53bff039f61c9

1-0257670/1146/18785_
17.0223810138136370.05.0387.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e667eaf653d11

1-0257670/1041/18622_
17.031089148041730.04.5786.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3113b32d604c3

1-0257670/1164/18917_
17.031709158564120.05.0089.76
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_42a1d557a2f23

1-0257670/1142/19145_
17.032219139237760.04.9988.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b90d63efad0a4

1-0257670/1123/18890_
17.04359141051980.04.9988.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ad7ce54f181c9

1-0257670/1147/18670_
17.039140132683810.05.2986.76
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_79e8f91ede47f

1-0257670/1179/19099_
17.04689136190080.05.7489.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7a26795b911ea

1-0257670/1112/18679_
17.031259129801050.04.9087.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e49cd7436fe25

1-0257670/1087/18942_
17.031429128734250.04.9489.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_187a2e2e35fac

1-0257670/1294/19072_
17.045111137421310.06.2587.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0f6c8e0eebde4

1-0257670/1203/18755_
17.01373913

Found on 2024-06-06 14:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72bb16a4b4

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Tuesday, 04-Jun-2024 10:45:54 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  97 days 3 hours 46 minutes 20 seconds
Server load: 2.41 2.04 2.05
Total accesses: 953819 - Total Traffic: 4.4 GB - Total Duration: 778173388
CPU Usage: u99.71 s131.25 cu382.36 cs178.45 - .00943% CPU load
.114 requests/sec - 557 B/second - 4903 B/request - 815.85 ms/request
1 requests currently being processed, 49 idle workers
_______________W__________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0207440/763/18314_
11.07638718155480800.03.4486.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0207440/797/18374_
11.076626130888830.03.3486.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f89f1978dc974

0-0207440/889/18865_
11.075417132256640.03.7887.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fd719aa1898dc

0-0207440/776/18590_
11.078396140374870.03.2385.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_642a8b2f318

0-0207440/710/18670_
11.084630137350350.02.9888.64
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0207440/777/18802_
11.078872133595380.03.2089.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0207440/832/18231_
11.093049134438410.03.6285.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0207440/834/18829_
11.10693131375760.03.6788.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0207440/829/18717_
11.092855123289770.03.5887.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRb9owEMbf%2BSsqvyd

0-0207440/788/18525_
11.093056133570550.03.4684.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8e7e91636410e

0-0207440/806/18496_
11.091956132397920.03.3588.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b16a97cf99b69

0-0207440/821/18592_
11.091226134610510.03.8886.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_173532b4637a6

0-0207440/867/18463_
10.9910546131020720.03.8987.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_38ebe8f5b23bd

0-0207440/773/18651_
10.9910414124080020.03.2987.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0207440/891/18425_
11.10251140097240.03.8885.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0207448/761/18701W
11.1000133343559.63.3989.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0207440/832/18587_
11.0010211133756970.03.5686.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0207440/802/18534_
11.0010211138688700.03.5485.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0207440/820/18300_
11.069098137750200.03.5585.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_7d4bda1ee90

0-0207440/866/18710_
11.009776146292180.03.8985.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/accountinfo/check.php?username=princesshotmom%4

0-0207440/757/18422_
11.0696061143001820.03.5986.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/zxcvbn.js HTTP/1.1

0-0207440/765/18706_
11.077363139324680.03.2688.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0207440/807/18752_
11.069363581129452940.03.4686.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bQSw

0-0207440/730/18482_
11.07819567131085610.03.1487.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBbsIwEEWvEnlP7JgkG

0-0207440/819/18904_
11.077811165147616330.03.5190.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEP2VyPvEqQm9r

1-0257670/593/18439_
8.781812128208660.02.5985.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0257670/624/18514_
8.758057132184060.02.9885.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_91ea79ac452a6

1-0257670/596/18540_
8.775036130835890.02.5685.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3bdba25da4d4b

1-0257670/674/18775_
8.784016127910750.02.8687.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_54e7aa88db364

1-0257670/621/18300_
8.765976130105240.02.6783.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c2510111d91f6

1-0257670/605/18011_
8.758272143854820.02.6685.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0257670/571/18318_
8.757727136661730.02.9186.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f642ba3ef6f54

1-0257670/667/18698_
8.766510143298480.02.7987.23
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0257670/569/18208_
8.783181135796480.02.4084.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0257670/587/18168_
8.781096146226860.02.6184.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a53323f2f3581

1-0257670/600/18353_
8.782107155390830.02.5287.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_93c1f4fb68545

1-0257670/605/18608_
8.78293122136741520.02.6486.23
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVHLbsIwEPyVyHcSx3EMW

1-0257670/624/18391_
8.7311000139421950.02.6886.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257670/607/18130_
8.79126129997770.02.9884.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_848af54d0eb6d

1-0257670/647/18567_
8.7310411134071850.02.8186.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0257670/598/18165_
8.731035127127575140.02.6285.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJba9wwEEb%2FilGfbV2

1-0257670/591/18446_
8.783596126610680.02.4986.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3574fe389a0dd

1-0257670/738/18516_
8.7310214135682080.03.2384.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0257670/648/18200_
8.759672130133171630.02.8086.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/accountinfo/check.php?code=3853757481&username=

1-0257670/629/18558_
8.759601143833360.02.76

Found on 2024-06-04 10:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72bdb74d97

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Monday, 03-Jun-2024 01:19:05 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  95 days 18 hours 19 minutes 30 seconds
Server load: 2.03 2.25 2.41
Total accesses: 924229 - Total Traffic: 4.2 GB - Total Duration: 769492164
CPU Usage: u87.78 s123.39 cu382.36 cs178.45 - .00933% CPU load
.112 requests/sec - 548 B/second - 4913 B/request - 832.577 ms/request
1 requests currently being processed, 49 idle workers
___________________W______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0207440/197/17748_
2.764499153342760.00.9284.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d6b5b77d834ac

0-0207440/221/17798_
2.764669128830660.00.9384.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7de0f71a860fe

0-0207440/226/18202_
2.7641635131307890.00.9184.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_146a86b1cfce9

0-0207440/232/18046_
2.755270139037780.00.9983.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0207440/191/18151_
2.763829136238440.00.7986.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_df3a5c9e81a80

0-0207440/206/18231_
2.755339132331870.00.8387.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1fb83a950b772

0-0207440/238/17637_
2.763319132657840.01.0582.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_39358ec26af79

0-0207440/145/18140_
2.763556129147770.00.5885.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fcad3fcea722c

0-0207440/221/18109_
2.763148121217090.00.9184.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6a5a72145dc23

0-0207440/185/17922_
2.7728010131862130.00.8882.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_27402ed746845

0-0207440/174/17864_
2.782469130842390.00.6886.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1e2a33f89d529

0-0207440/222/17993_
2.782207132037720.01.0083.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_19cf9b75178a2

0-0207440/226/17822_
2.791964516129608730.00.9584.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0207440/177/18055_
2.791289122286810.00.7984.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1c963d25c36e8

0-0207440/221/17755_
2.791769138113690.00.9582.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0207440/204/18144_
2.791589132411600.00.9287.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0207440/216/17971_
2.801119131861170.00.9884.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_67776d2e8b51e

0-0207440/202/17934_
2.80939136979710.00.9282.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73e4a062a89b9

0-0207440/237/17717_
2.75577142136246860.01.0083.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4mSn

0-02074412/243/18087W
2.80001445736827.01.0782.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0207440/222/17887_
2.8056778141168640.00.9883.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEP4rke%2BJn

0-0207440/218/18159_
2.755578136093820.00.9585.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8b7adc19552ca

0-0207440/211/18156_
2.804310127821020.00.9484.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a143ba4c67547

0-0207440/203/17955_
2.755999128112970.00.8484.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4e7bf4b349a24

0-0207440/198/18283_
2.754998145630180.00.8387.48
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_92228c921675e

1-0257670/39/17885_
0.442616127045830.00.2383.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24decabc481cb

1-0257670/30/17920_
0.4243310130446920.00.1282.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_127d210c8acc2

1-0257670/14/17958_
0.433488128734490.00.0683.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_182fc3b70bbf4

1-0257670/50/18151_
0.4429710126307520.00.2284.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_92cc341109831

1-0257670/41/17720_
0.433999128016810.00.1681.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_17b7281b83c8f

1-0257670/23/17429_
0.4248310142253110.00.0983.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5dcbfd1374693

1-0257670/18/17765_
0.44322150134875580.00.0783.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNb4JAEIb%2FCtm77LJ

1-0257670/29/18060_
0.433659140923960.00.1184.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3ba4e6ab5e3a2

1-0257670/32/17671_
0.442201134516690.00.1282.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0257670/55/17636_
0.451842893144800450.00.2582.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0257670/61/17814_
0.461570154256930.00.2985.06
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257670/48/18051_
0.442269134929940.00.2383.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0257670/39/17806_
0.461459137749760.00.1883.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0ee52842db08c

1-0257670/21/17544_
0.461222128337090.00.1281.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0257670/19/17939_
0.46100371132698590.00.0983.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN1fiX%2BwvM%

1-0257670/43/17610_
0.467710125881120.00.2182.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_967d58bbcdca8

1-0257670/22/17877_
0.465727124336300.00.0984.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6dbf06f0e0daf

1-0257670/31/17809_
0.46269133949680.00.1681.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3e200c97d276d

1-0257670/34/17586_
0.415849131466000.00.1683.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d98b0f998828

Found on 2024-06-03 01:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d726d35615e

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Saturday, 01-Jun-2024 17:09:52 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  94 days 10 hours 10 minutes 17 seconds
Server load: 1.35 1.62 1.45
Total accesses: 896026 - Total Traffic: 4.1 GB - Total Duration: 754863352
CPU Usage: u99.06 s129.29 cu359.91 cs165.02 - .00923% CPU load
.11 requests/sec - 540 B/second - 4918 B/request - 842.457 ms/request
1 requests currently being processed, 49 idle workers
___________W______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0162300/787/17201_
12.79103172151331790.04.4181.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9Vbkh

0-0162300/713/17245_
12.79137302126754510.04.1581.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BQh

0-0162300/838/17585_
12.79205310128413190.04.6381.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9XYVm

0-0162300/758/17458_
12.79222186135607530.04.4880.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9XL8J

0-0162300/680/17613_
12.792306132827320.04.1083.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c32c40bfc6777

0-0162300/779/17702_
12.774578129510800.04.4184.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0162300/740/17026_
12.79171178130222750.04.3179.88
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BTA

0-0162300/860/17636_
12.76728190126995660.04.8783.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzxcLA

0-0162300/793/17509_
12.79687118627260.04.6482.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9a4dd023acf4c

0-0162300/700/17317_
12.8035169129381220.04.2179.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bKNy

0-0162300/742/17337_
12.766737127343990.04.4283.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbad4c19794e3

0-0162309/796/17420W
12.80001279124618.04.3880.61
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0162300/760/17237_
12.767006126577430.04.2581.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aeb05984be42e

0-0162300/820/17510_
12.76643175118292010.05.0682.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzxdho

0-0162300/798/17161_
12.7656916136664600.04.5780.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_017ba4067e550

0-0162300/762/17604_
12.76609288130194050.04.4184.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTdJVnPJ

0-0162300/798/17427_
12.765402266128370200.04.5381.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj5swEHy%2FX4F4B0y

0-0162300/856/17400_
12.77425492134158220.04.7580.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9Vatm

0-0162300/766/17126_
12.76509541132128370.04.5380.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bQdp

0-0162300/776/17485_
12.764716141459520.04.4579.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ede0af814412

0-0162300/841/17286_
12.773583139451430.04.7081.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0162300/825/17552_
12.77324247132440660.04.5183.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3vr0C881kKm

0-0162300/856/17614_
12.77307246125585320.04.7781.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3vr0C885Wko

0-0162300/831/17401_
12.77391422125820920.04.7482.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb9owFH3vr4jyHvJBS

0-0162300/798/17712_
12.77273621142278860.04.4584.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9Uxs1

1-0263010/646/17313_
10.626262125095080.03.7381.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0263010/611/17343_
10.62694175127734730.03.4779.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2Bdy

1-0263010/660/17453_
10.626602126068480.03.8481.04
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0263010/740/17535_
10.62745277122728000.04.0781.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9fKrC

1-0263010/644/17194_
10.6518184126252120.03.7878.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9MwEL3vr4hyz2cDL

1-0263010/604/16914_
10.62711179139043260.03.4280.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyz2dJY

1-0263010/686/17228_
10.65523132120030.03.9381.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0263010/675/17441_
10.641187137472400.03.8481.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_740d4c3fbba1d

1-0263010/683/17087_
10.641542130737470.03.9479.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0263010/627/17085_
10.63341634141041470.03.6679.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzwcQU

1-0263010/688/17272_
10.63374397149101360.03.8682.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bBkO

1-0263010/670/17518_
10.63407895132513200.03.7681.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bST2

1-0263010/698/17285_
10.642397134667620.03.9581.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3f547fba25215

1-0263010/687/17004_
10.63290268125370670.03.9879.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9axjI

1-0263010/581/17358_
10.63492635129829220.03.4781.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dcw1fYt

1-0263010/631/17014_
10.64188179124257250.03.8180.04
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzzewy

1-0263010/703/17316_
10.633256121799220.03.9581.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_902cc8dee5e38

1-0263010/599/17267_
10.625907130841840.03.4679.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a52256b72eee

1-0263010/634/17062_
10.634748127513920.03.6281.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.</

Found on 2024-06-01 17:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72647be0c9

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 30-May-2024 14:28:33 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  92 days 7 hours 28 minutes 59 seconds
Server load: 0.73 0.82 1.25
Total accesses: 860826 - Total Traffic: 3.9 GB - Total Duration: 739472668
CPU Usage: u98.83 s125.85 cu344.05 cs156.84 - .0091% CPU load
.108 requests/sec - 525 B/second - 4871 B/request - 859.027 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0162300/74/16488_
1.23601172148631270.00.4477.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BQp

0-0162300/81/16613_
1.23635174123461200.00.4378.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bTlt

0-0162300/90/16837_
1.23703171125317630.00.4577.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzxdLo

0-0162300/80/16780_
1.237316132426240.00.4676.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b0b2d80481d2b

0-0162300/81/17014_
1.23669184129841970.00.4580.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzydQF

0-0162300/79/17002_
1.27212188126477030.00.3980.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BQg

0-0162300/85/16371_
1.245676127819950.00.4376.00
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bd92947e11ee2

0-0162300/84/16860_
1.24534182123969760.00.4778.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BQy

0-0162300/86/16802_
1.24551184115896330.00.4378.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyT0JCw

0-0162300/81/16698_
1.24500171126752660.00.4575.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0DcAQOJ0

0-0162300/90/16685_
1.254746124408960.00.4879.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8b069f6ea3105

0-0162300/96/16720_
1.254457125285170.00.4676.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_18a985e6cca3e

0-0162300/92/16569_
1.25415194123814150.00.5077.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj5swEHy%2FX4F4TyC

0-0162300/82/16772_
1.26381168115484420.00.4477.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzwdZK

0-0162300/70/16433_
1.26347178132847630.00.3676.00
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3vr0C8AzHko

0-0162300/85/16927_
1.26313179127284070.00.4280.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyz%2Bc

0-0162300/83/16712_
1.262786125029720.00.4177.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ae2fb370a3e88

0-0162300/100/16644_
1.26246140129452220.00.5075.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3vr0C8A4GQt

0-0162300/84/16444_
1.27179171128994140.00.4676.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzyehN

0-0162300/75/16784_
1.27145190137809990.00.3775.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3fr4jyngsJy

0-0162300/85/16530_
1.27111170136610370.00.3776.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9bAkO

0-0162300/75/16802_
1.2861131129839280.00.4179.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj5swEHy%2FX4F45%2

0-0162300/112/16870_
1.2827167122650190.00.5477.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3fr4jynhtLu

0-0162300/89/16659_
1.27767122974150.00.4978.15
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9f6be951baead

0-0162308/92/17006W
1.2800138626999.60.4580.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-075240/1595/16613_
23.16330177122013300.07.1177.00
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9UwkJ

1-075240/1665/16686_
23.16296174125384280.07.1575.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzvr4hyz%2Fd

1-075240/1672/16752_
23.1895129123365090.07.4676.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj9owEHy%2FXxHlPQm

1-075240/1710/16743_
23.16262192120222650.07.5577.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3fr4jyTm5cp

1-075240/1582/16505_
23.18128174123027600.06.8274.76
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0DcgUC%2

1-075240/1500/16257_
23.16229191136306200.06.8776.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzweBX

1-075240/1549/16497_
23.1810178128962110.07.0476.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyzxeQl

1-075240/1630/16704_
23.13737176134111110.07.1877.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9fIrM

1-075240/1488/16365_
23.161921127379380.06.5575.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/1531/16411_
23.18162193137823120.06.6875.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3vr4hyz4dD2

1-075240/1605/16544_
23.18796145273520.06.9478.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_571f984a999bd

1-075240/1475/16802_
23.1844126129966540.06.4677.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9Yzku

1-075240/1483/16535_
23.136486131326350.07.4376.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4189a9c54c34c

1-075240/1491/16269_
23.13720173121134000.07.1674.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BUr

1-075240/1520/16719_
23.13686178127027610.07.3277.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb9owFH3vr4jyng%2B

1-075240/1498/16349_
23.14584174121213350.06.6775.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj5swEHy%2FX4F4BwK

1-075240/1520/16553_
23.15483177119152840.06.8477.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3vr0C881mQi

1-075240/1620/16607_
23.15432136128470000.07.6075.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNdj5swEHy%2FX4F45zu

1-075240/1501/16382_
23.15517179124054750.06.61

Found on 2024-05-30 14:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d725450676b

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Wednesday, 29-May-2024 11:44:32 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  91 days 4 hours 44 minutes 57 seconds
Server load: 1.58 1.85 1.89
Total accesses: 847813 - Total Traffic: 3.8 GB - Total Duration: 734445182
CPU Usage: u109.36 s129.81 cu327.37 cs148.6 - .00908% CPU load
.108 requests/sec - 524 B/second - 4870 B/request - 866.282 ms/request
1 requests currently being processed, 49 idle workers
___________________W______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/1434/16251_
22.32761623147486380.06.5976.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHPb4IwFMf%2FFdK7lLa

0-016520/1453/16387_
22.325336122887830.06.5677.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_639ac8f9f39a9

0-016520/1526/16590_
22.328756124750550.07.0776.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_311249ec1f3c3

0-016520/1565/16534_
22.334286131580590.07.0375.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_257fc839425d3

0-016520/1551/16749_
22.326552128849650.08.0679.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1410/16778_
22.327856125281220.06.2479.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_54dcbeab517c5

0-016520/1423/16133_
22.332556127213170.06.2274.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2c84485d03f92

0-016520/1513/16548_
22.331177122279470.06.6877.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_83fb8a5209466

0-016520/1614/16523_
22.333486115226910.07.4076.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aa9cefb569989

0-016520/1590/16354_
22.332091125783090.07.1174.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1478/16430_
22.3013982123454130.06.5978.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1430/16452_
22.3014601124348200.06.9675.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1500/16332_
22.3015526122716930.06.5776.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_de1dd77ef481d

0-016520/1532/16497_
22.33920113948030.06.6776.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-016520/1510/16203_
22.3012451131910010.07.1074.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/1635/16656_
22.301315143125855900.07.2579.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfErVtoa

0-016520/1426/16481_
22.3012851840124457250.06.6076.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/1560/16401_
22.3011917128769540.06.7274.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0fe6cf4890962

0-016520/1467/16190_
22.30143911128018810.06.7075.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_426bf7e5469f3

0-016528/1514/16510W
22.3400136895479.66.9674.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-016520/1548/16263_
22.3111406135139190.06.6675.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b79245b48cc7b

0-016520/1473/16528_
22.3110230128207310.06.6477.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-016520/1426/16521_
22.329336120842560.06.1475.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_506d453e2f4da

0-016520/1489/16392_
22.319816122067770.06.2476.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_59fa5db58ce86

0-016520/1557/16729_
22.325902137837820.06.5279.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/1333/16351_
19.0615357121240520.05.9875.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ab31abdbc013c

1-075240/1380/16401_
19.061443446124356170.05.8174.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/1428/16508_
19.0910756122226180.06.3075.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d2bb8e09fad1

1-075240/1441/16474_
19.0714276119266050.06.1876.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f4f0aa0170020

1-075240/1325/16248_
19.081233362122383160.05.6473.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-075240/1231/15988_
19.0713226135151660.05.6375.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2c7d67d5f89f8

1-075240/1322/16270_
19.099515128174000.05.9675.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_898923cade2303a0b

1-075240/1397/16471_
19.09909281133150370.06.0776.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfb9owFMXf%2BRSV3xO

1-075240/1233/16110_
19.071307457126125200.05.3274.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/1291/16171_
19.0812396136145270.05.6074.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_48d319fd4e475

1-075240/1367/16306_
19.0811866144365600.05.8677.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075240/1214/16541_
19.0910316128919240.05.2276.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ae09d4fc40054

1-075240/1210/16262_
19.097686130405960.05.8075.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d3a288a31483c

1-075240/1240/16018_
19.098482225120392870.05.9873.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j7X%2BIf

1-075240/1242/16441_
19.096656126200360.06.0375.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8043980c95982

1-075240/1244/16095_
19.10549133120360800.05.4674.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEP0rAneJIh1HM

1-075240/1277/16310_
19.102226118270290.05.5876.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_df5f63cc15a44

1-075240/1343/16330_
19.101286127418640.06.2974.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_58b19e5abdc57

1-075240/1244/16125_
19.103346122560870.05.4776.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_293c4f40073e9

1-075240/1328/16397

Found on 2024-05-29 11:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7266ff18b4

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Tuesday, 28-May-2024 12:35:40 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  90 days 5 hours 36 minutes 5 seconds
Server load: 0.46 1.61 1.80
Total accesses: 836653 - Total Traffic: 3.8 GB - Total Duration: 730916462
CPU Usage: u103.99 s126.23 cu327.37 cs148.6 - .00906% CPU load
.107 requests/sec - 522 B/second - 4869 B/request - 873.62 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/1209/16026_
18.92416146967760.05.6175.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5e8e2a3cbe4a1

0-016520/1215/16149_
18.8718886121836780.05.2375.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7c23801f89661

0-016520/1317/16381_
18.922286124297620.06.1275.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7e40bec6a41ce

0-016520/1334/16303_
18.8717917130769150.05.9974.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04712acfa69c6

0-016520/1322/16520_
18.8719264128251010.07.0878.06
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/accountinfo/complete.php HTTP/1.1

0-016520/1221/16589_
18.9231617124767850.05.3278.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_85bb2c565ddc0

0-016520/1170/15880_
18.8716821126676500.05.0373.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/1303/16338_
18.8915251121621600.05.7276.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1409/16318_
18.871727116114105850.06.5075.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBb8IwDIX%2FSpU7TUm

0-016520/1310/16074_
18.8916497125008140.05.8072.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_70e15569be8ad

0-016520/1241/16193_
18.8913246122742140.05.5177.48
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3fc5020b946bc

0-016520/1222/16244_
18.8914637123397520.05.6874.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f2b58151c544

0-016520/1288/16120_
18.8914236122024500.05.6275.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_43d6e5daf6b43

0-016520/1264/16229_
18.8915646112807990.05.3775.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8fdb566379a00

0-016520/1264/15957_
18.918506130950700.05.9973.81
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e581bf4b9fe17

0-016520/1444/16465_
18.909437125385750.06.4478.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8b316fbb6f5e5

0-016520/1229/16284_
18.9010257123977030.05.7475.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_67a5538c411ee

0-016520/1324/16165_
18.917487128094860.05.6673.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e09f834f4e4b1

0-016520/1234/15957_
18.9011337127511600.05.6474.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_afee2a4d42460

0-016520/1313/16309_
18.9012178136312750.06.1073.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/1260/15975_
18.91705135134614610.05.3774.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPj9owEMXvfIqV74lJC

0-016520/1217/16272_
18.915936127802960.05.5876.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b1b7a2616334a

0-016520/1239/16334_
18.924576120478980.05.3675.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_595a140ba204b

0-016520/1242/16145_
18.914896121788030.05.1775.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b876db6b8195

0-016520/1312/16484_
18.921286136248330.05.4778.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8784af28d5738

1-075240/1083/16101_
15.717216120624410.04.7674.64
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0168d30e9956b

1-075240/1174/16195_
15.714780123621870.04.8873.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075240/1231/16311_
15.7283339121804540.05.3374.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEP4rke%2BJE

1-075240/1162/16195_
15.716566118468820.04.8574.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_90d1e5ba76bd2

1-075240/1108/16031_
15.712427121947520.04.6172.54
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d75fd9bd949f6

1-075240/1038/15795_
15.715476134495980.04.7474.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7ca1522b70675

1-075240/1110/16058_
15.6719012127364350.04.6874.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0752412/1159/16233W
15.73001319785124.85.0575.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-075240/1025/15902_
15.713936125696630.04.3673.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7b1226634cce4

1-075240/1079/15959_
15.721471135850990.04.5873.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/1136/16075_
15.671743167143613630.04.8576.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLboMwEEV%2FBXkfbFw

1-075240/983/16310_
15.6718537127894160.04.2275.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f8438bcb579d

1-075240/988/16040_
15.6816824128534000.04.3073.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-075240/1051/15829_
15.681665259119676220.05.1072.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBb4JAEIX%2FCtm77LI

1-075240/1016/16215_
15.681601123125495640.04.6274.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-075240/978/15829_
15.6815550119557720.04.2373.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075240/1035/16068_
15.6913406117690190.04.4575.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_448be68fe599e

1-075240/1149/16136_
15.6910786126966770.05.4673.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8598b388c96a9

1-075240/1041/15922_
15.691432297121822170.04.4875.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFPb8IwDMW%2FS

Found on 2024-05-28 12:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7222ddc036

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Monday, 27-May-2024 21:13:21 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  89 days 14 hours 13 minutes 47 seconds
Server load: 1.11 1.46 1.80
Total accesses: 826620 - Total Traffic: 3.7 GB - Total Duration: 727624618
CPU Usage: u99.26 s123.55 cu327.37 cs148.6 - .00903% CPU load
.107 requests/sec - 519 B/second - 4868 B/request - 880.241 ms/request
1 requests currently being processed, 49 idle workers
________W_________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/1007/15824_
15.804106145149520.04.2574.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3806a63592f42

0-016520/1025/15959_
15.812156121371040.04.3074.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_086ccb833f67d

0-016520/1107/16171_
15.81160117123701910.05.0174.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZJfb9sgFMW%2FisW7jfG

0-016520/1137/16106_
15.812950130239530.05.1673.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-016520/1087/16285_
15.816612127275150.05.0876.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0ba14bcf9fc70

0-016520/1027/16395_
15.804996123742130.04.4177.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_48d86d18926f0

0-016520/1009/15719_
15.7623146126227680.04.3373.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ca97866ae68af

0-016520/1114/16149_
15.7622146121181340.04.8875.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cf946100df499

0-016528/1121/16030W
15.8100113560029.55.2774.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-016520/1116/15880_
15.7721097124682110.04.9472.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d8ed3a66f33b

0-016520/1062/16014_
15.7718464122124860.04.6076.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/1017/16039_
15.7719127123065600.04.7273.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dd11adc483a46

0-016520/1092/15924_
15.7717637121439470.04.6674.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dfd7f0cdc96d6

0-016520/1063/16028_
15.7720056112386380.04.5174.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b405efd791a0

0-016520/1097/15790_
15.7910676130269560.05.1072.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aaffebd07f752

0-016520/1204/16225_
15.7911816124670290.05.2977.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_806534c548b18

0-016520/1031/16086_
15.7814756123488340.04.8974.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_838be1302df5c

0-016520/1054/15895_
15.7813586127515350.04.5172.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_99107923fb70b

0-016520/1019/15742_
15.7717056127108620.04.2772.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a17522da01d84

0-016520/1142/16138_
15.7716036135867670.05.3372.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a1290c2baae3

0-016520/1087/15802_
15.799576133370220.04.6473.54
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cccfbe2f6b65f

0-016520/1042/16097_
15.798366127217980.04.8676.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1491676cb03d9

0-016520/1087/16182_
15.806967119960380.04.6674.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dceeb57345b36

0-016520/1065/15968_
15.805986121339860.04.4375.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cc334aff76482

0-016520/1067/16239_
15.813117135368320.04.4677.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_004eb8b93d156

1-075240/875/15893_
12.798496119999610.03.8073.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2bb0444c1fb42

1-075240/932/15953_
12.796426122931610.03.8972.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2d05a504cad7e

1-075240/972/16052_
12.803641120319730.04.2173.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/963/15996_
12.7811576117326490.04.0373.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9870424f7d219

1-075240/956/15879_
12.805497121388650.03.9571.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aa70b4bdb56ad

1-075240/864/15621_
12.797496133577310.03.8873.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_27db40213b5c8

1-075240/849/15797_
12.80413159126438320.03.4573.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIXv%2FRXI9

1-075240/948/16022_
12.802930131285680.04.0874.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075240/850/15727_
12.811786125105680.03.5672.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bb635499ef81f

1-075240/878/15758_
12.812836134322570.03.6572.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14c4d1a1a9bcf

1-075240/878/15817_
12.811111143030200.03.7175.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/786/16113_
12.81216127454130.03.3674.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8078cbdd5a961

1-075240/824/15876_
12.7621227128185250.03.5773.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0f2658dc50840

1-075240/834/15612_
12.7623446119255070.03.9371.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2f587fc1b578e

1-075240/817/16016_
12.7622427124896300.03.3773.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_081142ce1ef31

1-075240/789/15640_
12.7620972119087910.03.3072.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/837/15870_
12.7718926117428810.03.6274.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8f55042907397

1-075240/913/15900_
12.78171634126443920.04.3672.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075240/861/15742_
12.7719826121461830.03.5774.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php

Found on 2024-05-27 21:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72d5e3e0c0

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Sunday, 26-May-2024 18:10:54 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  88 days 11 hours 11 minutes 19 seconds
Server load: 0.58 1.69 1.90
Total accesses: 812519 - Total Traffic: 3.7 GB - Total Duration: 723039321
CPU Usage: u92.73 s119.29 cu327.37 cs148.6 - .009% CPU load
.106 requests/sec - 517 B/second - 4871 B/request - 889.874 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/737/15554_
11.7510706324144377210.02.9773.06
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/794/15728_
11.768497120405000.03.3173.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7786de7f290c9

0-016520/839/15903_
11.769808122893430.03.7972.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_84112e268ab2c

0-016520/797/15766_
11.7510379113128617040.03.7572.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/816/16014_
11.766587126350890.03.7674.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8def8d04125ae

0-016520/812/16180_
11.7511392162123241920.03.4876.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/757/15467_
11.784742125159890.03.2672.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/847/15882_
11.775638119141890.03.6074.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34f60e4191f9c

0-016520/826/15735_
11.767598112327660.03.5472.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ec5bd9aca64fa

0-016520/813/15577_
11.774977123813520.03.5470.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dadc6d320b4ef

0-016520/822/15774_
11.7838256338121217880.03.5375.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/786/15808_
11.784627121914980.03.7072.23
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a99216671d86

0-016520/811/15643_
11.783096120913680.03.4573.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bc8c3faf26430

0-016520/817/15782_
11.784086111552260.03.5073.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac92d57158951

0-016520/867/15560_
11.78387129151160.03.7071.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36154e740ebcd

0-016520/867/15888_
11.7517092123719160.03.9076.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/739/15794_
11.781397122171480.03.6573.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8ddb6799efba4

0-016520/784/15625_
11.7515797126936970.03.3371.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cc6baaef280fe

0-016528/742/15465W
11.7800126535369.63.1471.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-016520/851/15847_
11.7515287134834980.04.0671.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d693866a1d5d0

0-016520/803/15518_
11.7514416132599900.03.3172.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a486b9e751bf

0-016520/755/15810_
11.7513867126032260.03.6474.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb2b5cc2baeea

0-016520/788/15883_
11.7512527119288380.03.3372.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbee9ca934fc9

0-016520/822/15725_
11.7511837120824460.03.4574.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36fb6855a1f0a

0-016520/760/15932_
11.7510924414134523280.03.0876.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/587/15605_
8.5516446119414160.02.4072.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_989754ae785cc

1-075240/602/15623_
8.581247121920310.02.4471.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f1cf7a1340c4f

1-075240/630/15710_
8.5515410119092400.02.7472.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /ads.txt HTTP/1.1

1-075240/629/15662_
8.583677116167520.02.6372.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e871466d356ed

1-075240/617/15540_
8.5517236120352430.02.5270.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d5b92e8f719ca

1-075240/584/15341_
8.58267132350130.02.6072.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_240b9e92462ee

1-075240/581/15529_
8.5514886125762760.02.3372.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3b8fa1c5df1c0

1-075240/631/15705_
8.5614194130269650.02.6472.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/569/15446_
8.561191119124298160.02.3571.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/628/15508_
8.5613116133279150.02.5571.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ab7ca5fc464fa

1-075240/604/15543_
8.5611721522142271580.02.4774.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/555/15882_
8.5611113138126848320.02.3073.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/576/15628_
8.578847127447280.02.4471.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6abb079b8f6ff

1-075240/557/15335_
8.5610707118653660.02.6670.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_198d0de8efd18

1-075240/568/15767_
8.5610887124622140.02.3072.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_251caf885b287

1-075240/539/15390_
8.569916118478730.02.1771.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d8a41f4a97918

1-075240/556/15589_
8.576947116859680.02.2573.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_86ed0210272ad

1-075240/591/15578_
8.5747718859125510080.02.8970.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-075240/592/15473_
8.577966120932350.02.4173.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1137d3f32622b

1-075240/647/15716_
8.575967

Found on 2024-05-26 18:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d725b2b84c4

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Saturday, 25-May-2024 05:53:15 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  86 days 22 hours 53 minutes 40 seconds
Server load: 0.59 1.15 1.61
Total accesses: 799702 - Total Traffic: 3.6 GB - Total Duration: 719420334
CPU Usage: u87.12 s114.53 cu327.37 cs148.6 - .00902% CPU load
.106 requests/sec - 519 B/second - 4880 B/request - 899.611 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/494/15311_
8.2011849143731060.02.0772.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/549/15483_
8.2011649119906820.02.3272.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/583/15647_
8.2012059122465060.02.7471.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/526/15495_
8.2012959127812650.02.6471.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/565/15763_
8.2011449125564720.02.7573.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/555/15923_
8.24966122977210.02.4375.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0f80870a2f8b1

0-016520/531/15241_
8.20107210124779330.02.3471.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/588/15623_
8.2011029118422240.02.5473.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/553/15462_
8.20112311111735000.02.3871.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/562/15326_
8.2110389123031570.02.4569.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/567/15519_
8.219869119410610.02.5174.48
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/524/15546_
8.21101711121382760.02.7371.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/560/15392_
8.229037120485940.02.4872.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_723622a7209cf

0-016520/553/15518_
8.229649111054830.02.3772.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-016520/566/15259_
8.227156128515470.02.5070.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3dce7fddb9b04

0-016520/556/15577_
8.226156123044270.02.4874.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_650b63aa815b2

0-016520/521/15576_
8.228046121818220.02.7472.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a82ad19435bf1

0-016520/527/15368_
8.224231757125979880.02.3670.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-016520/498/15221_
8.2248722125859740.02.1970.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3be66f7a4c6ce

0-016520/552/15548_
8.222506134331250.02.8069.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e8a47c59eb39b

0-016520/509/15224_
8.223636131078700.02.1271.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eca854ab94d85

0-016520/497/15552_
8.203107124282010.02.4873.67
127.0.0.1http/1.1

0-016520/535/15630_
8.22230271118917150.02.3472.00
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLbsIwEEV%2FJfKe2Ji

0-016520/540/15443_
8.22163234120561810.02.2872.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

0-016528/485/15657W
8.2400133894339.61.9875.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-075240/325/15343_
5.102916118792600.01.3371.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b840522cb8ded

1-075240/362/15383_
5.094437121273150.01.5370.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0733922bbc9cf

1-075240/361/15441_
5.102459118746270.01.5871.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-075240/349/15382_
5.095436115428430.01.4671.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2eb971278dfe

1-075240/354/15277_
5.103516118825870.01.4469.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f4726a571841e

1-075240/349/15106_
5.093827131452510.01.6471.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f00092b771270

1-075240/322/15270_
5.101876125065830.01.3071.06
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc36c58568e2e

1-075240/367/15441_
5.101546129509710.01.5571.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf1f3ba0bf941

1-075240/322/15199_
5.12177124065490.01.3470.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3e70c8ca8d733

1-075240/375/15255_
5.0613016132859640.01.5270.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_892bd985785e9

1-075240/358/15297_
5.0712141141517730.01.4773.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/333/15660_
5.0711906126468860.01.4372.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1148e194b9cab

1-075240/342/15394_
5.0711139127069850.01.4970.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/313/15091_
5.071154393117984980.01.6769.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/316/15515_
5.0711721124166110.01.3171.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075240/305/15156_
5.07113310117813010.01.2170.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/328/15361_
5.0810499116381970.01.3672.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/352/15339_
5.0810089124693180.01.8369.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/341/15222_
5.0810829120363110.01.3972.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/378/15447_
5.0810261100131626920.01.6471.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-075240/334/15194_
5.089749118715460.01.3670.2

Found on 2024-05-25 05:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72021a040c

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Friday, 24-May-2024 04:24:28 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  85 days 21 hours 24 minutes 53 seconds
Server load: 1.97 1.56 1.97
Total accesses: 790948 - Total Traffic: 3.6 GB - Total Duration: 716157830
CPU Usage: u83.17 s111.09 cu327.37 cs148.6 - .00903% CPU load
.107 requests/sec - 520 B/second - 4887 B/request - 905.442 ms/request
1 requests currently being processed, 49 idle workers
_W________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/348/15165_
5.809609143512190.01.5271.61
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016528/375/15309W
5.8600117533449.61.6372.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-016520/410/15474_
5.8011136121956240.02.0871.25
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_18769e0719a83

0-016520/353/15322_
5.86481125683500.01.9970.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/400/15598_
5.80102929123641240.02.1173.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.OPTIONS /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIr

0-016520/368/15736_
5.862747122405440.01.6675.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_00b55f6262a25

0-016520/370/15080_
5.819100124176190.01.6870.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-016520/385/15420_
5.81902751117982760.01.7672.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-016520/391/15300_
5.8010087110700840.01.7071.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7dc535cfe56bb

0-016520/378/15142_
5.818756122557960.01.6468.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4643111ddf270

0-016520/419/15371_
5.817201119223750.01.9273.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/336/15358_
5.81801255120703060.02.0070.54
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLPT8IwFP5Xlt63bstEb

0-016520/396/15228_
5.8163410120286880.01.8271.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/387/15352_
5.8167913110842310.01.7071.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cd3d7fe57adc1

0-016520/394/15087_
5.835521128298450.01.8569.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/372/15393_
5.844904934122605000.01.7673.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEP0rke%2BJU

0-016520/354/15409_
5.825989121693560.02.0671.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/337/15178_
5.844717125663580.01.5469.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_128c4af29e905

0-016520/321/15044_
5.844854261125453080.01.4770.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfETUgpW

0-016520/367/15363_
5.854003955133763900.02.0169.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNU8IwEP0rndzbQK1WM

0-016520/359/15074_
5.854362799130564800.01.5570.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-016520/336/15391_
5.844601122547860.01.8573.04
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-016520/351/15446_
5.8637620118560750.01.5771.23
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6620233b6ed36

0-016520/358/15261_
5.863496120203470.01.6072.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f0d9e7afaff6c

0-016520/339/15511_
5.861786133215630.01.4574.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c9c6f59fba0a6

1-075240/150/15168_
2.534045339118541390.00.6170.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEP2VyPvEjRsot

1-075240/191/15212_
2.52484717120873800.00.8569.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEqUkLW

1-075240/176/15256_
2.543889118270330.00.8470.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-075240/175/15208_
2.524960115011970.00.7770.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-075240/188/15111_
2.534490118475410.00.7968.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-075240/178/14935_
2.534601130920890.00.9070.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-075240/160/15108_
2.55341333124190330.00.6570.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEP4rke%2BJE

1-075240/203/15277_
2.553691080128355180.00.8370.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-075240/166/15043_
2.552496123481840.00.7269.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_102ad07ab7a14

1-075240/198/15078_
2.561316131594320.00.8169.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_86a8a4412ff5c

1-075240/193/15132_
2.56296140922200.00.8172.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1790e190132b7

1-075240/141/15468_
2.4811278125423060.00.6371.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3713fb4ebe739

1-075240/142/15194_
2.499769126714930.00.6770.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-075240/142/14920_
2.481084117116075810.00.9968.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98R

1-075240/134/15333_
2.4810235124019200.00.5870.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.OPTIONS /saml2/idp/SSOService.php?SAMLRequest=fZJPc9owEMXvfIqM7

1-075240/155/15006_
2.499470116715440.00.6369.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075240/155/15188_
2.49890158116017050.00.6971.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEP0VgXeJLL0gI

1-075240/164/15151_
2.507756124239310.00.6868.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dacf2f9fda13e

1-075240/158/15039_
2.499100119865520.00.6971.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-075240/203/15272_
2.508642131105780.0

Found on 2024-05-24 04:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d727e01d4c3

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 23-May-2024 04:57:05 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  84 days 21 hours 57 minutes 30 seconds
Server load: 1.53 2.40 2.51
Total accesses: 780492 - Total Traffic: 3.6 GB - Total Duration: 713472557
CPU Usage: u96.7 s115.95 cu308.6 cs140.26 - .00902% CPU load
.106 requests/sec - 519 B/second - 4887 B/request - 914.132 ms/request
1 requests currently being processed, 49 idle workers
_W________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-016520/145/14962_
2.6010290143098580.00.6470.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-016528/169/15103W
2.6500116918699.60.8171.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-016520/186/15250_
2.6010554121392520.01.1770.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-016520/164/15133_
2.65447125378700.00.7569.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f23258f04198c

0-016520/185/15383_
2.6010440123295510.01.1772.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/168/15536_
2.6424610121777590.00.7374.23
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/174/14884_
2.61968766123315730.00.8469.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-016520/174/15209_
2.619915117496290.00.7971.54
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fZJbj9owEIXf%2BRUrvy

0-016520/173/15082_
2.6110189110329100.00.8070.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/149/14913_
2.629292121967630.00.6267.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-016520/192/15144_
2.628880118800540.00.9072.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-016520/157/15179_
2.619539120125020.01.1669.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-016520/151/14983_
2.628236119595860.00.7270.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c871c51eaed21

0-016520/171/15136_
2.6273926110484960.00.8370.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-016520/169/14862_
2.626971127553880.00.7968.61
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/148/15169_
2.626473104121981450.00.7072.81
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMff%2BRSV3xO

0-016520/145/15200_
2.63597525121304350.01.1470.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN1fiX%2BwvM%

0-016520/156/14997_
2.635236125402270.00.7068.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_91b7327b8799e

0-016520/146/14869_
2.634831125009660.00.6869.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/125/15121_
2.644290133056990.00.5767.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-016520/134/14849_
2.634696130114620.00.5569.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e7e29a204137b

0-016520/142/15197_
2.644150122236250.01.0272.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-016520/139/15234_
2.643560118260710.00.6670.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-016520/151/15054_
2.643377119268640.00.6971.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f5b51eba44832

0-016520/118/15290_
2.64976132617930.00.5073.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_226b4efb23b3d

1-0240290/1672/14978_
26.3010444118054270.08.7869.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0240290/1673/14977_
26.3110389120406540.07.1968.61
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0240290/1710/15048_
26.38208131117604070.08.0969.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVHLboMwEPwV5HswGMzDC

1-0240290/1725/14995_
26.3879114170890.08.9669.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9c6e51849dc58

1-0240290/1718/14880_
26.3637010117889260.07.8267.76
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0240290/1640/14714_
26.354376130337620.08.0869.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_69189541dc55e

1-0240290/1614/14911_
26.3371761123412400.07.9969.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_64cdc3d629b17

1-0240290/1719/15050_
26.373264127780920.07.7769.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98R

1-0240290/1643/14832_
26.328681123064540.07.5668.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0240290/1682/14829_
26.354836130808090.07.9668.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0240290/1551/14895_
26.337980140292490.07.5571.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0240290/1644/15291_
26.336247124833230.08.0670.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f7d7d903cda2

1-0240290/1633/15018_
26.3858151126162740.07.4369.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0240290/1680/14742_
26.3110290115635610.07.7267.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0240290/1795/15161_
26.345617123596490.09.2169.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ee885e937d4f3

1-0240290/1722/14818_
26.336897116334180.07.7869.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bd00d5ac70f9e

1-0240290/1690/14983_
26.364294115539690.07.9870.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0240290/1730/14955_
26.29107011123601030.07.5367.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0240290/1697/14847_
26.329146119442310.07.4470.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6e95ffae8eed2

1-0240290/1720/15032_
26.354720130677390.07.9269.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.js HTTP/1.1

Found on 2024-05-23 04:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d721b897780

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Sunday, 12-May-2024 20:16:02 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  74 days 13 hours 16 minutes 27 seconds
Server load: 1.37 1.40 1.50
Total accesses: 655690 - Total Traffic: 3.0 GB - Total Duration: 667546415
CPU Usage: u87.26 s102.29 cu253.4 cs116.36 - .00868% CPU load
.102 requests/sec - 494 B/second - 4860 B/request - 1018.08 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-031070/984/12524_
15.7524326133971490.04.8157.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_857ae0b7adf04

0-031070/975/12577_
15.803506108036570.04.1959.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eec95f628b4ac

0-031077/968/12799W
15.8000114020817.94.9357.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-031070/1003/12584_
15.787276117320410.04.5357.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_312f5ad27ea51

0-031070/945/12707_
15.7615256111777660.05.0659.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9cb58386a8582

0-031070/1017/13065_
15.7618300113569820.04.8261.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /.well-known/assetlinks.json HTTP/1.1

0-031070/997/12428_
15.7525216114361670.05.4057.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3d3114bd35b7a

0-031070/954/12671_
15.7522836109219630.03.9859.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b292c380dd95c

0-031070/1000/12549_
15.7621407101884420.04.6657.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_37665cff928e2

0-031070/1003/12486_
15.76203027113676680.04.2556.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e43fa04c921e1

0-031070/951/12486_
15.7619266110267070.04.5559.12
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cb376a6c7c4e1

0-031070/941/12796_
15.7523356111361030.03.8958.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4b1c6a9c88237

0-031070/955/12564_
15.7617407110775220.04.9058.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40f1cc8ea77fe

0-031070/970/12480_
15.781044699699420.04.5858.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bd67b9b281fb2

0-031070/939/12452_
15.7712356117443650.04.6657.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fe05e1eb6b09a

0-031070/1024/12628_
15.7714206113296620.05.3660.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_889efe750055c

0-031070/977/12555_
15.7714701111768900.04.1257.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-031070/914/12439_
15.7895252114839360.04.7956.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_33d62b7445666

0-031070/1049/12570_
15.801516117131900.04.4058.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_edb5d6f542a89

0-031070/1036/12758_
15.788516125087930.04.1655.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4f2ab2d3c65c1

0-031070/937/12448_
15.786417120631050.04.6257.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_279a6c0a57e21

0-031070/989/12665_
15.785377112417320.04.9859.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_354f99e2572f0

0-031070/947/12779_
15.794506107713670.04.7958.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_098f573085738

0-031070/1006/12561_
15.802616110171780.04.8559.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_652c3ce3956c8

0-031070/1019/12771_
15.801172121179920.04.5061.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-085080/791/12576_
12.9421206109067150.03.7657.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6008aa0f93d78

1-085080/839/12515_
12.9614366108371760.04.0357.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fa644dfa60b88

1-085080/783/12513_
12.9519616108912420.04.4057.70
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9a4a635142b11

1-085080/842/12357_
12.9518576105111910.03.4456.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_69838d43e9994

1-085080/793/12378_
12.9423236108696880.03.7956.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-085080/789/12201_
12.982396123242710.03.2957.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_50f6b6d8a9dbb

1-085080/794/12456_
12.9515096114173610.03.8057.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a242e3668568

1-085080/818/12453_
12.9516546117619160.04.0258.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b87710bc45f21

1-085080/762/12397_
12.9517667114884050.04.0556.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f1f202b02b8f7

1-085080/784/12339_
12.9610252120424370.03.7457.26
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-085080/803/12594_
12.9611337130985190.03.7760.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e08bf8bd7d307

1-085080/853/12910_
12.9783628116786880.03.9859.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_07d762f7b7ba6

1-085080/817/12487_
12.9613226116712640.03.7657.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4ff4c38484c7f

1-085080/839/12252_
12.984986106978820.03.5055.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6763dab7d747d

1-085080/877/12535_
12.987166115075410.04.0055.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_359fddd3818f4

1-085080/811/12304_
12.985969107020890.03.8357.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_02c69a12652ff

1-085080/832/12517_
12.9694128105395870.04.1359.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34fc63c7530a3

1-085080/821/12412_
12.9830215111588740.03.8056.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-085080/794/12376_
12.984016111632630.04.2159.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuse

Found on 2024-05-12 20:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72b14e8009

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Wednesday, 08-May-2024 15:02:10 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  70 days 8 hours 2 minutes 35 seconds
Server load: 2.39 1.30 1.00
Total accesses: 613114 - Total Traffic: 2.8 GB - Total Duration: 646093062
CPU Usage: u81.17 s96.8 cu236.64 cs108.1 - .0086% CPU load
.101 requests/sec - 489 B/second - 4856 B/request - 1053.79 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process





<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-031070/138/11678_
1.916187128379350.00.5753.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9db2fe1db6ad0

0-031070/127/11729_
1.917526104737580.00.5655.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_513bd7e1e5f41

0-031070/119/11950_
1.918476110312630.00.5853.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_16716a2421326

0-031070/128/11709_
1.8917016112488750.00.5253.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f9c95ffb91901

0-031070/116/11878_
1.8724896107249240.00.5354.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8848ec2c20da5

0-031070/139/12187_
1.92717108654360.00.6457.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_249422bddfdc9

0-031070/131/11562_
1.915296110145390.00.5852.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_706a18621c844

0-031070/133/11850_
1.924618104988500.00.5356.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/163/11712_
1.92251697885250.00.7553.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_55c176eb39234

0-031070/143/11626_
1.924440108962820.00.6653.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/clipboard.min.js HTTP/1.1

0-031070/142/11677_
1.92291106637000.00.6355.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET / HTTP/1.1

0-031070/132/11987_
1.923457108313720.00.5255.10
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f997722070659

0-031070/107/11716_
1.8725422188106894410.00.4254.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-031070/120/11630_
1.882186695662190.00.5754.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3a73d483b97e5

0-031070/123/11636_
1.8722917112184510.00.5453.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d36886b6a4560

0-031070/129/11733_
1.8820577110017360.00.5355.55
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9472505451b7a

0-031070/176/11754_
1.8819607107788490.00.8654.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_19c33ca72890b

0-031070/127/11652_
1.8917796110839670.00.5852.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f7eb74f5e4db

0-031070/115/11636_
1.9014026110421180.00.4754.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4b77f358fe68f

0-031070/137/11859_
1.8915976121371230.00.5652.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8fb055f27aece

0-031070/142/11653_
1.9012062117253160.00.6554.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-031070/118/11794_
1.9013066108925910.00.5854.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb270ed95bcad

0-031070/115/11947_
1.9011046104768660.00.5354.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e3604e50dec10

0-031070/161/11716_
1.919777105615750.00.7855.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fab381e4a8069

0-031070/147/11899_
1.9189130117068360.00.7057.88
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0266920/1649/11755_
24.401751485105028150.07.6453.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0266920/1645/11636_
24.4018716101825080.07.4553.48
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ca0bf16a9dee1

1-0266920/1654/11700_
24.3922821104457490.07.3753.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0266920/1628/11479_
24.4016806100491340.07.3353.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d96e1cefbe3a

1-0266920/1715/11544_
24.3920966104240620.07.6452.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_668e358eef321

1-0266920/1581/11367_
24.451602119662490.06.9653.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0266920/1634/11619_
24.4113115110113310.06.9953.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

1-0266920/1704/11595_
24.4014926111386120.07.3654.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9d21b6b028d7d

1-0266920/1703/11600_
24.428796110790850.07.2452.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bce7a1ad27035

1-0266920/1547/11522_
24.4019756115376910.06.7053.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9d6f757d1edac

1-0266920/1686/11754_
24.4111516127615290.07.1256.10
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c83bc06f3641c

1-0266920/1708/12017_
24.419458112904030.07.3655.32
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5f005b61b2429

1-0266920/1730/11634_
24.4110396113603330.07.9153.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7690c31ca2402

1-0266920/1616/11363_
24.435516100019600.07.5052.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1f47b3b157649

1-0266920/1580/11610_
24.443606112532600.07.1551.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_43b8e33ebe4ab

1-0266920/1803/11456_
24.427876104623740.08.3853.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_75023e03ccf8e

1-0266920/1677/11637_
24.4112736102068350.07.4054.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e0aec1c6f42f7

1-0266920/1706/11540_
24.426586106175970.07.6252.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ca966d0ebc3d9

1-0266920/1524/11532_
24.45606107788650.07.7955.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c81fe4bfd8ffb

Found on 2024-05-08 15:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72edf7a3ab

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Tuesday, 30-Apr-2024 22:30:47 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  62 days 15 hours 31 minutes 12 seconds
Server load: 6.95 2.98 2.10
Total accesses: 529354 - Total Traffic: 2.4 GB - Total Duration: 622863190
CPU Usage: u69.65 s84.52 cu208.47 cs93.46 - .00843% CPU load
.0978 requests/sec - 477 B/second - 4885 B/request - 1176.65 ms/request
1 requests currently being processed, 49 idle workers
W_________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0213076/133/9907W
1.99001235871213.80.5245.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0213070/151/10147_
1.9413252100532220.00.5948.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/144/10308_
1.9412066104991310.00.5546.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5df3cbbc7bb2b

0-0213070/148/10090_
1.9511087108484620.00.7046.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_79a5ce40c7e4a

0-0213070/135/10271_
1.941160115102097090.00.5147.64
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNb4JAEIb%2FCtm7LCw

0-0213070/142/10488_
1.9610106104063490.00.5850.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f9ae36008d795

0-0213070/132/9894_
1.969534106173600.00.5045.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/127/10190_
1.96879359199440830.00.5148.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0213070/153/10030_
1.9681664891903570.00.5945.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

0-0213070/129/10017_
1.967687103862250.00.9546.30
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_225d587f3f154

0-0213070/116/10150_
1.96804237101572310.00.4547.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVFNj4IwEP0rpHcplILQC

0-0213070/126/10252_
1.97741159102531900.00.5147.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTsQgFN2b%2BA%2BEf

0-0213070/128/10018_
1.97707186102103520.00.5246.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

0-0213070/154/9914_
1.97669391003170.00.6146.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/118/10079_
1.9761124107660740.00.5147.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/139/10074_
1.975552105415070.00.5447.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/158/10002_
1.974766103350210.00.7147.06
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f6726c7b6a46f

0-0213070/133/10017_
1.98431113105822440.00.5745.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW71m

0-0213070/150/9978_
1.983696106708670.00.5847.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_abb743035d313

0-0213070/144/10234_
1.983996116721670.00.6545.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/143/10035_
1.982776112811000.00.5347.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_447380a1c92d4

0-0213070/172/10193_
1.982361104638980.01.0847.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0213070/169/10199_
1.99181699792880.00.6846.78
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d610d0d66050b

0-0213070/161/10064_
1.99111790101345350.00.6447.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0213070/129/10041_
1.99192999111546350.00.5949.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLbsIwEEV%2FJfKe2Dh

1-0169700/1305/10062_
17.596387100282530.05.3346.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_283a159316d10

1-0169700/1382/9963_
17.58714697252220.05.9045.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_07c81b17d3c0e

1-0169700/1367/9995_
17.58907799608530.05.3945.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_babc0a0cf951a

1-0169700/1409/9783_
17.58772195949620.05.7845.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0169700/1270/9787_
17.5711181899594690.05.2244.80
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d68c5f924a1db

1-0169700/1237/9758_
17.595717114837020.05.0646.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9f123be624626

1-0169700/1269/9951_
17.58814407105741610.05.0846.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

1-0169700/1284/9844_
17.596920106336200.05.1046.48
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0169700/1288/9824_
17.595182104722600.05.3044.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0169700/1316/9929_
17.587726111206220.05.3146.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1c7be443ff7b8

1-0169700/1293/10037_
17.60214306122640130.05.2248.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVHLbsIwEPyVyHdix0mJs

1-0169700/1342/10256_
17.59463131107927230.05.5147.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZLLbtswEEV%2FReCeelA

1-0169700/1302/9877_
17.602685108782570.05.7345.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5263b684a5b11

1-0169700/1237/9708_
17.59398094932210.05.0544.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0169700/1318/9997_
17.602899107292580.05.2744.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0169700/1276/9629_
17.603846100389250.05.2344.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7fed0b690c68e

1-0169700/1255/9931_
17.60149698164730.05.1347.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_865e201cad363

1-0169700/1369/9796_
17.5710631101325400.05.8445.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0169700/1356/9947_
17.6110104736510.05.8847.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server HTTP/1.1

1-0169700/1293/9880_
17.60466108917970.05.6445.36
127.0.0.1

Found on 2024-04-30 22:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d728cbd750d

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Sunday, 28-Apr-2024 21:41:21 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  60 days 14 hours 41 minutes 46 seconds
Server load: 0.52 1.17 1.50
Total accesses: 505078 - Total Traffic: 2.3 GB - Total Duration: 614700618
CPU Usage: u69.55 s83.97 cu196.75 cs87.04 - .00835% CPU load
.0964 requests/sec - 471 B/second - 4890 B/request - 1217.04 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0114880/990/9474_
12.619286122468950.03.7743.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_968ef16e76d94

0-0114880/980/9653_
12.61890472199175610.03.8945.88
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/1020/9837_
12.627277103189450.03.9344.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f4530a3e4d146

0-0114880/991/9634_
12.6266420107057660.04.0144.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_83500635c1aba

0-0114880/924/9655_
12.625515100494740.03.6045.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

0-0114880/946/9997_
12.626236102950460.03.8347.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4d2a286a21bde

0-0114880/932/9455_
12.632066104953810.03.7743.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f38322ab4e7cb

0-0114880/966/9665_
12.62469697860230.03.7846.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4b97810181f8b

0-0114880/936/9588_
12.6317737890642900.03.6743.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/892/9458_
12.623337101404850.03.5443.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b6b6358d7e139

0-0114880/1078/9722_
12.6316199221870.03.7946.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET / HTTP/1.1

0-0114880/1065/9802_
12.63736622100959790.03.8745.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/939/9475_
12.631481839100644440.03.8944.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/991/9399_
12.63110337689413070.04.4344.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/998/9596_
12.6010897105535100.04.3144.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0e8011e60e19f

0-0114880/1069/9567_
12.6010320103303830.04.1945.15
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0114880/906/9549_
12.5912702101454590.03.5744.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0114880/943/9560_
12.619556104099730.03.7043.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac32bd0c032e5

0-0114880/948/9517_
12.6010549105243650.03.7644.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0114880/986/9742_
12.63436115532120.04.0043.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_673e90a1c54e9

0-0114880/962/9592_
12.6184227110600800.04.1845.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0114880/940/9713_
12.6011786103470950.03.7444.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb3bbc133116f

0-0114880/943/9708_
12.6098252998594120.03.7844.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/976/9557_
12.6181641799092810.03.7144.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0114880/1023/9561_
12.617542455110512370.04.2747.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/836/9593_
10.6534298430040.03.3544.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0169700/855/9436_
10.6590474696042640.03.4843.47
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/853/9481_
10.65188197540790.03.3043.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0169700/897/9271_
10.65162794160220.03.4643.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4181d9fa71fa6

1-0169700/844/9361_
10.64516697849630.03.2542.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bfa4f280b50e1

1-0169700/775/9296_
10.6211152113529610.03.1444.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0169700/826/9508_
10.651272506104680500.03.2044.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169707/829/9389W
10.6500104547867.93.2644.64
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-0169700/802/9338_
10.6112037103471560.03.2042.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c3288e5a672ce

1-0169700/841/9454_
10.65549435109253990.03.4544.59
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/848/9592_
10.639103483121798850.03.2946.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/834/9748_
10.6210429106081690.03.2145.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0169700/806/9381_
10.6310206106279050.03.1642.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c130265fd915d

1-0169700/786/9257_
10.621054093414780.03.0642.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/script.js HTTP/1.1

1-0169700/821/9500_
10.639611903105564300.03.2742.21
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/796/9149_
10.63931248898837800.03.2342.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/810/9486_
10.64822696662850.03.1545.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a8072552cce5

1-0169700/830/9257_
10.64709468399539730.03.4842.79
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0169700/871/9462_
10.638656103520720.03.4844.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bc21b133534fc

1-0169700/765/9352_
10.647991812107426540.03.0642.77
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0

Found on 2024-04-28 21:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72eb98a101

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 18-Apr-2024 23:00:14 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  50 days 16 hours 39 seconds
Server load: 9.45 3.02 2.06
Total accesses: 430908 - Total Traffic: 2.0 GB - Total Duration: 557556075
CPU Usage: u62.04 s72.4 cu171.23 cs72.35 - .00864% CPU load
.0984 requests/sec - 494 B/second - 5019 B/request - 1293.91 ms/request
1 requests currently being processed, 49 idle workers
_______________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-033720/915/8002_
13.38846111712030.03.5737.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_625eae7e44fa4

0-033720/994/8175_
13.37524689328010.04.3640.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b28a9f0618643

0-033720/930/8308_
13.37716792936940.03.4838.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_22d2f23f99664

0-033720/978/8155_
13.37809795442310.04.0138.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a9b881f8df381

0-033720/998/8167_
13.37959287487300.04.5339.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-033720/1004/8465_
13.371003691259080.04.1141.62
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_13e6dcee4303e

0-033720/999/8080_
13.361217192331370.03.9837.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-033720/922/8121_
13.361463487292440.04.0040.36
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-033720/958/8098_
13.361143677989630.03.7137.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c158fdec37830

0-033720/978/8092_
13.37865789590810.04.2938.04
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f7f3dec8b1a3d

0-033720/1028/8178_
13.38188686727640.04.1840.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f0d48c667e45c

0-033720/991/8262_
13.37385688747530.04.1739.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ada745be2bead

0-033720/901/7989_
13.341947692047740.03.7138.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9e3fdb0d9a821

0-033720/944/7927_
13.3825377089050.03.6938.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET / HTTP/1.1

0-033720/946/8047_
13.342047693601710.04.1738.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0f3edfc1889c3

0-033720/1016/7990_
13.361547692272130.04.2039.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ab5f496b37ba3

0-033720/873/8168_
13.38296789732720.03.7639.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6cbdf95042aa6

0-033720/923/8040_
13.342151690912670.03.5737.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_35d2baaffaeb4

0-033720/928/8113_
13.351753794867270.03.5539.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0ac5166537236

0-033720/1029/8143_
13.3516207105297940.04.0437.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_69322cc3f8005

0-033720/949/8181_
13.37618699452720.03.7739.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d23c5f018d994

0-033720/952/8240_
13.361397693313010.03.7239.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_81c3233460661

0-033720/1046/8215_
13.351690089643950.04.1739.11
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-033720/975/8113_
13.361259688253250.03.6639.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1daefe1276a26

0-033720/998/8054_
13.341856699724490.03.7741.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9159117568257

1-082620/802/8193_
11.7752787455310.03.2738.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4cc853df54ce0

1-082620/864/8017_
11.77509686831500.03.8937.82
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_30b58e1fbe1b0

1-082620/843/7980_
11.7757076888672040.03.6537.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-082620/778/7779_
11.773682084230990.03.1737.31
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0fa7505a4f04d

1-082620/849/7802_
11.76914785262970.03.4336.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_11f101575462f

1-082620/870/7897_
11.771767101028230.03.4738.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_63afa671ddab3

1-082627/834/8082W
11.780094540407.93.2439.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-082620/827/7940_
11.741720790170810.03.3839.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c24dfd599fee8

1-082620/837/7841_
11.742101688425900.03.3436.71
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_00ebc2f47e17b

1-082620/865/7975_
11.741879796758920.03.4238.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5734d8426595b

1-082620/880/8119_
11.7515217104082690.03.5241.08
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53f20b6d3608f

1-082620/855/8099_
11.741644694031400.03.4139.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_98329ac354dca

1-082620/867/7865_
11.742011693701750.03.8336.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_49537116d0ea8

1-082620/821/7879_
11.7418001084793360.03.1737.17
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-082620/833/7827_
11.751358695931330.03.2635.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eb18a3de2205e

1-082620/830/7738_
11.751170687494390.03.3037.27
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5ef24833a19e4

1-082620/803/7933_
11.741610286471390.03.9039.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-082620/817/7735_
11.751449688530380.03.1636.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fac10413037ef

1-082620/865/7971_
11.751233691375850.03.3238.97
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_146698d219cef

1-082620/830/7813_
11.751067694139680.0

Found on 2024-04-18 22:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d729310d107

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Wednesday, 10-Apr-2024 20:18:25 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  42 days 13 hours 18 minutes 51 seconds
Server load: 3.10 1.98 1.90
Total accesses: 357328 - Total Traffic: 1.7 GB - Total Duration: 508478201
CPU Usage: u58.03 s60.38 cu141.35 cs58.47 - .00866% CPU load
.0972 requests/sec - 500 B/second - 5.0 kB/request - 1423 ms/request
1 requests currently being processed, 49 idle workers
________________W_________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0161930/985/6517_
14.7331226100063220.04.4631.29
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0ce732a4c875d

0-0161930/952/6725_
14.723313679959390.04.3633.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_087481ffa3708

0-0161930/936/6850_
14.732723784415710.04.2832.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ba3284aa521d

0-0161930/1018/6663_
14.713411688004640.04.9532.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cadbe4594f29f

0-0161930/995/6702_
14.741647678958180.04.8632.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef004597683eb

0-0161930/936/6947_
14.732927781401460.04.5735.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6c3ba4b9a514f

0-0161930/867/6525_
14.732264681494060.03.7831.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3d33e2397d266

0-0161930/1061/6656_
14.74993778714200.05.9934.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_48dd9388f4301

0-0161930/925/6597_
14.7325341868002310.04.3131.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b0f8805080010

0-0161930/999/6612_
14.731838781601450.04.9731.24
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4581b9954c74a

0-0161930/958/6671_
14.741247678214510.04.3834.25
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fd34d2682ac75

0-0161930/959/6747_
14.732038777529470.04.2733.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_672e280dc73a9

0-0161930/1101/6600_
14.7414522781242590.05.3932.46
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e87121b8834a6

0-0161930/966/6533_
14.75328667630080.04.2332.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d14db43b91159

0-0161930/1055/6643_
14.74804681907200.04.6631.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7b33fb682da55

0-0161930/969/6484_
14.75667881652880.04.3632.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0161938/1021/6822W
14.760080604069.54.7933.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0161930/933/6638_
14.75127682741470.04.3831.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_067d1090aed69

0-0161930/1044/6671_
14.714467684339770.05.0233.65
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_faf05f53c4ff7

0-0161930/913/6634_
14.75516793160520.04.1531.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_58ea8ada1e46f

0-0161930/1038/6729_
14.714079690872860.05.2333.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4888a1eda3b7f

0-0161930/1069/6797_
14.713884684324390.04.8132.72
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_35ab1817de164

0-0161930/1038/6655_
14.713512681470730.05.0132.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c98b21559e92f

0-0161930/923/6584_
14.7136675177858220.03.8832.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0161930/926/6549_
14.714267788662870.04.8135.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_636fc82699cf9

1-0225700/825/6781_
12.4827676712800.03.6732.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0174e5c9a876e

1-0225700/908/6538_
12.47419776886890.04.0631.40
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_87ca49923d2fa

1-0225700/842/6425_
12.48228679089000.04.1831.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_32885e45bf857

1-0225700/782/6419_
12.461124673740420.03.7931.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a8cdda11a93c

1-0225700/815/6364_
12.461360776165420.04.1630.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04bc69d93aae4

1-0225700/782/6372_
12.443782689388380.03.9132.43
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_356cf48514a6d

1-0225700/833/6557_
12.434556784055330.04.1432.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ffa633923b2bd

1-0225700/781/6477_
12.46606778675360.03.6732.99
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b5f7e6df6a8e

1-0225700/858/6410_
12.434167675640910.03.8931.00
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_da03bad65ff9d

1-0225700/790/6446_
12.434368686823640.04.7932.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_700ed1ee2a41a

1-0225700/919/6604_
12.44332327795471350.04.5034.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNb4JAEIb%2FCtm7LKz

1-0225700/897/6589_
12.4439741682881360.04.0832.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_08b158724f403

1-0225700/809/6385_
12.452407785474110.03.7930.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b45fa46bb1f8f

1-0225700/798/6405_
12.443652776144330.03.5931.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a060e4eaae203

1-0225700/757/6389_
12.443450086227520.03.5029.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /wp-login.php HTTP/1.1

1-0225700/746/6243_
12.443222677788260.03.5631.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_74942957b44c7

1-0225700/794/6514_
12.452631678658570.03.5032.42
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d8042c1874a2c

1-0225700/763/6309_
12.443025680045200.03.2630.91
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7203c37ea95b8

1-0225700/823/6537_
12.452157782355500.03.6232.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.

Found on 2024-04-10 20:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7214932bca

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 21-Mar-2024 14:34:06 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 7 hours 34 minutes 31 seconds
Server load: 0.57 0.85 0.92
Total accesses: 196113 - Total Traffic: 986.5 MB - Total Duration: 143948904
CPU Usage: u42.51 s35.17 cu68.35 cs27.99 - .00903% CPU load
.102 requests/sec - 536 B/second - 5.2 kB/request - 734.01 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0148680/874/3841_
16.032857735153260.04.8319.09
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9b1d85bb1e03c

0-0148680/1040/3952_
16.042546229087220.05.3819.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/1044/4141_
16.051358731452990.05.0920.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d768a14aa0cd

0-0148680/950/3832_
16.042462130364630.05.6219.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/859/3993_
16.033087727292210.04.9819.85
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ba043ea1c0dee

0-0148680/1036/4191_
16.041987628140340.05.4022.05
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0dcacc027016b

0-0148680/864/3834_
16.033470126446720.04.7819.10
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/936/3930_
16.07176727649480.05.7320.37
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_83d0922a0ec2e

0-0148680/930/3978_
16.042660729349760.04.1919.34
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_91130b5bc7e1c

0-0148680/943/3921_
16.05903728139250.04.8618.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f16e1dfa1d68b

0-0148680/893/3985_
16.033311626017300.04.9220.28
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5342bc2bda906

0-0148680/849/4038_
16.023871626345070.04.6420.66
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1ae01ffeee52a

0-0148680/865/3800_
16.033691623912210.04.2418.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_188682e32bbb9

0-0148680/848/3787_
16.033583124586060.03.6419.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/897/4002_
16.042179628505950.04.3320.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d50f20a220e5

0-0148680/902/3821_
16.042295129040020.06.0820.38
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/940/4062_
16.051172627813150.04.7820.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6e18dba9f88bd

0-0148680/911/3906_
16.07536726878760.04.1918.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c3f9374e5dbd7

0-0148680/929/4015_
16.051543625296340.05.2321.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1e78f235efc0a

0-0148680/880/3956_
16.051800729301190.04.3219.18
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8e056ad460170

0-0148680/879/3851_
16.07715633868360.05.2319.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_680318432b2b0

0-0148680/890/3942_
16.0713427852330.04.2520.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0148680/866/3870_
16.07309628941440.04.1718.98
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9390ff145672e

0-0148680/900/3910_
16.06800730995750.04.5020.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_015166b0c6abc

0-0148680/874/3805_
16.0510073329207540.05.0421.53
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-01492010/991/4231W
14.7100275492417.24.5320.94
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

1-0149200/800/3911_
14.663776630148010.03.7119.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_50d100c8d8b23

1-0149200/854/3875_
14.70228126586790.04.2319.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0149200/881/3926_
14.70620724804230.04.7519.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f6d0bff71693f

1-0149200/918/3954_
14.673208730628440.04.6519.87
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f8051ac3e8bd2

1-0149200/914/3800_
14.681681629899950.05.2619.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bf7c777aea4d0

1-0149200/886/4080_
14.672285628468820.04.3720.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5dea2f736f50d

1-0149200/875/3926_
14.663591626645430.05.0520.63
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e463bf34355ba

1-0149200/904/3866_
14.663497623167050.04.1518.90
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3add0beab7769

1-0149200/907/3911_
14.681900633745500.04.7118.73
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b898e9fe5930b

1-0149200/844/3865_
14.672957728510970.04.1819.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eed95df3404ef

1-0149200/959/4005_
14.672377826085490.04.6120.03
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f23f49169af9c

1-0149200/771/3691_
14.672088730138290.03.5517.83
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a07ddb588ab4

1-0149200/961/3818_
14.691460729703560.05.4219.41
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e4665e4600c7c

1-0149200/779/3878_
14.663403632314150.03.5518.96
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dbb34def765c4

1-0149200/826/3693_
14.691272628849300.04.0818.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f88c8bcbcb3f

1-0149200/884/3902_
14.69879127573160.04.9619.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0149200/883/3757_
14.672746629862360.04.0718.52
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ac8a977d956d5

1-0149200/877/3904_
14.69987632063990.04.4619.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5f94610b2e846

1-0149200/916/3778_

Found on 2024-03-21 14:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72646ba1b0

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Friday, 08-Mar-2024 09:51:31 UTC
Restart Time: Wednesday, 28-Feb-2024 06:59:34 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 2 hours 51 minutes 56 seconds
Server load: 1.17 1.50 1.66
Total accesses: 88627 - Total Traffic: 470.3 MB - Total Duration: 74947651
CPU Usage: u13.09 s13.04 cu39.29 cs14.19 - .0101% CPU load
.112 requests/sec - 625 B/second - 5.4 kB/request - 845.653 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0237190/210/1728_
3.4962028217789630.01.168.68
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0237190/227/1726_
3.462096216195390.01.709.20
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0237198/269/1778W
3.510015610629.61.269.35
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /server-status HTTP/1.1

0-0237190/228/1704_
3.471781616584460.01.488.50
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f28a21d49391f

0-0237190/196/1830_
3.49558115101820.00.979.10
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0237190/183/1916_
3.481180715147860.00.9211.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d75ae30ae8723

0-0237190/232/1686_
3.50339613554580.01.078.22
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4fde792e4e4d3

0-0237190/223/1807_
3.452176347911757500.01.078.95
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0237190/247/1900_
3.50179014562030.01.179.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0237190/242/1661_
3.505562414417920.01.227.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_46a5f937d6d92

0-0237190/232/1790_
3.50165011832570.01.099.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0237190/196/1877_
3.50454614385420.00.979.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_991b7cafca01e

0-0237190/211/1746_
3.49986612193700.01.038.56
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b73a36d2f8dca

0-0237190/223/1667_
3.47192914810961210.01.1310.39
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71l

0-0237190/207/1782_
3.491034417145730.00.859.75
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0237190/210/1721_
3.481373616988770.00.928.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_64793eb5484f6

0-0237190/190/1781_
3.49684713234170.00.869.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8e27c09989d0f

0-0237190/199/1774_
3.49778613899970.00.919.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_45ed5e300ee54

0-0237190/226/1841_
3.471722411874660.01.1610.19
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0237190/233/1793_
3.481486614484860.01.059.16
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5fc4f34361bcd

0-0237190/301/1855_
3.51143616072120.01.599.60
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2abbc050697c5

0-0237190/178/1804_
3.471694613214080.00.8410.14
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7aee6ea774bb0

0-0237190/205/1769_
3.495601313968660.01.089.67
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0237190/210/1817_
3.49847718813920.01.0410.33
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0237190/223/1683_
3.462129617784890.01.049.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8096e9d6bedfa

1-0238080/212/1844_
3.551465113050180.00.979.92
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0238080/225/1757_
3.551590616194780.01.459.45
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_821b86c8be71c

1-0238080/200/1756_
3.542115113518840.01.029.07
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0238080/249/1804_
3.54223326114034800.01.169.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=431&StateId=

1-0238080/217/1802_
3.542184349318183360.01.069.74
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0238080/247/1734_
3.5854613257940.01.169.44
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5bb130215f665

1-0238080/256/2012_
3.55170627612431630.01.3510.69
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

1-0238080/218/1863_
3.551096713915740.00.9910.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f8fb6050937b1

1-0238080/251/1781_
3.55996613899940.01.309.49
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d803ebab3443

1-0238080/233/1654_
3.551285617785650.01.037.84
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_623bed789fe80

1-0238080/180/1687_
3.56841216407910.00.829.02
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0238080/213/1847_
3.56875613784020.01.019.86
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a6b0acc2e81d5

1-0238080/224/1726_
3.573481016395540.01.128.93
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6ae45b325ae2e

1-0238080/194/1633_
3.56773614942250.01.008.51
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1ca42b7ffbd2f

1-0238080/216/1819_
3.542167478118632110.01.049.57
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0238080/191/1626_
3.57643014248650.01.349.10
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0238080/197/1764_
3.57547013705750.00.889.01
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0238080/228/1672_
3.57249617174590.01.358.89
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_486b4c8ffc406

1-0238080/238/1700_
3.58179415182870.01.099.13
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0238080/224/1667_
3.58152616284170.01.128.58
127.0.0.1http/1.1ip-10-1-107-250.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6308e7aba0cf3

1

Found on 2024-03-08 09:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72a5ce1473

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Saturday, 03-Feb-2024 01:00:33 UTC
Restart Time: Thursday, 01-Feb-2024 01:08:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 23 hours 51 minutes 41 seconds
Server load: 3.47 1.73 1.36
Total accesses: 11153 - Total Traffic: 50.9 MB - Total Duration: 3388826
CPU Usage: u6.37 s4.8 cu0 cs0 - .00648% CPU load
.0647 requests/sec - 309 B/second - 4784 B/request - 303.849 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/218/218_
3.373724686580.00.870.87
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

0-0370/214/214_
3.37240691480.00.970.97
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0370/203/203_
3.371624741820.01.001.00
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJfb9owFMXf%2BRSV3xO

0-0370/207/207_
3.375664783530.00.940.94
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBbxoxEIXv%2FIrI911

0-0370/248/248_
3.372624001742650.01.141.14
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0370/206/206_
3.3521624526130.01.091.09
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPj9owEMXvfIqV74lDC

0-0370/219/219_
3.3521144564030.01.061.06
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBbxoxEIXv%2FIrI913

0-0370/218/218_
3.3520831409640.01.041.04
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0370/209/209_
3.3520457593620.00.940.94
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_a1a69d490a567

0-0370/224/224_
3.3519445770820.01.051.05
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_e7c83509dfc8e

0-0370/237/237_
3.3617936541320.01.101.10
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_07aae7968b501

0-0370/206/206_
3.3617140421600.00.830.83
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0370/200/200_
3.3616865477280.00.760.76
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_9607bb6eab004

0-0370/229/229_
3.3615895682200.01.181.18
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_f716c407d286d

0-0370/220/220_
3.3615046718540.01.021.02
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_bf8ec0e0d2921

0-0370/213/213_
3.3613975533500.00.990.99
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_99166dd8ae12a

0-0370/218/218_
3.3613045591330.00.960.96
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d26f22ae31b85

0-0370/225/225_
3.361192108833760.01.161.16
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0370/192/192_
3.3612231963451140.00.850.85
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0370/252/252_
3.3711635773450.01.201.20
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_2123aa87cfd36

0-0370/240/240_
3.3711095584140.01.081.08
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLBTuMwFLz3K1DuiZO0g

0-0370/204/204_
3.371027216652870.00.900.90
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbj9owEIXf%2BRUrvyc

0-0370/213/213_
3.379996534890.00.970.97
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0d52aafb4b6e7

0-0370/219/219_
3.376654696820.00.960.96
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

0-0370/247/247_
3.378814735790.01.101.10
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98Q

1-0380/239/239_
3.392139183436460.01.031.03
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BW71k

1-0380/273/273_
3.4021034549870.01.171.17
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0380/233/233_
3.4020635489160.01.111.11
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_0aff79f492997

1-0380/235/235_
3.4018956680790.01.001.00
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_6a6194f0fe9ab

1-0380/220/220_
3.4019865858100.00.920.92
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c53f3f97fd755

1-0380/204/204_
3.4017845578210.00.900.90
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_022a7b69fbbb9

1-0380/210/210_
3.4017042497890.01.081.08
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0380/228/228_
3.4115366610530.00.990.99
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_8467af63b4941

1-0380/223/223_
3.4016705793320.01.041.04
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_817383c2e07f7

1-0380/208/208_
3.4114477762240.00.830.83
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d6e3db733d70c

1-0380/241/241_
3.4113495690590.01.091.09
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b104131acadb6

1-0380/248/248_
3.4112605475890.01.021.02
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_8e8c9c5e7a016

1-0380/193/193_
3.4211802182736050.00.910.91
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0380/200/200_
3.4212036808630.00.910.91
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRb9owEMbf%2BSsqvyc

1-0380/191/191_
3.4211571892560100.00.760.76
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0380/218/218_
3.4210724856210.01.001.00
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

1-0380/210/210_
3.4210194415530.00.950.95
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJfb9owFMXf%2BRSV3xO

1-0380/217/217_
3.42972165635470.01.101.10
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEaZpUY

1-0380/202/202_
3.427484546600.00.980.98
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJfb9owFMXf%2BRSV3xM

1-0380/210/210_
3.424576813820.00.970.97
127.0.0.1http/1.1ip-10-1-94-43.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71k

1-0380/275/275_
3.42

Found on 2024-02-03 01:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7226c16229

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 01-Feb-2024 00:32:15 UTC
Restart Time: Sunday, 07-Jan-2024 07:07:19 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 17 hours 24 minutes 55 seconds
Server load: 1.30 1.53 1.33
Total accesses: 225836 - Total Traffic: 915.9 MB - Total Duration: 2077782483
CPU Usage: u38.02 s45.48 cu52.28 cs32.76 - .00789% CPU load
.106 requests/sec - 449 B/second - 4252 B/request - 9200.4 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
...........____________________________________________W_____...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/3061.
0.00701811103948221475940.00.0012.09
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3138.
0.00701811132953218390930.00.0012.34
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3292.
0.0070181187299215161290.00.0013.14
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3100.
0.00701811123903220377210.00.0012.01
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3099.
0.0070181164792219580140.00.0012.36
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIXv%2FRXI9

0-0-0/0/3150.
0.0070181137432230822970.00.0012.81
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3179.
0.0070181116913216759710.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3068.
0.0070181149606214317110.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3180.
0.00701811138500221576020.00.0012.54
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3143.
0.0070181141201219154180.00.0012.77
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

0-0-0/0/3035.
0.0070181161504219862240.00.0012.30
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVFNb4JAEP0rZO%2BysIt

0-0-0/0/3109.
0.00701811122918239334640.00.0012.27
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

0-0-0/0/2996.
0.0070181198361219414890.00.0011.96
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3064.
0.00701811131047224074630.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3078.
0.00701811136957217951090.00.0012.16
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3204.
0.0070181156469215307410.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3162.
0.00701811137778215302140.00.0012.59
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3086.
0.0070181111560220295510.00.0012.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3115.
0.0070181155942219199100.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913vP

0-0-0/0/3025.
0.0070181181689230683650.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3196.
0.0070181162290236235590.00.0012.93
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3145.
0.0070181174221222928680.00.0012.49
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3006.
0.0070181129776231972590.00.0011.88
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3181.
0.0070181188755209449000.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3129.
0.0070181159899248024600.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0132420/743/2506_
10.807065195115920.02.9510.20
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_130307bc4658e

1-0132420/742/2369_
10.7812450212989180.03.069.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/756/2484_
10.7514730197413030.03.099.85
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/787/2533_
10.7514730201449240.03.3610.28
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/789/2477_
10.7998910655209301560.03.239.80
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0132420/757/2397_
10.6516358222439870.03.029.67
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2439_
10.7813010229539020.03.039.66
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/734/2452_
10.7810622544205623290.03.0710.10
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/746/2380_
10.805553205874170.03.339.98
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

1-0132420/733/2434_
10.7993110197713740.03.149.97
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2445_
10.7614590198717560.03.059.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0132420/838/2535_
10.7414930184161910.03.6510.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/764/2587_
10.7811054206596770.03.1710.35
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4mU5

1-0132420/768/2479_
10.781198199201532350.03.109.91
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

1-0132420/752/2424_
10.81648200016590.03.019.75
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/790/2560_
10.80439408201164770.03.4410.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/789/2510_
10.80792177201543620.03.4110.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEqbuB1

1-0132420/791/2453_
10.806030220015260.03.4610.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/767/2432_
10.80359297215517380.03.159.68
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=89&StateId=_

1-0132420/723/2472_
10.7812821203111850.03.0010.02
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0132420/790/2521_
10.811695195624150.03.2410.18
127.0.0.1ht

Found on 2024-02-01 00:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72ddb69724

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 01-Feb-2024 00:32:15 UTC
Restart Time: Tuesday, 23-Jan-2024 22:43:31 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 1 hour 48 minutes 44 seconds
Server load: 1.96 1.86 1.79
Total accesses: 51847 - Total Traffic: 221.4 MB - Total Duration: 478632858
CPU Usage: u24.55 s20.79 cu0 cs0 - .0065% CPU load
.0743 requests/sec - 332 B/second - 4478 B/request - 9231.64 ms/request
1 requests currently being processed, 74 idle workers
__________________________________W_____________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/725/725_
9.521585863180960.03.183.18
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0350/704/704_
9.531532167409660.03.133.13
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0350/660/660_
9.6171821364625490.02.982.98
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owFIXf%2BRWV3xM

0-0350/742/742_
9.6364462311390.03.193.19
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

0-0350/664/664_
9.59117125781020660.02.852.85
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

0-0350/713/713_
9.61527579293880.03.143.14
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_2c7e075ee3383

0-0350/636/636_
9.591245069631770.02.712.71
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0350/719/719_
9.61585768089130.03.233.23
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0350/683/683_
9.62252766986300.02.982.98
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_a611307679d6a

0-0350/674/674_
9.521719115063173720.02.852.85
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0350/649/649_
9.6110421063483600.02.802.80
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwXyD8QvOtlG

0-0350/671/671_
9.61913564175430.02.922.92
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d47517cf364d3

0-0350/710/710_
9.591293067068940.02.912.91
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0350/699/699_
9.611079560290970.03.013.01
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d83c4f0fc899b

0-0350/691/691_
9.50179779256340040.03.003.00
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRTyoxEIXf%2BRWm77v

0-0350/693/693_
9.581446757987550.03.013.01
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c9e2deb0620c3

0-0350/798/798_
9.561467064597340.03.453.45
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0350/708/708_
9.6243676974274810.03.123.12
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0350/708/708_
9.61818758249140.03.013.01
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/627/627_
9.591270661090470.02.592.59
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfETqBAr

0-0350/681/681_
9.611065062890270.02.902.90
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0350/729/729_
9.61974670699350.03.153.15
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_ef2d6926dc10c

0-0350/723/723_
9.52164516760787960.03.003.00
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=jVJdb9swDPwrAt8ty47be

0-0350/696/696_
9.61675264520290.03.113.11
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0350/703/703_
9.62376868627170.02.842.84
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0360/706/706_
9.5560343767445770.02.852.85
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owFIXf%2BRWV3xO

1-0360/682/682_
9.55989065286690.02.902.90
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0360/746/746_
9.56555461305060.03.243.24
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fsgcs-

1-0360/693/693_
9.56452558149750.03.063.06
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owFIXf%2BRWV3xM

1-0360/666/666_
9.531508563570130.02.832.83
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

1-0360/679/679_
9.531476071416130.02.832.83
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0360/744/744_
9.55840255559768580.03.223.22
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913vb

1-0360/689/689_
9.56397457975340.02.802.80
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-0360/728/728_
9.56158569731170.03.033.03
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b8a549543025f

1-03621/742/742W
9.5700673118526.53.163.16
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /server-status HTTP/1.1

1-0360/736/736_
9.56337561874720.03.213.21
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_a6c074a441454

1-0360/678/678_
9.501613065720610.02.832.83
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0360/697/697_
9.5511051561316400.03.233.23
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c9716f0f07df4

1-0360/694/694_
9.5017329260120810.02.922.92
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/core/idp/resumelogout.php?id=_da37fb35dbc9cf4bf

1-0360/697/697_
9.551053066343840.02.832.83
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0360/702/702_
9.50165317168194750.03.023.02
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEP0rAneJEiW0A

1-0360/680/680_
9.551070184559634400.02.922.92
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0360/677/677_
9.541250164910150.02.842.84
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0360/679/679_
9.55685776714090.03.143.14
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMXvfIrK98S

1-0360/675/675_
9.53135587864796190.02.882.88
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0360/721/721_
9.551201057340810.03.123.12
127.0.0.1http/1.1ip-10-1-98-70.ap-southeast-2.coGET /

Found on 2024-02-01 00:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d7264321019

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 01-Feb-2024 00:32:11 UTC
Restart Time: Sunday, 07-Jan-2024 07:07:19 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 17 hours 24 minutes 52 seconds
Server load: 1.42 1.55 1.34
Total accesses: 225824 - Total Traffic: 915.8 MB - Total Duration: 2077782475
CPU Usage: u38.02 s45.48 cu52.28 cs32.76 - .00789% CPU load
.106 requests/sec - 449 B/second - 4252 B/request - 9200.89 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
...........____________________________________________W_____...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/3061.
0.00701807103948221475940.00.0012.09
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3138.
0.00701807132953218390930.00.0012.34
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3292.
0.0070180787299215161290.00.0013.14
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3100.
0.00701807123903220377210.00.0012.01
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3099.
0.0070180764792219580140.00.0012.36
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIXv%2FRXI9

0-0-0/0/3150.
0.0070180737432230822970.00.0012.81
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3179.
0.0070180716913216759710.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3068.
0.0070180749606214317110.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3180.
0.00701807138500221576020.00.0012.54
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3143.
0.0070180741201219154180.00.0012.77
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

0-0-0/0/3035.
0.0070180761504219862240.00.0012.30
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVFNb4JAEP0rZO%2BysIt

0-0-0/0/3109.
0.00701807122918239334640.00.0012.27
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

0-0-0/0/2996.
0.0070180798361219414890.00.0011.96
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3064.
0.00701807131047224074630.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3078.
0.00701807136957217951090.00.0012.16
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3204.
0.0070180756469215307410.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3162.
0.00701807137778215302140.00.0012.59
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3086.
0.0070180711560220295510.00.0012.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3115.
0.0070180755942219199100.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913vP

0-0-0/0/3025.
0.0070180781689230683650.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3196.
0.0070180762290236235590.00.0012.93
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3145.
0.0070180774221222928680.00.0012.49
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3006.
0.0070180729776231972590.00.0011.88
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3181.
0.0070180788755209449000.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3129.
0.0070180759899248024600.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0132420/743/2506_
10.807035195115920.02.9510.20
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_130307bc4658e

1-0132420/742/2369_
10.7812410212989180.03.069.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/756/2484_
10.7514690197413030.03.099.85
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/787/2533_
10.7514700201449240.03.3610.28
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/789/2477_
10.7998510655209301560.03.239.80
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0132420/757/2397_
10.6516318222439870.03.029.67
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2439_
10.7812970229539020.03.039.66
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/734/2452_
10.7810592544205623290.03.0710.10
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/746/2380_
10.805523205874170.03.339.98
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

1-0132420/733/2434_
10.7992710197713740.03.149.97
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2445_
10.7614560198717560.03.059.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0132420/838/2535_
10.7414900184161910.03.6510.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/764/2587_
10.7811014206596770.03.1710.35
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4mU5

1-0132420/768/2479_
10.781194199201532350.03.109.91
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

1-0132420/752/2424_
10.81608200016590.03.019.75
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/790/2560_
10.80435408201164770.03.4410.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/789/2510_
10.80788177201543620.03.4110.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEqbuB1

1-0132420/791/2453_
10.805990220015260.03.4610.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/767/2432_
10.80356297215517380.03.159.68
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=89&StateId=_

1-0132420/723/2472_
10.7812791203111850.03.0010.02
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0132420/790/2521_
10.811665195624150.03.2410.18
127.0.0.1h

Found on 2024-02-01 00:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3111cf0d7211cf0d72742f9bae

Apache Status

Apache Server Status for sgcs-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2023-10-26T13:44:44

Current Time: Thursday, 01-Feb-2024 00:32:13 UTC
Restart Time: Sunday, 07-Jan-2024 07:07:19 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 17 hours 24 minutes 54 seconds
Server load: 1.42 1.55 1.34
Total accesses: 225831 - Total Traffic: 915.9 MB - Total Duration: 2077782479
CPU Usage: u38.02 s45.48 cu52.28 cs32.76 - .00789% CPU load
.106 requests/sec - 449 B/second - 4252 B/request - 9200.61 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
...........____________________________________________W_____...
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/3061.
0.00701809103948221475940.00.0012.09
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3138.
0.00701809132953218390930.00.0012.34
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3292.
0.0070180987299215161290.00.0013.14
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3100.
0.00701809123903220377210.00.0012.01
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3099.
0.0070180964792219580140.00.0012.36
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIXv%2FRXI9

0-0-0/0/3150.
0.0070180937432230822970.00.0012.81
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3179.
0.0070180916913216759710.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3068.
0.0070180949606214317110.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3180.
0.00701809138500221576020.00.0012.54
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3143.
0.0070180941201219154180.00.0012.77
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbb%2BIwEIXf%2BRWV3

0-0-0/0/3035.
0.0070180961504219862240.00.0012.30
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVFNb4JAEP0rZO%2BysIt

0-0-0/0/3109.
0.00701809122918239334640.00.0012.27
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=Cloudworks&RelayState=

0-0-0/0/2996.
0.0070180998361219414890.00.0011.96
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3064.
0.00701809131047224074630.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3078.
0.00701809136957217951090.00.0012.16
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3204.
0.0070180956469215307410.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3162.
0.00701809137778215302140.00.0012.59
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3086.
0.0070180911560220295510.00.0012.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3115.
0.0070180955942219199100.00.0012.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPbxoxEMXvfIrI913vP

0-0-0/0/3025.
0.0070180981689230683650.00.0012.26
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3196.
0.0070180962290236235590.00.0012.93
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3145.
0.0070180974221222928680.00.0012.49
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3006.
0.0070180929776231972590.00.0011.88
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3181.
0.0070180988755209449000.00.0012.60
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/3129.
0.0070180959899248024600.00.0012.73
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0132420/743/2506_
10.807055195115920.02.9510.20
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_130307bc4658e

1-0132420/742/2369_
10.7812430212989180.03.069.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/756/2484_
10.7514710197413030.03.099.85
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/787/2533_
10.7514720201449240.03.3610.28
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/789/2477_
10.7998710655209301560.03.239.80
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0132420/757/2397_
10.6516338222439870.03.029.67
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2439_
10.7812990229539020.03.039.66
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/734/2452_
10.7810612544205623290.03.0710.10
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/746/2380_
10.805543205874170.03.339.98
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fapp.scho

1-0132420/733/2434_
10.7992910197713740.03.149.97
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/760/2445_
10.7614580198717560.03.059.69
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0132420/838/2535_
10.7414920184161910.03.6510.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0132420/764/2587_
10.7811034206596770.03.1710.35
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEITvfoqAd4mU5

1-0132420/768/2479_
10.781196199201532350.03.109.91
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMXv%2FRTI9

1-0132420/752/2424_
10.81628200016590.03.019.75
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0132420/790/2560_
10.80437408201164770.03.4410.43
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0132420/789/2510_
10.80790177201543620.03.4110.32
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEP2VyPfEqbuB1

1-0132420/791/2453_
10.806010220015260.03.4610.17
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0132420/767/2432_
10.80358297215517380.03.159.68
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=89&StateId=_

1-0132420/723/2472_
10.7812811203111850.03.0010.02
127.0.0.1http/1.1ip-10-1-96-14.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0132420/790/2521_
10.811685195624150.03.2410.18
127.0.0.1h

Found on 2024-02-01 00:32

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: www.vivatorremolinos.es
Port: 443
URL: https://www.vivatorremolinos.es

First seen 2022-11-07 00:16
Last seen 2024-12-08 17:47
Open for 762 days

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f0fcba77d3d4d9a37b7bdb19fb7bdb19f
```
Found 3 files trough .DS_Store spidering:

/aiapp
/cms
/cms/includes
```
Found on 2024-12-08 17:47
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642a7bf1d94e9c6ca9ae9c6ca9ae9c6ca9a
```
Found 2 files trough .DS_Store spidering:

/aiapp
/cms
```
Found on 2024-10-06 02:16

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: goosu.live
Port: 443
URL: https://goosu.live

First seen 2022-10-16 03:21
Last seen 2024-12-08 11:25
Open for 784 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df7e5c85cf7e5c85cf7e5c85cf7e5c85c
```
Found 1 files trough .DS_Store spidering:

/ad.jpg
```
Found on 2024-12-08 11:25

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: brucespace.com
Port: 443
URL: https://brucespace.com

First seen 2023-03-01 10:12
Last seen 2024-12-08 10:18
Open for 648 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e055933ef7eceb4ebf1e80363dd10
```
Found 5 files trough .DS_Store spidering:

/css
/vendor
/vendor/jquery
/vendor/owl
/vendor/owl/assets
```
Found on 2024-12-08 10:18
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561ce58c56fd0073d3b3bed91de7
```
Found 4 files trough .DS_Store spidering:

/css
/vendor
/vendor/jquery
/vendor/owl
```
Found on 2023-03-01 10:12

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: www.vecci.co
Port: 443
URL: https://www.vecci.co

First seen 2023-03-01 04:40
Last seen 2024-07-30 09:40
Open for 517 days

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b706e7a276028d16e08c2486a9c5007a659

Found 26 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/apps
/assets/images/apps/novena-de-aguinaldos.pdf
/assets/images/blog
/assets/images/blog/guards_gathered_horizontal.png
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/images/vecci-landing/vecci-6.jpg
/assets/js
/assets/js/bootstrap
/assets/js/jquery
/assets/js/video
/assets/screenshots
/blog
/blog/images
/blog/posts
/blog/tutorials
/vendor

Found on 2024-07-30 09:40

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6ccb099923a0a1e5667b63b427ed2fc05

Found 28 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/apps
/assets/images/apps/novena-de-aguinaldos.pdf
/assets/images/blog
/assets/images/blog/guards_gathered_horizontal.png
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/images/vecci-landing/vecci-6.jpg
/assets/js
/assets/js/bootstrap
/assets/js/jquery
/assets/js/video
/assets/screenshots
/blog
/blog/images
/blog/posts
/blog/tutorials
/vendor
/vendor/bootstrap
/vendor/jquery

Found on 2024-07-30 05:37

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45344e5dd3e1d0895dc16ff06b88048d00

Found 30 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/apps
/assets/images/apps/novena-de-aguinaldos.pdf
/assets/images/blog
/assets/images/blog/guards_gathered_horizontal.png
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/images/vecci-landing/vecci-6.jpg
/assets/js
/assets/js/bootstrap
/assets/js/jquery
/assets/js/video
/assets/screenshots
/blog
/blog/images
/blog/posts
/blog/tutorials
/vendor
/vendor/bootstrap
/vendor/bootstrap/css
/vendor/bootstrap/js
/vendor/jquery

Found on 2024-07-28 07:22

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea97dac2af71ecf1b299cb91897d3b79134

Found 23 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/apps
/assets/images/apps/novena-de-aguinaldos.pdf
/assets/images/blog
/assets/images/blog/guards_gathered_horizontal.png
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/images/vecci-landing/vecci-6.jpg
/assets/js
/assets/js/bootstrap
/assets/js/jquery
/assets/js/video
/assets/screenshots
/blog
/vendor

Found on 2024-07-16 19:08

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57adf0e4e16700d0272ff7447ae9cb96636

Found 19 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/apps
/assets/images/apps/novena-de-aguinaldos.pdf
/assets/images/blog
/assets/images/blog/guards_gathered_horizontal.png
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/js
/assets/screenshots
/blog
/vendor

Found on 2024-06-12 01:32

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabbd7dd8ab5b03a5d2323f6584e

Found 12 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/js
/assets/screenshots
/blog
/vendor

Found on 2024-06-04 02:02

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da81dd2c5177ca47f9

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/js
/assets/screenshots
/blog
/vendor

Found on 2024-06-02 16:05

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e925a4a2a4440cc7e3bc57caadee301c9

Found 20 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/icons/small
/assets/images
/assets/images/blog
/assets/images/logos
/assets/images/phone-left-hand.png
/assets/images/vecci-landing
/assets/images/vecci-landing/vecci-6.jpg
/assets/js
/assets/js/bootstrap
/assets/js/jquery
/assets/js/video
/assets/screenshots
/blog
/vendor

Found on 2023-03-16 02:58

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da723be416aeaf43a6

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/video
/assets/fav.ico
/assets/fonts
/assets/icons
/assets/images
/assets/js
/assets/screenshots
/blog
/vendor

Found on 2023-03-01 04:40

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.vecci.co
Port: 443
URL: https://www.vecci.co

First seen 2023-03-01 04:40
Last seen 2024-07-30 09:40
Open for 517 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cf877aa2

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@github.com:cjortegon/vecci.co.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-07-30 09:40

307 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.98.120
Domain: lidfjfgg65k.com
Port: 443
URL: https://lidfjfgg65k.com

First seen 2023-04-02 07:06
Last seen 2024-07-18 19:25
Open for 473 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522418abb4e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	#url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	url = https://www.ycc3ommon.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-07-18 19:25

325 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c8959112

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-04-02 07:06

271 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.98.20
Domain: lifdfjkkyrrp.com
Port: 443
URL: https://lifdfjkkyrrp.com

First seen 2023-04-02 07:06
Last seen 2024-07-18 07:33
Open for 473 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522418abb4e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	#url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	url = https://www.ycc3ommon.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-07-18 07:33

325 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c8959112

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-04-02 07:06

271 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.98.30
Domain: lulidhhfkfk.com
Port: 443
URL: https://lulidhhfkfk.com

First seen 2023-04-02 07:06
Last seen 2024-07-18 00:40
Open for 472 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522418abb4e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	#url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	url = https://www.ycc3ommon.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-07-18 00:40

325 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c8959112

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/lolis/lolis_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-04-02 07:06

271 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: summersessions.uw.edu
Port: 443
URL: https://summersessions.uw.edu

First seen 2022-07-03 15:17
Last seen 2024-02-01 23:41
Open for 578 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d96a5a7c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:kiosktm/uw.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-02-01 23:41

192 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: app.tracingform.covid19.health.nz
Port: 443
URL: https://app.tracingform.covid19.health.nz

First seen 2022-12-15 02:05
Last seen 2023-11-16 05:52
Open for 336 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af24725d904e46aa7e655aed18896bd73c56ea5

Found 9 files trough .DS_Store spidering:

/config
/config/keys.json
/data
/favicon.ico
/index.html
/logo192.png
/logo512.png
/manifest.json
/robots.txt

Found on 2023-11-16 05:52

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: app-test.treadstoneus.com
Port: 443
URL: https://app-test.treadstoneus.com

First seen 2023-10-20 15:16
Last seen 2023-11-05 22:56
Open for 16 days

Severity: high
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9a061e174381e5d6b49492ce7b7d20fee

Found 23 files trough .DS_Store spidering:

/.htaccess
/application
/application/cache
/application/config
/application/controllers
/application/core
/application/errors
/application/helpers
/application/hooks
/application/index.html
/application/language
/application/libraries
/application/logs
/application/models
/application/third_party
/application/views
/assets
/cias.sql
/index.php
/LICENSE
/news.txt
/README.md
/system

Found on 2023-11-05 22:56

Severity: high
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3546491a66dec536590a678ed4a8b801f

Found 29 files trough .DS_Store spidering:

/.htaccess
/application
/application/cache
/application/config
/application/controllers
/application/core
/application/errors
/application/helpers
/application/hooks
/application/index.html
/application/language
/application/libraries
/application/logs
/application/models
/application/third_party
/application/views
/assets
/assets/bower.json
/assets/bower_components
/assets/dist
/assets/images
/assets/index.html
/assets/js
/cias.sql
/index.php
/LICENSE
/news.txt
/README.md
/system

Found on 2023-10-26 18:16

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: app-test.treadstoneus.com
Port: 443
URL: https://app-test.treadstoneus.com

First seen 2023-10-20 15:16
Last seen 2023-11-05 22:56
Open for 16 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223771339a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git-codecommit.us-east-1.amazonaws.com/v1/repos/Treadstone_Back-End
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-11-05 22:56

296 Bytes

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 108.138.36.122
Domain: seguro.radioacktiva.com
Port: 443
URL: https://seguro.radioacktiva.com

First seen 2022-10-07 10:10
Last seen 2023-09-23 08:44
Open for 350 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3120888b4f20888b4fd90ca266

Apache Status

Apache Server Status for seguro.radioacktiva.com (via 10.13.1.119)

Server Version: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/5.5.38
Server MPM: prefork
Server Built: May  3 2023 16:00:14

Current Time: Saturday, 23-Sep-2023 10:44:57 CEST
Restart Time: Monday, 18-Sep-2023 10:25:21 CEST
Parent Server Config. Generation: 6
Parent Server MPM Generation: 5
Server uptime:  5 days 19 minutes 35 seconds
Server load: 0.97 0.75 0.59
Total accesses: 3140441 - Total Traffic: 19.4 GB - Total Duration: 1692452004
CPU Usage: u10.15 s254.4 cu3304.94 cs3030.38 - 1.52% CPU load
7.25 requests/sec - 46.9 kB/second - 6.5 kB/request - 538.922 ms/request
13 requests currently being processed, 81 idle workers
_______.RKK__._...._._____.___K.._.._....._KK.._..__..._..__._K_
__...W__.__.___.__R..._K._.___._.__._R___._._._.__._._W__._...._
..__C__._._.___._____..___......................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-528240/12/82749_
0.0180196581470.00.24526.88
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

1-529470/10/82474_
0.00170194057200.00.13534.98
10.13.1.56http/1.1

2-5269780/82/80444_
0.1660192908730.00.40521.95
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

3-515440/31/79136_
0.01170190613890.00.27504.20
10.13.1.56http/1.1

4-529480/27/81712_
0.0330194204290.00.17537.01
10.13.1.56http/1.1sugar.elpais.com:80GET /js/estilos_new.js HTTP/1.1

5-5306860/61/81031_
0.06170197615680.00.23515.53
10.13.1.56http/1.1

6-5306920/8/79959_
0.04170195530210.00.01521.38
10.13.1.56http/1.1

7-5-0/0/79192.
0.0010196224800.00.00508.19
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

8-5307450/32/78681R
0.06191915187495380.00.57502.82
10.13.0.164http/1.1

9-54311/2/79527K
0.0310189674920.60.00523.26
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

10-530811/7/78415K
0.0130190700180.60.02498.71
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

11-5309610/82/80467_
0.128119192608740.00.96514.96
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /radiol40/app/mobileService?fieldtoken%40serv=userid&operat

12-5317860/53/80870_
0.0617225195827540.00.37526.37
10.13.1.56http/1.1

13-5-0/0/79502.
0.00510189412030.00.00511.73
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

14-56600/20/76987_
0.0317207184594510.00.07494.29
10.13.0.164http/1.1

15-5-0/0/75729.
0.00130184380430.00.00494.80
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

16-5-0/0/76125.
0.0080185771440.00.00481.57
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

17-5-0/0/77408.
0.00120186343060.00.00519.93
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

18-5-0/0/74994.
0.00470180932940.00.00480.33
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

19-5295480/116/75021_
0.14159187624100.01.01488.28
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /arc/mobileService.php?portal@serv=61ae4583-4836-3873-24ac-

20-5-0/0/73982.
0.00670180982710.00.00467.11
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

21-5319010/28/75096_
0.05160182089300.00.10485.09
10.13.0.164http/1.1

22-517570/1/74627_
0.00170185227950.00.00482.74
10.13.0.164http/1.1

23-5319790/33/71815_
0.0517113176982010.00.14460.89
10.13.1.56http/1.1

24-517840/43/70592_
0.021771174147860.00.26446.81
10.13.1.56http/1.1

25-5320310/20/67926_
0.021796167763460.00.18440.08
10.13.0.164http/1.1

26-5-0/0/69370.
0.00480176289980.00.00440.20
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

27-58720/36/65556_
0.04160166171700.00.14420.51
10.13.1.56http/1.1

28-518150/56/66364_
0.0710114167821090.00.42426.12
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /radiol40/app/mobileService?fieldtoken%40serv=userid&operat

29-5249960/257/62856_
0.261798163667290.01.77406.12
10.13.0.164http/1.1

30-52342621/100/60588K
0.21311115756464149.90.68398.73
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /radiocser/app/mobileService.php?fieldtoken%40serv=userid&o

31-5-0/0/55783.
0.0040148069450.00.00356.28
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

32-5-0/0/53813.
0.0030142757160.00.00345.27
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

33-518270/15/48712_
0.01170134446990.00.05311.01
10.13.1.56http/1.1

34-5-0/0/42234.
0.00240124483390.00.00269.23
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

35-5-0/0/37853.
0.00520115140310.00.00243.71
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

36-532480/12/28857_
0.001610598142900.00.06180.23
10.13.1.56http/1.1

37-5-0/0/25704.
0.0023097902700.00.00163.65
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

38-5-0/0/18659.
0.0059085762770.00.00127.19
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

39-5-0/0/17971.
0.0070083793180.00.00115.66
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

40-5-0/0/15487.
0.0010080026010.00.00102.40
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

41-5-0/0/13863.
0.0061077494500.00.0096.06
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

42-534210/4/10389_
0.008072168770.00.0164.67
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

43-5342745/48/9407K
0.0631066893096364.00.3758.43
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

44-534281/4/8045K
0.013066460910.60.0147.72
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

45-5-0/0/6712.
0.0060063109420.00.0041.38
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

46-5-0/0/6727.
0.0058063745680.00.0043.34
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

47-534310/10/5377_
0.001619960160480.00.0433.75
10.13.0.164http/1.1

48-5-0/0/5481.
0.0071061270790.00.0032.43
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

49-5-0/0/4550.
0.002056739070.00.0030.54
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

50-534550/3/4577_
0.0017057523450.00.0124.52
10.13.0.164http/1.1

51-534570/4/5210_
0.013058476970.00.0233.64
10.13.0.164http/1.1sugar.elpais.com:80GET /img/icons/user-2.svg HTTP/1.1

52-5-0/0/3785.
0.0043055789360.00.0022.67
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

53-5-0/0/3717.
0.0015056857100.00.0022.52
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

54-5-0/0/3377.
0.0050056926240.00.0019.60
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

55-534970/4/3465_
0.008053499880.00.0120.54
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

5

Found on 2023-09-23 08:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3120888b4f20888b4f7738017d

Apache Status

Apache Server Status for seguro.radioacktiva.com (via 10.13.1.119)

Server Version: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/5.5.38
Server MPM: prefork
Server Built: May  3 2023 16:00:14

Current Time: Friday, 22-Sep-2023 12:58:19 CEST
Restart Time: Monday, 18-Sep-2023 10:25:21 CEST
Parent Server Config. Generation: 5
Parent Server MPM Generation: 4
Server uptime:  4 days 2 hours 32 minutes 57 seconds
Server load: 0.35 0.57 0.48
Total accesses: 2604353 - Total Traffic: 16.2 GB - Total Duration: 1411389410
CPU Usage: u8.57 s210.04 cu2738.04 cs2501.61 - 1.54% CPU load
7.34 requests/sec - 47.8 kB/second - 6.5 kB/request - 541.935 ms/request
25 requests currently being processed, 10 idle workers
KRRRRRR_RR_RRRWR_R_WR_RW_R__RKR__K..R...........................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-4316341/16/67948K
0.0430162893660.60.22433.68
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

1-4236640/136/68104R
0.22150159181390.01.07445.60
10.13.0.164http/1.1

2-417300/8/66284R
0.0081159366700.00.03435.68
10.13.1.56http/1.1sugar.los40.com.mx:80GET /_all_dbs HTTP/1.1

3-417640/2/66143R
0.0081161472000.00.00426.37
10.13.0.164http/1.1sugar.los40.com.mx:80GET /debug/default/view?panel=config HTTP/1.1

4-4282950/7/67644R
0.06280161685630.00.01445.59
10.13.1.56http/1.1

5-48600/19/66554R
0.01160162073930.00.21429.41
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

6-4300110/26/66853R
0.06552163504490.00.19437.84
10.13.1.56http/1.1sugar.oxigeno.fm:80GET /registro/?backURL=bJWzqExcz1sAR4A46FYhGyiG16o+TduN10XBnGjd

7-418520/1/65506_
0.0000163043540.00.00425.41
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

8-4310210/50/66120R
0.0680158759360.00.17426.03
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.vscode/sftp.json HTTP/1.1

9-4317190/20/65215R
0.0524167155793680.00.20432.77
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

10-48930/5/65863_
0.0100159099890.00.01420.34
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

11-49960/2/67224R
0.0115124159836840.00.01434.80
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

12-4324490/25/66409R
0.0481159897580.00.08439.62
10.13.0.164http/1.1sugar.los40.com.mx:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-418770/0/66573R
0.0050156048200.00.00432.39
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

14-4325090/28/64228W
0.0400153218110.00.29412.91
10.13.0.164http/1.1sugar.radioacktiva.com:80GET /server-status HTTP/1.1

15-4301820/29/61470R
0.06200149762970.00.11401.93
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

16-410330/32/62917_
0.0231153454390.00.09405.48
10.13.1.56http/1.1sugar.los40.com.mx:80GET /_all_dbs HTTP/1.1

17-4325630/63/64926R
0.0514121157601710.00.79441.36
10.13.1.56http/1.1

18-4325840/85/62302_
0.09057149673370.01.07406.21
10.13.0.164http/1.1

19-4187813/13/61397W
0.01001537285137.90.04399.33
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

20-410390/0/61311R
0.00310150908110.00.00393.45
10.13.1.56http/1.1

21-4326030/8/62703_
0.0210151973040.00.03406.14
10.13.1.56http/1.1sugar.los40.com.mx:80GET /config.json HTTP/1.1

22-4310700/83/62331R
0.08419154573690.00.67407.13
10.13.0.164http/1.1sugar.oxigeno.fm:80GET /preface.html?backURL=https%3A%2F%2Fusuarios.oxigeno.fm%2Fr

23-419194/4/60326W
0.00001478681512.70.01392.65
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

24-4302230/63/58924_
0.08021146642640.00.20372.41
10.13.0.164http/1.1sugar.diarioas.com:80GET /preface.html?backURL=https%3A%2F%2Fasfan.as.com%2Fregistro

25-4265070/100/56088R
0.16100139549950.00.69368.23
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

26-4318200/31/57845_
0.0420146617850.00.11371.16
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.env HTTP/1.1

27-4158020/280/54934_
0.4830139093670.01.56349.69
10.13.0.164http/1.1

28-411310/12/54767R
0.0020108138402840.00.12353.04
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

29-419201/1/52303K
0.00029136047936.60.01337.65
10.13.0.164http/1.1sugar.diarioas.com:80GET /recontrasena/?backURL=https%3A%2F%2Fas.com%2F&o=COMAS&prod

30-411510/20/49205R
0.01290129643540.00.13327.97
10.13.1.56http/1.1sugar.elpais.com:80GET /js/estilos_new.js HTTP/1.1

31-419330/4/47070_
0.0011124650990.00.01306.81
10.13.0.164http/1.1sugar.los40.com.mx:80GET /telescope/requests HTTP/1.1

32-419380/7/43568_
0.0011116355370.00.03280.61
10.13.0.164http/1.1sugar.los40.com.mx:80GET /s/8313e26323e26363e28313/_/;/META-INF/maven/com.atlassian.

33-4255271/203/40383K
0.2440110438930.61.29260.33
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

34-4-0/0/34455.
0.002250102487480.00.00222.47
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

35-4-0/0/31764.
0.00387097108040.00.00204.87
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

36-4287170/54/24984R
0.1227083016170.00.27157.00
10.13.0.164http/1.1

37-4-0/0/22132.
0.0037611082286110.00.00139.05
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

38-4-0/0/16208.
0.00400072579460.00.00112.00
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

39-4-0/0/15323.
0.00393071642490.00.00100.97
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

40-4-0/0/13168.
0.00379066770050.00.0086.95
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

41-4-0/0/11759.
0.00399065326690.00.0084.62
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

42-4-0/0/9220.
0.00279060521270.00.0057.67
10.13.1.56http/1.1

43-4-0/0/7953.
0.00155057930710.00.0050.54
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

44-4-0/0/6702.
0.0038054116420.00.0040.44
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

45-4-0/0/5309.
0.00397052243880.00.0033.95
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

46-4-0/0/5811.
0.00398053207260.00.0038.85
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

47-4-0/0/4636.
0.00386050006080.00.0029.51
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

48-4-0/0/4857.
0.00378052523460.00.0028.53
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

49-4-0/0/3730.
0.001468047224720.00.0025.97
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

50-4-0/0/3493.
0.001333046984800.00.0018.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

51-4-0/0/4472.
0.001463048267600.00.0028.94
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

Found on 2023-09-22 10:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31821e0dc7821e0dc71ab412e5

Apache Status

Apache Server Status for seguro.radioacktiva.com (via 10.13.0.187)

Server Version: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/5.5.38
Server MPM: prefork
Server Built: May  3 2023 16:00:14

Current Time: Friday, 22-Sep-2023 12:58:15 CEST
Restart Time: Monday, 18-Sep-2023 10:25:02 CEST
Parent Server Config. Generation: 5
Parent Server MPM Generation: 4
Server uptime:  4 days 2 hours 33 minutes 12 seconds
Server load: 0.34 0.26 0.28
Total accesses: 2579237 - Total Traffic: 16.1 GB - Total Duration: 1358067641
CPU Usage: u7.98 s187.5 cu2849.2 cs2901.72 - 1.68% CPU load
7.27 requests/sec - 47.5 kB/second - 6.5 kB/request - 526.539 ms/request
27 requests currently being processed, 5 idle workers
R_WRRKRRRRRR_KR_RRRRK.._KK.._.RR.KK..RRW........................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-453910/25/65206R
0.05200156099200.00.08428.66
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

1-473210/47/68131_
0.0320165363120.00.40437.45
10.13.0.164http/1.1sugar.elpais.com:80GET /js/omniture/registroOmniFunctions.js HTTP/1.1

2-4639222/33/67697W
0.05001648911872.00.21439.67
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /radiocser/app/mobileService.php?fieldtoken%40serv=userid&o

3-4293800/126/65952R
0.32280160789580.01.01429.58
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/validations/checkNick.js HTTP/1.1

4-428810/84/67293R
0.1420126161144910.00.68425.43
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

5-4271961/106/67871K
0.3010164077570.60.57441.94
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

6-473330/2/67425R
0.00160159715590.00.00442.42
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

7-414470/136/65200R
0.23285154864130.01.54412.46
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/jquery-nightly.pack.js HTTP/1.1

8-474740/0/67125R
0.00210162848910.00.00443.62
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

9-437270/33/67565R
0.08260163224610.00.22447.48
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

10-455490/21/66316R
0.0425238159382960.00.09436.25
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

11-464090/2/65830R
0.01140158726720.00.01434.27
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

12-476200/1/62914_
0.0020156555730.00.00417.08
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

13-461911/36/63543K
0.05323154203242.80.54414.58
10.13.1.56http/1.1sugar.diarioas.com:80GET /preface.html?backURL=https%3A%2F%2Fasfan.as.com%2Fconectar

14-417170/50/64366R
0.14160156205540.00.16435.71
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

15-473350/0/64475_
0.0010156736530.00.00419.04
10.13.1.56http/1.1

16-476750/4/61483R
0.0030148992190.00.01399.99
10.13.1.56http/1.1sugar.los40.com.mx:80GET /config.json HTTP/1.1

17-446520/59/61555R
0.08120151394730.00.47406.36
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

18-455720/70/62868R
0.0831152869580.00.61410.67
10.13.0.164http/1.1sugar.los40.com.mx:80GET /s/9343e26323e26363e28313/_/;/META-INF/maven/com.atlassian.

19-447250/68/64804R
0.1030156401220.00.32422.79
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.env HTTP/1.1

20-473623/20/63309K
0.013119155959688.10.10411.79
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

21-4-0/0/59904.
0.00260148685540.00.00389.44
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

22-4-0/0/60210.
0.00250149889020.00.00399.10
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

23-467360/11/60029_
0.0100144575060.00.04387.30
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

24-429051/119/58018K
0.1810142735650.61.36372.46
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

25-4592213/34/57657K
0.060231434558445.90.19384.17
10.13.0.164http/1.1sugar.radioacktiva.com:80GET /v2/_catalog HTTP/1.1

26-4-0/0/57604.
0.00530144741600.00.00369.21
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

27-4-0/0/55314.
0.00550137008680.00.00360.87
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

28-464360/13/52432_
0.0201135563820.00.03339.65
10.13.0.164http/1.1sugar.los40.com.mx:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

29-4-0/0/51220.
0.0010135121080.00.00325.60
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

30-448960/63/49648R
0.0916242127631540.00.73332.64
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

31-456110/5/48445R
0.02260125326280.00.02308.91
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

32-4-0/0/43783.
0.00480118111760.00.00293.51
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

33-465902/6/37778K
0.02027108753372.60.01237.01
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

34-466131/6/33372K
0.011099188210.60.01216.74
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

35-4-0/0/29079.
0.0062091931340.00.00190.19
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

36-4-0/0/24709.
0.0061088610810.00.00162.14
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

37-431420/40/17751R
0.0922071083710.00.50111.01
10.13.1.56http/1.1

38-449340/73/17506R
0.0828072195050.00.47115.27
10.13.1.56http/1.1sugar.caracol.com.co:80GET /js/validations/checkUrlWeb.js HTTP/1.1

39-466210/48/13823W
0.050065532350.00.4589.73
10.13.1.56http/1.1sugar.radioacktiva.com:80GET /server-status HTTP/1.1

40-4-0/0/9858.
0.0075059378250.00.0063.91
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

41-4-0/0/9446.
0.0072059273400.00.0061.13
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

42-4-0/0/8268.
0.003322058083590.00.0050.34
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

43-4-0/0/5463.
0.003406050255390.00.0032.40
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

44-4-0/0/4817.
0.003230048174210.00.0026.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

45-4-0/0/4417.
0.003378048833610.00.0027.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

46-4-0/0/4052.
0.003372045691630.00.0027.35
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

47-4-0/0/4135.
0.003213046608020.00.0025.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

48-4-0/0/2728.
0.003206045231060.00.0014.48
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

49-4-0/0/2812.
0.003190043214550.00.0018.73
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

50-4-0/0/2941.
0.003249043732440.00.0015.80
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

51-4-0/0/3356.
0.003358045024890.00.0021.40
::1http/1.1sistemas:80OPTIONS * HTTP

Found on 2023-09-22 10:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31821e0dc7821e0dc73c240642

Apache Status

Apache Server Status for seguro.radioacktiva.com (via 10.13.0.187)

Server Version: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/5.5.38
Server MPM: prefork
Server Built: May  3 2023 16:00:14

Current Time: Friday, 22-Sep-2023 12:58:15 CEST
Restart Time: Monday, 18-Sep-2023 10:25:02 CEST
Parent Server Config. Generation: 5
Parent Server MPM Generation: 4
Server uptime:  4 days 2 hours 33 minutes 13 seconds
Server load: 0.34 0.26 0.28
Total accesses: 2579240 - Total Traffic: 16.1 GB - Total Duration: 1358067859
CPU Usage: u7.98 s187.5 cu2849.2 cs2901.72 - 1.68% CPU load
7.27 requests/sec - 47.5 kB/second - 6.5 kB/request - 526.538 ms/request
27 requests currently being processed, 5 idle workers
R_WRRKRRRRRR_KR_RRRRK.._KK.._.RR.WK..RRK........................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-453910/25/65206R
0.05200156099200.00.08428.66
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

1-473210/47/68131_
0.0320165363120.00.40437.45
10.13.0.164http/1.1sugar.elpais.com:80GET /js/omniture/registroOmniFunctions.js HTTP/1.1

2-4639223/34/67698W
0.05001648933176.00.21439.67
10.13.1.56http/1.1sugar.wradio.com.mx:80GET /.vscode/sftp.json HTTP/1.1

3-4293800/126/65952R
0.32280160789580.01.01429.58
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/validations/checkNick.js HTTP/1.1

4-428810/84/67293R
0.1420126161144910.00.68425.43
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

5-4271961/106/67871K
0.3010164077570.60.57441.94
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

6-473330/2/67425R
0.00160159715590.00.00442.42
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

7-414470/136/65200R
0.23285154864130.01.54412.46
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/jquery-nightly.pack.js HTTP/1.1

8-474740/0/67125R
0.00210162848910.00.00443.62
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

9-437270/33/67565R
0.08260163224610.00.22447.48
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

10-455490/21/66316R
0.0425238159382960.00.09436.25
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

11-464090/2/65830R
0.01140158726720.00.01434.27
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

12-476200/1/62914_
0.0020156555730.00.00417.08
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

13-461911/36/63543K
0.05323154203242.80.54414.58
10.13.1.56http/1.1sugar.diarioas.com:80GET /preface.html?backURL=https%3A%2F%2Fasfan.as.com%2Fconectar

14-417170/50/64366R
0.14160156205540.00.16435.71
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

15-473350/0/64475_
0.0010156736530.00.00419.04
10.13.1.56http/1.1

16-476750/4/61483R
0.0040148992190.00.01399.99
10.13.1.56http/1.1sugar.los40.com.mx:80GET /config.json HTTP/1.1

17-446520/59/61555R
0.08120151394730.00.47406.36
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

18-455720/70/62868R
0.0841152869580.00.61410.67
10.13.0.164http/1.1sugar.los40.com.mx:80GET /s/9343e26323e26363e28313/_/;/META-INF/maven/com.atlassian.

19-447250/68/64804R
0.1040156401220.00.32422.79
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.env HTTP/1.1

20-473623/20/63309K
0.013119155959688.10.10411.79
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

21-4-0/0/59904.
0.00260148685540.00.00389.44
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

22-4-0/0/60210.
0.00250149889020.00.00399.10
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

23-467360/11/60029_
0.0100144575060.00.04387.30
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

24-429051/119/58018K
0.1810142735650.61.36372.46
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

25-4592213/34/57657K
0.060231434558445.90.19384.17
10.13.0.164http/1.1sugar.radioacktiva.com:80GET /v2/_catalog HTTP/1.1

26-4-0/0/57604.
0.00530144741600.00.00369.21
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

27-4-0/0/55314.
0.00550137008680.00.00360.87
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

28-464360/13/52432_
0.0201135563820.00.03339.65
10.13.0.164http/1.1sugar.los40.com.mx:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

29-4-0/0/51220.
0.0010135121080.00.00325.60
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

30-448960/63/49648R
0.0916242127631540.00.73332.64
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

31-456110/5/48445R
0.02260125326280.00.02308.91
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

32-4-0/0/43783.
0.00480118111760.00.00293.51
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

33-465903/7/37779W
0.0200108753393.60.01237.01
10.13.0.164http/1.1sugar.radioacktiva.com:80GET /server-status HTTP/1.1

34-466131/6/33372K
0.011099188210.60.01216.74
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

35-4-0/0/29079.
0.0062091931340.00.00190.19
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

36-4-0/0/24709.
0.0061088610810.00.00162.14
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

37-431420/40/17751R
0.0922071083710.00.50111.01
10.13.1.56http/1.1

38-449340/73/17506R
0.0828072195050.00.47115.27
10.13.1.56http/1.1sugar.caracol.com.co:80GET /js/validations/checkUrlWeb.js HTTP/1.1

39-466211/49/13824K
0.050265532398.70.4689.74
10.13.1.56http/1.1sugar.radioacktiva.com:80GET /server-status HTTP/1.1

40-4-0/0/9858.
0.0075059378250.00.0063.91
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

41-4-0/0/9446.
0.0072059273400.00.0061.13
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

42-4-0/0/8268.
0.003322058083590.00.0050.34
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

43-4-0/0/5463.
0.003406050255390.00.0032.40
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

44-4-0/0/4817.
0.003230048174210.00.0026.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

45-4-0/0/4417.
0.003378048833610.00.0027.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

46-4-0/0/4052.
0.003372045691630.00.0027.35
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

47-4-0/0/4135.
0.003213046608020.00.0025.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

48-4-0/0/2728.
0.003206045231060.00.0014.48
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

49-4-0/0/2812.
0.003190043214550.00.0018.73
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

50-4-0/0/2941.
0.003249043732440.00.0015.80
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

51-4-0/0/3356.
0.003358045024890.00.0021.40
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

52-4-0/0/3324.
0.00</

Found on 2023-09-22 10:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31821e0dc7821e0dc709cae40f

Apache Status

Apache Server Status for seguro.radioacktiva.com (via 10.13.0.187)

Server Version: Apache/2.4.57 () OpenSSL/1.0.2k-fips PHP/5.5.38
Server MPM: prefork
Server Built: May  3 2023 16:00:14

Current Time: Friday, 22-Sep-2023 12:58:18 CEST
Restart Time: Monday, 18-Sep-2023 10:25:02 CEST
Parent Server Config. Generation: 5
Parent Server MPM Generation: 4
Server uptime:  4 days 2 hours 33 minutes 15 seconds
Server load: 0.34 0.26 0.28
Total accesses: 2579271 - Total Traffic: 16.1 GB - Total Duration: 1358072086
CPU Usage: u8 s187.51 cu2849.2 cs2901.72 - 1.68% CPU load
7.27 requests/sec - 47.5 kB/second - 6.5 kB/request - 526.533 ms/request
27 requests currently being processed, 6 idle workers
RKWRRKRRRRRRR_RKRRRR__._K_.._.RR.KK..RRK........................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-453910/25/65206R
0.05220156099200.00.08428.66
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

1-473211/48/68132K
0.0420165363130.60.40437.45
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

2-4639233/44/67708W
0.060016491413116.30.25439.71
10.13.1.56http/1.1sugar.radioacktiva.com:80GET /server-status HTTP/1.1

3-4293800/126/65952R
0.32300160789580.01.01429.58
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/validations/checkNick.js HTTP/1.1

4-428810/84/67293R
0.1422126161144910.00.68425.43
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

5-4271961/106/67871K
0.3030164077570.60.57441.94
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

6-473330/2/67425R
0.00180159715590.00.00442.42
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

7-414470/136/65200R
0.23305154864130.01.54412.46
10.13.0.164http/1.1sugar.caracol.com.co:80GET /js/jquery-nightly.pack.js HTTP/1.1

8-474740/0/67125R
0.00230162848910.00.00443.62
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

9-437270/33/67565R
0.08280163224610.00.22447.48
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

10-455490/21/66316R
0.0428238159382960.00.09436.25
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

11-464090/2/65830R
0.01160158726720.00.01434.27
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

12-476200/1/62914R
0.0040156555730.00.00417.08
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

13-461910/36/63543_
0.05023154203240.00.54414.58
10.13.1.56http/1.1sugar.diarioas.com:80GET /preface.html?backURL=https%3A%2F%2Fasfan.as.com%2Fconectar

14-417170/50/64366R
0.14180156205540.00.16435.71
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

15-473355/5/64480K
0.010211567381913.30.01419.05
10.13.0.164http/1.1sugar.radioacktiva.com:80GET /s/4343e26333e2833313e2830313/_/;/META-INF/maven/com.atlass

16-476750/4/61483R
0.0060148992190.00.01399.99
10.13.1.56http/1.1sugar.los40.com.mx:80GET /config.json HTTP/1.1

17-446520/59/61555R
0.08150151394730.00.47406.36
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

18-455720/70/62868R
0.0861152869580.00.61410.67
10.13.0.164http/1.1sugar.los40.com.mx:80GET /s/9343e26323e26363e28313/_/;/META-INF/maven/com.atlassian.

19-447250/68/64804R
0.1060156401220.00.32422.79
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.env HTTP/1.1

20-473620/20/63309_
0.010119155959680.00.10411.79
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

21-478090/0/59904_
0.0010148685540.00.00389.44
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

22-4-0/0/60210.
0.00270149889020.00.00399.10
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

23-467360/11/60029_
0.0130144575060.00.04387.30
10.13.1.159http/1.1sistemas:80GET /index.html HTTP/1.1

24-429051/119/58018K
0.1830142735650.61.36372.46
10.13.1.56http/1.1sistemas:80GET /index.html HTTP/1.1

25-459220/42/57665_
0.0600143465770.00.22384.19
10.13.0.164http/1.1sugar.los40.com.mx:80GET /.git/config HTTP/1.1

26-4-0/0/57604.
0.00550144741600.00.00369.21
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

27-4-0/0/55314.
0.00570137008680.00.00360.87
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

28-464360/13/52432_
0.0221135563820.00.03339.65
10.13.0.164http/1.1sugar.los40.com.mx:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

29-4-0/0/51220.
0.0030135121080.00.00325.60
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

30-448960/63/49648R
0.0919242127631540.00.73332.64
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

31-456110/5/48445R
0.02280125326280.00.02308.91
10.13.0.164http/1.1sistemas:80GET /index.html HTTP/1.1

32-4-0/0/43783.
0.00500118111760.00.00293.51
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

33-465908/12/37784K
0.0211131087610129.80.04237.04
10.13.0.164http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

34-466131/6/33372K
0.013099188210.60.01216.74
10.13.0.104http/1.1sistemas:80GET /index.html HTTP/1.1

35-4-0/0/29079.
0.0064091931340.00.00190.19
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

36-4-0/0/24709.
0.0063088610810.00.00162.14
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

37-431420/40/17751R
0.0924071083710.00.50111.01
10.13.1.56http/1.1

38-449340/73/17506R
0.0830072195050.00.47115.27
10.13.1.56http/1.1sugar.caracol.com.co:80GET /js/validations/checkUrlWeb.js HTTP/1.1

39-466213/51/13826K
0.051110655346314.20.4789.74
10.13.1.56http/1.1sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

40-4-0/0/9858.
0.0077059378250.00.0063.91
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

41-4-0/0/9446.
0.0074059273400.00.0061.13
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

42-4-0/0/8268.
0.003324058083590.00.0050.34
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

43-4-0/0/5463.
0.003408050255390.00.0032.40
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

44-4-0/0/4817.
0.003232048174210.00.0026.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

45-4-0/0/4417.
0.003380048833610.00.0027.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

46-4-0/0/4052.
0.003374045691630.00.0027.35
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

47-4-0/0/4135.
0.003215046608020.00.0025.75
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

48-4-0/0/2728.
0.003208045231060.00.0014.48
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

49-4-0/0/2812.
0.003192043214550.00.0018.73
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

50-4-0/0/2941.
0.003251043732440.00.0015.80
::1http/1.1sistemas:80OPTIONS * HTTP/1.0

51-4-0/0/3356.
0.003360045024890.00.0021.40
::1http/1.1

Found on 2023-09-22 10:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b27067b9b27067b9f69ea10c

Apache Status

Apache Server Status for seguro.radioacktiva.com

Server Version: Apache/2.2.15 (Unix) DAV/2 mod_fastcgi/2.4.6
Server Built: Jun 19 2018 15:45:13

Current Time: Friday, 07-Oct-2022 12:10:57 CEST
Restart Time: Friday, 07-Oct-2022 03:22:05 CEST
Parent Server Generation: 137
Server uptime:  8 hours 48 minutes 52 seconds
Total accesses: 158137 - Total Traffic: 828.3 MB
CPU Usage: u1.65 s1.33 cu0 cs0 - .00939% CPU load
4.98 requests/sec - 26.7 kB/second - 5.4 kB/request
41 requests currently being processed, 4 idle workers
RRRRRRRRRRR_RRRWRRRR_RRRRRRWRR_WR.RR..RRR..R._R...RRR...........
....R...........................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-137299970/2/3329R
0.00720.00.0318.36
??..reading.. 

1-137299560/34/3068R
0.0322900.00.1314.56
??..reading.. 

2-137292040/95/3331R
0.071400.00.6017.63
??..reading.. 

3-137294730/37/3447R
0.011400.00.2020.98
??..reading.. 

4-137299600/20/3311R
0.023400.00.0418.33
??..reading.. 

5-137300010/5/3279R
0.00200.00.0416.34
??..reading.. 

6-137293590/123/3500R
0.08201800.01.4421.12
??..reading.. 

7-137295040/60/3437R
0.043800.00.2718.96
??..reading.. 

8-137292450/107/3566R
0.07700.00.4319.06
??..reading.. 

9-137294610/40/3344R
0.023700.00.2014.20
??..reading.. 

10-137295050/39/3381R
0.0237940.00.2917.04
??..reading.. 

11-137289950/183/3304_
0.14010.01.5618.12
10.13.1.75sugar.radioacktiva.comGET / HTTP/1.1

12-137295320/14/3284R
0.001700.00.0416.32
??..reading.. 

13-137295780/86/3234R
0.0517880.00.3116.14
??..reading.. 

14-137296010/31/3097R
0.0235330.00.1019.77
??..reading.. 

15-137294450/41/3264W
0.02000.00.4618.60
10.13.0.74sugar.radioacktiva.comGET /s/31332e3232352e37382e313033/_/;/META-INF/maven/com.atlass

16-137292300/63/3209R
0.0422950.00.4317.01
??..reading.. 

17-137299980/4/3192R
0.007240.00.1019.70
??..reading.. 

18-137299920/6/2992R
0.0024920.00.0014.44
??..reading.. 

19-137295390/14/2973R
0.004930.00.1213.65
??..reading.. 

20-137299990/25/3184_
0.000280.00.1316.20
10.13.0.74sugar.radioacktiva.comGET /api/search?folderIds=0 HTTP/1.1

21-137294690/16/3191R
0.011400.00.0117.48
??..reading.. 

22-137293620/107/2969R
0.06200.01.0614.69
??..reading.. 

23-137293630/56/3120R
0.03200.00.3216.25
??..reading.. 

24-137294930/29/3080R
0.0256970.00.0316.19
??..reading.. 

25-137290810/69/2998R
0.055700.00.4816.31
??..reading.. 

26-137296780/19/3246R
0.002100.00.4117.55
??..reading.. 

27-137300030/2/2732W
0.00000.00.0014.95
10.13.1.75sugar.radioacktiva.comGET /server-status HTTP/1.1

28-137294030/90/2802R
0.05200.00.9115.21
??..reading.. 

29-137294170/57/2612R
0.033300.01.2615.28
??..reading.. 

30-137300040/1/2481_
0.00010.00.0015.51
10.13.0.74sugar.radioacktiva.comGET / HTTP/1.1

31-137300050/0/2547W
0.02000.00.0014.73
10.13.0.74sugar.radioacktiva.comGET /.env HTTP/1.1

32-137294310/62/2660R
0.04302600.01.0516.07
??..reading.. 

33-137-0/0/2750.
0.0219400.00.0012.93
::1sistemasOPTIONS * HTTP/1.0

34-137294370/47/2575R
0.02200.00.6014.23
??..reading.. 

35-137289320/162/2423R
0.12372000.02.7915.13
??..reading.. 

36-137-0/0/2267.
0.0024900.00.0010.43
::1sistemasOPTIONS * HTTP/1.0

37-137-0/0/2574.
0.0022500.00.0012.96
::1sistemasOPTIONS * HTTP/1.0

38-137295080/38/2009R
0.02231190.00.347.90
??..reading.. 

39-137295090/26/2071R
0.013700.00.069.87
??..reading.. 

40-137295100/29/2019R
0.013700.00.2912.84
??..reading.. 

41-137-0/0/2038.
0.0022400.00.0010.70
::1sistemasOPTIONS * HTTP/1.0

42-137-0/0/1540.
0.0023600.00.007.52
::1sistemasOPTIONS * HTTP/1.0

43-137295470/43/1529R
0.02200.00.469.18
??..reading.. 

44-137-0/0/1082.
0.0024500.00.005.03
::1sistemasOPTIONS * HTTP/1.0

45-137295490/42/1218_
0.020890.00.317.05
10.13.1.75sugar.crmobile.prisadigital.comGET /radiocser/app/mobileService.php?&operation%40serv=userGetB

46-137295500/57/820R
0.043700.00.314.22
??..reading.. 

47-137-0/0/697.
0.0024800.00.002.69
::1sistemasOPTIONS * HTTP/1.0

48-137-0/0/388.
0.0423500.00.001.26
::1sistemasOPTIONS * HTTP/1.0

49-137-0/0/614.
0.0024300.00.003.92
::1sistemasOPTIONS * HTTP/1.0

50-137290260/130/476R
0.0923720.00.793.94
??..reading.. 

51-137291700/51/470R
0.0355400.00.573.36
??..reading.. 

52-137295530/43/418R
0.0221080.00.662.68
??..reading.. 

53-137-0/0/581.
0.0050200.00.003.14
::1sistemasOPTIONS * HTTP/1.0

54-137-0/0/208.
0.0064600.00.000.52
::1sistemasOPTIONS * HTTP/1.0

55-137-0/0/339.
0.0168800.00.002.27
::1sistemasOPTIONS * HTTP/1.0

56-137-0/0/253.
0.0078300.00.000.49
::1sistemasOPTIONS * HTTP/1.0

57-137-0/0/272.
0.0071700.00.001.71
::1sistemasOPTIONS * HTTP/1.0

58-137-0/0/342.
0.0737500.00.003.12
::1sistemasOPTIONS * HTTP/1.0

59-137-0/0/189.
0.0078200.00.001.16
::1sistemasOPTIONS * HTTP/1.0

60-137-0/0/103.
0.0073000.00.000.43
::1sistemasOPTIONS * HTTP/1.0

61-137-0/0/210.
0.0057400.00.001.09
::1sistemasOPTIONS * HTTP/1.0

62-137-0/0/352.
0.0078700.00.002.57
::1sistemasOPTIONS * HTTP/1.0

63-137-0/0/139.
0.0077700.00.000.54
::1sistemasOPTIONS * HTTP/1.0

64-137-0/0/224.
0.0074800.00.001.74
::1sistemasOPTIONS * HTTP/1.0

65-137-0/0/478.
0.0077000.00.001.85
::1sistemasOPTIONS * HTTP/1.0

66-137-0/0/190.
0.0421500.00.001.10
::1sistemasOPTIONS * HTTP/1.0

67-137-

Found on 2022-10-07 10:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b27067b9b27067b9f63126e5

Apache Status

Apache Server Status for seguro.radioacktiva.com

Server Version: Apache/2.2.15 (Unix) DAV/2 mod_fastcgi/2.4.6
Server Built: Jun 19 2018 15:45:13

Current Time: Friday, 07-Oct-2022 12:10:57 CEST
Restart Time: Friday, 07-Oct-2022 03:26:06 CEST
Parent Server Generation: 137
Server uptime:  8 hours 44 minutes 51 seconds
Total accesses: 157164 - Total Traffic: 815.4 MB
CPU Usage: u2.19 s1.67 cu0 cs0 - .0123% CPU load
4.99 requests/sec - 26.5 kB/second - 5.3 kB/request
36 requests currently being processed, 4 idle workers
RRRRRRWRRWRRRRRRRRRRRRR_RRRR.R._........R.RR....._W...R..R_..R..
....R...........................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-13717800/25/3513R
0.00000.00.1714.39
??..reading.. 

1-13717430/41/3498R
0.022500.00.1317.35
??..reading.. 

2-13722100/9/3244R
0.004500.00.0516.11
??..reading.. 

3-13717490/27/3227R
0.0112380.00.4818.14
??..reading.. 

4-13714130/96/2923R
0.074500.00.3416.10
??..reading.. 

5-13722220/31/3379R
0.011900.00.1418.85
??..reading.. 

6-13717880/32/3241W
0.01000.00.1416.73
10.13.0.74sugar.radioacktiva.comGET /server-status HTTP/1.1

7-13722120/34/3332R
0.031300.00.0616.28
??..reading.. 

8-13720170/15/3130R
0.001200.00.0316.66
??..reading.. 

9-13717710/19/3211W
0.00000.00.1021.17
10.13.1.75sugar.crmobile.prisadigital.comPOST /arc/mobileService.php?portal@serv=61ae4583-4836-3873-24ac

10-13717530/55/3402R
0.03400.00.7522.31
??..reading.. 

11-13718360/44/3211R
0.03400.00.2116.41
??..reading.. 

12-13718110/45/3375R
0.03400.00.3518.17
??..reading.. 

13-13717680/31/3352R
0.01100.00.8218.71
??..reading.. 

14-13718380/39/3025R
0.03100.00.2115.68
??..reading.. 

15-13718230/17/2934R
0.001300.00.4714.70
??..reading.. 

16-13717910/65/3054R
0.0518850.00.5317.62
??..reading.. 

17-13718270/22/3160R
0.01400.00.1515.90
??..reading.. 

18-1379570/186/3177R
0.14100.01.0917.31
??..reading.. 

19-13713210/86/2991R
0.064500.00.3415.26
??..reading.. 

20-13718280/22/3181R
0.001290.00.3218.32
??..reading.. 

21-13717940/35/2961R
0.021200.00.1615.30
??..reading.. 

22-13722130/11/3027R
0.014500.00.0615.37
??..reading.. 

23-13722280/12/3122_
0.000270.00.2817.97
10.13.0.74sugar.radioacktiva.comGET /config.json HTTP/1.1

24-13722150/19/3030R
0.0134900.00.0518.63
??..reading.. 

25-13718290/31/2815R
0.034500.00.7615.18
??..reading.. 

26-13714290/97/3136R
0.075700.00.6918.70
??..reading.. 

27-13722300/4/3008R
0.000340.00.0116.96
??..reading.. 

28-137-0/0/2866.
0.002400.00.0015.16
::1sistemasOPTIONS * HTTP/1.0

29-13716890/37/2852R
0.011300.00.8112.45
??..reading.. 

30-137-0/0/2660.
0.001200.00.0014.52
::1sistemasOPTIONS * HTTP/1.0

31-13720190/38/2896_
0.020280.00.4816.98
10.13.0.74sugar.radioacktiva.comGET /login.action HTTP/1.1

32-137-0/0/2599.
0.004600.00.0013.09
::1sistemasOPTIONS * HTTP/1.0

33-137-0/0/2502.
0.0436900.00.0015.46
::1sistemasOPTIONS * HTTP/1.0

34-137-0/0/2780.
0.0944500.00.0011.94
::1sistemasOPTIONS * HTTP/1.0

35-137-0/0/2667.
0.1142900.00.0015.25
::1sistemasOPTIONS * HTTP/1.0

36-137-0/0/2961.
0.0043800.00.0018.04
::1sistemasOPTIONS * HTTP/1.0

37-137-0/0/2590.
0.0033300.00.0012.43
::1sistemasOPTIONS * HTTP/1.0

38-137-0/0/2442.
0.0320700.00.0013.16
::1sistemasOPTIONS * HTTP/1.0

39-137-0/0/2133.
0.0036800.00.009.28
::1sistemasOPTIONS * HTTP/1.0

40-13713520/70/1962R
0.054500.00.9012.59
??..reading.. 

41-137-0/0/1840.
0.1020600.00.007.95
::1sistemasOPTIONS * HTTP/1.0

42-1379220/186/1779R
0.1253620.01.149.68
??..reading.. 

43-13715160/74/1657R
0.04200.00.096.56
??..reading.. 

44-137-0/0/1942.
0.05100.00.009.30
::1sistemasOPTIONS * HTTP/1.0

45-137-0/0/1111.
0.0030400.00.005.19
::1sistemasOPTIONS * HTTP/1.0

46-137-0/0/1225.
0.09000.00.005.59
::1sistemasOPTIONS * HTTP/1.0

47-137-0/0/991.
0.06400.00.005.52
::1sistemasOPTIONS * HTTP/1.0

48-137-0/0/574.
0.0224900.00.001.40
::1sistemasOPTIONS * HTTP/1.0

49-13716960/52/388_
0.030280.00.511.56
10.13.1.75sugar.radioacktiva.comGET /s/31332e3232352e37382e313132/_/;/META-INF/maven/com.atlass

50-13716970/48/260W
0.03000.00.482.00
10.13.0.74sugar.radioacktiva.comGET /debug/default/view?panel=config HTTP/1.1

51-137-0/0/421.
0.0125700.00.001.51
::1sistemasOPTIONS * HTTP/1.0

52-137-0/0/343.
0.011300.00.001.86
::1sistemasOPTIONS * HTTP/1.0

53-137-0/0/238.
0.0324400.00.000.84
::1sistemasOPTIONS * HTTP/1.0

54-13717010/42/253R
0.031200.00.151.06
??..reading.. 

55-137-0/0/313.
0.0036700.00.001.71
::1sistemasOPTIONS * HTTP/1.0

56-137-0/0/143.
0.0047000.00.000.55
::1sistemasOPTIONS * HTTP/1.0

57-13717040/60/167R
0.031200.00.130.84
??..reading.. 

58-13717050/59/195_
0.03010.00.320.69
10.13.0.74sugar.radioacktiva.comGET / HTTP/1.1

59-137-0/0/137.
0.0024500.00.000.24
::1sistemasOPTIONS * HTTP/1.0

60-137-0/0/112.
0.0046800.00.000.74
::1sistemasOPTIONS * HTTP/1.0

61-13717080/42/225R
0.0212320.00.572.08
??..reading.. 

62-137-0/0/224.
0.0048100.00.000.94
::1sistemasOPTIONS * HTTP/1.0

63-137-0/0/280.
0.0414600.00.001.35
::1sistemasOPTIONS * HTTP/1.0

64-137-0/0/89.
0.0047700.00.000.49
::1sistemasOPTIONS * HTTP/1.0

65-137-0/0/97.
0.0043900.00.000.50
::1sistemasOPTIONS * HTTP/1.0

66-137-0/0/368.
0.0048000.00.001.93
::1sistemasOPTIONS * HTTP/1.0

67-137-0/0/65

Found on 2022-10-07 10:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b27067b9b27067b95f358d6c

Apache Status

Apache Server Status for seguro.radioacktiva.com

Server Version: Apache/2.2.15 (Unix) DAV/2 mod_fastcgi/2.4.6
Server Built: Jun 19 2018 15:45:13

Current Time: Friday, 07-Oct-2022 12:10:57 CEST
Restart Time: Friday, 07-Oct-2022 03:22:05 CEST
Parent Server Generation: 137
Server uptime:  8 hours 48 minutes 52 seconds
Total accesses: 158147 - Total Traffic: 828.3 MB
CPU Usage: u1.65 s1.33 cu0 cs0 - .00939% CPU load
4.98 requests/sec - 26.7 kB/second - 5.4 kB/request
39 requests currently being processed, 6 idle workers
RRRRR_RRRRR_RRR_RRRR_RRRRRR_RRWWR.RR..RRR..R._R...RRW...........
....R...........................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-137299970/2/3329R
0.00720.00.0318.36
??..reading.. 

1-137299560/34/3068R
0.0322900.00.1314.56
??..reading.. 

2-137292040/95/3331R
0.071400.00.6017.63
??..reading.. 

3-137294730/37/3447R
0.011400.00.2020.98
??..reading.. 

4-137299600/20/3311R
0.023400.00.0418.33
??..reading.. 

5-137300010/6/3280_
0.000560.00.0416.34
10.13.0.74sugar.radioacktiva.comGET /telescope/requests HTTP/1.1

6-137293590/123/3500R
0.08201800.01.4421.12
??..reading.. 

7-137295040/60/3437R
0.043800.00.2718.96
??..reading.. 

8-137292450/107/3566R
0.07700.00.4319.06
??..reading.. 

9-137294610/40/3344R
0.023700.00.2014.20
??..reading.. 

10-137295050/39/3381R
0.0237940.00.2917.04
??..reading.. 

11-137289950/184/3305_
0.150400.01.5618.12
10.13.0.74sugar.radioacktiva.comGET /api/search?folderIds=0 HTTP/1.1

12-137295320/14/3284R
0.001700.00.0416.32
??..reading.. 

13-137295780/86/3234R
0.0517880.00.3116.14
??..reading.. 

14-137296010/31/3097R
0.0235330.00.1019.77
??..reading.. 

15-137294450/43/3266_
0.03020.00.4618.60
10.13.1.75sugar.radioacktiva.comGET / HTTP/1.1

16-137292300/63/3209R
0.0422950.00.4317.01
??..reading.. 

17-137299980/4/3192R
0.007240.00.1019.70
??..reading.. 

18-137299920/6/2992R
0.0025920.00.0014.44
??..reading.. 

19-137295390/14/2973R
0.004930.00.1213.65
??..reading.. 

20-137299990/26/3185_
0.000450.00.1316.20
10.13.0.74sugar.radioacktiva.comGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

21-137294690/16/3191R
0.011500.00.0117.48
??..reading.. 

22-137293620/107/2969R
0.06200.01.0614.69
??..reading.. 

23-137293630/56/3120R
0.03200.00.3216.25
??..reading.. 

24-137294930/29/3080R
0.0256970.00.0316.19
??..reading.. 

25-137290810/69/2998R
0.055700.00.4816.31
??..reading.. 

26-137296780/19/3246R
0.002100.00.4117.55
??..reading.. 

27-137300030/4/2734_
0.00010.00.0114.96
10.13.1.75sugar.radioacktiva.comGET /?rest_route=/wp/v2/users/ HTTP/1.1

28-137294030/90/2802R
0.05200.00.9115.21
??..reading.. 

29-137294170/57/2612R
0.033300.01.2615.28
??..reading.. 

30-137300040/2/2482W
0.00000.00.0015.51
10.13.1.75sugar.radioacktiva.comGET /debug/default/view?panel=config HTTP/1.1

31-137300050/1/2548W
0.00000.00.0014.73
10.13.1.75sugar.radioacktiva.comGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

32-137294310/62/2660R
0.04302600.01.0516.07
??..reading.. 

33-137-0/0/2750.
0.0219400.00.0012.93
::1sistemasOPTIONS * HTTP/1.0

34-137294370/47/2575R
0.02200.00.6014.23
??..reading.. 

35-137289320/162/2423R
0.12372000.02.7915.13
??..reading.. 

36-137-0/0/2267.
0.0024900.00.0010.43
::1sistemasOPTIONS * HTTP/1.0

37-137-0/0/2574.
0.0022500.00.0012.96
::1sistemasOPTIONS * HTTP/1.0

38-137295080/38/2009R
0.02231190.00.347.90
??..reading.. 

39-137295090/26/2071R
0.013700.00.069.87
??..reading.. 

40-137295100/29/2019R
0.013700.00.2912.84
??..reading.. 

41-137-0/0/2038.
0.0022400.00.0010.70
::1sistemasOPTIONS * HTTP/1.0

42-137-0/0/1540.
0.0023600.00.007.52
::1sistemasOPTIONS * HTTP/1.0

43-137295470/43/1529R
0.02200.00.469.18
??..reading.. 

44-137-0/0/1082.
0.0024500.00.005.03
::1sistemasOPTIONS * HTTP/1.0

45-137295490/43/1219_
0.020370.00.317.05
10.13.1.75sugar.radioacktiva.comGET /.git/config HTTP/1.1

46-137295500/57/820R
0.043700.00.314.22
??..reading.. 

47-137-0/0/697.
0.0024800.00.002.69
::1sistemasOPTIONS * HTTP/1.0

48-137-0/0/388.
0.0423500.00.001.26
::1sistemasOPTIONS * HTTP/1.0

49-137-0/0/614.
0.0024300.00.003.92
::1sistemasOPTIONS * HTTP/1.0

50-137290260/130/476R
0.0923720.00.793.94
??..reading.. 

51-137291700/51/470R
0.0355400.00.573.36
??..reading.. 

52-137295530/43/418W
0.02000.00.662.68
10.13.1.75sugar.radioacktiva.comGET /server-status HTTP/1.1

53-137-0/0/581.
0.0050200.00.003.14
::1sistemasOPTIONS * HTTP/1.0

54-137-0/0/208.
0.0064600.00.000.52
::1sistemasOPTIONS * HTTP/1.0

55-137-0/0/339.
0.0168800.00.002.27
::1sistemasOPTIONS * HTTP/1.0

56-137-0/0/253.
0.0078300.00.000.49
::1sistemasOPTIONS * HTTP/1.0

57-137-0/0/272.
0.0071700.00.001.71
::1sistemasOPTIONS * HTTP/1.0

58-137-0/0/342.
0.0737500.00.003.12
::1sistemasOPTIONS * HTTP/1.0

59-137-0/0/189.
0.0078200.00.001.16
::1sistemasOPTIONS * HTTP/1.0

60-137-0/0/103.
0.0073000.00.000.43
::1sistemasOPTIONS * HTTP/1.0

61-137-0/0/210.
0.0057500.00.001.09
::1sistemasOPTIONS * HTTP/1.0

62-137-0/0/352.
0.0078700.00.002.57
::1sistemasOPTIONS * HTTP/1.0

63-137-0/0/139.
0.0077700.00.000.54
::1sistemasOPTIONS * HTTP/1.0

64-137-0/0/224.
0.0074800.00.001.74
::1sistemasOPTIONS * HTTP/1.0

65-137-0/0/478.
0.0077000.00.001.85
::1sistemasOPTIONS * HTTP/1.0

66-137-0/0/190.
0.0421500.00.001.1

Found on 2022-10-07 10:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b27067b9b27067b9c0999bf6

Apache Status

Apache Server Status for seguro.radioacktiva.com

Server Version: Apache/2.2.15 (Unix) DAV/2 mod_fastcgi/2.4.6
Server Built: Jun 19 2018 15:45:13

Current Time: Friday, 07-Oct-2022 12:10:57 CEST
Restart Time: Friday, 07-Oct-2022 03:51:06 CEST
Parent Server Generation: 136
Server uptime:  8 hours 19 minutes 51 seconds
Total accesses: 148549 - Total Traffic: 777.9 MB
CPU Usage: u2.13 s1.47 cu0 cs0 - .012% CPU load
4.95 requests/sec - 26.6 kB/second - 5.4 kB/request
38 requests currently being processed, 7 idle workers
RRRRRRRRRRRRRRRRRRRRRR_R_RRRRRRRRR_R_WW_RR__..R.................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-136160890/7/3090R
0.0047220.00.0015.20
??..reading.. 

1-136151940/144/3073R
0.082300.00.6718.29
??..reading.. 

2-136160940/5/3144R
0.00482610.00.0016.04
??..reading.. 

3-136160040/84/3229R
0.0655880.00.5214.81
??..reading.. 

4-136161080/17/3235R
0.00543850.00.1817.88
??..reading.. 

5-136159930/39/3486R
0.025610.00.2516.07
??..reading.. 

6-136161160/26/3233R
0.011000.00.0817.73
??..reading.. 

7-136151600/174/2922R
0.115600.00.5717.68
??..reading.. 

8-136149190/254/3199R
0.17472150.01.1117.49
??..reading.. 

9-136161370/4/2971R
0.003810.00.0016.61
??..reading.. 

10-136161170/15/2978R
0.002300.00.0219.41
??..reading.. 

11-136160630/35/3039R
0.0223880.00.1018.97
??..reading.. 

12-136157240/105/3086R
0.061000.00.3214.67
??..reading.. 

13-136161410/6/2931R
0.002300.00.0316.19
??..reading.. 

14-136160950/23/2960R
0.00232510.00.0214.25
??..reading.. 

15-136156660/179/3125R
0.115500.00.7317.54
??..reading.. 

16-136157010/131/3511R
0.0826230.00.9816.19
??..reading.. 

17-136159680/44/2798R
0.0237860.00.1515.31
??..reading.. 

18-136159120/58/3265R
0.042300.00.1617.46
??..reading.. 

19-136152630/109/3133R
0.0755900.00.3915.11
??..reading.. 

20-136160790/13/3028R
0.0054900.00.0616.13
??..reading.. 

21-136160960/48/2977R
0.03391070.00.0616.77
??..reading.. 

22-136147560/201/2888_
0.141920.00.8615.61
10.13.0.74sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

23-136161180/21/3022R
0.011000.00.0812.37
??..reading.. 

24-136160180/52/2667_
0.020220.00.1416.06
10.13.0.74sugar.oxigeno.fmGET /preface.html?backURL=https%3A%2F%2Fusuarios.oxigeno.fm%2Fr

25-136157020/15/2724R
0.004800.00.0415.62
??..reading.. 

26-136161000/47/2868R
0.0332310.00.0512.47
??..reading.. 

27-136147320/207/2933R
0.1456940.01.8718.87
??..reading.. 

28-136157390/52/2540R
0.022600.00.0213.18
??..reading.. 

29-136160240/53/2626R
0.021000.00.2014.72
??..reading.. 

30-136161010/11/2490R
0.0023310.00.1211.50
??..reading.. 

31-136160800/18/2683R
0.00541500.00.0616.81
??..reading.. 

32-136157800/124/2512R
0.085500.00.5013.75
??..reading.. 

33-136161440/5/2480R
0.001700.00.0211.78
??..reading.. 

34-136161020/23/2267_
0.00020.00.0513.39
10.13.1.75sugar.radioacktiva.comGET / HTTP/1.1

35-136159620/36/2471R
0.0143890.00.0813.37
??..reading.. 

36-136161450/5/2263_
0.001590.00.2810.79
10.13.0.74sugar.oxigeno.fmGET /registro/?backURL=bJWzqExcz1sAR4A46FYhGwGrW%2B0IgmSyBfMSiG

37-136161480/5/2105W
0.00000.00.0012.01
10.13.0.74sugar.elpais.comGET /newsletters/lnp/1/337/ HTTP/1.1

38-136161490/4/2208W
0.00000.00.0011.92
10.13.1.75sugar.radioacktiva.comGET /server-status HTTP/1.1

39-136160250/105/2171_
0.060870.00.5912.03
10.13.1.75sugar.crmobile.prisadigital.comGET /radiocser/app/mobileService.php?&operation%40serv=userGetB

40-136154160/108/1772R
0.0647710.01.1210.25
??..reading.. 

41-136160810/32/2045R
0.004900.00.2010.35
??..reading.. 

42-136161500/4/1739_
0.000880.00.009.27
10.13.1.75sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

43-136151180/120/1458_
0.090880.00.599.70
10.13.1.75sugar.crmobile.prisadigital.comGET /elpais/app/mobileService.php?portal%40serv=61ae4583-4836-3

44-136-0/0/1327.
0.1034400.00.007.49
::1sistemasOPTIONS * HTTP/1.0

45-136-0/0/883.
0.0746700.00.005.23
::1sistemasOPTIONS * HTTP/1.0

46-136159740/78/798R
0.041000.00.834.61
??..reading.. 

47-136-0/0/435.
0.0050800.00.002.78
::1sistemasOPTIONS * HTTP/1.0

48-136-0/0/1165.
0.01142300.00.006.93
::1sistemasOPTIONS * HTTP/1.0

49-136-0/0/265.
0.00209000.00.001.29
::1sistemasOPTIONS * HTTP/1.0

50-136-0/0/287.
0.05170400.00.001.66
::1sistemasOPTIONS * HTTP/1.0

51-136-0/0/368.
0.00327000.00.001.61
::1sistemasOPTIONS * HTTP/1.0

52-136-0/0/182.
0.01286200.00.001.00
::1sistemasOPTIONS * HTTP/1.0

53-136-0/0/230.
0.00319300.00.000.34
::1sistemasOPTIONS * HTTP/1.0

54-136-0/0/125.
0.00338700.00.000.93
::1sistemasOPTIONS * HTTP/1.0

55-136-0/0/177.
0.00331100.00.000.98
::1sistemasOPTIONS * HTTP/1.0

56-136-0/0/56.
0.00322900.00.000.02
::1sistemasOPTIONS * HTTP/1.0

57-136-0/0/163.
0.00323000.00.000.67
::1sistemasOPTIONS * HTTP/1.0

58-136-0/0/268.
0.00325700.00.001.33
::1sistemasOPTIONS * HTTP/1.0

59-136-0/0/165.
0.00330300.00.000.61
::1sistemasOPTIONS * HTTP/1.0

60-136-0/0/40.
0.00320900.00.000.07
::1sistemasOPTIONS * HTTP/1.0

61-136-0/0/71.
0.00334600.00.000.14
::1sistemasOPTIONS * HTTP/1.0

62-136-0/0/197.
0.00331800.00.001.16
::1sistemasOPTIONS * HTTP/1.0

63-136-0/0/33.
0.00329700.00.000.03
::1sistemasOPTIONS * HTTP/1.0

64-136-0/0/142.
0.00339100.00.000.87
::1sistemasOPTIONS * HTTP/1.0

65-136-0/0/98.
0.05270700.00.000.49
::1sistemasOPTI

Found on 2022-10-07 10:10

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: ensupp.jp
Port: 443
URL: https://ensupp.jp

First seen 2023-02-10 22:53
Last seen 2023-09-23 07:48
Open for 224 days

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f6170d508e6d0b65bede3fce5ede3fce5
```
Found 3 files trough .DS_Store spidering:

/.git
/cord
/phpMyAdmin
```
Found on 2023-02-10 22:53

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.alicezenmind.com
Port: 443
URL: https://www.alicezenmind.com

First seen 2022-12-12 22:52
Last seen 2023-06-15 04:47
Open for 184 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e2a8483d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thutuephan/AliceCloudResume
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX2V6OGFyRFZKWG40N3Y4VkZ1OFprdEVmWXUxVndTWDJRdUVyNg==
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2022-12-12 22:52

424 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.smebazaar.co.in
Port: 80
URL: http://www.smebazaar.co.in

First seen 2023-03-13 19:26

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb8df49588

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[submodule]
	active = .
[remote "origin"]
	url = https://github.com/iamuvg/sme-bazaar.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[lfs]
	repositoryformatversion = 0
[branch "beta-version"]
	remote = origin
	merge = refs/heads/beta-version

Found on 2023-03-13 19:26

432 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: smebazaar.co.in
Port: 80
URL: http://smebazaar.co.in

First seen 2023-03-13 19:26

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb8df49588

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[submodule]
	active = .
[remote "origin"]
	url = https://github.com/iamuvg/sme-bazaar.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[lfs]
	repositoryformatversion = 0
[branch "beta-version"]
	remote = origin
	merge = refs/heads/beta-version

Found on 2023-03-13 19:26

432 Bytes

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 13.225.78.103
Domain: topcontenido.mobi
Port: 443
URL: https://topcontenido.mobi

First seen 2023-03-01 20:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318c7008be8c7008be1405d99d

Apache Status

Apache Server Status for topcontenido.mobi (via 10.0.1.5)

Server Version: Apache/2.4.46 (Amazon)
Server MPM: prefork
Server Built: Aug 24 2020 18:40:26

Current Time: Wednesday, 01-Mar-2023 21:04:09 CET
Restart Time: Wednesday, 08-Feb-2023 01:16:45 CET
Parent Server Config. Generation: 17
Parent Server MPM Generation: 16
Server uptime:  21 days 19 hours 47 minutes 23 seconds
Server load: 3.16 3.11 3.15
Total accesses: 25047932 - Total Traffic: 1251.5 GB - Total Duration: 14845804432
CPU Usage: u119.97 s224.67 cu2997200 cs375071 - 179% CPU load
13.3 requests/sec - 0.7 MB/second - 52.4 kB/request - 592.696 ms/request
10 requests currently being processed, 3 idle workers
WWWWW_._W._WWW.W................................................
................................................................
................................................................
........
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-16114740/2/1958334W
1.410011008877050.00.19102320.07
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /auber-videos-432/index.html?clickid=63ffafb4a13471000155c1

1-1685980/17/1946000W
2.880010894015140.02.82101686.98
10.0.0.247http/1.1lws.alb.cloudioo.net:81GET /two-women-432/index.html?clickid=63ffafb87dc81c000160b7ca&

2-16163560/201/1922903W
24.680010839200290.08.39100585.47
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /hkq01cleaner/index.html?w_id=9343562126&a_id=635773488935&

3-16117760/214/1908639W
30.610010737003470.013.0099981.49
10.0.0.247http/1.1lws.alb.cloudioo.net:81GET /programmes/comedie/le-noel-de-virgin-radio-manu-payet-nico

4-1671110/27/1890094W
3.960010570048330.01.1898919.57
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230301210405ES46763ffafb5d8

5-1627370/62/1860782_
7.7402710450381480.02.2997357.90
10.0.0.241http/1.1wws.cloudioo.net:80POST /event/send HTTP/1.1

6-16-0/0/1833243.
0.000010258580110.00.0095872.82
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

7-1688550/15/1793565_
1.63037410041031870.00.4893754.29
10.0.0.241http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230301210407TR40363ffafb76c

8-1658250/41/1738532W
4.14009714711430.01.0689631.15
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230301210407TR30063ffafb7bd

9-16-0/0/1677130.
0.00309387925900.00.0087202.75
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

10-1643280/51/1513225_
6.72008485493020.02.7976353.20
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /favicon.ico HTTP/1.1

11-1658260/39/1324187W
5.41007457431840.01.8664565.00
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /orajhvid2-1000dq/index.html?dclid=CJOUvLjDu_0CFXGcJwId0PMB

12-16122160/6/1140267W
0.77006386895490.00.1454264.22
10.0.0.241http/1.1dob.api.cloudioo.net:80GET /detection-back?detection_session_id=20230301210408b42cb3c7

13-1696830/238/897247W
33.96005112576960.012.2342687.74
10.0.0.241http/1.1landings.api.cloudioo.net:80POST /dob/notification?cfg_sessionid=20230301210357ES89163ffafa

14-16-0/0/622853.
0.00203551856580.00.0029245.00
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

15-16122170/7/381087W
0.50002197052780.00.9617728.95
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /server-status HTTP/1.1

16-16-0/0/223573.
0.0022863141321501880.00.0010332.30
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230301202557AT92763ffa6c567

17-16-0/0/130850.
0.00327264851430630.00.006018.57
10.0.0.247http/1.1lws.alb.cloudioo.net:81GET /nctiktok/error.html?w_id=16703185630&p=23005279.android.co

18-16-0/0/85793.
0.003260291528219650.00.004112.61
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /downgmmult-1000dq/index.html?dclid=CNHunqW3u_0CFQ84GQodKlg

19-16-0/0/42751.
0.0034790347272360.00.001965.26
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

20-16-0/0/21448.
0.0052520222256190.00.00969.39
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

21-16-0/0/16966.
0.0051420134365120.00.00780.93
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

22-16-0/0/10967.
0.0051220157355250.00.00530.88
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

23-16-0/0/7415.
0.005046467137068450.00.00333.52
10.0.1.164http/1.1lws.alb.cloudioo.net:81GET /apkoyunlarindir2122938764aaa9-381/index.html HTTP/1.1

24-16-0/0/8564.
0.0052510143236130.00.00408.79
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

25-16-0/0/8410.
0.005253078800210.00.00364.76
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

26-16-0/0/8589.
0.005202081150370.00.00389.05
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

27-11-0/0/4803.
0.001792410120747220.00.00221.65
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

28-11-0/0/5262.
0.00179302068184520.00.00217.59
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

29-11-0/0/2177.
0.001793090105754640.00.00104.14
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

30-11-0/0/1845.
0.001793310100130610.00.0063.47
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

31-11-0/0/3872.
0.00179246056183130.00.00156.65
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

32-11-0/0/3256.
0.00179296041025690.00.00141.37
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

33-11-0/0/1758.
0.001792450101522900.00.0088.14
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

34-11-0/0/3590.
0.00179314046589100.00.00141.41
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

35-11-0/0/3215.
0.00179248044376240.00.00131.61
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

36-11-0/0/2861.
0.00179288038740870.00.00128.91
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

37-11-0/0/1283.
0.00179298092886980.00.0062.69
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

38-11-0/0/1655.
0.00179339027467760.00.0068.41
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

39-11-0/0/2181.
0.00179320029029660.00.0089.41
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

40-11-0/0/2019.
0.00179334026615520.00.0083.66
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

41-11-0/0/1072.
0.00179275017916100.00.0043.39
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

42-11-0/0/2560.
0.0017910041626548070.00.00128.64
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230227191907TR32463fcf41b26

43-11-0/0/1515.
0.0017909960819715790.00.0055.03
10.0.1.243http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230227191906TR98563fcf41aaa

44-11-0/0/627.
0.00179290017518350.00.0023.57
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

45-11-0/0/773.
0.00179305089122430.00.0029.85
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

46-11-0/0/290.
0.00179299086122020.00.0011.85
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

47-11-0/0/1049.
0.00179175018551500.00.0041.61
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

48-11-0/0/246.
0.00179301085097090.00.0010.11
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

49-11-0/0/397.
0.00179325086318150.00.0014.94
::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0

50-11-</

Found on 2023-03-01 20:04

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: juvpix.net
Port: 80
URL: http://juvpix.net

First seen 2022-10-10 05:53
Last seen 2023-03-01 17:18
Open for 142 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652211bef59a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nichesoftware/reporting_app5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2022-10-10 05:53

284 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: juvpix.net
Port: 443
URL: https://juvpix.net

First seen 2022-10-10 05:53
Last seen 2023-03-01 17:18
Open for 142 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652211bef59a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nichesoftware/reporting_app5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2022-10-10 05:53

284 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: link.lnkjmkt.net
Port: 443
URL: https://link.lnkjmkt.net

First seen 2022-10-11 04:13
Last seen 2023-02-23 11:06
Open for 135 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652211bef59a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nichesoftware/reporting_app5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2022-10-11 04:13

284 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: besttime.dig-bird.com
Port: 443
URL: https://besttime.dig-bird.com

First seen 2022-08-26 03:19
Last seen 2023-02-23 07:04
Open for 181 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652200f94a6a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.testbird.com:subscription/potato_besttime.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-08-26 03:19

281 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: poltimorefestival.co.uk
Port: 443
URL: https://poltimorefestival.co.uk

First seen 2023-02-09 02:44

Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec0470fd529ec316d2f8c9d2e2e7d32aca

Found 17 files trough .DS_Store spidering:

/contact.html
/css
/festival.html
/gallery.html
/images
/images/41789683_321183118430776_5331301552579674112_n.png
/images/backgrounds
/images/box
/images/gallery
/images/icons
/images/lineup
/images/logo
/images/partners
/index.html
/info.html
/js
/style.css

Found on 2023-02-09 02:44

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: www.zetwal.mq
Port: 443
URL: https://www.zetwal.mq

First seen 2023-01-30 00:31

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d396566a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:platypusagency/zetwal-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "release/v0.6.0"]
	remote = origin
	merge = refs/heads/release/v0.6.0
[branch "release/v0.8.0"]
	remote = origin
	merge = refs/heads/release/v0.8.0
[branch "release/v1.0.0"]
	remote = origin
	merge = refs/heads/release/v1.0.0
[branch "release/v1.1.0"]
	remote = origin
	merge = refs/heads/release/v1.1.0
[branch "release/v1.2.0"]
	remote = origin
	merge = refs/heads/release/v1.2.0
[branch "release/v1.2.1"]
	remote = origin
	merge = refs/heads/release/v1.2.1
[branch "release/v1.3.0"]
	remote = origin
	merge = refs/heads/release/v1.3.0
[branch "release/v1.3.1"]
	remote = origin
	merge = refs/heads/release/v1.3.1
[branch "release/v1.3.2"]
	remote = origin
	merge = refs/heads/release/v1.3.2
[branch "release/v1.4.0"]
	remote = origin
	merge = refs/heads/release/v1.4.0
[branch "release/v1.4.1"]
	remote = origin
	merge = refs/heads/release/v1.4.1
[branch "release/v1.4.2"]
	remote = origin
	merge = refs/heads/release/v1.4.2
[branch "release/v1.4.3"]
	remote = origin
	merge = refs/heads/release/v1.4.3
[branch "release/v1.4.5"]
	remote = origin
	merge = refs/heads/release/v1.4.5

Found on 2023-01-30 00:31

1.4 kBytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.27.23
Domain: mijnaccount.smol-development.nl
Port: 443
URL: https://mijnaccount.smol-development.nl

First seen 2022-09-08 01:19
Last seen 2022-12-16 10:40
Open for 99 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c6731298567312985269f719393ea116d843474b9b609517d

Found 92 files trough .DS_Store spidering:

/assets
/assets/animations
/assets/backgrounds
/assets/backgrounds/circles.png
/assets/brand
/assets/icons
/assets/icons/basket.svg
/assets/icons/book.svg
/assets/icons/brands
/assets/icons/brands/facebook.svg
/assets/icons/brands/instagram.svg
/assets/icons/bulk-pack.svg
/assets/icons/calendar.svg
/assets/icons/cancel.svg
/assets/icons/capsules.svg
/assets/icons/cards
/assets/icons/cards/amex.svg
/assets/icons/cards/default.svg
/assets/icons/cards/diners.svg
/assets/icons/cards/discover.svg
/assets/icons/cards/jcb.svg
/assets/icons/cards/mastercard.svg
/assets/icons/cards/visa.svg
/assets/icons/close.svg
/assets/icons/delivery-address-us.svg
/assets/icons/delivery-address.svg
/assets/icons/delivery-schedule.svg
/assets/icons/dishwash.png
/assets/icons/donate-a-wash.svg
/assets/icons/down-arrow.svg
/assets/icons/email.svg
/assets/icons/envelope.svg
/assets/icons/exclamation-mark-circle.svg
/assets/icons/flags
/assets/icons/flags/uk.png
/assets/icons/flags/us.png
/assets/icons/i-active.svg
/assets/icons/i-inactive.svg
/assets/icons/info.png
/assets/icons/left-arrow.svg
/assets/icons/location.svg
/assets/icons/lock.svg
/assets/icons/menu-dishwash-circle.svg
/assets/icons/menu-fabcon-circle.svg
/assets/icons/menu-laundry-circle.svg
/assets/icons/menu-sprays-circle.svg
/assets/icons/menu-starter-kit-circle.svg
/assets/icons/our-fabcon.svg
/assets/icons/our-surface.svg
/assets/icons/pack-us.svg
/assets/icons/pack.svg
/assets/icons/paypal-logo-small.webp
/assets/icons/paypal-logo.png
/assets/icons/pen.svg
/assets/icons/piggy-bank.svg
/assets/icons/refer_a_friend.svg
/assets/icons/right-arrow.svg
/assets/icons/sepa-logo.svg
/assets/icons/share
/assets/icons/share-icon.svg
/assets/icons/smol-letterbox.svg
/assets/icons/smol-tick.svg
/assets/icons/smol_carbon_saved_new3.svg
/assets/icons/smol_cow_fat_saved.svg
/assets/icons/smol_water_saved.svg
/assets/icons/tablets.svg
/assets/icons/tick.png
/assets/icons/tracking.svg
/assets/icons/turtle.svg
/assets/icons/warning.svg
/assets/icons/washing-machine.png
/assets/images
/assets/images/products
/assets/images/products/upsell
/assets/images/products/upsell/compostable-cloths-info.jpg
/assets/images/products/upsell/fabcon-frequency-1.svg
/assets/images/products/upsell/fabcon-frequency-2.svg
/assets/images/products/upsell/fabcon-frequency-3.svg
/assets/images/products/upsell/handwash-box.jpg
/assets/images/products/upsell/handwash-refills.jpg
/assets/images/products/upsell/laundry-bio.png
/assets/images/products/upsell/portal-starterkit.jpg
/assets/images/products/upsell/sanitiser-dispensers-no-bg.png
/assets/images/products/upsell/sanitiser-info.jpg
/assets/images/products/upsell/sponge-scrubbers-info.jpg
/assets/images/products/upsell/spray-bathroom-refill-grey.jpg
/assets/images/products/upsell/spray-mixed-refill-grey.jpg
/assets/images/products/upsell/spray-multi-refill-grey.jpg
/assets/images/products/upsell/spray-refill-frequency-1.svg
/assets/images/products/upsell/sprays-tabs.gif
/assets/images/products/upsell/stain-gel-grey.jpg
/favicons

Found on 2022-12-16 10:40

Severity: medium
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fda7df524bd3301b85279e6db1fa3ca143

Found 74 files trough .DS_Store spidering:

/assets
/assets/animations
/assets/backgrounds
/assets/backgrounds/circles.png
/assets/brand
/assets/icons
/assets/icons/basket.svg
/assets/icons/book.svg
/assets/icons/brands
/assets/icons/brands/facebook.svg
/assets/icons/brands/instagram.svg
/assets/icons/bulk-pack.svg
/assets/icons/calendar.svg
/assets/icons/cancel.svg
/assets/icons/capsules.svg
/assets/icons/cards
/assets/icons/cards/amex.svg
/assets/icons/cards/default.svg
/assets/icons/cards/diners.svg
/assets/icons/cards/discover.svg
/assets/icons/cards/jcb.svg
/assets/icons/cards/mastercard.svg
/assets/icons/cards/visa.svg
/assets/icons/close.svg
/assets/icons/delivery-address-us.svg
/assets/icons/delivery-address.svg
/assets/icons/delivery-schedule.svg
/assets/icons/dishwash.png
/assets/icons/donate-a-wash.svg
/assets/icons/down-arrow.svg
/assets/icons/email.svg
/assets/icons/envelope.svg
/assets/icons/exclamation-mark-circle.svg
/assets/icons/flags
/assets/icons/flags/uk.png
/assets/icons/flags/us.png
/assets/icons/i-active.svg
/assets/icons/i-inactive.svg
/assets/icons/info.png
/assets/icons/left-arrow.svg
/assets/icons/location.svg
/assets/icons/lock.svg
/assets/icons/menu-dishwash-circle.svg
/assets/icons/menu-fabcon-circle.svg
/assets/icons/menu-laundry-circle.svg
/assets/icons/menu-sprays-circle.svg
/assets/icons/menu-starter-kit-circle.svg
/assets/icons/our-fabcon.svg
/assets/icons/our-surface.svg
/assets/icons/pack-us.svg
/assets/icons/pack.svg
/assets/icons/paypal-logo-small.webp
/assets/icons/paypal-logo.png
/assets/icons/pen.svg
/assets/icons/piggy-bank.svg
/assets/icons/refer_a_friend.svg
/assets/icons/right-arrow.svg
/assets/icons/sepa-logo.svg
/assets/icons/share
/assets/icons/share-icon.svg
/assets/icons/smol-letterbox.svg
/assets/icons/smol-tick.svg
/assets/icons/smol_carbon_saved_new3.svg
/assets/icons/smol_cow_fat_saved.svg
/assets/icons/smol_water_saved.svg
/assets/icons/tablets.svg
/assets/icons/tick.png
/assets/icons/tracking.svg
/assets/icons/turtle.svg
/assets/icons/warning.svg
/assets/icons/washing-machine.png
/assets/images
/assets/images/products
/favicons

Found on 2022-12-16 10:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c88c2190688c21906381368024c8c6274799f7cdaa3624668

Found 107 files trough .DS_Store spidering:

/assets
/assets/animations
/assets/backgrounds
/assets/backgrounds/circles.png
/assets/brand
/assets/icons
/assets/icons/basket.svg
/assets/icons/book.svg
/assets/icons/brands
/assets/icons/brands/facebook.svg
/assets/icons/brands/instagram.svg
/assets/icons/bulk-pack.svg
/assets/icons/calendar.svg
/assets/icons/cancel.svg
/assets/icons/capsules.svg
/assets/icons/cards
/assets/icons/cards/amex.svg
/assets/icons/cards/default.svg
/assets/icons/cards/diners.svg
/assets/icons/cards/discover.svg
/assets/icons/cards/jcb.svg
/assets/icons/cards/mastercard.svg
/assets/icons/cards/visa.svg
/assets/icons/close.svg
/assets/icons/delivery-address-us.svg
/assets/icons/delivery-address.svg
/assets/icons/delivery-schedule.svg
/assets/icons/dishwash.png
/assets/icons/donate-a-wash.svg
/assets/icons/down-arrow.svg
/assets/icons/email.svg
/assets/icons/envelope.svg
/assets/icons/exclamation-mark-circle.svg
/assets/icons/flags
/assets/icons/flags/uk.png
/assets/icons/flags/us.png
/assets/icons/i-active.svg
/assets/icons/i-inactive.svg
/assets/icons/info.png
/assets/icons/left-arrow.svg
/assets/icons/location.svg
/assets/icons/lock.svg
/assets/icons/menu-dishwash-circle.svg
/assets/icons/menu-fabcon-circle.svg
/assets/icons/menu-laundry-circle.svg
/assets/icons/menu-sprays-circle.svg
/assets/icons/menu-starter-kit-circle.svg
/assets/icons/our-fabcon.svg
/assets/icons/our-surface.svg
/assets/icons/pack-us.svg
/assets/icons/pack.svg
/assets/icons/paypal-logo-small.webp
/assets/icons/paypal-logo.png
/assets/icons/pen.svg
/assets/icons/piggy-bank.svg
/assets/icons/refer_a_friend.svg
/assets/icons/right-arrow.svg
/assets/icons/sepa-logo.svg
/assets/icons/share
/assets/icons/share-icon.svg
/assets/icons/smol-letterbox.svg
/assets/icons/smol-tick.svg
/assets/icons/smol_carbon_saved_new3.svg
/assets/icons/smol_cow_fat_saved.svg
/assets/icons/smol_water_saved.svg
/assets/icons/tablets.svg
/assets/icons/tick.png
/assets/icons/tracking.svg
/assets/icons/turtle.svg
/assets/icons/warning.svg
/assets/icons/washing-machine.png
/assets/images
/assets/images/circles.png
/assets/images/flowers.svg
/assets/images/header
/assets/images/office.svg
/assets/images/piggy-bank.svg
/assets/images/popup
/assets/images/products
/assets/images/products/new
/assets/images/products/new/comp_cloth_checkouticon_NEW.jpg
/assets/images/products/new/fabcon-yellow-new.jpg
/assets/images/products/new/laundry-ffree-light-new.png
/assets/images/products/new/sanitiser-new.jpg
/assets/images/products/new/sponge-scrubbers-new.jpg
/assets/images/products/new/stain-gel-new.jpg
/assets/images/products/upsell
/assets/images/products/upsell/compostable-cloths-info.jpg
/assets/images/products/upsell/fabcon-frequency-1.svg
/assets/images/products/upsell/fabcon-frequency-2.svg
/assets/images/products/upsell/fabcon-frequency-3.svg
/assets/images/products/upsell/handwash-box.jpg
/assets/images/products/upsell/handwash-refills.jpg
/assets/images/products/upsell/laundry-bio.png
/assets/images/products/upsell/portal-starterkit.jpg
/assets/images/products/upsell/sanitiser-dispensers-no-bg.png
/assets/images/products/upsell/sanitiser-info.jpg
/assets/images/products/upsell/sponge-scrubbers-info.jpg
/assets/images/products/upsell/spray-bathroom-refill-grey.jpg
/assets/images/products/upsell/spray-mixed-refill-grey.jpg
/assets/images/products/upsell/spray-multi-refill-grey.jpg
/assets/images/products/upsell/spray-refill-frequency-1.svg
/assets/images/products/upsell/sprays-tabs.gif
/assets/images/products/upsell/stain-gel-grey.jpg
/assets/images/retention.svg
/assets/images/sad-face.svg
/assets/images/skin-allergy.svg

Found on 2022-09-08 01:19

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.103
Domain: cms.hhaz777.xyz
Port: 80
URL: http://cms.hhaz777.xyz

First seen 2022-11-04 09:22

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f628630a7694f6537a88a34f5a88a34f5
```
Found 3 files trough .DS_Store spidering:

/js
/js/private
/js/public
```
Found on 2022-11-04 09:22

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.225.78.103
Domain: optimizeit.ai
Port: 443
URL: https://optimizeit.ai

First seen 2022-08-26 14:52

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b45f6988

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/optimizeitportal/htdocs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[pull]
	rebase = true
[submodule "portal"]
	url = https://github.com/optimizeitportal/portal.git
	active = true
[submodule "stage"]
	url = https://github.com/optimizeitportal/stage.git
	active = true

Found on 2022-08-26 14:52

409 Bytes

Create report

Host 13.225.78.103

United States

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Apache server-status page is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Apache server-status page is publicly available

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Apache server-status page is publicly available

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Domain summary