Host 13.35.58.8
United States
AMAZON-02
Ubuntu
Software information
Acadle
tcp/443
AmazonS3
tcp/443 tcp/80
Apache 2
tcp/443
Apache
tcp/443 tcp/80
CloudFront
tcp/443 tcp/80
Microsoft-IIS 10.0
tcp/443
nginx
tcp/443 tcp/80
nginx 1.18.0
tcp/443 tcp/80
openresty
tcp/443
openresty 1.17.8.2
tcp/443 tcp/80
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 13.35.58.40
Domain: calrossy-login.cloudworkengine.net
Port: 443
URL: https://calrossy-login.cloudworkengine.netFirst seen 2023-10-19 16:26
Last seen 2026-01-09 01:25
Open for 812 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae3db75882Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 09-Jan-2026 01:26:03 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 23 days 18 hours 42 minutes 50 seconds Server load: 0.41 0.54 0.61 Total accesses: 138199 - Total Traffic: 492.9 MB - Total Duration: 8422910 CPU Usage: u30.85 s38.83 cu21.72 cs15.18 - .00519% CPU load .0673 requests/sec - 251 B/second - 3739 B/request - 60.9477 ms/request 1 requests currently being processed, 49 idle workers _______________________________W__________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0227300/779/2568_ 8.9187311710980.03.259.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0227300/881/2688_ 8.9181641716140.03.269.77 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/1048/2896_ 8.913681001725840.04.3310.73 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTdrZdVt 0-0227300/943/2838_ 8.9163641547730.03.319.58 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/922/2828_ 8.9193641775270.03.549.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/775/2696_ 8.91892411651230.02.789.57 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDt0B 0-0227300/976/2744_ 8.916601521599810.03.179.71 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FSuR7nrw 0-0227300/990/2778_ 8.921751401630930.03.579.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PBmGi 0-0227300/852/2480_ 8.90123661603300.03.098.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/869/2986_ 8.90105641608580.03.089.71 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/765/2664_ 8.917521601638100.02.959.25 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIEMs 0-0227300/1129/3225_ 8.90153641751480.03.6011.39 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/956/2733_ 8.921251421559350.03.249.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAs0W 0-0227300/875/2734_ 8.90147651638050.03.6110.06 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/1011/2818_ 8.90112801623680.03.359.61 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0227300/1001/2884_ 8.9231901847450.04.0410.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0227300/897/2915_ 8.9229471750150.03.3210.60 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EieUc 0-0227300/820/2564_ 8.9227651661210.03.379.41 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/756/2581_ 8.9013402951644900.03.039.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PElzi 0-0227300/839/2615_ 8.9151651532180.03.189.30 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/1003/2919_ 8.91402321726310.03.9510.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0227300/1004/3062_ 8.914861071639050.03.8410.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJkZE 0-0227300/760/2521_ 8.923641795310.02.929.66 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/862/2794_ 8.90141641942780.03.7610.41 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/854/2831_ 8.916102791513830.03.019.58 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0226890/860/2703_ 8.469101121656380.03.139.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb9owFH3vr4jyng9Di 1-0226890/729/2680_ 8.4699651670450.02.889.64 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/852/2890_ 8.46111652004850.03.2010.06 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/883/2627_ 8.4514262871752530.03.219.77 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0226890/900/2638_ 8.45129651711940.03.249.70 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/876/2788_ 8.45117661632750.03.159.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-02268919/836/2724W 8.470017475222.03.119.84 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 1-0226890/821/2769_ 8.451487321666720.03.009.62 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/858/2994_ 8.45135641650390.03.179.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/831/2712_ 8.4688631581340.03.119.36 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/1068/3111_ 8.4686451645170.03.6210.22 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAcCW 1-0226890/828/2680_ 8.4664731676480.03.009.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/890/2723_ 8.4669641796730.03.5310.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/802/2775_ 8.4662531613840.02.949.39 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/809/2688_ 8.4680401710550.03.129.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0226890/740/2521_ 8.4657641654030.03.089.34 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/752/2973_ 8.4748601629750.03.0410.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0226890/914/2822_ 8.4745641603660.03.189.75 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/803/2511_ 8.4739651831690.02.929.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/947/2781_ 8.4733641658410.04.0110.42 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/816/2681_ 8.4728731691170.03.179.54 127.0.0.1http/1.1
Found on 2026-01-09 01:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae415083e2Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Thursday, 01-Jan-2026 22:14:45 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 16 days 15 hours 31 minutes 32 seconds Server load: 0.80 0.92 0.88 Total accesses: 95757 - Total Traffic: 333.2 MB - Total Duration: 5619430 CPU Usage: u14.69 s22.62 cu21.72 cs15.18 - .00516% CPU load .0666 requests/sec - 242 B/second - 3648 B/request - 58.6843 ms/request 1 requests currently being processed, 49 idle workers __________________________________________W_______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0227300/34/1823_ 0.2699601125690.00.146.83 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0227300/22/1829_ 0.2692601233430.00.086.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0227300/22/1870_ 0.2625851016170.00.086.47 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/22/1917_ 0.2685851015960.00.086.35 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/65/1971_ 0.2510451321219570.00.126.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Deya1l2 0-0227300/23/1944_ 0.2510451051229260.00.066.85 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78qJJu 0-0227300/26/1794_ 0.2667851110210.00.076.62 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/20/1808_ 0.2629471039600.00.076.30 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyQ20u 0-0227300/23/1651_ 0.25121851077220.00.065.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/92/2209_ 0.25120371088680.00.156.78 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdz5owGL33Vxju5Uth2 0-0227300/24/1923_ 0.2697841062820.00.066.36 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/69/2165_ 0.251409351202810.00.147.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0227300/20/1797_ 0.25151841021750.00.086.57 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/23/1882_ 0.25134881117350.00.086.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78urNB 0-0227300/19/1826_ 0.2511471371036820.00.086.34 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNtr5owGP3urzB8FwSmN 0-0227300/22/1905_ 0.2631841197440.00.117.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/27/2045_ 0.2619861217090.00.107.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/22/1766_ 0.27931271035390.00.076.12 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78mouX 0-0227300/21/1846_ 0.2512961441084380.00.076.41 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdj9owEHznV6C8k4TQk 0-0227300/26/1802_ 0.2679861000030.00.076.19 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/23/1939_ 0.2643841088250.00.096.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0227300/22/2080_ 0.264082611090130.00.076.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Deya3sL 0-0227300/24/1785_ 0.27531481275150.00.066.81 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyQ0Cu 0-0227300/21/1953_ 0.251319681114390.00.076.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeSUjYQ 0-0227300/23/2000_ 0.2655851024360.00.076.63 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/22/1865_ 0.2473841188920.00.076.42 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/26/1977_ 0.2461841165580.00.096.86 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/27/2065_ 0.2298901252580.00.086.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0226890/26/1770_ 0.22103841139920.00.086.65 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/23/1761_ 0.2294801071130.00.086.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0226890/20/1932_ 0.24809331135430.00.086.66 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/24/1912_ 0.22109841204830.00.086.81 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/23/1971_ 0.2210451291094750.00.076.69 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1DeycZaC 1-0226890/27/2163_ 0.2491841081270.00.086.86 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/23/1904_ 0.2449841033660.00.086.33 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/24/2067_ 0.24432341076210.00.086.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/27/1879_ 0.2437841233670.00.077.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/20/1853_ 0.243121301227300.00.076.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8h9tuY 1-0226890/25/1998_ 0.2426451043310.00.086.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/25/1904_ 0.24209351199640.00.096.66 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0226890/29/1810_ 0.2413841106020.00.106.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/28/2249_ 0.247841150350.00.097.54 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-02268927/49/1957W 0.240011282034.30.106.67 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 1-0226890/21/1729_ 0.21145841290250.00.066.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/21/1855_ 0.22139841033280.00.076.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0226890/27/1892_ 0.22133501150130.00.086.45 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET
Found on 2026-01-01 22:14 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aeadbf16b4Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Tuesday, 30-Dec-2025 05:45:39 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 days 23 hours 2 minutes 26 seconds Server load: 0.25 0.52 0.73 Total accesses: 81604 - Total Traffic: 282.5 MB - Total Duration: 4862389 CPU Usage: u19.49 s23.81 cu11.7 cs8.14 - .00523% CPU load .0677 requests/sec - 245 B/second - 3630 B/request - 59.5852 ms/request 1 requests currently being processed, 49 idle workers ________________________________________________W_.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0284780/596/1583_ 6.05357115975430.02.385.92 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vC9Ns 0-0284780/655/1596_ 6.0555241080310.02.245.70 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/542/1558_ 6.053247889660.02.075.52 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyXW3B 0-0284780/565/1616_ 6.05357143887710.01.985.32 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kpCUA 0-0284780/592/1670_ 6.0543241044000.02.045.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/678/1692_ 6.05146351088580.02.335.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/551/1545_ 6.0517524945900.02.015.65 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/688/1571_ 6.0513924904410.02.345.39 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/567/1425_ 6.0515725967530.02.105.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/728/1801_ 6.051658154938460.02.255.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PKehG 0-0284780/746/1654_ 6.0514900898530.02.205.32 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0284780/664/1887_ 6.0531241055350.02.216.99 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/594/1452_ 6.062490829590.02.015.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0284780/688/1634_ 6.067041007430.02.235.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/563/1469_ 6.052730875750.01.975.24 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0284780/572/1636_ 6.0613241017500.02.185.75 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/717/1712_ 6.0567241038510.02.876.23 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/565/1461_ 6.054924898040.02.105.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/695/1599_ 6.0577682936320.02.105.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNtr5owGP3urzB8BwSuh 0-0284780/603/1505_ 6.0586338897720.02.245.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/544/1631_ 6.05817263946950.02.115.61 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2QCAPq 0-0284780/677/1771_ 6.0510924940320.02.325.69 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/586/1537_ 6.05121241139940.02.215.90 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/762/1682_ 6.059724932620.02.495.63 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/682/1660_ 6.0512724853100.02.365.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/585/1637_ 6.12122801056870.02.005.54 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0285190/732/1727_ 6.1214524975980.02.375.85 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/691/1751_ 6.12115241093490.02.285.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/674/1500_ 6.1214740986100.02.365.55 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0285190/628/1520_ 6.1216325926070.02.195.58 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/662/1655_ 6.1396280925500.02.215.43 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCGUW 1-0285190/557/1651_ 6.12133241058790.02.245.83 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/539/1632_ 6.1210324968070.01.985.65 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/856/1904_ 6.13357115945330.02.615.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEjIv 1-0285190/654/1662_ 6.137925883380.02.065.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/631/1724_ 6.138524905330.02.145.61 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/573/1632_ 6.1391241093590.02.206.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/708/1615_ 6.1337241099070.02.515.86 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/632/1658_ 6.13547163909380.02.095.58 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PGkQ1 1-0285190/565/1573_ 6.134531321024810.02.145.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78qKEe 1-0285190/624/1569_ 6.136125982360.02.165.50 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/688/1999_ 6.137324970320.02.256.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/589/1672_ 6.13283129991950.02.215.65 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAiBm 1-0285190/575/1460_ 6.1326341105320.02.135.36 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/654/1581_ 6.131924864130.02.055.34 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/745/1659_ 6.133185974530.02.315.50 127.0.0.1http/1.1ip-10-1-97-231.ap-southeas
Found on 2025-12-30 05:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae3936cf3bApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 26-Dec-2025 04:44:38 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 22 hours 1 minute 25 seconds Server load: 0.65 0.68 0.66 Total accesses: 61179 - Total Traffic: 211.0 MB - Total Duration: 3837774 CPU Usage: u11.34 s15.96 cu11.7 cs8.14 - .0055% CPU load .0714 requests/sec - 258 B/second - 3617 B/request - 62.7303 ms/request 1 requests currently being processed, 49 idle workers __________________________W_______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0284780/217/1204_ 2.29591747320.00.924.45 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0284780/210/1151_ 2.2925737871060.00.754.21 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/205/1221_ 2.29476701690.00.704.14 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyW2Bz 0-0284780/193/1244_ 2.29850729500.00.744.08 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0284780/239/1317_ 2.29128183809930.00.764.24 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JMQEB 0-0284780/223/1237_ 2.289714867930.00.844.46 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/199/1193_ 2.28140134743310.00.664.29 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/300/1183_ 2.28867407706020.00.863.92 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSj7DAyBx 0-0284780/202/1060_ 2.2810691737740.00.703.63 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0284780/227/1300_ 2.281256149736660.00.694.12 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78gIKs 0-0284780/192/1100_ 2.2811515711420.00.693.81 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/209/1432_ 2.271685289837840.00.755.53 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCRwQ 0-0284780/256/1114_ 2.2815115659380.00.763.79 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/251/1197_ 2.2813314834510.00.884.25 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/204/1110_ 2.2717516691060.00.703.97 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/193/1257_ 2.2715714756740.00.694.25 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/298/1293_ 2.295390787720.01.374.73 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0284780/195/1091_ 2.2920233686480.00.673.75 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/243/1147_ 2.293714735380.00.714.09 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/203/1105_ 2.285588677540.00.713.84 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78jAQB 0-0284780/208/1295_ 2.294914767030.00.814.31 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/221/1315_ 2.287314755020.00.824.19 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/217/1168_ 2.2880236909790.00.784.47 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/309/1229_ 2.286608737870.00.974.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1DeycpSW 0-0284780/301/1279_ 2.286115653130.00.874.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/234/1286_ 2.3016314849630.00.734.27 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-02851927/358/1353W 2.33007763634.40.964.45 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 1-0285190/205/1265_ 2.32590848910.00.694.32 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0285190/219/1045_ 2.32715774820.00.864.05 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/271/1163_ 2.3210548728200.00.824.21 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCdMB 1-0285190/209/1202_ 2.324314687570.00.743.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/216/1310_ 2.3016914848800.00.894.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/191/1284_ 2.3015457751730.00.704.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2QGAGE 1-0285190/311/1359_ 2.3112715771460.00.954.25 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/194/1202_ 2.3112115687240.00.653.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/262/1355_ 2.3113914728390.00.774.23 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/202/1261_ 2.3114514832510.00.734.64 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/231/1138_ 2.31108735846590.00.844.19 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/198/1224_ 2.319115743910.00.744.23 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/204/1212_ 2.3110314795620.00.734.32 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/260/1205_ 2.327914795580.00.804.14 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/311/1622_ 2.318514800380.00.875.15 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/215/1298_ 2.32584133804560.00.804.24 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PCGBW 1-0285190/203/1088_ 2.326715908890.00.774.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/317/1244_ 2.32631187686130.00.864.14 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FSuS7Ewh 1-0285190/201/1115_ 2.325515788360.00.713.89 127.0.0.1http/1.1ip-10-
Found on 2025-12-26 04:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae04cbae6aApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Wednesday, 24-Dec-2025 15:27:25 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 8 days 8 hours 44 minutes 13 seconds Server load: 0.93 0.62 0.65 Total accesses: 53972 - Total Traffic: 186.2 MB - Total Duration: 3516608 CPU Usage: u8.45 s12.62 cu11.7 cs8.14 - .00566% CPU load .0747 requests/sec - 270 B/second - 3617 B/request - 65.1562 ms/request 1 requests currently being processed, 49 idle workers ____W_____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0284780/82/1069_ 0.862226130668760.00.343.87 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PC%2B 0-0284780/79/1020_ 0.883595796750.00.303.76 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/80/1096_ 0.8621930661230.00.293.73 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0284780/69/1120_ 0.881195664310.00.253.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-02847827/105/1183W 0.88007606734.30.303.78 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 0-0284780/81/1095_ 0.8713195778430.00.303.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/78/1072_ 0.8715595701480.00.253.88 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/77/960_ 0.8810794637420.00.333.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/76/934_ 0.8711995673790.00.283.21 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/77/1150_ 0.8714394685530.00.263.69 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/73/981_ 0.87158537657590.00.263.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/77/1300_ 0.8620394767940.00.265.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/129/987_ 0.8716795592820.00.333.36 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/121/1067_ 0.8617994762670.00.413.77 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/78/984_ 0.8621594643730.00.273.54 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/69/1133_ 0.8619194702450.00.253.81 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/86/1081_ 0.884194708060.00.363.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/78/974_ 0.882394650370.00.283.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/124/1028_ 0.884794685240.00.303.67 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/67/969_ 0.885394621810.00.243.37 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/76/1163_ 0.886594709830.00.303.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/69/1163_ 0.889595682240.00.263.63 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/80/1031_ 0.8810194851180.00.334.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0284780/67/987_ 0.8872935635850.00.273.41 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0284780/170/1148_ 0.888394574540.00.363.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/111/1163_ 0.9019794785590.00.303.84 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/174/1169_ 0.9021695698870.00.433.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/71/1131_ 0.9022194801530.00.243.88 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/83/909_ 0.8922795691660.00.353.54 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/140/1032_ 0.90595670000.00.343.73 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/79/1072_ 0.9051334620720.00.293.52 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/80/1174_ 0.9020994778380.00.293.88 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/73/1166_ 0.9018595692290.00.283.95 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/85/1133_ 0.9017394673960.00.313.61 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/70/1078_ 0.9016195624290.00.203.52 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/149/1242_ 0.9015695674370.00.363.82 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/73/1132_ 0.9014994798810.00.274.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/80/987_ 0.9013794768800.00.333.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/77/1103_ 0.9012594680050.00.313.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/82/1090_ 0.9011394747180.00.323.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/136/1081_ 0.9096934751160.00.403.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/80/1391_ 0.9010244759200.00.334.62 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0285190/73/1156_ 0.907794695840.00.233.67 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/70/955_ 0.908995822960.00.283.52 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/86/1013_ 0.907194629120.00.293.58 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/67/981_ 0.905994733070.00.243.42 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0285190/72/1083_ 0.90443
Found on 2025-12-24 15:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aeb63593bbApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Monday, 22-Dec-2025 09:54:40 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 6 days 3 hours 11 minutes 27 seconds Server load: 3.30 2.41 2.41 Total accesses: 38513 - Total Traffic: 142.2 MB - Total Duration: 2925639 CPU Usage: u15.37 s15.52 cu0 cs0 - .00583% CPU load .0727 requests/sec - 281 B/second - 3872 B/request - 75.965 ms/request 1 requests currently being processed, 49 idle workers W_________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-03727/867/867W 8.18005660134.43.163.16 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/722/722_ 8.172538672540.02.892.89 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/806/806_ 8.187312577990.02.952.95 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/777/777_ 8.14162611570240.02.762.76 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1DesxCWT 0-0370/856/856_ 8.131684241670700.02.922.92 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vEtyr 0-0370/809/809_ 8.141528459646590.03.103.10 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PO9NB 0-0370/858/858_ 8.171937581310.03.053.05 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/650/650_ 8.1655310513900.02.462.46 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/648/648_ 8.158326580690.02.422.42 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/751/751_ 8.157938586750.02.722.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/696/696_ 8.1650813533310.02.552.55 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PIgSb 0-0370/1016/1016_ 8.1666957694340.04.314.31 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/646/646_ 8.1585948490790.02.512.51 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/732/732_ 8.164339575700.02.752.75 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/694/694_ 8.166137532450.02.752.75 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/787/787_ 8.1634759592740.02.932.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/782/782_ 8.14140448590370.02.792.79 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/773/773_ 8.14148411523530.02.592.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78upMm 0-0370/688/688_ 8.1512138608650.02.902.90 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/664/664_ 8.141282187522280.02.482.48 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSYgXK 0-0370/846/846_ 8.1413336563300.02.832.83 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/795/795_ 8.141282229592690.02.722.72 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdr5pAEH33VxjeAUEu2 0-0370/682/682_ 8.15127012686430.02.862.86 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHAoA 0-0370/702/702_ 8.159737521360.02.602.60 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/780/780_ 8.15109312448540.02.662.66 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/825/825_ 8.3413310681980.02.932.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/777/777_ 8.3435440594190.02.902.90 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JBBIb 1-0380/834/834_ 8.3420444650750.03.033.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/697/697_ 8.343137566920.02.702.70 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/775/775_ 8.31162612563720.02.942.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PGlEs 1-0380/775/775_ 8.3118135458880.02.592.59 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/875/875_ 8.311697246601780.02.932.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78poZm 1-0380/893/893_ 8.3115738565400.03.133.13 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/824/824_ 8.3115138557740.02.712.71 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/783/783_ 8.31139324512200.02.682.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/871/871_ 8.31145343582570.02.932.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/761/761_ 8.321282166610390.02.792.79 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCRpo 1-0380/699/699_ 8.321282223643300.02.802.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2QCAvs 1-0380/703/703_ 8.32127013563840.02.802.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JMSBa 1-0380/775/775_ 8.329139619420.02.942.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/668/668_ 8.3211537612920.02.732.73 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/997/997_ 8.348046659200.03.673.67 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/779/779_ 8.347338608230.02.812.81 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/660/660_ 8.3210338662980.02.612.61 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/702/702_ 8.338538517500.02.692.69 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/698/698_ 8.34638489631670.02.642.64 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kuCBz 1-0
Found on 2025-12-22 09:54 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aefef47694Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Saturday, 20-Dec-2025 08:17:00 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 1 hour 33 minutes 47 seconds Server load: 0.67 0.75 0.80 Total accesses: 27009 - Total Traffic: 102.0 MB - Total Duration: 2123078 CPU Usage: u10.26 s10.25 cu0 cs0 - .00584% CPU load .0769 requests/sec - 304 B/second - 3960 B/request - 78.6063 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/629/629_ 5.563250414840.02.382.38 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0370/486/486_ 5.564504461620.02.012.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/593/593_ 5.563936374540.02.052.05 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/555/555_ 5.572057408450.01.921.92 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PEhm6 0-0370/580/580_ 5.571724493680.02.072.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/596/596_ 5.571130505440.02.332.33 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0370/574/574_ 5.572735406480.02.162.16 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/440/440_ 5.568134353920.01.741.74 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/439/439_ 5.568738418300.01.681.68 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/463/463_ 5.5511734437130.01.831.83 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/490/490_ 5.566010413800.01.881.88 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0370/700/700_ 5.5610535503800.02.872.87 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/442/442_ 5.5694336367640.01.781.78 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/549/549_ 5.565494395170.02.042.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/474/474_ 5.566935385030.01.951.95 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/556/556_ 5.56505154419380.02.112.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFNb8IwDIbv%2FIoq9yZ 0-0370/569/569_ 5.5729284440610.02.012.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCQ8C 0-0370/576/576_ 5.57934387820.01.901.90 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/476/476_ 5.5515334442420.02.052.05 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/436/436_ 5.55168736338280.01.671.67 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/644/644_ 5.551808196401740.02.092.09 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2PAc6M 0-0370/596/596_ 5.5517735437320.02.032.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/482/482_ 5.5515935511130.02.152.15 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/473/473_ 5.5512935383240.01.801.80 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/572/572_ 5.5514134331260.01.961.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/590/590_ 5.672255441130.02.072.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/575/575_ 5.672056441580.02.102.10 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PLmkX 1-0380/632/632_ 5.6727936510850.02.332.33 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/488/488_ 5.6734339444280.01.941.94 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/565/565_ 5.67634391930.02.112.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/556/556_ 5.671043341270.01.901.90 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/574/574_ 5.671535423000.02.002.00 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-03826/589/589W 5.68004243935.62.222.22 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/562/562_ 5.6517910440660.01.961.96 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0380/587/587_ 5.6616535407020.02.032.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/651/651_ 5.6617135392790.02.122.12 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/494/494_ 5.6614734449660.02.012.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/506/506_ 5.66154336537570.02.202.20 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/487/487_ 5.6612335409650.02.092.09 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/557/557_ 5.6611135426320.02.172.17 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/467/467_ 5.6613535449780.01.981.98 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/606/606_ 5.669935386760.02.202.20 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/491/491_ 5.667535441830.02.002.00 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/458/458_ 5.668244487040.01.911.91 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/495/495_ 5.669334396800.01.971.97 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/479/479_ 5.666334463920.01.851.85 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/575/575_ 5.665735439990.02.022.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0</
Found on 2025-12-20 08:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae579c1c9bApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Thursday, 18-Dec-2025 10:05:02 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 3 hours 21 minutes 50 seconds Server load: 0.41 1.20 1.12 Total accesses: 13758 - Total Traffic: 57.6 MB - Total Duration: 1311084 CPU Usage: u5.7 s5.52 cu0 cs0 - .00607% CPU load .0744 requests/sec - 326 B/second - 4392 B/request - 95.2961 ms/request 1 requests currently being processed, 49 idle workers _______________________________________________W__.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/251/251_ 3.08933118278640.01.111.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dek5AsS 0-0370/259/259_ 3.0810565326160.01.131.13 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/362/362_ 3.0897032174710.01.111.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/257/257_ 3.08770208247110.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PIFLr 0-0370/259/259_ 3.086965325050.01.111.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/291/291_ 3.08598326351660.01.391.39 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PIFAL 0-0370/270/270_ 3.0882642223900.01.131.13 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/244/244_ 3.0812914235170.01.061.06 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/230/230_ 3.081371319206970.00.930.93 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdz5owGL33VxjuAUGd2 0-0370/268/268_ 3.0714765261470.01.141.14 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/268/268_ 3.0812367217470.01.041.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/320/320_ 3.08141234278490.01.351.35 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/242/242_ 3.0813565246680.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/350/350_ 3.0811454233220.01.291.29 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/246/246_ 3.0811864233750.01.041.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/270/270_ 3.081099174261460.01.261.26 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAgl9 0-0370/258/258_ 3.08551177273830.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PFsar 0-0370/273/273_ 3.08506430254790.01.121.12 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSUhWw 0-0370/257/257_ 3.08411151297390.01.241.24 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PFsgs 0-0370/249/249_ 3.0922644215470.01.001.00 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/257/257_ 3.083365223060.01.021.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/259/259_ 3.091880236440.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/281/281_ 3.091170350310.01.331.33 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0370/278/278_ 3.091064251250.01.061.06 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/371/371_ 3.09364184930.01.241.24 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/261/261_ 3.1412544255240.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/260/260_ 3.14119749235530.01.141.14 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/310/310_ 3.14130734297950.01.311.31 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/263/263_ 3.1413627313590.01.181.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/262/262_ 3.1410760242650.01.181.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0380/265/265_ 3.1411156182680.01.041.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/266/266_ 3.1411765279950.01.081.08 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/288/288_ 3.149965287560.01.331.33 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/257/257_ 3.15933121258290.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuJCSkS 1-0380/279/279_ 3.158755249030.01.181.18 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/275/275_ 3.15812130231760.01.201.20 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHnc1 1-0380/267/267_ 3.156365313850.01.211.21 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/304/304_ 3.157564376400.01.391.39 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/254/254_ 3.155764240900.01.111.11 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/299/299_ 3.154529277330.01.231.23 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vKDQY 1-0380/265/265_ 3.155165298310.01.251.25 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/279/279_ 3.153965222250.01.261.26 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/285/285_ 3.151564251760.01.281.28 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/262/262_ 3.152765299930.01.121.12 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/287/287_ 3.152164283160.01.231.23 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/260/260_ 3.161167317330.01.071.07 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSZzAC 1-0380/367/367_ 3.16964283830.01.261.26 127.0.0.1http/1.1ip-10-1-97-
Found on 2025-12-18 10:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae8f0d0786Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Tuesday, 16-Dec-2025 07:04:25 UTC Restart Time: Tuesday, 16-Dec-2025 06:43:12 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 21 minutes 12 seconds Server load: 1.65 2.09 3.34 Total accesses: 151 - Total Traffic: 734 kB - Total Duration: 21921 CPU Usage: u.04 s.06 cu0 cs0 - .00786% CPU load .119 requests/sec - 590 B/second - 4977 B/request - 145.172 ms/request 1 requests currently being processed, 49 idle workers ___________W______________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/1/1_ 0.00863480.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/2/2_ 0.0084605470.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0370/3/3_ 0.0070504940.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/2/2_ 0.006596150.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/2/2_ 0.015985160.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/2/2_ 0.015394130.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/1/1_ 0.00743480.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/1/1_ 0.00105736720.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/1/1_ 0.0097437750.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/4/4_ 0.02932545840.00.030.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0370/2/2_ 0.0094573930.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JIQ3F 0-03727/28/28W 0.030074534.40.040.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/3/3_ 0.001100024650.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/1/1_ 0.009328170.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyFLE 0-0370/6/6_ 0.0089765720810.00.040.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1 0-0370/1/1_ 0.0078839780.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/1/1_ 0.015131252500.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCSC% 0-0370/2/2_ 0.014795150.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/2/2_ 0.014194120.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/2/2_ 0.013595150.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/4/4_ 0.0130805300.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0370/2/2_ 0.0125483728260.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0370/4/4_ 0.02238019680.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/3/3_ 0.02189412370.00.030.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/2/2_ 0.021196210.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.0010797200.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.0011394150.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/7/7_ 0.035858570.00.040.04 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.0310918015780.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAn0W 1-0380/2/2_ 0.009448300.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7Eh4hT 1-0380/3/3_ 0.0010196330.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.0095910260.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/16/16_ 0.019157413600.00.090.09 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0380/4/4_ 0.0188204240.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0380/1/1_ 0.018551472940.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEhJ1 1-0380/2/2_ 0.018395150.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.017795130.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/4/4_ 0.0171533600.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/1/1_ 0.02692490.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/1/1_ 0.0263435710.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/1/1_ 0.02581480.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/2/2_ 0.025224890.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/1/1_ 0.024958160.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PBtCs 1-0380/4/4_ 0.0243177730.00.030.03 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG8Iu 1-0380/2/2_ 0.0238204580.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0380/1/1_ 0.023434118230.00.020.02 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0380/3/3_ 0.022974200.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/1/1_ 0.0224744890.00.010.01 127.0.0.1http/1.1ip-10-1-97-231.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG%2B 1-0380/1/1_
Found on 2025-12-16 07:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae1fd5376cApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Sunday, 14-Dec-2025 04:30:41 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 157 days 21 hours 22 minutes 39 seconds Server load: 2.93 1.42 1.02 Total accesses: 1395403 - Total Traffic: 7.0 GB - Total Duration: 328038163 CPU Usage: u133.08 s218.77 cu404.16 cs244.83 - .00734% CPU load .102 requests/sec - 554 B/second - 5.3 kB/request - 235.085 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0183920/478/27106_ 4.87395464405290.02.22140.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/442/26745_ 4.8733324364733590.01.97138.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7EmISY 0-0183920/547/26886_ 4.87261561365990.02.22139.35 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/436/27013_ 4.871142761799980.01.82140.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/413/27273_ 4.87194860058380.01.86141.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-01839227/530/26696W 4.8700607296634.32.02138.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-0183920/434/27072_ 4.841694862091060.02.07140.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/460/27545_ 4.8515741063487540.01.99142.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/643/27775_ 4.857143264990420.02.55143.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/480/26749_ 4.85745559035910.02.00139.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/562/26725_ 4.85892462856610.02.08137.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/501/26914_ 4.858003365179430.01.90138.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/535/26960_ 4.851155866194830.02.02139.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/421/26256_ 4.87434863400750.01.90137.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/383/26348_ 4.87494858931740.01.69136.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/406/26846_ 4.87554862662780.01.76136.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/428/26846_ 4.85674864070490.02.00139.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/429/26646_ 4.85615866057250.01.98137.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/461/27174_ 4.851094862291460.02.16140.20 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/530/26681_ 4.859258262321060.02.16138.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/521/26554_ 4.8510343362588880.02.03137.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/482/26725_ 4.851334865214480.01.92137.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/375/26818_ 4.85914863175030.01.59140.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/427/26338_ 4.851274863126130.01.80136.53 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/551/27392_ 4.851454861640020.02.00141.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/452/26763_ 4.9675861093750.02.05138.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/557/27822_ 4.951634965102520.02.25144.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/458/26883_ 4.96134865200970.02.07140.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/568/27196_ 4.96315861200070.02.08140.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/389/26586_ 4.96254962364350.01.57137.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/393/27090_ 4.966315159205300.01.71139.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/538/26943_ 4.94174657564109300.02.08138.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vHPbY 1-0184450/530/27301_ 4.951514864810030.01.90140.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/455/26370_ 4.951395859768660.01.73136.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/419/26740_ 4.9513144360812710.01.87138.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/408/26825_ 4.95112524265801440.01.92140.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHlca 1-0184450/429/27307_ 4.95734861557150.01.88139.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/543/27037_ 4.95855862328970.02.11139.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/566/26544_ 4.951214860500260.02.28137.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/495/27299_ 4.959061064060770.02.10142.13 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JE7aT 1-0184450/666/27760_ 4.95794868657700.02.20142.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/507/26894_ 4.9650720864813400.02.09139.75 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vNykg 1-0184450/576/26054_ 4.951087462199480.02.86134.43 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/424/26897_ 4.96571664345130.01.85137.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/568/26916_ 4.96451464352530.02.16139.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/635/26811_ 4.95920464005030.01.98138.71
Found on 2025-12-14 04:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae43246c73Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 12-Dec-2025 19:04:02 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 156 days 11 hours 56 minutes Server load: 1.19 0.85 0.77 Total accesses: 1387366 - Total Traffic: 7.0 GB - Total Duration: 327464348 CPU Usage: u130.27 s215.61 cu404.16 cs244.83 - .00736% CPU load .103 requests/sec - 556 B/second - 5.3 kB/request - 236.033 ms/request 1 requests currently being processed, 49 idle workers ________________________________________W_________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0183920/330/26958_ 3.35756864266090.01.57139.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/301/26604_ 3.35816964640130.01.39137.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/395/26734_ 3.35696861190650.01.57138.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/293/26870_ 3.35652461699030.01.29139.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/278/27138_ 3.365963059912210.01.31141.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/361/26527_ 3.36516860606280.01.40137.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/277/26915_ 3.36456961999020.01.39139.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/320/27405_ 3.36336863330380.01.44141.47 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/347/27479_ 3.36276864841310.01.35142.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/285/26554_ 3.361533258885580.01.27138.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/425/26588_ 3.3416443562802750.01.61137.02 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/320/26733_ 3.3636865064540.01.36138.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/388/26813_ 3.341836866055410.01.49138.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/277/26112_ 3.35876863303260.01.27136.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/253/26218_ 3.359153058834720.01.17136.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/267/26707_ 3.35946462572850.01.17136.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/302/26720_ 3.3510013163984210.01.48138.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/290/26507_ 3.351093465963410.01.37137.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/325/27038_ 3.3411269762199040.01.61139.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/306/26457_ 3.341715962220950.01.44137.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/337/26370_ 3.341536862506500.01.45137.42 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/304/26547_ 3.3414553165151960.01.36137.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/246/26689_ 3.3412353363099340.01.05139.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/282/26193_ 3.341356863002440.01.24135.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/403/27244_ 3.341484461552210.01.43140.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/309/26620_ 3.398323560992870.01.43137.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/425/27690_ 3.39772865011940.01.74143.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/288/26713_ 3.39935865016930.01.26139.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/408/27036_ 3.39996961076510.01.43140.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/260/26457_ 3.39887462213650.01.05136.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/258/26955_ 3.391596859120490.01.19139.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/389/26794_ 3.397104163874040.01.44137.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/378/27149_ 3.39667864711180.01.32139.92 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0184450/258/26173_ 3.396361059688880.01.14135.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/281/26602_ 3.39576860701770.01.33137.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/263/26680_ 3.39395965654770.01.26140.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/265/27143_ 3.39216861469840.01.20139.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/303/26797_ 3.393153362113280.01.41138.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/424/26402_ 3.394623060379140.01.64136.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/331/27135_ 3.3996963975340.01.52141.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-01844525/482/27576W 3.4100685788329.11.62142.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-0184450/336/26723_ 3.381776864723630.01.41139.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/443/25921_ 3.391656862086840.02.26133.83 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/276/26749_ 3.3915153164161590.01.27136.86 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/383/26731_ 3.391416864205500.01.42139.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/325/26501_ 3.391476863933790.01.20137.94 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1
Found on 2025-12-12 19:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae479d76baApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 12-Dec-2025 17:50:28 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 156 days 10 hours 42 minutes 25 seconds Server load: 0.45 0.63 0.70 Total accesses: 1387136 - Total Traffic: 7.0 GB - Total Duration: 327459624 CPU Usage: u130.15 s215.52 cu404.16 cs244.83 - .00736% CPU load .103 requests/sec - 556 B/second - 5.3 kB/request - 236.069 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0183920/327/26955_ 3.311003164265180.01.56139.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/298/26601_ 3.31132364639810.01.38137.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/392/26731_ 3.3161861190340.01.56138.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/290/26867_ 3.311873461698230.01.27139.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/275/27135_ 3.3118183359910940.01.29141.35 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/357/26523_ 3.311758460605300.01.38137.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/272/26910_ 3.3116963161997910.01.37139.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/314/27399_ 3.311638363327410.01.41141.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/342/27474_ 3.3115823064840190.01.34142.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/278/26547_ 3.311501858884250.01.26138.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/422/26585_ 3.3111393762801820.01.60137.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/314/26727_ 3.311441965062350.01.34138.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/384/26809_ 3.311321866054950.01.48138.86 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/273/26108_ 3.311873363302840.01.26136.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/250/26215_ 3.31279658833880.01.16136.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/264/26704_ 3.313127462572530.01.16136.02 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/299/26717_ 3.314213563983400.01.47138.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/287/26504_ 3.31541865963120.01.35137.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/322/27035_ 3.31645462196860.01.59139.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/302/26453_ 3.311261862220500.01.43137.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/333/26366_ 3.311021862506090.01.44137.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/302/26545_ 3.318293365150570.01.35137.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/241/26684_ 3.31671463098230.01.03139.83 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0183920/279/26190_ 3.31721863002110.01.24135.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0183920/400/27241_ 3.31901861551920.01.42140.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/307/26618_ 3.35181860991520.01.41137.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/422/27687_ 3.35121865011590.01.72143.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/285/26710_ 3.35301965016070.01.25139.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/405/27033_ 3.34361861076130.01.42140.11 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/258/26455_ 3.35241962213470.01.03136.76 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/254/26951_ 3.341081859120070.01.18139.06 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/386/26791_ 3.3573463873020.01.43137.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-01844528/364/27135W 3.3600647107341.41.30139.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-0184450/252/26167_ 3.331861959688090.01.12135.86 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/275/26596_ 3.331801860701080.01.32137.82 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/258/26675_ 3.341681865652560.01.24140.13 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/260/27138_ 3.341561861468700.01.18138.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/298/26792_ 3.341621962112200.01.39138.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/419/26397_ 3.341741860378130.01.62136.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/325/27129_ 3.3414483463974710.01.50141.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/453/27547_ 3.341381968578300.01.59142.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/331/26718_ 3.3413013464722550.01.40139.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0184450/439/25917_ 3.341201862086390.02.25133.82 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/274/26747_ 3.34961864160310.01.26136.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/379/26727_ 3.34781964205070.01.41139.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0184450/321/26497_ 3.34841863933340.01.19137.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.p
Found on 2025-12-12 17:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aef1a4df35Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Wednesday, 10-Dec-2025 20:03:49 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 154 days 12 hours 55 minutes 47 seconds Server load: 0.75 0.89 0.84 Total accesses: 1369349 - Total Traffic: 6.9 GB - Total Duration: 325936543 CPU Usage: u137.03 s219.2 cu391.11 cs235.68 - .00736% CPU load .103 requests/sec - 557 B/second - 5.3 kB/request - 238.023 ms/request 1 requests currently being processed, 49 idle workers ________________________W_________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-077500/1228/26593_ 10.74759563897830.05.02137.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/1031/26272_ 10.74902464328080.04.06136.21 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/1081/26306_ 10.74803860907460.04.51136.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/907/26552_ 10.749599561352110.04.13138.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EpImJ 0-077500/827/26801_ 10.75302659581310.04.08139.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/832/26144_ 10.74639560312200.03.85135.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/910/26590_ 10.7483612961644290.04.13137.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec10uw 0-077500/934/27066_ 10.74709063077100.04.21139.94 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-077500/1048/27093_ 10.7461012864498790.04.56140.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSQhpt 0-077500/989/26241_ 10.74682858485060.04.75137.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/1010/26137_ 10.74716062481990.04.49135.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-077500/1071/26360_ 10.745621064719650.04.67136.29 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/934/26401_ 10.745293865725500.04.43137.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG%2F 0-077500/878/25791_ 10.74443862939630.04.02134.91 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/871/25876_ 10.7512521058550660.04.08134.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCmUW 0-077500/971/26401_ 10.74988462254020.04.26134.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/824/26390_ 10.74933463645630.04.05137.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/863/26178_ 10.74874465722090.04.21135.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/1201/26686_ 10.74383861843750.04.94137.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/874/26022_ 10.7531813161821920.04.23135.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbsIwEIRfJfI9CQlEI 0-077500/929/26011_ 10.74495062190720.04.19135.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-077500/873/26223_ 10.7524223664850820.04.05135.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuJCRkW 0-077500/916/26409_ 10.7582862813000.04.19138.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/876/25882_ 10.75160062709550.04.35134.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0775027/993/26796W 10.7600612662434.44.25139.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-078890/964/26269_ 10.594493460731610.03.95136.06 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/1151/27231_ 10.59622864636850.04.60141.67 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/867/26401_ 10.59697564792380.04.18138.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/831/26594_ 10.59709160717500.03.94138.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-078890/925/26170_ 10.59583461998040.04.40135.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/811/26667_ 10.5967616258885600.03.72137.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iJDw 1-078890/826/26269_ 10.5934413163532470.04.04135.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1Des09YL 1-078890/1084/26749_ 10.59503864476420.04.59138.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/832/25871_ 10.5954221559437580.03.76134.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78pqQG 1-078890/899/26298_ 10.59312060441230.04.21136.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-078890/874/26385_ 10.5939622265397690.04.28138.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2gOGS3 1-078890/979/26844_ 10.60263861146820.04.77137.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/834/26463_ 10.60143961857600.03.72136.75 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/856/25952_ 10.602031060107750.04.09135.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/901/26785_ 10.57952063696950.04.55139.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-078890/963/27077_ 10.6049468297620.04.27140.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/984/26348_ 10.609127864392710.04.35137.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vNyhk 1-078890/835/25446_ 10.57983861719170.04.07131.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/925/26439_ 10.571029063836290.04.37135.43 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-078890/991/26320_ 10.58913863909750.04.85137.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PO8NC 1-078890/1064/26153_ 10.5888920563634920.04.83136.59
Found on 2025-12-10 20:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae432d6db5Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Monday, 08-Dec-2025 05:36:41 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 151 days 22 hours 28 minutes 39 seconds Server load: 0.65 0.93 0.95 Total accesses: 1346103 - Total Traffic: 6.8 GB - Total Duration: 323343758 CPU Usage: u128.76 s211.33 cu391.11 cs235.68 - .00737% CPU load .103 requests/sec - 558 B/second - 5.3 kB/request - 240.207 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-077500/620/25985_ 5.5949020563393580.02.55135.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-077500/622/25863_ 5.5963813863967540.02.18134.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PFEIW 0-077500/442/25667_ 5.5959513060309530.02.17134.62 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iLMZ 0-077500/446/26091_ 5.59660060828480.02.09136.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-077500/453/26427_ 5.581005359204450.02.30137.94 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/422/25734_ 5.63366459906620.01.80133.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/473/26153_ 5.595103461098650.02.20136.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/524/26656_ 5.62431062580000.02.20137.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-077500/479/26524_ 5.633073763950010.02.28138.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/581/25833_ 5.62455058098430.02.60135.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /wp-includes/assets/index.php HTTP/1.1 0-077500/506/25633_ 5.6237611061830530.02.13132.91 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PC9wi 0-077500/459/25748_ 5.63287064062080.02.22133.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-077500/496/25963_ 5.632273465104730.02.24135.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/495/25408_ 5.63145462535690.02.26133.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/454/25459_ 5.58952457893540.02.10132.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-077500/460/25890_ 5.58735861835240.02.12132.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/428/25994_ 5.5884919963245770.02.13135.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PHCAQ 0-077500/480/25795_ 5.58915865293360.02.30133.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/561/26046_ 5.6311514661336630.02.33135.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78s6ts 0-077500/432/25580_ 5.6374861266400.02.06133.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-077500/500/25582_ 5.63195961662790.02.11133.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0775028/462/25812W 5.6400641535041.32.01133.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-077500/493/25986_ 5.5895610962241760.02.07136.47 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAg3X 0-077500/469/25475_ 5.58985162197410.02.26132.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-077500/524/26327_ 5.589263460734260.02.12136.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4c4de1d5aa0c 1-078890/478/25783_ 5.43253460287160.02.04134.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/559/26639_ 5.42284064204560.02.37139.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-078890/455/25989_ 5.41425664336170.02.03136.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/426/26189_ 5.413763960166820.01.93136.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PGkux 1-078890/495/25740_ 5.42314961322170.02.25133.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/420/26276_ 5.41445058397240.01.93135.94 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /yas.php HTTP/1.1 1-078890/395/25838_ 5.431794462945780.01.92133.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC8ls 1-078890/550/26215_ 5.43135963866110.02.36136.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/400/25439_ 5.432121258997890.01.91132.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMmFW 1-078890/424/25823_ 5.438914859938700.02.04134.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMiEY 1-078890/418/25929_ 5.4327364918280.01.96136.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/540/26405_ 5.401017060770140.02.68135.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-078890/481/26110_ 5.40975961269590.02.10135.13 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/439/25535_ 5.409854559509310.01.98133.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-078890/468/26352_ 5.419224163235520.02.20137.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-078890/436/26550_ 5.409568167785790.02.04138.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PLn0g 1-078890/537/25901_ 5.40956863762390.02.06135.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJnAj 1-078890/468/25079_ 5.41794861312570.02.20129.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-078890/435/25949_ 5.418933063325300.02.11133.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-078890/433/25762_ 5.4165514663267040.02.10134.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JCQNM 1-078890/624/25713_ 5.416751363158460.02.70134.45
Found on 2025-12-08 05:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae0a153813Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Sunday, 30-Nov-2025 12:55:39 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 144 days 5 hours 47 minutes 37 seconds Server load: 0.86 0.79 0.92 Total accesses: 1278850 - Total Traffic: 6.5 GB - Total Duration: 312964903 CPU Usage: u117.9 s196.18 cu376.05 cs226.05 - .00735% CPU load .103 requests/sec - 560 B/second - 5.3 kB/request - 244.724 ms/request 1 requests currently being processed, 49 idle workers ________________W_________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0176590/100/24519_ 1.43986361556030.00.46127.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0176590/109/24316_ 1.421092861837900.00.46127.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/107/24480_ 1.421152858206750.00.51128.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/105/24687_ 1.421262358203240.00.49129.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0176590/136/24996_ 1.4213062957266710.00.68131.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0176590/105/24531_ 1.42159820958041570.00.58127.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0176590/125/24796_ 1.421032858893790.00.54129.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/114/25282_ 1.4391224760705610.00.52131.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAemW 0-0176590/140/25091_ 1.43792861658900.00.69131.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/118/24276_ 1.43672856020930.00.53128.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/127/24271_ 1.43492859530850.00.64126.29 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/122/24486_ 1.43612861886770.00.54127.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/142/24611_ 1.43312862919190.00.65128.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/117/24123_ 1.434113360504300.00.63126.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0176590/136/24184_ 1.43193955718940.00.69126.35 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/130/24606_ 1.4372859894430.00.56125.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-01765927/164/24762W 1.4400611767734.40.62129.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-0176590/114/24471_ 1.421812863329430.00.50126.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/137/24579_ 1.421753859695530.00.65128.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/129/24224_ 1.421632859435020.00.65126.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/109/24299_ 1.421557359738670.00.50127.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0176590/109/24557_ 1.421485129262142970.00.50127.47 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCQBb 0-0176590/126/24579_ 1.421466060181930.00.58129.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0176590/122/24132_ 1.421392859726020.00.53125.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0176590/122/24890_ 1.421332958920200.00.59130.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/110/24317_ 1.3912092758102430.00.59127.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/101/25199_ 1.3912721062138470.00.50132.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/99/24683_ 1.391320462395920.00.53129.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/118/24881_ 1.3913773158247450.00.56129.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/158/24430_ 1.38160714359190610.00.64126.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78pqBS 1-0177240/131/24929_ 1.40432856236840.00.64129.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/105/24636_ 1.391100360794380.00.45127.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/117/24650_ 1.3910403062039500.00.66129.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/110/24247_ 1.39973956927030.00.54126.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/112/24570_ 1.391012358086870.00.62127.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/122/24681_ 1.398521162562400.00.57129.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/135/24940_ 1.40733958575220.00.75128.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/112/24844_ 1.406237558857660.00.49128.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/110/24281_ 1.40552857541160.00.51126.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/125/25001_ 1.40372860911790.00.58130.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/102/25144_ 1.40252865611710.00.47131.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/112/24561_ 1.40132861715460.00.49128.82 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0177240/107/23809_ 1.40623059142480.00.45123.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/160/24693_ 1.3818623761376460.00.89126.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0177240/142/24473_ 1.381773061061550.00.66128.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0177240/98/24194_ 1.381692860858170.00.49126.98 127.0.0.1http/1.1ip
Found on 2025-11-30 12:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae0e4bf479Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 28-Nov-2025 21:17:28 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 142 days 14 hours 9 minutes 25 seconds Server load: 1.22 1.20 1.18 Total accesses: 1265802 - Total Traffic: 6.4 GB - Total Duration: 311372793 CPU Usage: u127.81 s200.38 cu361.25 cs216.82 - .00736% CPU load .103 requests/sec - 561 B/second - 5.3 kB/request - 245.989 ms/request 1 requests currently being processed, 49 idle workers ____W_____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-029420/838/24302_ 10.29947961362920.04.54126.91 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtowFNzzFSj7PByFX 0-029420/735/24096_ 10.3115511461642710.03.93126.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EhIlh 0-029420/845/24268_ 10.298511057914580.04.49127.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSUjY1 0-029420/810/24416_ 10.29968857791900.04.31128.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCS9X 0-0294227/884/24729W 10.3100570089334.44.52130.02 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-029420/885/24293_ 10.29908957758820.04.88126.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec132g 0-029420/860/24535_ 10.2810121058649400.04.56127.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAsIL 0-029420/854/25050_ 10.298811260488370.04.58130.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec4Vmw 0-029420/848/24833_ 10.29792961367580.04.44130.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PIECF 0-029420/823/24031_ 10.29771355682450.04.51127.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/705/24008_ 10.298399059155490.03.72124.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1DuSUjY7 0-029420/809/24225_ 10.29814961438620.04.33126.13 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EhJIA 0-029420/704/24345_ 10.306911062441050.03.71126.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PGkuX 0-029420/740/23873_ 10.30661860173350.03.90125.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/742/23832_ 10.30742955495980.03.90124.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PEtmw 0-029420/884/24369_ 10.30568059568790.04.47124.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-029420/797/24349_ 10.306092960766540.04.30127.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/989/24223_ 10.30481863092470.04.79125.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/774/24198_ 10.30707959217280.04.04126.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PEUmy 0-029420/863/23951_ 10.30549759203930.04.21125.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/810/24071_ 10.30521359443460.04.29126.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/819/24322_ 10.30361861809530.04.26126.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/779/24333_ 10.30312059819050.04.22128.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-029420/764/23865_ 10.31241859352470.03.91124.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/920/24667_ 10.31117058693580.04.94129.21 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-030390/870/24080_ 10.43495257804850.04.77126.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/722/24957_ 10.4332414461966310.03.71131.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kjiQ2 1-030390/775/24439_ 10.43181862024590.04.05128.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/945/24643_ 10.43301858004930.05.15128.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/825/24146_ 10.43132458688130.04.45125.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/806/24667_ 10.4010191355931830.04.26127.83 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNJz9owFLzzK1DuWVlrQ 1-030390/791/24371_ 10.40982960530380.04.19125.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c93Qz 1-030390/930/24406_ 10.4353912361620880.05.12128.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCT3h 1-030390/832/24009_ 10.435571056609900.04.67125.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78tJNu 1-030390/827/24325_ 10.43421957830650.04.44126.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/835/24355_ 10.43601862089730.04.07128.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/861/24581_ 10.42698858112190.04.65126.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PEUIY 1-030390/740/24608_ 10.418261258522970.03.80127.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iSTq 1-030390/817/24053_ 10.4277710557213650.04.08125.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78mKop 1-030390/725/24729_ 10.41901860438920.03.89129.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/787/24890_ 10.427991165272320.04.09130.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iSXY 1-030390/745/24333_ 10.42759861461840.04.02127.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtowFNzzFSj7POFyk 1-030390/847/23577_ 10.4183910558944060.04.25122.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC%2F 1-030390/986/24382_ 10.42656961108640.04.90125.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vFwSu 1-030390/927/24189_ 10.4271313060671250.04.67126.72 127.0.0.1http/1.1
Found on 2025-11-28 21:17 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae143a5064Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Wednesday, 26-Nov-2025 17:27:42 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 140 days 10 hours 19 minutes 40 seconds Server load: 0.58 0.72 0.88 Total accesses: 1245247 - Total Traffic: 6.3 GB - Total Duration: 308259029 CPU Usage: u119.7 s193.38 cu361.25 cs216.82 - .00734% CPU load .103 requests/sec - 560 B/second - 5.3 kB/request - 247.549 ms/request 1 requests currently being processed, 49 idle workers ______________________________________W___________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-029420/433/23897_ 5.20736860802940.02.37124.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/382/23743_ 5.191107461089760.01.97124.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/409/23832_ 5.20616957300960.02.27125.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/396/24002_ 5.205353357099430.02.11126.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/412/24257_ 5.19916856390360.02.09127.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/397/23805_ 5.19983456936510.02.26123.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/428/24103_ 5.19796857960790.02.25125.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/450/24646_ 5.21436959817390.02.43128.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/404/24389_ 5.21316860634760.02.12127.86 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/393/23601_ 5.2116855053340.02.10124.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/348/23651_ 5.21196858603910.01.80123.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/444/23860_ 5.2176860980540.02.38124.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/364/24005_ 5.192056861853480.01.94125.11 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/358/23491_ 5.191816859561720.01.89123.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/419/23509_ 5.191936854836610.02.19122.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/480/23965_ 5.1915452858995340.02.41122.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/367/23919_ 5.191636860008330.01.84124.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/516/23750_ 5.191336862572730.02.27123.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/391/23815_ 5.1917363358616510.02.10124.67 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/460/23548_ 5.191396958595230.02.17123.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/359/23620_ 5.191516858769800.01.87123.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/384/23887_ 5.191216861191720.01.92124.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/362/23916_ 5.191276859352760.01.89126.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/366/23467_ 5.1911483358797770.01.78122.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/460/24207_ 5.1910423057943450.02.45126.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/433/23643_ 5.3112543357214650.02.36123.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/383/24618_ 5.311156861378550.01.93129.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/409/24073_ 5.311135361572130.02.08126.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/414/24112_ 5.311096857341860.02.10125.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/420/23741_ 5.311036858204920.02.29123.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/371/24232_ 5.32976955202010.01.97125.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/418/23998_ 5.32856859978200.02.22123.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/404/23880_ 5.3113862860942580.02.15125.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/360/23537_ 5.311536355954100.01.97122.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/369/23867_ 5.3113212957182680.01.90123.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/457/23977_ 5.311456861422870.02.06126.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/433/24153_ 5.311576857448860.02.37123.91 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/380/24248_ 5.32136858049740.01.98125.86 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0303925/446/23682W 5.3300566448829.12.23123.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-030390/367/24371_ 5.322561059880280.01.98127.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/393/24496_ 5.3264064717660.02.05128.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-030390/390/23978_ 5.301876960923920.02.14125.83 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/485/23215_ 5.32376858343510.02.32120.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/520/23916_ 5.311696860108050.02.37122.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/494/23756_ 5.301996959887520.02.27124.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/529/23605_ 5.3274619359911380.02.48124.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.c
Found on 2025-11-26 17:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aec12a35f7Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Monday, 24-Nov-2025 13:21:08 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 138 days 6 hours 13 minutes 5 seconds Server load: 0.56 0.66 0.85 Total accesses: 1225528 - Total Traffic: 6.2 GB - Total Duration: 305071492 CPU Usage: u111.61 s186.41 cu361.25 cs216.82 - .00733% CPU load .103 requests/sec - 560 B/second - 5.3 kB/request - 248.931 ms/request 1 requests currently being processed, 49 idle workers ___________________________W______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-029420/27/23491_ 0.241338360070830.00.15122.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/21/23382_ 0.241453360637980.00.13122.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/22/23445_ 0.24116732856571000.00.10123.02 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PJzc2 0-029420/18/23624_ 0.241241856171380.00.08124.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/21/23866_ 0.2413973355867800.00.10125.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/16/23424_ 0.2415092856368530.00.07121.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/18/23693_ 0.2412873157418710.00.07123.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/20/24216_ 0.249869159128540.00.09125.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/19/24004_ 0.241061860015970.00.09125.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/38/23246_ 0.24881954489320.00.19122.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/18/23321_ 0.25761858105770.00.05121.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/25/23441_ 0.2569812260330630.00.10121.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PBsuY 0-029420/16/23657_ 0.255811061369130.00.07123.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/21/23154_ 0.25461958999820.00.10121.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/19/23109_ 0.253523254167950.00.07120.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/26/23511_ 0.25161858317430.00.10120.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/20/23572_ 0.25281859361680.00.09122.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/26/23260_ 0.2541862017030.00.16121.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/20/23444_ 0.25101857890330.00.08122.65 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/13/23101_ 0.2318513457876920.00.07120.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/17/23278_ 0.231800058156200.00.09122.21 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-029420/17/23520_ 0.2317211060524710.00.08122.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-029420/33/23587_ 0.241674358761110.00.18124.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/15/23116_ 0.2416183458311780.00.08120.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-029420/14/23761_ 0.241566457328180.00.09124.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/20/23230_ 0.23513156587050.00.10121.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/17/24252_ 0.211841860550990.00.06127.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0303925/44/23708W 0.2400608872629.10.11124.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-030390/19/23717_ 0.211781956824500.00.06123.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/24/23345_ 0.21169530057644530.00.10121.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2QLDyq 1-030390/18/23879_ 0.211657054653000.00.08123.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-030390/14/23594_ 0.211601859456360.00.06121.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/18/23494_ 0.23140260351850.00.10122.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-030390/19/23196_ 0.23221955323550.00.09120.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/26/23524_ 0.23341956614670.00.13122.20 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/15/23535_ 0.23401860813750.00.07124.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/18/23738_ 0.23521856630730.00.07121.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/18/23886_ 0.22127828657342550.00.10123.98 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78mKYD 1-030390/17/23253_ 0.221181956009910.00.08121.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/13/24017_ 0.221121859263230.00.06125.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/19/24122_ 0.221001864190930.00.07126.07 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/15/23603_ 0.22941859567470.00.07123.76 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/20/22750_ 0.221301957597360.00.12117.92 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/18/23414_ 0.23641959521690.00.14120.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/20/23282_ 0.22821859404400.00.11122.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-030390/19/23095_ 0.211541859211940.00.08121.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_we
Found on 2025-11-24 13:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aea9a00715Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Saturday, 22-Nov-2025 11:57:23 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 136 days 4 hours 49 minutes 21 seconds Server load: 0.37 0.85 0.88 Total accesses: 1206001 - Total Traffic: 6.1 GB - Total Duration: 302261077 CPU Usage: u120.29 s189.31 cu345.45 cs207.61 - .00733% CPU load .102 requests/sec - 560 B/second - 5.3 kB/request - 250.631 ms/request 1 requests currently being processed, 49 idle workers ___________________________________W______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0133260/681/22958_ 8.25117859008500.03.82119.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/709/22996_ 8.241496860164530.03.81120.98 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/677/22901_ 8.25237955811200.03.64119.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/782/23225_ 8.25356855646840.03.80121.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/727/23336_ 8.253824255198990.04.07122.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PC%2F 0-0133260/718/23096_ 8.25717855870920.03.84119.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/698/23358_ 8.241377856824440.03.51121.62 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/743/23776_ 8.241677858612350.03.79123.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/641/23684_ 8.241557859592600.03.46124.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/611/22801_ 8.241197853900960.03.27120.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/643/22983_ 8.241324057797790.03.42119.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0133260/622/23005_ 8.2413003259881770.03.39119.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/783/23309_ 8.2493823160899840.04.30121.35 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2QGDIT 0-0133260/668/22826_ 8.241137958562260.03.54120.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/626/22679_ 8.241257853623680.03.45118.47 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/768/23150_ 8.258492957886190.03.86118.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/723/23174_ 8.241011258888510.04.10120.82 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/712/22888_ 8.25791361573310.03.88119.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/741/23113_ 8.25597857388870.03.97120.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/655/22784_ 8.241077957421010.03.39119.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/690/22938_ 8.25657857567690.03.92120.52 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/731/23193_ 8.257354259896600.04.01120.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/729/23184_ 8.25477858172540.03.97121.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/750/22793_ 8.25537857871780.03.96118.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/680/23367_ 8.25417856930280.03.75122.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/653/22777_ 8.351437856150730.03.39119.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/682/23736_ 8.36177859342810.03.91125.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/624/23195_ 8.3416171659952010.03.40121.42 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/814/23313_ 8.351528056451890.04.27121.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0134570/714/23001_ 8.35727257106180.03.89119.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/752/23538_ 8.35102612254197820.04.23121.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PJwLK 1-0134570/796/23154_ 8.36297958503510.03.93119.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/758/23098_ 8.3655059811660.04.07120.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET / HTTP/1.1 1-0134570/714/22907_ 8.356212954893260.03.68119.21 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/721/23126_ 8.35515256068810.03.96120.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-01345725/724/23093W 8.3600602161631.63.81121.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-0134570/677/23212_ 8.351317856009370.03.74119.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/679/23540_ 8.3513613156855030.03.65122.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/785/22927_ 8.351168355436650.04.15120.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/713/23624_ 8.35777858793310.03.98123.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/755/23608_ 8.3545211563156220.04.03123.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vFxou 1-0134570/746/23241_ 8.3639214059033920.03.90121.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FSuR7ng2 1-0134570/649/22399_ 8.351294357101800.03.54116.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/637/23094_ 8.35120525358883220.03.36118.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCSQ% 1-0134570/682/22945_ 8.35897858802570.03.70120.53 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/614/22690_ 8.35837858714490.03.23119.70 127.0.0.1htt
Found on 2025-11-22 11:56 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae36f29d4eApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Thursday, 20-Nov-2025 15:22:06 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 134 days 8 hours 14 minutes 4 seconds Server load: 0.21 0.41 0.55 Total accesses: 1188763 - Total Traffic: 6.0 GB - Total Duration: 299731614 CPU Usage: u113.82 s183.9 cu345.45 cs207.61 - .00733% CPU load .102 requests/sec - 559 B/second - 5.3 kB/request - 252.137 ms/request 1 requests currently being processed, 49 idle workers ______________________________________W___________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0133260/350/22627_ 4.38400858412800.01.96117.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/388/22675_ 4.38520859712390.02.18119.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/346/22570_ 4.38640855280130.01.83118.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/391/22834_ 4.38760855295240.02.22120.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/353/22962_ 4.37940854611820.01.94120.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/360/22738_ 4.371251355511800.01.97118.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/362/23022_ 4.38280856362870.02.03120.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/430/23463_ 4.38160858110320.02.23121.76 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/371/23414_ 4.381993959044920.02.13122.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/334/22524_ 4.3840853316800.01.89118.92 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/386/22726_ 4.38100857364480.02.20118.39 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/358/22741_ 4.371900959442140.02.05118.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/410/22936_ 4.371495360313070.02.33119.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/366/22524_ 4.361960858137990.02.08118.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/322/22375_ 4.371780853059900.01.88116.91 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/406/22788_ 4.3714462957252350.01.90116.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/343/22794_ 4.371720858066350.02.00118.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/308/22484_ 4.3716001060948120.01.73117.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/351/22723_ 4.371400256875720.01.88118.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/333/22462_ 4.371349456952540.01.76117.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/330/22578_ 4.3712192857184240.01.93118.53 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/355/22817_ 4.371187359471050.01.99118.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0133260/344/22799_ 4.371060857654790.01.89119.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/371/22414_ 4.371120857471280.02.02116.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0133260/349/23036_ 4.378201056254810.02.00120.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/343/22467_ 4.39340855783230.01.91117.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/344/23398_ 4.38700858856390.02.06123.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/333/22904_ 4.38460859580830.01.81119.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/495/22994_ 4.391223755848050.02.60119.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/379/22666_ 4.371540856646350.02.00117.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/351/23137_ 4.3719222953547280.02.05119.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/336/22694_ 4.38580957910290.01.80117.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/344/22684_ 4.381000859151120.01.79118.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/393/22586_ 4.3810812954505810.02.13117.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/344/22749_ 4.38880855574680.01.88118.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/405/22774_ 4.39220859828520.02.30120.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/404/22939_ 4.391831155660020.02.34117.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0134570/379/23240_ 4.3957256332490.02.10120.53 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET / HTTP/1.1 1-01345724/346/22488W 4.3900547865627.41.78117.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-0134570/384/23295_ 4.3812973058377690.02.20121.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/363/23216_ 4.381180862495730.01.93121.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/337/22832_ 4.387993458642220.01.80119.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/359/22109_ 4.371840856542240.02.03114.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/316/22773_ 4.371660858321860.01.62117.06 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0134570/393/22656_ 4.381201358339830.02.21119.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0134570/326/22402_ 4.381240858299460.01.74118.20 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.c
Found on 2025-11-20 15:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aef87f3a28Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Sunday, 16-Nov-2025 09:21:07 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 130 days 2 hours 13 minutes 5 seconds Server load: 0.69 0.97 1.03 Total accesses: 1142744 - Total Traffic: 5.8 GB - Total Duration: 292276026 CPU Usage: u110.93 s178.95 cu331.71 cs198.8 - .0073% CPU load .102 requests/sec - 554 B/second - 5.3 kB/request - 255.767 ms/request 1 requests currently being processed, 49 idle workers ______________________W___________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0288920/392/21651_ 4.89376056845360.01.89112.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0288920/535/21693_ 4.8933187058189560.02.68113.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMwMT 0-0288920/383/21635_ 4.89401853966740.01.78113.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/472/21907_ 4.89461853992380.02.26114.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/494/22037_ 4.89473953172990.02.46115.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vDWFW 0-0288920/511/21854_ 4.8860015254213570.02.50113.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vKChx 0-0288920/492/22046_ 4.88531354894540.02.36114.65 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/501/22388_ 4.88513356415710.02.56116.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/475/22513_ 4.8857119757670820.02.28117.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0288920/407/21638_ 4.89331351739160.02.06114.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/597/21809_ 4.9024618355422020.03.11113.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PHlos 0-0288920/372/21760_ 4.89280857809190.01.89112.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/468/21926_ 4.90235858487030.02.40113.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PO8FV 0-0288920/491/21687_ 4.9021327956765340.02.52114.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78uzMU 0-0288920/492/21469_ 4.90109951668200.02.44111.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JE4ur 0-0288920/456/21779_ 4.90140355368640.02.07111.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/387/21935_ 4.9091056702580.01.75113.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0288920/443/21639_ 4.9090159630570.02.07112.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0288920/466/21855_ 4.9051855579930.02.22113.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/485/21680_ 4.9021955702580.02.39113.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJxOO 0-0288920/388/21547_ 4.903221755622490.01.92112.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0288920/495/21915_ 4.887403057932810.02.09113.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-02889226/396/21957W 4.9100563561541.21.74115.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-0288920/505/21557_ 4.886411056042890.02.45112.15 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/525/22184_ 4.88700754777820.02.66115.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/463/21530_ 4.83161954204320.02.46112.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/479/22488_ 4.8391157285680.02.42118.04 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0289730/517/21972_ 4.839912457961690.02.64114.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcgUC6E 1-0289730/454/21919_ 4.832311054303700.02.20114.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PJWQ1 1-0289730/386/21792_ 4.83221955381970.01.80112.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/497/22259_ 4.83286352013580.02.45114.82 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0289730/636/21840_ 4.83123056452990.03.28112.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0289730/432/21812_ 4.8359757565400.02.09113.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/486/21639_ 4.8327052997370.02.43112.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET / HTTP/1.1 1-0289730/448/21854_ 4.8340954236840.02.08113.11 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/374/21903_ 4.8321758572920.01.71115.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCmos 1-0289730/416/21955_ 4.81760854230630.01.94112.42 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/410/22311_ 4.81725954776830.01.94115.47 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJwGZ 1-0289730/352/21638_ 4.81693353328450.01.67113.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0289730/477/22277_ 4.825451156508470.02.38115.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAtBs 1-0289730/507/22287_ 4.824988561014530.02.67116.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1 1-0289730/437/21837_ 4.816311157018860.02.05114.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0289730/464/21276_ 4.82580855111110.02.24109.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/491/21921_ 4.82473856953650.02.63112.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1DesxKWs 1-0289730/474/21700_ 4.82520856847010.02.44113.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-02897
Found on 2025-11-16 09:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aece7588e8Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Friday, 14-Nov-2025 09:10:07 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 128 days 2 hours 2 minutes 5 seconds Server load: 0.82 1.07 1.02 Total accesses: 1128547 - Total Traffic: 5.7 GB - Total Duration: 290791803 CPU Usage: u106.21 s174.07 cu331.71 cs198.8 - .00733% CPU load .102 requests/sec - 556 B/second - 5.3 kB/request - 257.669 ms/request 1 requests currently being processed, 49 idle workers _______________________W__________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0288920/179/21438_ 2.07941856643710.00.91111.32 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/205/21363_ 2.08821857744810.01.10112.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/169/21421_ 2.071040053782820.00.90112.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0288920/191/21626_ 2.071121853716250.00.94113.65 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/168/21711_ 2.06122415352910820.00.81113.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JOSBB 0-0288920/176/21519_ 2.06131742353860640.00.89111.67 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1DeycY6F 0-0288920/221/21775_ 2.061280354550520.01.09113.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/178/22065_ 2.0611561056128850.00.96114.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/179/22217_ 2.06125324957371510.00.80116.29 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJsyw 0-0288920/164/21395_ 2.07995051549720.00.94113.02 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0288920/271/21483_ 2.08708055018640.01.48111.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0288920/163/21551_ 2.08761857586640.00.94111.90 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/194/21652_ 2.08680358136050.01.10112.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/148/21344_ 2.0862518956391230.00.77112.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0288920/169/21146_ 2.08521851266710.00.80109.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/203/21526_ 2.0847742755177830.00.96110.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9ZaDm 0-0288920/145/21693_ 2.08401856402680.00.70112.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/174/21370_ 2.08341859364960.00.97111.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/216/21605_ 2.08221855293650.01.05112.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/184/21379_ 2.08161855524320.00.94112.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0288920/171/21330_ 2.08187055380810.00.96111.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0288920/179/21599_ 2.08144357590190.00.93112.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0288920/149/21710_ 2.08101856098010.00.74114.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-02889226/184/21236W 2.1000558328337.10.88110.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-0288920/190/21849_ 2.0941954352750.00.98114.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/155/21222_ 1.9980324353869620.00.89110.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJcq 1-0289730/167/22176_ 1.9972913256890820.00.86116.49 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSXA2Y 1-0289730/177/21632_ 1.99881957549360.00.90112.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/152/21617_ 1.999791053988750.00.78112.69 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG%2F 1-0289730/150/21556_ 1.991001855180320.00.80111.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/175/21937_ 1.991059051742430.00.89113.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0289730/296/21500_ 1.99701856061610.01.63111.06 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/204/21584_ 1.99641857319890.01.07112.87 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/180/21333_ 2.005005252693110.01.00111.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0289730/183/21589_ 2.00461853887390.01.06112.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/165/21694_ 2.005811258393970.00.82114.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/161/21700_ 2.0037026054001680.00.76111.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PExLA 1-0289730/178/22079_ 2.00281854514470.00.88114.41 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/151/21437_ 2.00201953093730.00.79112.27 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSQhs2 1-0289730/166/21966_ 2.0017913656205480.00.85114.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78hoyM 1-0289730/170/21950_ 2.0015022460604390.00.94114.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1DeyTpsF 1-0289730/175/21575_ 2.001171156733870.00.91113.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHnda 1-0289730/164/20976_ 2.00803354809340.00.79108.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0289730/169/21599_ 2.0033356552090.01.01110.76 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0289730/167/21393_ 1.981361856591120.00.95112.11 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0289730/163/21248_ 1
Found on 2025-11-14 09:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aed878ae6eApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Wednesday, 12-Nov-2025 09:51:19 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 126 days 2 hours 43 minutes 17 seconds Server load: 0.68 0.68 0.90 Total accesses: 1109096 - Total Traffic: 5.6 GB - Total Duration: 286963747 CPU Usage: u114.81 s177.14 cu315.83 cs189.69 - .00732% CPU load .102 requests/sec - 555 B/second - 5.3 kB/request - 258.737 ms/request 1 requests currently being processed, 49 idle workers ______________________________________W___________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-08970/801/21011_ 9.831294355782870.04.44109.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78hK0Y 0-08970/980/20965_ 9.821781356990540.05.36110.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGemZ 0-08970/979/21007_ 9.82165052994850.05.33109.88 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-08970/999/21247_ 9.8219922653137190.05.59111.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZjtowFH3nK1DeszIss 0-08970/892/21362_ 9.83113852445180.04.89111.92 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/725/21110_ 9.82353853174970.03.94109.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/878/21339_ 9.808621053785620.04.89111.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9XSaR 0-08970/823/21639_ 9.8353855182570.04.50112.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/1072/21816_ 9.81833856442050.05.99113.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/857/21016_ 9.8172014150971090.04.70110.96 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PClNY 0-08970/878/21042_ 9.8153021954060330.04.94109.26 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-08970/796/21147_ 9.81752356591090.04.40109.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/824/21145_ 9.816733057142540.04.59110.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/855/21020_ 9.81580055869060.04.59110.50 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-08970/723/20800_ 9.8160914650674220.03.79108.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSUg2y 0-08970/753/21122_ 9.81488054243230.04.12108.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-08970/800/21366_ 9.8151121655931780.04.38111.16 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec21YF 0-08970/872/21018_ 9.82386958509510.04.57109.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PEkYY 0-08970/825/21190_ 9.81454054569240.04.42110.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-08970/977/21018_ 9.82233954894430.05.52110.21 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/814/20941_ 9.81413854605060.04.39109.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/844/21145_ 9.82337056743510.04.77109.80 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-08970/999/21367_ 9.82268055293890.05.57112.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-08970/844/20843_ 9.82325855048290.04.63108.51 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAExs 0-08970/906/21486_ 9.82292753709170.05.17112.08 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlcX 1-09910/906/20826_ 10.04570353047320.04.87108.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/945/21807_ 10.0449813955828270.05.28114.38 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGcyF 1-09910/914/21222_ 10.05292757008710.04.98110.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCmX1 1-09910/881/21245_ 10.04521553038090.04.28110.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/805/21215_ 10.05278254509290.04.38109.93 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/850/21598_ 10.04377251124790.04.51111.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/882/21019_ 10.04343055237940.04.76108.36 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-09910/1109/21162_ 10.052563056632030.06.10110.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAspF 1-09910/750/20962_ 10.04424251851310.04.05109.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/996/21110_ 10.06152253078880.05.44109.72 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/894/21330_ 10.06173857629360.04.96112.56 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/969/21339_ 10.05325853122420.05.40109.37 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSQibA 1-09910/1086/21675_ 10.061943953799690.05.56112.24 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PExn6 1-099126/889/21010W 10.0600525822735.95.01110.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-09910/973/21604_ 10.06227455467220.05.43112.48 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/1058/21601_ 10.06121059810960.05.99112.44 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-09910/849/21218_ 10.0474712255720310.04.69111.20 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuJCRkS 1-09910/727/20606_ 10.066224753850980.03.81106.62 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JDjDz 1-09910/911/21250_ 10.04773955770010.04.77108.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/789/21009_ 10.03847355688790.04.47110.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/798/20849_ 10.0465221255862700.04.39110.11 127.0.0.1http/1.1ip-1
Found on 2025-11-12 09:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aef82e5e01Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Monday, 10-Nov-2025 12:34:10 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 124 days 5 hours 26 minutes 7 seconds Server load: 0.58 0.88 0.91 Total accesses: 1086584 - Total Traffic: 5.5 GB - Total Duration: 282499586 CPU Usage: u106.73 s171.13 cu315.83 cs189.69 - .0073% CPU load .101 requests/sec - 551 B/second - 5.3 kB/request - 259.989 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-08970/397/20607_ 4.851002354451160.02.04106.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/483/20468_ 4.851150256079400.02.59107.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/480/20508_ 4.8512413152423930.02.48107.03 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/493/20741_ 4.851183852286170.02.67108.75 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/406/20876_ 4.8510995151570810.02.17109.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/386/20771_ 4.863232952442960.02.11107.62 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/397/20858_ 4.851051352636640.02.06108.25 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/444/21260_ 4.858583054649070.02.37110.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/501/21245_ 4.85943855187070.02.75110.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/435/20594_ 4.8583915050278610.02.32108.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMy9g 0-08970/477/20641_ 4.85819453352190.02.69107.01 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/350/20701_ 4.85911255629740.01.86106.97 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/411/20732_ 4.85763856206170.02.15107.60 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/375/20540_ 4.85703855138410.01.82107.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/359/20436_ 4.85725849867550.01.74106.13 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMUEY 0-08970/375/20744_ 4.8556813453349550.01.96106.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSXACr 0-08970/396/20962_ 4.85643854963270.02.06108.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/421/20567_ 4.86223857699840.01.95106.75 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/425/20790_ 4.86523853668750.02.15108.33 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/431/20472_ 4.86163853706250.02.26106.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/412/20539_ 4.86403853653060.02.11106.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/450/20751_ 4.86103855798350.02.52107.55 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/509/20877_ 4.851423854515710.02.69109.71 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/436/20435_ 4.8643954255400.02.39106.28 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/492/21072_ 4.8513483152856960.02.88109.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/389/20309_ 4.90583852226710.02.12105.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/512/21374_ 4.9056120754937300.02.82111.92 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-09910/413/20721_ 4.91343856231130.02.24107.85 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/471/20835_ 4.91283852027300.01.95108.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/386/20796_ 4.92185224153610320.02.04107.58 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtMwFNz3K6rs8%2BR 1-09910/457/21205_ 4.901363850212060.02.32109.29 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/454/20591_ 4.92143454137340.02.38105.98 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-099124/598/20651W 4.9200555205727.03.12107.57 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 1-09910/375/20587_ 4.92753451071120.02.02107.20 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/466/20580_ 4.901177052208970.02.36106.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-09910/415/20851_ 4.90119212256752100.02.20109.81 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFPc4IwEMXv%2FRRM7iQ 1-09910/499/20869_ 4.901303851930010.02.81106.78 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/491/21080_ 4.901063853085460.02.66109.34 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/393/20514_ 4.901033109451785970.02.18107.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vCiZa 1-09910/475/21106_ 4.901123854377820.02.58109.63 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/538/21081_ 4.909564758947710.02.95109.40 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/402/20771_ 4.90839954824400.02.03108.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGcyQ 1-09910/342/20221_ 4.90922252719110.01.64104.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/381/20720_ 4.90883854758270.01.79105.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/390/20610_ 4.908391354864380.02.13107.67 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSj7jG2GZ 1-09910/368/20419_ 4.90731055206630.01.94107.66 127.0.0.1http/1.1ip-10-1-110-52.ap-so
Found on 2025-11-10 12:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae5105d272Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-03-18T13:41:27 Current Time: Saturday, 08-Nov-2025 08:46:13 UTC Restart Time: Wednesday, 09-Jul-2025 07:08:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 122 days 1 hour 38 minutes 11 seconds Server load: 1.06 0.98 0.90 Total accesses: 1066178 - Total Traffic: 5.4 GB - Total Duration: 278100630 CPU Usage: u98.92 s165.24 cu315.83 cs189.69 - .0073% CPU load .101 requests/sec - 550 B/second - 5.3 kB/request - 260.839 ms/request 1 requests currently being processed, 49 idle workers _________________W________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-08970/22/20232_ 0.237533353540360.00.10104.70 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/18/20003_ 0.238173255016920.00.09104.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/22/20050_ 0.23866351452720.00.10104.64 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-08970/22/20270_ 0.238781150853760.00.11106.19 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vGcYa 0-08970/23/20493_ 0.23905949937950.00.11107.14 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vOEq1 0-08970/20/20405_ 0.221367851443630.00.09105.61 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/27/20488_ 0.2373214051739880.00.10106.29 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JIRcU 0-08970/19/20835_ 0.2369413953874910.00.09107.83 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vENnx 0-08970/117/20861_ 0.274821353774630.00.69108.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowFHznK1Dec2VZg 0-08970/35/20194_ 0.2746712549694150.00.20106.45 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCRAA 0-08970/67/20231_ 0.283395652615910.00.36104.68 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2gGEyE 0-08970/19/20370_ 0.28287854818760.00.08105.18 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/21/20342_ 0.2825923755210110.00.09105.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vCCIY 0-08970/20/20185_ 0.28227854700100.00.08105.99 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/20/20097_ 0.2817221049327730.00.08104.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2QKCXQ 0-08970/26/20395_ 0.2912816252832410.00.13104.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vHiPB 0-08970/26/20592_ 0.2989354117090.00.12106.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-089725/50/20196W 0.2900570851128.70.15104.94 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /server-status HTTP/1.1 0-08970/21/20386_ 0.221486852911960.00.12106.30 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/18/20059_ 0.22127226653157850.00.09104.79 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMu9x 0-08970/28/20155_ 0.221187852575930.00.11104.95 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/19/20320_ 0.22114818154912610.00.08105.11 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMgIS 0-08970/19/20387_ 0.221066853256570.00.07107.09 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-08970/25/20024_ 0.221044053326450.00.09103.98 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-08970/32/20612_ 0.239477151703700.00.15107.06 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/17/19937_ 0.211306851325640.00.10103.77 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/22/20884_ 0.221246753726990.00.13109.23 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/23/20331_ 0.22116024455598340.00.12105.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DecyVc1 1-09910/20/20384_ 0.221127851431260.00.08106.46 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/18/20428_ 0.22105315152792630.00.10105.65 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMsNs 1-09910/22/20770_ 0.221006849181540.00.08107.05 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/26/20163_ 0.22920163553249670.00.12103.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1DeydZwC 1-09910/19/20072_ 0.22887854356700.00.08104.53 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/23/20235_ 0.22878850552920.00.13105.31 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vKCXg 1-09910/20/20134_ 0.22827851178630.00.08104.35 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/24/20460_ 0.22766855847210.00.13107.74 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/28/20398_ 0.2273725150954610.00.16104.12 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PLnAr 1-09910/36/20625_ 0.22707851913350.00.16106.84 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-09910/19/20140_ 0.2268515750686560.00.10105.54 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAkIL 1-09910/21/20652_ 0.224901653474750.00.11107.17 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78mBgm 1-09910/51/20594_ 0.2341521758001160.00.28106.73 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-09910/16/20385_ 0.23325454217920.00.07106.59 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/14/19893_ 0.232733452166180.00.08102.89 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-09910/19/20358_ 0.232501054162800.00.07104.00 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vEMJF 1-09910/21/20241_ 0.2321116054290950.00.13105.66 127.0.0.1http/1.1ip-10-1-110-52.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFS
Found on 2025-11-08 08:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae17a77205Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 18-Oct-2024 13:51:55 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 79 days 3 hours 41 minutes 15 seconds Server load: 0.82 0.87 1.13 Total accesses: 1056394 - Total Traffic: 5.5 GB - Total Duration: 412003815 CPU Usage: u81.73 s136.46 cu364.13 cs197.12 - .0114% CPU load .154 requests/sec - 861 B/second - 5.4 kB/request - 390.01 ms/request 1 requests currently being processed, 49 idle workers _____________W____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-059560/1159/20252_ 14.9769828776157700.06.27107.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNJz9owFLzzK1Du2WjYL 0-059560/1315/20744_ 14.977893079439320.06.97109.52 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/993/20565_ 14.96330848481211860.05.70108.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAuXx 0-059560/1219/21064_ 14.9715284581343050.06.68118.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1138/21897_ 14.9725893289870230.06.14117.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1123/20367_ 14.962957678946180.05.99107.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1295/21781_ 14.9727283188569340.06.07114.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/828/21241_ 14.979283383354060.04.85112.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1002/21846_ 14.97244661386192770.05.58115.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iK9U 0-059560/1190/21762_ 14.971367385466790.06.33114.23 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/829/20416_ 14.9799377208260.05.03110.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/911/21905_ 14.97606382764900.05.09113.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1103/22498_ 14.971108385683380.05.99116.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059568/845/20918W 14.990079656339.74.87112.67 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-059560/990/21149_ 14.9636182979719060.05.55113.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/890/21191_ 14.963589383712630.05.23114.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/799/22174_ 14.9633383486305590.04.77118.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/794/20184_ 14.972024183134700.04.77106.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/764/21830_ 14.98681081950160.04.77115.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-059560/1084/20367_ 14.962840079178900.05.50108.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-059560/1074/20956_ 14.963123079918300.05.89110.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET / HTTP/1.1 0-059560/1139/20864_ 14.963167378505110.05.95111.23 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/1231/20913_ 14.9725153778805200.06.27110.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIFOx 0-059560/1455/21227_ 14.97193051386194890.07.19111.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbsIwEIRfJfI9CQkJA 0-059560/1069/21099_ 14.97207451980379260.05.96111.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbsIwEIRfJfI9CQmBg 1-033650/1016/19127_ 15.4952545269966620.05.53102.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FiuV7XmB 1-033650/1068/20246_ 15.49868371859110.05.86106.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1067/19072_ 15.492456471834880.05.87102.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/989/18379_ 15.4918183669416080.05.5697.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/976/19637_ 15.4911574277489660.05.59103.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1273/19762_ 15.492908479652740.06.19103.73 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/789/19056_ 15.492664071025850.04.59100.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-033650/1015/18801_ 15.4913843669421730.05.54106.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1013/20170_ 15.5068177259700.05.63112.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 1-033650/909/17761_ 15.4910114074029160.05.0096.17 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/961/19556_ 15.4965220575303110.05.41104.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iRks 1-033650/987/18193_ 15.483641072185510.05.6296.84 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-033650/793/19368_ 15.491384272847470.04.72103.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1155/18695_ 15.48359618971409280.06.0899.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCeZm 1-033650/1180/18925_ 15.49738380308670.06.23100.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/990/18995_ 15.483328378104710.05.40100.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1253/18092_ 15.4834663271403250.06.4195.88 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1436/18816_ 15.50182870980670.07.4499.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1404/19836_ 15.49295759278057640.07.47104.52 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vFFEL 1-033650/1451/18967_ 15.4831843275082290.06.6997.52 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1300/18329_ 15.492811472922690.06.6996.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/1173/18617_ <
Found on 2024-10-18 13:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae901e7ed2Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 16-Oct-2024 20:33:35 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 77 days 10 hours 22 minutes 55 seconds Server load: 1.50 2.12 1.75 Total accesses: 1030516 - Total Traffic: 5.4 GB - Total Duration: 400004526 CPU Usage: u70.62 s128.68 cu364.13 cs197.12 - .0114% CPU load .154 requests/sec - 859 B/second - 5.4 kB/request - 388.159 ms/request 1 requests currently being processed, 49 idle workers _____________________________W____________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-059560/572/19665_ 7.6749344773707700.03.01104.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PMujW 0-059560/694/20123_ 7.6744716477239900.03.47106.03 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78qJDp 0-059560/428/20000_ 7.6588251279073160.02.49105.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlQL 0-059560/524/20369_ 7.6664728378072260.02.95114.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PBV6L 0-059560/531/21290_ 7.6576117787557210.02.92114.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec0%2B 0-059560/559/19803_ 7.651069075947240.02.95104.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-059560/743/21229_ 7.6758918686389780.03.41112.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCH3Y 0-059560/464/20877_ 7.68187208581144760.02.75110.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PJlOq 0-059560/472/21316_ 7.6740216684126950.02.77112.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIeBw 0-059560/618/21190_ 7.67315082538930.03.24111.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-059560/509/20096_ 7.68131329875331380.02.95108.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAc6Y 0-059560/515/21509_ 7.6725417680782840.02.77111.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGcYi 0-059560/595/21990_ 7.67284382719310.03.15113.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/504/20577_ 7.68566477756300.02.70110.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/571/20730_ 7.689170677832420.03.19110.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHsBX 0-059560/475/20776_ 7.64115117581766420.02.76112.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PItIZ 0-059560/526/21901_ 7.641143984957350.02.99116.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78mouV 0-059560/407/19797_ 7.67241080859240.02.50104.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-059560/450/21516_ 7.6411721080185430.02.74113.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC8P1 0-059560/521/19804_ 7.6584818676935050.02.57105.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG%2F 0-059560/431/20313_ 7.651018077191480.02.63107.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-059560/650/20375_ 7.6599170076026470.03.23108.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-059560/527/20209_ 7.66716075706510.02.95107.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-059560/706/20478_ 7.66701182976310.03.76108.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-059560/506/20536_ 7.6578218176748710.02.89108.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7JCQXa 1-033650/619/18730_ 8.01116217968524020.03.2199.84 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uISq 1-033650/635/19813_ 8.011143869483510.03.50104.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDUTp 1-033650/564/18569_ 8.04178199269504410.03.0599.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG%2F 1-033650/574/17964_ 8.0510489867249630.03.2095.12 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PG8uF 1-0336511/625/19286W 8.0500749362226.23.38101.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-033650/583/19072_ 8.0342551776173230.03.05100.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-033650/413/18680_ 8.057652068766370.02.3498.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCSUe 1-033650/468/18254_ 8.04211067093970.02.66103.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-033650/572/19729_ 8.01112917275095750.03.13109.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78prAD 1-033650/578/17430_ 8.0198141072197910.03.0594.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EidQu 1-033650/573/19168_ 8.011012773936940.03.13102.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-033650/585/17791_ 8.017761070903800.03.2994.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1Des96Q3 1-033650/416/18991_ 8.0185920671235220.02.42101.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JA4wY 1-033650/653/18193_ 8.011047368596450.03.3696.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/666/18411_ 8.0180227678252840.03.4197.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dekzhci 1-033650/408/18413_ 8.0175218076098140.02.4197.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyY3AL 1-033650/696/17535_ 8.0268024369738200.03.4692.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-033650/728/18108_ 8.02700868417440.03.7796.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-033650/673/19105_ 8.0362616474887220.03.60100.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMnlY 1-033650/660/18176_ 8.03566133371715240.03.1193.94 127.0.0.1
Found on 2024-10-16 20:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae9f1d62b4Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 14-Oct-2024 14:53:27 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 75 days 4 hours 42 minutes 47 seconds Server load: 0.76 0.85 0.84 Total accesses: 1005527 - Total Traffic: 5.2 GB - Total Duration: 387791398 CPU Usage: u59.8 s119.76 cu364.13 cs197.12 - .0114% CPU load .155 requests/sec - 862 B/second - 5.4 kB/request - 385.66 ms/request 1 requests currently being processed, 49 idle workers _______W__________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-059560/12/19105_ 0.3597371237520.00.06101.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/10/19439_ 0.3512830674179270.00.07102.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78gJEr 0-059560/14/19586_ 0.35210276800550.00.08103.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/10/19855_ 0.35311375882520.00.06111.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/8/20767_ 0.354382785618660.00.06111.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/7/19251_ 0.3419444873458870.00.04101.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/33/20519_ 0.3585183847360.00.14108.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-059568/47/20460W 0.350079003439.70.22108.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-059560/109/20953_ 0.333829382107740.00.44110.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/75/20647_ 0.3337442979846060.00.31108.20 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/85/19672_ 0.3336773072505660.00.36105.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/57/21051_ 0.3334502778330260.00.25108.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/11/21406_ 0.3330493580031490.00.06110.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/42/20115_ 0.33298435173981840.00.21108.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHLbsIwEEX3fEXkPX4ES 0-059560/52/20211_ 0.332647075791850.00.23107.84 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-059560/13/20314_ 0.3323014079362190.00.07109.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/12/21387_ 0.34220031982546250.00.08113.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-059560/19/19409_ 0.342111479181200.00.14102.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/13/21079_ 0.342053378217740.00.09111.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/15/19298_ 0.34150232074392210.00.08103.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyEQF 0-059560/7/19889_ 0.3414293074898950.00.04104.70 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/10/19735_ 0.341249373436130.00.06105.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/16/19698_ 0.34112729073074530.00.09104.25 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PAlws 0-059560/10/19782_ 0.348483480470480.00.06104.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-059560/10/20040_ 0.3473727174520440.00.07105.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-033650/88/18199_ 0.978482866237300.00.3696.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/102/19280_ 0.97100130166775840.00.44100.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswEN3nKyL2vEt6r 1-033650/113/18118_ 0.971196366541690.00.4796.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/18/17408_ 0.97137425765274120.00.0892.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PIAQG 1-033650/11/18672_ 0.971459571350530.00.0797.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/31/18520_ 0.9720853373663370.00.1497.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/72/18339_ 0.98501366304980.00.3096.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/72/17858_ 0.983692965164350.00.32101.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/124/19281_ 0.982533372641670.00.51107.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/123/16975_ 0.981444269627380.00.4891.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/112/18707_ 0.9812127971496380.00.5099.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-033650/129/17335_ 0.98752968316610.00.5491.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/17/18592_ 0.9885168885280.00.0798.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-033650/203/17743_ 0.9738534066788300.00.8194.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/115/17860_ 0.973702475575350.00.4594.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/66/18071_ 0.973810373800670.00.2795.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/214/17053_ 0.9735753867534190.00.8390.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/214/17594_ 0.972996366253890.00.8793.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/83/18515_ 0.9732594572233500.00.3697.42 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/40/17556_ 0.97265731169507200.00.1791.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2PEvVY 1-033650/119/17148_ 0.972648267592960.00.5090.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-033650/50/17494_ 0.9722383166453900.00.2292.63 1
Found on 2024-10-14 14:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae89ac5605Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 12-Oct-2024 04:20:33 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 72 days 18 hours 9 minutes 53 seconds Server load: 0.81 1.05 1.24 Total accesses: 969121 - Total Traffic: 5.0 GB - Total Duration: 375823574 CPU Usage: u74.37 s126.64 cu334.84 cs179.75 - .0114% CPU load .154 requests/sec - 860 B/second - 5.4 kB/request - 387.798 ms/request 1 requests currently being processed, 49 idle workers ___________________________________________W______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0218940/1124/18388_ 14.0941326869199010.05.6297.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vHMp1 0-0218940/945/18833_ 14.09585272079280.04.7399.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1134/18739_ 14.095075074472150.05.5299.03 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/967/19014_ 14.076634273745840.04.83107.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1140/20144_ 14.09623583577690.08.32108.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0218940/1037/18671_ 14.061027371092290.04.8598.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/994/19424_ 14.094428080686020.05.16103.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC%2B 0-0218940/1101/19744_ 14.10266376897880.05.46104.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1076/19994_ 14.093812979992880.05.45105.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/968/19775_ 14.0947442577698950.04.63103.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vBEFC 0-0218940/994/18864_ 14.10297570451440.05.05101.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0218940/1292/20253_ 14.10297176147660.06.16104.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0218940/1555/20775_ 14.069973177003090.06.25107.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/966/19190_ 14.1048070185230.05.07103.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0218940/1196/19640_ 14.1018582373651250.05.41104.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78lKmH 0-0218940/1246/19734_ 14.06106970377638790.05.73106.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec11ua 0-0218940/1089/20558_ 14.07974178493660.05.39109.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0218940/879/18639_ 14.07939076405710.04.4398.27 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0218940/1252/20377_ 14.078546376175350.06.14107.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHLbsIwEEX3fEXkfew4r 0-0218940/1083/18675_ 14.0792416772602180.05.44100.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCO41 0-0218940/1363/19278_ 14.0787827172442520.06.16101.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0218940/1002/19187_ 14.07899171347810.04.81102.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0218940/1118/18810_ 14.07827870284040.05.4499.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFNb8IwDIbv%2FIoq9yZ 0-0218940/781/19210_ 14.09615878458990.04.14101.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2wnQ 0-0218940/1190/19559_ 14.07847872743900.05.92103.15 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0216500/1094/17618_ 14.39939064104340.05.3093.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0216500/1069/18640_ 14.3991024864111820.05.0597.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2wng 1-0216500/1009/17462_ 14.40847163915490.04.6593.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0216500/1015/16725_ 14.40798962571110.05.0388.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2wnI 1-0216500/1012/17759_ 14.41422068340090.05.1393.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/1261/17827_ 14.40630971471550.06.1894.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFNb8IwDIbv%2BxVV7k1 1-0216500/1159/17470_ 14.4155025063710700.05.7791.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEjoL 1-0216500/1180/17085_ 14.41605063052680.05.6997.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0216500/1100/18538_ 14.40872069511530.05.41103.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/1133/16193_ 14.414591067500830.05.6987.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PBsuy 1-0216500/1188/18074_ 14.40623169498870.05.5796.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 1-0216500/1171/16557_ 14.40839065740040.05.9187.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/963/18141_ 14.3998124467331350.04.6996.21 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFNb8IwDIbv%2FIoq9yZ 1-0216500/1190/16784_ 14.40899563924150.05.6289.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0216500/1003/17274_ 14.391050973673830.04.9191.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyYVst 1-0216500/1108/17320_ 14.39974471612860.05.4591.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0216500/668/16309_ 14.41407065403140.03.6686.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0216500/897/16795_ 14.4131815364232800.04.4789.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216508/1427/17817W 14.420069728659.66.2593.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0216500/1265/16860_ 14.41283066492850.05.4687.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/1044/16241_ <
Found on 2024-10-12 04:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae32facf61Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 10-Oct-2024 21:37:57 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 71 days 11 hours 27 minutes 17 seconds Server load: 0.88 1.34 1.40 Total accesses: 964535 - Total Traffic: 5.0 GB - Total Duration: 373879584 CPU Usage: u71.56 s123.62 cu334.84 cs179.75 - .0115% CPU load .156 requests/sec - 870 B/second - 5.4 kB/request - 387.627 ms/request 1 requests currently being processed, 49 idle workers ____________W_____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0218940/1003/18267_ 12.71617068891060.04.9397.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0218940/842/18730_ 12.701310471531440.04.1598.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1046/18651_ 12.71940373989290.04.9798.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/869/18916_ 12.7014252373431220.04.24106.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1038/20042_ 12.70138516583201310.07.63107.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJwb 0-0218940/956/18590_ 12.7265870798920.04.3498.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdz5owGL33VxjuBUGG7 0-0218940/910/19340_ 12.71820480298620.04.60103.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0218940/993/19636_ 12.7225652176525860.04.86103.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyZWFY 0-0218940/992/19910_ 12.71566979647680.04.91104.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1DeycoiL 0-0218940/893/19700_ 12.716963277513550.04.12103.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/917/18787_ 12.7250742269676020.04.51100.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSh78oJbu 0-0218940/1192/20153_ 12.72389486375740000.05.56104.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdr5pAFHz3VxjeBQHFs 0-0218948/1424/20644W 12.720076280829.65.45106.73 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-0218940/883/19107_ 12.72178969819130.04.55102.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeyY1UF 0-0218940/1102/19546_ 12.72241373178530.04.84104.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1169/19657_ 12.72102077143670.05.24105.88 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0218940/989/20458_ 12.702041378130790.04.77108.70 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/799/18559_ 12.702021876047400.03.9297.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Deya20W 0-0218940/1183/20308_ 12.7016293275820070.05.71106.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1000/18592_ 12.70201343672296280.04.8599.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0218940/1259/19174_ 12.7017073072167520.05.52100.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/897/19082_ 12.701875370986230.04.20101.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/1047/18739_ 12.70148025369882320.05.0199.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb9owFH3vr4jyTj6gQ 0-0218940/708/19137_ 12.701164078148560.03.71101.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0218940/1095/19464_ 12.7015513272411150.05.38102.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1018/17542_ 13.011855063863270.04.8493.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/988/18559_ 13.021700363827300.04.5497.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/919/17372_ 13.021460363465860.04.1793.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/929/16639_ 13.02136214062183450.04.5087.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/923/17670_ 13.035293167895040.04.5893.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1182/17748_ 13.0212656771010280.05.7193.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1060/17371_ 13.0294643363297540.05.1791.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iK01 1-0216500/1103/17008_ 13.028332962703990.05.2396.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1024/18462_ 13.0214862668935030.04.97103.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1048/16108_ 13.0259542267186710.05.1587.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78ro3j 1-0216500/1090/17976_ 13.02787069075860.04.9895.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0216500/1054/16440_ 13.02141624865475750.05.2087.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kpiG9 1-0216500/883/18061_ 13.01201431566882180.04.1995.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLbsIwEEV%2FJfI%2BD 1-0216500/1100/16694_ 13.02162242863617400.05.0488.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswFHzPV0S8h1vpN 1-0216500/925/17196_ 13.01203126173455560.04.4291.12 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswFHzPV0S8BwzLd 1-0216500/1028/17240_ 13.01190394371254980.04.9290.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uJeK 1-0216500/594/16235_ 13.0348616965154580.03.1886.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78oZeL 1-0216500/813/16711_ 13.033194463657570.03.9888.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/1319/17709_ 13.032433469365460.05.6393.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0216500/1149/16744_ 13.03249065983490.04.8286.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0216500/963/16160_ 13.0375364691670.04.62
Found on 2024-10-10 21:37 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae17591a7cApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 08-Oct-2024 20:11:39 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 69 days 10 hours 1 minute Server load: 1.10 1.56 1.81 Total accesses: 939477 - Total Traffic: 4.9 GB - Total Duration: 367558288 CPU Usage: u61.86 s115.6 cu334.84 cs179.75 - .0115% CPU load .157 requests/sec - 875 B/second - 5.5 kB/request - 391.237 ms/request 1 requests currently being processed, 49 idle workers _______________________W__________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0218940/565/17829_ 6.2917733267679220.02.7694.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/494/18382_ 6.2920901070738970.02.4097.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0218940/461/18066_ 6.29218926472716110.02.0495.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vCAzM 0-0218940/539/18586_ 6.2923414772724380.02.57105.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/635/19639_ 6.292743282276350.05.58105.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET / HTTP/1.1 0-0218940/449/18083_ 6.309673369484000.02.2196.17 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/509/18939_ 6.292090179404630.02.46100.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0218940/343/18986_ 6.30154517175111940.01.75100.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCAoY 0-0218940/400/19318_ 6.291647378390400.02.03102.03 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/447/19254_ 6.2919293376472530.01.93101.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/342/18212_ 6.291585368422070.01.7398.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/576/19537_ 6.301523306574028970.02.49101.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2B 0-0218940/685/19905_ 6.3011182975104760.03.15104.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/416/18640_ 6.301487368069840.02.13100.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/488/18932_ 6.3013373471561070.02.33101.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/608/19096_ 6.3012243176161160.02.82103.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/466/19935_ 6.30751376300880.02.26106.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/426/18186_ 6.305414174863150.02.1495.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/632/19757_ 6.30336174413400.03.05104.27 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0218940/437/18029_ 6.3043426770826320.02.1497.17 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2PDvDg 0-0218940/671/18586_ 6.30304070697140.02.6197.73 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0218940/452/18637_ 6.301292669972050.02.1199.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/596/18288_ 6.318318768701890.02.7897.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2F 0-0218948/381/18810W 6.310077345719.71.9299.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-0218940/584/18953_ 6.30121071039640.02.7699.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0216500/582/17106_ 6.72321962651010.02.6991.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0216500/684/18255_ 6.7212126262473420.02.9995.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCbkt 1-0216500/581/17034_ 6.72297362573750.02.4791.34 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/415/16125_ 6.6920973360826260.02.0685.42 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/480/17227_ 6.7018514066692890.02.3990.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/636/17202_ 6.6922632569892650.03.0891.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/525/16836_ 6.6925513062214120.02.5388.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/502/16407_ 6.6929183261305730.02.2793.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/388/17826_ 6.73513267503090.01.97100.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/432/15492_ 6.692090165735840.02.1584.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0216500/623/17509_ 6.7020791068074090.02.7193.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vEi55 1-0216500/477/15863_ 6.73102064267370.02.4284.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/611/17789_ 6.72336866166250.02.8294.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0216500/721/16315_ 6.714633462686940.03.2087.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/611/16882_ 6.7186648572211880.02.8189.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vGBCi 1-0216500/618/16830_ 6.71727569757780.02.8188.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0216500/311/15952_ 6.711564226463972950.01.6584.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0216500/408/16306_ 6.701591164062759640.02.0986.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEUuF 1-0216500/633/17023_ 6.711101368076570.02.9790.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/424/16019_ 6.711322364220320.02.1184.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/493/15690_ 6.71150417063157630.02.2983.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIB7A 1-021650
Found on 2024-10-08 20:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae4724fadeApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 06-Oct-2024 21:04:37 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 67 days 10 hours 53 minutes 58 seconds Server load: 0.98 1.35 1.16 Total accesses: 918598 - Total Traffic: 4.8 GB - Total Duration: 361493415 CPU Usage: u54.22 s108.23 cu334.84 cs179.75 - .0116% CPU load .158 requests/sec - 884 B/second - 5.5 kB/request - 393.527 ms/request 1 requests currently being processed, 49 idle workers _____________________________________________W____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0218940/90/17354_ 1.34919066312880.00.5392.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0218940/100/17988_ 1.341031369484070.00.5895.25 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/145/17750_ 1.341065271535890.00.5994.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/141/18188_ 1.331110371693580.00.79103.23 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/182/19186_ 1.33121343281255510.03.57103.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCEoY 0-0218940/101/17735_ 1.32257027068425150.00.6194.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vHhVs 0-0218940/88/18518_ 1.347013178105260.00.5599.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/80/18723_ 1.3236413574396900.00.4799.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/79/18997_ 1.351198577328340.00.49100.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/136/18943_ 1.35450075335930.00.5499.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0218940/98/17968_ 1.35413367580950.00.5897.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/137/19098_ 1.323475372480700.00.5199.34 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/82/19302_ 1.3230603172748530.00.52101.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/81/18305_ 1.3232294266645730.00.5598.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/92/18536_ 1.32296312070185470.00.5699.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/73/18561_ 1.32286511774236080.00.44101.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/102/19571_ 1.32232027775330570.00.59104.52 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAgRw 0-0218940/90/17850_ 1.3221293473943090.00.5594.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/90/19215_ 1.32206990173188690.00.57101.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAhBA 0-0218940/87/17679_ 1.321861370032740.00.5295.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/150/18065_ 1.3216753169671240.00.6495.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/75/18260_ 1.3215073268926390.00.4197.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/82/17774_ 1.3314292967335610.00.5094.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/79/18508_ 1.33133225476720840.00.4897.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JE46M 0-0218940/99/18468_ 1.3312603170025520.00.5697.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/82/16606_ 1.33244627361498230.00.4589.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vEhuV 1-0216500/87/17658_ 1.33219227861493380.00.5893.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCFwa 1-0216500/95/16548_ 1.332100361449380.00.6089.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/90/15800_ 1.33132732859929260.00.5283.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0216500/95/16842_ 1.3313524564819150.00.5588.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/108/16674_ 1.3318413468601960.00.6488.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/92/16403_ 1.33145657061234250.00.5686.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78mouD 1-0216500/121/16026_ 1.3319194560278350.00.6292.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/76/17514_ 1.33156927466646530.00.4598.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kjgTZ 1-0216500/107/15167_ 1.331225364827570.00.6182.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/139/17025_ 1.3311638966821760.00.5891.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/104/15490_ 1.322693063385610.00.6382.52 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0216500/86/17264_ 1.322910365177090.00.5092.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/89/15683_ 1.3231524260837960.00.5284.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/160/16431_ 1.323025370874010.00.7187.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/90/16302_ 1.3233074968039710.00.5186.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/74/15715_ 1.33105170462339520.00.4883.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1 1-0216500/98/15996_ 1.338183161770560.00.5985.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/85/16475_ 1.335663466510760.00.5188.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/94/15689_ 1.333293362916120.00.5182.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216508/96/15293W 1.340062084159.70.5181.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0216500/86/15647_ 1.339274060390200.0
Found on 2024-10-06 21:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aea49e3c40Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 04-Oct-2024 17:40:53 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 65 days 7 hours 30 minutes 13 seconds Server load: 0.67 1.25 1.28 Total accesses: 913901 - Total Traffic: 4.8 GB - Total Duration: 359939467 CPU Usage: u51.12 s103.86 cu334.84 cs179.75 - .0119% CPU load .162 requests/sec - 907 B/second - 5.5 kB/request - 393.85 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0218940/2/17266_ 0.051875366049870.00.0192.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/17890_ 0.0520513469118280.00.0194.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/17607_ 0.052237371241690.00.0193.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/55/18102_ 0.052428071512280.00.05102.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /simple.php HTTP/1.1 0-0218940/3/19007_ 0.0327503381058650.00.0299.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/17637_ 0.06119968216740.00.0293.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JExiZ 0-0218940/3/18433_ 0.0517283477744660.00.0298.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/18646_ 0.051601474135050.00.0298.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/18921_ 0.051486476487960.00.02100.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/56/18863_ 0.051441375019910.00.0699.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/17873_ 0.0574040767163530.00.0296.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PHn1W 0-0218940/3/18964_ 0.0564470872064000.00.0298.84 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG8iw 0-0218940/3/19223_ 0.06496372437820.00.01101.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/18227_ 0.06418366423420.00.0198.27 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/3/18447_ 0.0626428269978260.00.0299.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGeGg 0-0218940/3/18491_ 0.0617327373985210.00.02100.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JBBgQ 0-0218940/3/19472_ 0.0653875133210.00.02103.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/17762_ 0.0336833473753470.00.0193.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/19127_ 0.0335285072879540.00.01101.23 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/8/17600_ 0.033401469782860.00.0495.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/17917_ 0.033286469275780.00.0195.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/18187_ 0.033220368608310.00.0197.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/17694_ 0.033104366783800.00.0194.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0218940/2/18431_ 0.033029976462830.00.0197.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iBMm 0-0218940/2/18371_ 0.033001369610710.00.0197.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/5/16529_ 0.0639732761291220.00.0388.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iABL 1-0216500/6/17577_ 0.06251361296700.00.0392.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/13/16466_ 0.061631061045320.00.1088.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PIEiL 1-0216500/4/15714_ 0.0632413459600070.00.0283.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/16751_ 0.0633393464330180.00.0288.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/13/16579_ 0.06833368246820.00.0687.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/6/16317_ 0.0634363360779990.00.0386.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216508/14/15919W 0.060059928699.70.0491.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0216500/4/17442_ 0.0536053366305530.00.0298.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/15064_ 0.0631144464599130.00.0282.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/16890_ 0.06303431566657940.00.0290.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG8gt 1-0216500/4/15390_ 0.064373862883400.00.0281.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/17182_ 0.06519277965022850.00.0291.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PCGUW 1-0216500/4/15598_ 0.06705360607150.00.0283.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/16275_ 0.0689337170507350.00.0286.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCBQa 1-0216500/4/16216_ 0.061462101667827390.00.0285.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2vFIua 1-0216500/4/15645_ 0.0628864162167590.00.0282.98 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/15902_ 0.06229623761494780.00.0284.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/16394_ 0.0622189066168800.00.0287.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/15599_ 0.0618833162691890.00.0282.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/15201_ 0.0618053361857710.00.0280.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0216500/4/15565_ 0.0625053060055320.00.0282.75 </
Found on 2024-10-04 17:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae518600d7Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 02-Oct-2024 17:12:07 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 63 days 7 hours 1 minute 27 seconds Server load: 0.48 0.68 0.72 Total accesses: 902951 - Total Traffic: 4.7 GB - Total Duration: 356632621 CPU Usage: u67.17 s110.98 cu313.66 cs167.32 - .0121% CPU load .165 requests/sec - 926 B/second - 5.5 kB/request - 394.963 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-022360/1132/17066_ 13.862549365491410.06.0391.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/888/17740_ 13.8540923368811870.05.0993.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/931/17437_ 13.8711426170498660.04.9692.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JORRL 0-022360/1042/17896_ 13.853360370469900.05.22101.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/977/18735_ 13.853475380121260.05.5398.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/864/17501_ 13.8614013367531890.04.6893.15 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1029/18204_ 13.853602477092510.05.0997.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/956/18449_ 13.85299129373409410.05.0897.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAntj 0-022360/968/18647_ 13.8529213375784730.05.7398.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1118/18635_ 13.8622923174464110.05.8298.34 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/891/17686_ 13.8619573266698570.05.2395.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1085/18787_ 13.8617103871559660.05.7397.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1111/18979_ 13.8618023971686130.05.67100.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1031/18008_ 13.8616133365889230.08.4697.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/933/18240_ 13.861560469259770.05.5098.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/782/18206_ 13.861504373356910.04.7799.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/898/19334_ 13.874923774691240.05.10103.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/912/17552_ 13.871281373143240.04.9393.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/815/18928_ 13.877793771964390.04.66100.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/1031/17411_ 13.871573269304760.05.7494.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/995/17732_ 13.871121468458750.05.3494.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022369/978/17988W 13.8700678967215.55.6496.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-022360/1067/17578_ 13.853678966075120.05.5693.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EifAv 0-022360/1001/18212_ 13.8537573475694220.05.5096.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/900/18168_ 13.8731226668708680.05.1296.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCm9t 1-012950/1039/16227_ 14.2425794460371690.05.3387.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1159/17309_ 14.24298433060537770.06.3191.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-012950/979/16195_ 14.2423704460057940.05.3087.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1011/15399_ 14.24212510558862750.05.2281.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/987/16505_ 14.2333153163660200.05.5887.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1278/16398_ 14.233413367714360.06.1687.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1318/16076_ 14.2418793460293700.06.9984.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1066/15551_ 14.24160230559444110.06.0890.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2gGFQh 1-012950/1109/17076_ 14.24174528865658400.05.7096.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7Eic8x 1-012950/936/14824_ 14.241675463642470.05.0781.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/955/16667_ 14.24148031165833320.05.4889.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowFHznK1DeyXbDc 1-012950/1080/15108_ 14.2410313762204770.05.6880.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/973/16981_ 14.2415153064110650.05.2690.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1046/15415_ 14.2422027860256600.06.0183.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAhRa 1-012950/904/15999_ 14.243254669786660.05.4085.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/1065/15997_ 14.245704167076190.05.4584.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/872/15465_ 14.2412903161601720.05.0082.17 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/941/15665_ 14.241163360762700.05.0783.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/995/16242_ 14.25149365729760.05.6386.74 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/906/15388_ 14.233734962238760.05.0181.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEjD5 1-012950/872/15076_ 14.2341703361448910.05.2680.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/811/15379_ 14.25
Found on 2024-10-02 17:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aeb32be96fApache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 30-Sep-2024 17:19:15 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 61 days 7 hours 8 minutes 36 seconds Server load: 0.57 0.70 0.77 Total accesses: 887480 - Total Traffic: 4.7 GB - Total Duration: 352452428 CPU Usage: u61.11 s104.84 cu313.66 cs167.32 - .0122% CPU load .168 requests/sec - 943 B/second - 5.5 kB/request - 397.138 ms/request 1 requests currently being processed, 49 idle workers __________________________________W_______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-022360/722/16656_ 10.354304764509680.04.2989.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/697/17549_ 10.341988368012290.03.9992.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/675/17181_ 10.3422304770041710.03.9691.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/637/17491_ 10.357533069461280.03.64100.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/710/18468_ 10.349985979297020.04.2297.28 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/585/17222_ 10.34346931366613070.03.6092.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JOQxQ 0-022360/635/17810_ 10.3414583576454340.03.8196.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/640/18133_ 10.35577372447060.03.5896.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/734/18413_ 10.35303375081950.04.4197.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/797/18314_ 10.35188373909650.04.5597.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/723/17518_ 10.3343533666069560.04.2594.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/728/18430_ 10.3341853070975170.04.3596.55 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/647/18515_ 10.35143370906880.04.0398.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/777/17754_ 10.3340304765136350.07.2095.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/682/17989_ 10.343903368630140.04.1796.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/643/18067_ 10.343788372927460.03.9598.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/608/19044_ 10.342978373286040.03.73101.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/633/17273_ 10.343743372187030.03.9092.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/559/18672_ 10.342669071235220.03.4299.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-022360/701/17081_ 10.34257030368490900.04.3192.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iLDT 0-022360/677/17414_ 10.342717067503280.04.0692.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-022360/696/17706_ 10.342103367164750.04.2195.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/748/17259_ 10.3417293165299780.04.3192.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/670/17881_ 10.341943374652330.04.1995.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/691/17959_ 10.3423852868039450.03.9995.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/620/15808_ 10.386541159632000.03.8285.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-012950/657/16807_ 10.3892011059724540.03.9789.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/642/15858_ 10.382419359365760.03.8386.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/703/15091_ 10.385073258285480.04.1380.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/651/16169_ 10.3812073262343720.03.8185.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/759/15879_ 10.3816042966872880.04.3985.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/894/15652_ 10.383383659594410.05.2683.20 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/772/15257_ 10.374331157963210.04.5288.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET / HTTP/1.1 1-012950/610/16577_ 10.381625964879620.03.7294.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012958/704/14592W 10.390063018579.73.9079.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-012950/689/16401_ 10.3741077064443780.04.0388.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/778/14806_ 10.3737623161392640.04.5879.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/734/16742_ 10.3739383363488510.04.3789.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/795/15164_ 10.382643059493080.04.8381.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-012950/656/15751_ 10.3827983368947500.04.0684.09 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/578/15510_ 10.37359834665750800.03.5082.70 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7POFeg 1-012950/630/15223_ 10.3738414260134440.03.7080.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/673/15397_ 10.3830073160115360.04.0482.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/688/15935_ 10.382693065068430.04.2285.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-012950/705/15187_ 10.3823073660893970.03.8879.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/657/14861_ 10.3821383660641720.04.0578.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/562/15130_ 10.382553358744160.03.4680.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/628/15062</
Found on 2024-09-30 17:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aecb0b9b54Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 28-Sep-2024 04:36:21 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 58 days 18 hours 25 minutes 41 seconds Server load: 1.52 1.22 1.15 Total accesses: 879521 - Total Traffic: 4.6 GB - Total Duration: 348122066 CPU Usage: u56.21 s99.22 cu313.66 cs167.32 - .0125% CPU load .173 requests/sec - 974 B/second - 5.5 kB/request - 395.809 ms/request 1 requests currently being processed, 49 idle workers __________________W_______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-022360/565/16499_ 8.051059063777890.03.2888.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-022360/459/17311_ 8.03152725167518980.02.6191.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIe2E 0-022360/544/17050_ 8.031611369550530.03.1590.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/493/17347_ 8.041238068856780.02.7999.20 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-022360/565/18323_ 8.04132518778690950.03.3196.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec91db 0-022360/445/17082_ 8.061828765577930.02.6991.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7Ek8mM 0-022360/480/17655_ 8.031413075664780.02.8195.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-022360/488/17981_ 8.041176353271339280.02.6895.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PEm5Y 0-022360/586/18265_ 8.051004974360340.03.5296.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEm5x 0-022360/640/18157_ 8.0586227873101590.03.5296.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7JBAIA 0-022360/576/17371_ 8.0548726865480860.03.3693.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUg2W 0-022360/582/18284_ 8.0542145470541880.03.3895.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAm9F 0-022360/471/18339_ 8.0574726070305660.02.9797.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-022360/633/17610_ 8.05404364576410.06.2995.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/542/17849_ 8.052441068133290.03.3296.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAiBz 0-022360/497/17921_ 8.05224372196970.03.1098.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/426/18862_ 8.05134071359810.02.63100.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-022360/483/17123_ 8.058448771357740.02.9191.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNJz9owFLzzK1DuWQgpi 0-022369/406/18519W 8.0600704676116.32.4698.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-022360/545/16925_ 8.0317793667788970.03.3491.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/476/17213_ 8.03186546966794660.02.9791.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EidN4 0-022360/557/17567_ 8.0315651066692520.03.3494.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PEObx 0-022360/592/17103_ 8.03144424964579090.03.3391.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rrAJ 0-022360/534/17745_ 8.0314715473915280.03.2994.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DeybW7X 0-022360/523/17791_ 8.031678867372570.03.0594.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-012950/481/15669_ 8.001214358696910.02.9784.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/508/16658_ 8.0012676159179440.03.0088.03 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/472/15688_ 8.0098728658611580.02.7585.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNJz9owFLzzK1DuWRuWW 1-012950/528/14916_ 8.001169357050610.03.0679.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/501/16019_ 8.00136425961558850.02.8684.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7khBou 1-012950/603/15723_ 8.001436965873560.03.4284.27 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTdrVclQ 1-012950/730/15488_ 8.00104119558543980.04.1882.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PMm9J 1-012950/624/15109_ 8.01433357393120.03.6588.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/458/16425_ 8.01820264056140.02.8193.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET / HTTP/1.1 1-012950/492/14380_ 8.0160749562002990.02.9078.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1DecyHKL 1-012950/549/16261_ 8.01413863976420.03.1787.44 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlts 1-012950/624/14652_ 8.01268382460906430.03.6778.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMhDZ 1-012950/573/16581_ 8.0123268262564170.03.4388.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vHNbs 1-012950/646/15015_ 7.991837058780000.03.8880.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-012950/477/15572_ 8.01146365614650.02.9682.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/405/15337_ 8.016819163863370.02.4381.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjcW 1-012950/490/15083_ 8.01125358567730.02.8480.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/508/15232_ 7.991925359314950.02.9881.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/510/15757_ 8.01921863026780.03.1284.23 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vLjcl 1-012950/484/14966_ 7.99161829060308460.02.9078.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec92UX 1-012950/485/14689_ 7.
Found on 2024-09-28 04:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae5a90ecc3Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 26-Sep-2024 04:44:51 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 56 days 18 hours 34 minutes 12 seconds Server load: 0.88 1.21 1.29 Total accesses: 869783 - Total Traffic: 4.5 GB - Total Duration: 343521801 CPU Usage: u50.74 s93.75 cu313.66 cs167.32 - .0128% CPU load .177 requests/sec - 994 B/second - 5.5 kB/request - 394.951 ms/request 1 requests currently being processed, 49 idle workers ____________________________________W_____________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-022360/364/16298_ 4.9629522663138630.02.0187.12 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCaXx 0-022360/286/17138_ 4.955033966702390.01.5490.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/373/16879_ 4.9556419068777430.02.0889.74 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyElL 0-022360/325/17179_ 4.95405068134200.01.7798.18 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-022360/399/18157_ 4.954141277788130.02.1495.19 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7POFyw 0-022360/269/16906_ 4.95667464654700.01.5490.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/324/17499_ 4.9540532374736920.01.8494.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-022360/350/17843_ 4.9532616770723730.01.8094.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2AS6Q6 0-022360/409/18088_ 4.9626216473744420.02.3095.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2F 0-022360/471/17988_ 4.96213872467620.02.4694.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG8aw 0-022360/409/17204_ 4.96150964759470.02.2792.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIHea 0-022360/402/18104_ 4.9611349069763570.02.2494.44 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAihK 0-022360/239/18107_ 4.96179369364760.01.4895.88 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/329/17306_ 4.966117863320160.01.8390.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kuCEV 0-022360/326/17633_ 4.9733066403540.01.8294.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-022360/280/17704_ 4.977071163890.01.6896.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-022360/234/18670_ 4.94799870547500.01.3899.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCSEl 0-022360/290/16930_ 4.9478292970022590.01.7489.88 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78oIJM 0-022360/195/18308_ 4.94746144069545900.01.1896.76 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-022360/306/16686_ 4.9564135266163890.01.8190.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG8EF 0-022360/242/16979_ 4.94716065908720.01.4590.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-022360/318/17328_ 4.9559019265490180.01.7992.63 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuJCGbD 0-022360/446/16957_ 4.9546419263956450.02.4890.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAjhM 0-022360/275/17486_ 4.9548747572646480.01.6292.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7POGGx 0-022360/338/17606_ 4.9562422566371170.01.9092.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuSSCkW 1-012950/235/15423_ 4.90166357789140.01.4283.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/352/16502_ 4.90243358678300.02.0487.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/323/15539_ 4.9019145257502430.01.7284.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCQER 1-012950/372/14760_ 4.8928015956406990.02.0578.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78hoIM 1-012950/332/15850_ 4.89332360499200.01.8283.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/453/15573_ 4.89321365093180.02.4083.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/455/15213_ 4.905225857487740.02.4580.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAgp4 1-012950/380/14865_ 4.9122055883470.02.0886.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-012950/254/16221_ 4.9013022063191210.01.4992.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vJmZx 1-012950/332/14220_ 4.9074361018410.01.8477.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/387/16099_ 4.86798114963276910.02.1186.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW 1-0129510/349/14377W 4.9100597918015.41.9676.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-012950/322/16330_ 4.87762961529580.01.8187.10 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAgpN 1-012950/369/14738_ 4.8758218657466520.02.0979.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSj7jITJg 1-012950/281/15376_ 4.877347764535580.01.6681.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/263/15195_ 4.87656463205900.01.5580.74 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/334/14927_ 4.8768939757988850.01.8078.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSh78kQFL 1-012950/362/15086_ 4.8760721458337530.02.0580.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=https://calrossy.r 1-012950/284/15531_ 4.87631062070990.01.6682.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-012950/250/14732_ 4.8855417059367800.01.4077.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uIha 1-012950/298/14
Found on 2024-09-26 04:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae86aedc02Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 25-Sep-2024 02:48:22 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 55 days 16 hours 37 minutes 42 seconds Server load: 3.42 2.57 2.46 Total accesses: 861117 - Total Traffic: 4.5 GB - Total Duration: 338965125 CPU Usage: u46.34 s90.09 cu313.66 cs167.32 - .0128% CPU load .179 requests/sec - 1002 B/second - 5.5 kB/request - 393.634 ms/request 1 requests currently being processed, 49 idle workers __________________________________________W_______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-022360/163/16097_ 2.21591062521720.00.8285.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-022360/161/17013_ 2.2177917766172640.00.7689.53 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78hoYB 0-022360/129/16635_ 2.20930067492390.00.7088.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-022360/189/17043_ 2.2166952367516750.00.9197.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78gIyY 0-022360/238/17996_ 2.2174334576707910.01.1794.22 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZFPb8IwDMXvfIoq9yZpa 0-022360/154/16791_ 2.201030144863779090.00.8289.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec%2BX 0-022360/198/17373_ 2.2160846773894100.01.0293.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMgMG 0-022360/229/17722_ 2.2256918270181460.01.0793.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PEgyw 0-022360/206/17885_ 2.2254130672383950.01.1194.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-022360/247/17764_ 2.22504371368810.01.1793.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/192/16987_ 2.2228837863908680.00.9291.24 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-022360/79/17781_ 2.2243919868640000.00.4692.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1 0-022360/90/17958_ 2.2235248268711620.00.5494.95 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMiQo 0-022360/130/17107_ 2.22190562536970.00.6789.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-022360/102/17409_ 2.231903765259090.00.4893.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-022360/72/17496_ 2.231901670242610.00.4295.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-022360/68/18504_ 2.23129669417830.00.3898.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/95/16735_ 2.231111469037790.00.5588.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PELCv 0-022360/55/18168_ 2.23682668289130.00.3495.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7khAl5 0-022360/167/16547_ 2.2315132364940960.00.8689.17 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJNlsC 0-022360/114/16851_ 2.2343965119640.00.6389.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb9owFH3vr4jyng9CI 0-022360/172/17182_ 2.20996459664726980.00.9191.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIFRY 0-022360/322/16833_ 2.21845363190960.01.6489.66 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-022360/100/17311_ 2.21872117571583790.00.5391.38 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JBDCT 0-022360/184/17452_ 2.201023065373810.00.8891.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-012950/106/15294_ 2.1657518857217400.00.6182.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PG9uC 1-012950/113/16263_ 2.1659730357898750.00.6485.67 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hZLNbsIwEIRfJfI9cTBQi 1-012950/202/15418_ 2.16621956393880.00.9383.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JBAuX 1-012950/152/14540_ 2.1573274755546820.00.7377.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJCGwq 1-012950/207/15725_ 2.1475821059976400.01.0182.74 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyHcd 1-012950/288/15408_ 2.1480620164381070.01.3682.21 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAkBL 1-012950/146/14904_ 2.1645252656624290.00.7878.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FSuR7HoQ 1-012950/162/14647_ 2.1640422454571680.00.8485.21 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PMlti 1-012950/74/16041_ 2.1653419362495110.00.4691.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JMS5F 1-012950/177/14065_ 2.1655318060460170.00.8976.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlws 1-012950/211/15923_ 2.17190162392960.01.0485.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 1-012950/114/14142_ 2.1630219858257850.00.6475.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vKEpF 1-012950/99/16107_ 2.17157543360535990.00.5685.84 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PMhDA 1-012950/167/14536_ 2.18244256082480.00.8177.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-012950/137/15232_ 2.181001063822990.00.7780.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-012950/118/15050_ 2.1877280161903900.00.6779.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78ppkY 1-012950/219/14812_ 2.18571057019750.01.0978.27 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78iIQx 1-0129510/206/14930W 2.1900575477724.21.0679.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-012950/146/15393_ 2.121050061088560.00.7581.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-012950/87/14569_ 2.121043150658357510.00.4276.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southe
Found on 2024-09-25 02:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aec45da828Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 22-Sep-2024 21:36:03 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 53 days 11 hours 25 minutes 23 seconds Server load: 2.62 2.34 2.07 Total accesses: 833984 - Total Traffic: 4.3 GB - Total Duration: 326543583 CPU Usage: u61.54 s95.8 cu285.86 cs152.55 - .0129% CPU load .181 requests/sec - 1008 B/second - 5.5 kB/request - 391.547 ms/request 1 requests currently being processed, 49 idle workers ______________________________________W___________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/987/15594_ 15.49658159869800.05.3782.99 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0241050/1335/16557_ 15.50592563479040.06.5486.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0241050/1035/16047_ 15.49810965185050.05.6885.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vEwov 0-0241050/1040/16530_ 15.497603065174280.05.4794.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/1147/17287_ 15.4969243073646910.05.9490.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JMRJy 0-0241050/1153/16305_ 15.49778061689790.06.1586.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/986/16694_ 15.498641070885290.05.3989.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dek0DCU 0-0241050/1232/17012_ 15.498311167552270.06.4890.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kpBbH 0-0241050/1011/17349_ 15.513433370199630.05.4390.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCdli 0-0241050/1180/17224_ 15.51206269148140.06.3490.64 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/1035/16510_ 15.51243160662225480.05.5688.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0241050/1106/17339_ 15.52172066662290.06.0089.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/1040/17533_ 15.51304133166389790.05.7392.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JMRNr 0-0241050/973/16663_ 15.51385059958810.05.1886.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/975/16875_ 15.528130062737980.05.3890.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0241050/1353/16958_ 15.5228068101590.07.0592.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0241050/1266/17952_ 15.4963417567118270.06.5395.25 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCfJD 0-0241050/1027/16274_ 15.51367165972770.05.5185.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0241050/1195/17822_ 15.495983465434300.06.3993.61 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjkF 0-0241050/961/15974_ 15.5140120062223740.05.4385.81 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vCxmJ 0-0241050/1228/16339_ 15.5213229563073860.06.3686.47 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vMPl1 0-0241050/1035/16620_ 15.5045819761687750.05.3788.51 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PEFDs 0-0241050/1102/16000_ 15.4990727660048340.05.9185.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIeZZ 0-0241050/1193/16769_ 15.5231068814060.06.2688.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7khAID 0-0241050/1256/16871_ 15.5051630263261130.06.1888.73 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JMSBS 1-0238580/978/14789_ 15.07367554876300.05.4479.49 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0238580/1104/15712_ 15.08342055161300.05.8982.58 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/1182/14860_ 15.09247256154054440.06.4480.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cPOST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 1-0238580/1001/14027_ 15.073924553328050.05.5774.36 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7JMRc2 1-0238580/900/15247_ 15.07494057163270.05.0679.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/875/14668_ 15.0573816361133970.04.7878.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCTQl 1-0238580/967/14344_ 15.0923072753511960.05.2475.50 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCfMF 1-0238580/1123/14062_ 15.099763951678730.05.9781.90 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAwtY 1-0238580/1302/15623_ 15.08332060072910.06.7589.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0238580/1075/13618_ 15.09178166058160270.05.8074.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNbsIwEIRfJfI9CRhSq 1-0238580/1135/15211_ 15.0913844259595870.05.9581.33 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uwlN 1-0238580/1049/13688_ 15.091315455280410.05.6272.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PEgD3 1-0238580/1224/15504_ 15.095417857840390.06.4782.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PLlww 1-0238588/1218/13973W 15.100053948739.75.9874.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0238580/1132/14601_ 15.03837961733450.05.7476.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKFwY 1-0238580/1153/14466_ 15.03883059393400.05.6276.44 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0238580/884/14201_ 15.05794054640110.04.9474.67 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0238580/933/14252_ 15.04806255093590.05.1275.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/1097/14890_ 15.0576849259185670.06.1178.88 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vMzMM 1-0238580/947/14050_ 15.05647056619510.05.2673.84 127.0.0.1http/1.1ip-10-1-98-247.ap-sou
Found on 2024-09-22 21:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae5ac7c1d8Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 20-Sep-2024 20:10:31 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 51 days 9 hours 59 minutes 51 seconds Server load: 0.46 1.45 1.65 Total accesses: 813778 - Total Traffic: 4.2 GB - Total Duration: 320386398 CPU Usage: u53.52 s89.12 cu285.86 cs152.55 - .0131% CPU load .183 requests/sec - 1026 B/second - 5.5 kB/request - 393.702 ms/request 1 requests currently being processed, 49 idle workers _________________________________W________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/649/15256_ 10.35254145259165350.03.7181.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAiQJ 0-0241050/855/16077_ 10.3517263162281160.04.3784.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/689/15701_ 10.353132064326170.04.0183.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/680/16170_ 10.353119364250930.03.7692.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/754/16894_ 10.3530443072622540.04.0788.82 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/663/15815_ 10.3432188660646210.03.8684.16 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/668/16376_ 10.343479369791700.03.7687.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/798/16578_ 10.343345466552910.04.5088.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/485/16823_ 10.351253368910730.02.9988.41 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/650/16694_ 10.356853367173400.03.9988.29 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/691/16166_ 10.351028361053640.03.8886.78 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/738/16971_ 10.35342065018010.04.1988.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/601/17094_ 10.3511513265247440.03.7390.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/461/16151_ 10.3515453058885530.02.8584.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/685/16585_ 10.36121061537250.03.8988.62 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0241050/947/16552_ 10.36224866601450.05.1890.44 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0241050/767/17453_ 10.352368366866027750.04.2392.96 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAm0s 0-0241050/558/15805_ 10.351286464579950.03.3483.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/792/17419_ 10.352274364065050.04.4591.68 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/606/15619_ 10.35133810561291910.03.7184.09 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/720/15831_ 10.354747561543670.04.0484.15 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/635/16220_ 10.35141711360499240.03.4286.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/677/15575_ 10.3442854158629050.03.8883.00 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/812/16388_ 10.3436523167529440.04.4586.26 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/745/16360_ 10.35165954362077360.03.8886.43 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNr9owELzzK1DuJBABA 1-0238580/592/14403_ 10.30342053635430.03.5277.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0238580/713/15321_ 10.30310954019660.04.1080.79 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78hK5t 1-0238580/874/14552_ 10.3014127552801960.04.6778.37 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PLkpx 1-0238580/712/13738_ 10.291021352163980.04.1072.89 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/640/14987_ 10.29106128256520340.03.6478.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVNNj9owFLzvr4hyJ1%2F 1-0238580/551/14344_ 10.291380460275030.03.1876.56 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/688/14065_ 10.2840749152123850.03.8274.08 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/747/13686_ 10.2835264450149070.04.2080.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238588/785/15106W 10.300058516309.74.4286.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0238580/742/13285_ 10.2834003356193560.04.1972.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/708/14784_ 10.28328010157951030.03.9479.32 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/589/13228_ 10.28316363453908200.03.5070.80 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlEW 1-0238580/708/14988_ 10.283118855950880.04.0779.85 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7POFyi 1-0238580/855/13610_ 10.283086352608990.04.2573.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/686/14155_ 10.282485360754490.03.8975.12 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/705/14018_ 10.2828283258157070.03.5374.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/576/13893_ 10.282283112753496160.03.4273.15 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vNFVs 1-0238580/557/13876_ 10.28186145554167100.03.3274.03 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzzK1DuJCEsV 1-0238580/698/14491_ 10.281600558169130.04.2076.97 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/565/13668_ 10.281481355518820.03.4772.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/403/13384_ 10.281679355150480.02.7370.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/598/13865_ 10.29
Found on 2024-09-20 20:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae85356fe3Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 19-Sep-2024 06:50:10 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 49 days 20 hours 39 minutes 30 seconds Server load: 1.21 1.77 1.87 Total accesses: 800786 - Total Traffic: 4.2 GB - Total Duration: 314614924 CPU Usage: u47.08 s83.84 cu285.86 cs152.55 - .0132% CPU load .186 requests/sec - 1039 B/second - 5.5 kB/request - 392.883 ms/request 2 requests currently being processed, 48 idle workers _____________________W_____________________K______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/423/15030_ 6.34193201057891180.02.3079.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2B 0-0241050/560/15782_ 6.3511361160952720.03.0283.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uCSC 0-0241050/449/15461_ 6.351481163042100.02.5481.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAlDL 0-0241050/478/15968_ 6.34331363308450.02.5691.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/16586_ 6.34272371409970.02.3987.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/15598_ 6.34314859366870.02.4582.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0241050/462/16170_ 6.3441748368995360.02.4986.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAkpW 0-0241050/586/16366_ 6.34358265249960.03.1686.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/271/16609_ 6.32104283067873940.01.6687.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAhBk 0-0241050/371/16415_ 6.33780066376680.02.1986.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/457/15932_ 6.338981060295060.02.5085.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2zHh 0-0241050/443/16676_ 6.337131063856290.02.3886.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIByE 0-0241050/264/16757_ 6.32954064135120.01.8188.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/215/15905_ 6.3523457892240.01.4183.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/420/16320_ 6.33581060650690.02.2887.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/688/16293_ 6.3361116665494740.03.6788.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAtMx 0-0241050/484/17170_ 6.34167364961270.02.5991.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/292/15539_ 6.321007125663516350.01.8082.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC9JY 0-0241050/482/17109_ 6.35140062695760.02.6089.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/323/15336_ 6.35656859860870.01.9782.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/497/15608_ 6.3366421060236370.02.6682.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kpCBQ 0-02410542/354/15939W 6.3600591405164.71.9285.06 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-0241050/407/15305_ 6.34458457424640.02.2881.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/549/16125_ 6.3452318966320360.02.8884.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIGZi 0-0241050/439/16054_ 6.35921260388510.02.3984.95 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAMCC 1-0238580/310/14121_ 6.3147761252612770.01.8275.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78oLys 1-0238580/432/15040_ 6.32448952823960.02.3679.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDuTF 1-0238580/650/14328_ 6.32379352088000.03.3677.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/517/13543_ 6.3160420251449310.02.8071.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2gEkZp 1-0238580/437/14784_ 6.3170018955407180.02.4077.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rxcG 1-0238580/355/14148_ 6.3185447459381480.02.0175.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78gCSA 1-0238580/476/13853_ 6.323241151372300.02.6072.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BSx 1-0238580/489/13428_ 6.3229292248911410.02.6678.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rpQN 1-0238580/558/14879_ 6.3235145857225670.03.0385.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAhpu 1-0238580/487/13030_ 6.32260455256800.02.6670.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/420/14496_ 6.321821157145620.02.2777.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PC8lF 1-0238580/391/13030_ 6.321551052978000.02.1569.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAlks 1-0238580/506/14786_ 6.3214023554647680.02.7878.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJwb 1-0238580/514/13269_ 6.32132126351610820.02.7571.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjh3 1-0238580/495/13964_ 6.3281059760300.02.7173.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/326/13639_ 6.3210239157058990.01.9072.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSh7MpE3x 1-0238580/282/13599_ 6.33727151991570.01.6871.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec13Cx 1-0238580/256/13575_ 6.3354352225570.01.6072.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238584/383/14176K 6.330156386077.92.3775.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /s/83e28353e25333e23313/_/;/META-INF/maven/com.atlassian.ji 1-0238580/293/13396_ 6.3010311853855180.01.8770.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=h
Found on 2024-09-19 06:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae671f0a25Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 19-Sep-2024 06:50:10 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 49 days 20 hours 39 minutes 30 seconds Server load: 1.21 1.77 1.87 Total accesses: 800778 - Total Traffic: 4.2 GB - Total Duration: 314614506 CPU Usage: u47.08 s83.84 cu285.86 cs152.55 - .0132% CPU load .186 requests/sec - 1039 B/second - 5.5 kB/request - 392.886 ms/request 2 requests currently being processed, 48 idle workers _____________________W_____________________W______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/423/15030_ 6.34192201057891180.02.3079.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2B 0-0241050/560/15782_ 6.3511361160952720.03.0283.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uCSC 0-0241050/449/15461_ 6.351471163042100.02.5481.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAlDL 0-0241050/478/15968_ 6.34331363308450.02.5691.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/16586_ 6.34272371409970.02.3987.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/15598_ 6.34314859366870.02.4582.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0241050/462/16170_ 6.3441748368995360.02.4986.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAkpW 0-0241050/586/16366_ 6.34357265249960.03.1686.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/271/16609_ 6.32104183067873940.01.6687.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAhBk 0-0241050/371/16415_ 6.33779066376680.02.1986.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/457/15932_ 6.338981060295060.02.5085.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2zHh 0-0241050/443/16676_ 6.337121063856290.02.3886.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIByE 0-0241050/264/16757_ 6.32954064135120.01.8188.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/215/15905_ 6.3523457892240.01.4183.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/420/16320_ 6.33581060650690.02.2887.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/688/16293_ 6.3361016665494740.03.6788.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAtMx 0-0241050/484/17170_ 6.34167364961270.02.5991.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/292/15539_ 6.321006125663516350.01.8082.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC9JY 0-0241050/482/17109_ 6.35140062695760.02.6089.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/323/15336_ 6.35656859860870.01.9782.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/497/15608_ 6.3366321060236370.02.6682.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kpCBQ 0-02410537/349/15934W 6.3600591363951.11.9085.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PGfCE 0-0241050/407/15305_ 6.34458457424640.02.2881.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/549/16125_ 6.3452318966320360.02.8884.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIGZi 0-0241050/439/16054_ 6.35911260388510.02.3984.95 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAMCC 1-0238580/310/14121_ 6.3147761252612770.01.8275.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78oLys 1-0238580/432/15040_ 6.32447952823960.02.3679.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDuTF 1-0238580/650/14328_ 6.32379352088000.03.3677.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/517/13543_ 6.3160320251449310.02.8071.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2gEkZp 1-0238580/437/14784_ 6.3170018955407180.02.4077.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rxcG 1-0238580/355/14148_ 6.3185447459381480.02.0175.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78gCSA 1-0238580/476/13853_ 6.323231151372300.02.6072.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BSx 1-0238580/489/13428_ 6.3229292248911410.02.6678.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rpQN 1-0238580/558/14879_ 6.3235045857225670.03.0385.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAhpu 1-0238580/487/13030_ 6.32260455256800.02.6670.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/420/14496_ 6.321821157145620.02.2777.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PC8lF 1-0238580/391/13030_ 6.321541052978000.02.1569.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAlks 1-0238580/506/14786_ 6.3214023554647680.02.7878.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJwb 1-0238580/514/13269_ 6.32131126351610820.02.7571.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjh3 1-0238580/495/13964_ 6.3281059760300.02.7173.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/326/13639_ 6.3210239157058990.01.9072.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSh7MpE3x 1-0238580/282/13599_ 6.33627151991570.01.6871.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec13Cx 1-0238580/256/13575_ 6.3353352225570.01.6072.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238581/380/14173W 6.330056386011.02.3775.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 1-0238580/293/13396_ 6.3010301853855180.01.8770.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=h
Found on 2024-09-19 06:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae4406cce7Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 19-Sep-2024 06:50:09 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 49 days 20 hours 39 minutes 30 seconds Server load: 1.21 1.77 1.87 Total accesses: 800775 - Total Traffic: 4.2 GB - Total Duration: 314614503 CPU Usage: u47.08 s83.84 cu285.86 cs152.55 - .0132% CPU load .186 requests/sec - 1039 B/second - 5.5 kB/request - 392.888 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/423/15030_ 6.34192201057891180.02.3079.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2B 0-0241050/560/15782_ 6.3511261160952720.03.0283.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uCSC 0-0241050/449/15461_ 6.351471163042100.02.5481.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAlDL 0-0241050/478/15968_ 6.34330363308450.02.5691.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/16586_ 6.34272371409970.02.3987.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/15598_ 6.34314859366870.02.4582.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0241050/462/16170_ 6.3441648368995360.02.4986.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAkpW 0-0241050/586/16366_ 6.34357265249960.03.1686.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/271/16609_ 6.32104183067873940.01.6687.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAhBk 0-0241050/371/16415_ 6.33779066376680.02.1986.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/457/15932_ 6.338971060295060.02.5085.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2zHh 0-0241050/443/16676_ 6.337121063856290.02.3886.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIByE 0-0241050/264/16757_ 6.32954064135120.01.8188.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/215/15905_ 6.3522457892240.01.4183.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/420/16320_ 6.33580060650690.02.2887.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/688/16293_ 6.3361016665494740.03.6788.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAtMx 0-0241050/484/17170_ 6.34167364961270.02.5991.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/292/15539_ 6.321006125663516350.01.8082.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC9JY 0-0241050/482/17109_ 6.35140062695760.02.6089.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/323/15336_ 6.35646859860870.01.9782.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/497/15608_ 6.3366321060236370.02.6682.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kpCBQ 0-02410535/347/15932W 6.3600591363745.41.9085.04 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-0241050/407/15305_ 6.34457457424640.02.2881.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/549/16125_ 6.3452218966320360.02.8884.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIGZi 0-0241050/439/16054_ 6.35911260388510.02.3984.95 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAMCC 1-0238580/310/14121_ 6.3147661252612770.01.8275.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78oLys 1-0238580/432/15040_ 6.32447952823960.02.3679.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDuTF 1-0238580/650/14328_ 6.32378352088000.03.3677.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/517/13543_ 6.3160320251449310.02.8071.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2gEkZp 1-0238580/437/14784_ 6.3170018955407180.02.4077.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rxcG 1-0238580/355/14148_ 6.3185447459381480.02.0175.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78gCSA 1-0238580/476/13853_ 6.323231151372300.02.6072.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BSx 1-0238580/489/13428_ 6.3229292248911410.02.6678.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rpQN 1-0238580/558/14879_ 6.3235045857225670.03.0385.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAhpu 1-0238580/487/13030_ 6.32259455256800.02.6670.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/420/14496_ 6.321811157145620.02.2777.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PC8lF 1-0238580/391/13030_ 6.321541052978000.02.1569.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAlks 1-0238580/506/14786_ 6.3214023554647680.02.7878.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJwb 1-0238580/514/13269_ 6.32131126351610820.02.7571.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjh3 1-0238580/495/13964_ 6.3280059760300.02.7173.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/326/13639_ 6.3210139157058990.01.9072.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSh7MpE3x 1-0238580/282/13599_ 6.33627151991570.01.6871.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec13Cx 1-0238580/256/13575_ 6.3353352225570.01.6072.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/379/14172_ 6.301052456386010.02.3675.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/293/13396_ 6.3010301853855180.01.8770.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec9ksV
Found on 2024-09-19 06:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae3ed4f489Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 19-Sep-2024 06:50:08 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:39 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 49 days 20 hours 39 minutes 28 seconds Server load: 1.21 1.77 1.87 Total accesses: 800763 - Total Traffic: 4.2 GB - Total Duration: 314614499 CPU Usage: u47.08 s83.84 cu285.86 cs152.55 - .0132% CPU load .186 requests/sec - 1039 B/second - 5.5 kB/request - 392.893 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0241050/423/15030_ 6.34191201057891180.02.3079.92 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PC%2B 0-0241050/560/15782_ 6.3511161160952720.03.0283.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78uCSC 0-0241050/449/15461_ 6.351461163042100.02.5481.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vAlDL 0-0241050/478/15968_ 6.34329363308450.02.5691.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/16586_ 6.34271371409970.02.3987.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/446/15598_ 6.34313859366870.02.4582.75 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0241050/462/16170_ 6.3441548368995360.02.4986.60 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAkpW 0-0241050/586/16366_ 6.34356265249960.03.1686.71 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/271/16609_ 6.32104083067873940.01.6687.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAhBk 0-0241050/371/16415_ 6.33778066376680.02.1986.48 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0241050/457/15932_ 6.338961060295060.02.5085.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZHNbsIwEITvPEXke2zHh 0-0241050/443/16676_ 6.337111063856290.02.3886.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vIByE 0-0241050/264/16757_ 6.32952064135120.01.8188.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/215/15905_ 6.3521457892240.01.4183.11 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/420/16320_ 6.33579060650690.02.2887.01 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/688/16293_ 6.3360916665494740.03.6788.93 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAtMx 0-0241050/484/17170_ 6.34165364961270.02.5991.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/292/15539_ 6.321005125663516350.01.8082.14 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vC9JY 0-0241050/482/17109_ 6.35139062695760.02.6089.83 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0241050/323/15336_ 6.35636859860870.01.9782.35 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/497/15608_ 6.3366221060236370.02.6682.77 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh7kpCBQ 0-02410523/335/15920W 6.3600591363329.21.8885.02 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /server-status HTTP/1.1 0-0241050/407/15305_ 6.34456457424640.02.2881.39 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0241050/549/16125_ 6.3452118966320360.02.8884.69 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PIGZi 0-0241050/439/16054_ 6.35901260388510.02.3984.95 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vAMCC 1-0238580/310/14121_ 6.3147561252612770.01.8275.87 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78oLys 1-0238580/432/15040_ 6.32446952823960.02.3679.05 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PDuTF 1-0238580/650/14328_ 6.32377352088000.03.3677.07 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/517/13543_ 6.3160220251449310.02.8071.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjpswFN3nKyL2gEkZp 1-0238580/437/14784_ 6.3169918955407180.02.4077.30 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rxcG 1-0238580/355/14148_ 6.3185247459381480.02.0175.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSh78gCSA 1-0238580/476/13853_ 6.323221151372300.02.6072.86 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swEL3vr0Dc%2BSx 1-0238580/489/13428_ 6.3229092248911410.02.6678.59 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78rpQN 1-0238580/558/14879_ 6.3234945857225670.03.0385.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAhpu 1-0238580/487/13030_ 6.32258455256800.02.6670.91 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/420/14496_ 6.321801157145620.02.2777.65 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswFNznKyL2PC8lF 1-0238580/391/13030_ 6.321531052978000.02.1569.46 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAlks 1-0238580/506/14786_ 6.3213823554647680.02.7878.57 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78iJwb 1-0238580/514/13269_ 6.32130126351610820.02.7571.54 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAjh3 1-0238580/495/13964_ 6.3279059760300.02.7173.94 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0238580/326/13639_ 6.3210039157058990.01.9072.72 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPJrtowFN3zFSh7MpE3x 1-0238580/282/13599_ 6.33527151991570.01.6871.40 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec13Cx 1-0238580/256/13575_ 6.3352352225570.01.6072.31 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/379/14172_ 6.301051456386010.02.3675.13 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0238580/293/13396_ 6.3010291853855180.01.8770.45 127.0.0.1http/1.1ip-10-1-98-247.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowFHznK1Dec9ksV
Found on 2024-09-19 06:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae563ab069Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Sunday, 05-Nov-2023 22:53:04 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 17 days 18 hours 24 minutes 36 seconds Server load: 1.17 2.02 2.23 Total accesses: 118829 - Total Traffic: 845.1 MB - Total Duration: 47315102 CPU Usage: u26.54 s28.11 cu29.77 cs18.74 - .00672% CPU load .0774 requests/sec - 577 B/second - 7.3 kB/request - 398.178 ms/request 1 requests currently being processed, 49 idle workers _________________W________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0225180/451/2307_ 5.1346217843180.03.5316.68 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0225180/371/2105_ 5.13477447738580.02.4614.46 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vJOGW 0-0225180/342/2253_ 5.1345508020310.02.5715.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /resources/post.js HTTP/1.1 0-0225180/335/2176_ 5.1351578211420.02.1015.90 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCQXG 0-0225180/355/2051_ 5.1353827936560.02.3214.34 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 0-0225180/389/2192_ 5.1255508026880.02.7316.19 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0225180/380/2014_ 5.143563917745760.02.8114.05 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PCcwj 0-0225180/415/2125_ 5.1338847947990.03.0814.70 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 0-0225180/419/2226_ 5.153182698001890.03.0615.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.POST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0225180/362/2156_ 5.152291797760770.02.3815.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLb8IwEIT%2FSuR73uF 0-0225180/382/2106_ 5.143731637786210.02.9215.04 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7kmACF 0-0225180/318/2192_ 5.1515368119890.02.2114.97 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0225180/377/2149_ 5.161048817916400.02.8215.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.POST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0225180/397/2237_ 5.1612708057310.02.9015.34 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0225180/406/2129_ 5.1610438066290.03.0415.20 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 0-0225180/360/2020_ 5.1530907833280.02.8114.46 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0225180/327/2133_ 5.16371618014940.02.3215.16 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh7EmJuV 0-0225187/380/2102W 5.16007854658.72.6714.22 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0225180/379/2157_ 5.1169707500420.02.5614.79 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0225180/365/2179_ 5.1175747908460.02.5115.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 0-0225180/348/1995_ 5.126741757694870.02.4914.69 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZLNbsIwEIRfJfI9MTE%2 0-0225180/407/2306_ 5.1260178031040.02.9117.16 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0225180/362/2172_ 5.126557448460460.02.5615.27 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2FytJ7VtY 0-0225180/403/2135_ 5.126023178251700.02.7714.85 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.POST /module.php/saml/sp/saml2-acs.php/default-sp HTTP/1.1 0-0225180/347/2085_ 5.125832447871810.02.4214.38 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swFLznV0TcgcCyS 1-0225980/770/1603_ 11.966556646920620.05.3811.35 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSh78gLuB 1-0225980/948/1862_ 11.9669137065580.05.9912.31 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0225980/898/1816_ 11.9666337226860.06.1312.97 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0225980/844/1738_ 11.9676446708190.06.1713.44 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0225980/834/1737_ 11.9674046934060.05.5512.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0225980/861/1782_ 11.9852627083890.05.8512.82 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0225980/887/1755_ 11.9849877079020.05.9112.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vCH31 1-0225980/794/1634_ 11.975982037032260.05.5012.13 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7JCQBC 1-0225980/835/1742_ 11.985371837045590.05.8112.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKEPL 1-0225980/835/1855_ 11.985892307528950.06.1413.48 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7POHqB 1-0225980/833/1687_ 11.9857327029990.06.1612.13 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0225980/918/1848_ 11.9846217471670.06.3813.30 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1 1-0225980/745/1704_ 11.9846216823920.05.0612.10 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0225980/827/1698_ 11.9838106775630.06.2512.96 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0225980/886/1790_ 11.9843687074520.06.1613.19 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vIfO1 1-0225980/877/1761_ 11.9931807009670.06.1812.72 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0225980/1004/1821_ 11.9936506954160.07.2313.34 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /resources/post.css HTTP/1.1 1-0225980/964/1921_ 11.9924837182000.06.8114.51 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0225980/888/1821_ 12.0014707168520.06.3313.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /resources/post.css HTTP/1.1 1-0225980/905/1782_ 11.9933437004410.06.2212.95 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0225980/926/1764_ 12.00116437131100.06.5212.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7PAE
Found on 2023-11-05 22:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aefa273137Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 26-Oct-2023 15:33:26 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 11 hours 4 minutes 58 seconds Server load: 1.05 0.92 0.86 Total accesses: 49737 - Total Traffic: 364.0 MB - Total Duration: 30340085 CPU Usage: u23.56 s19.62 cu0 cs0 - .0067% CPU load .0771 requests/sec - 592 B/second - 7.5 kB/request - 610.01 ms/request 1 requests currently being processed, 74 idle workers ________________W_______________________________________________ ___________..................................................... ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0260/849/849_ 11.2021311934588630.06.216.21 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLzvr0DcgUBYk 0-0260/808/808_ 11.202558524615720.05.905.90 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/863/863_ 11.201841384682390.05.965.96 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/749/749_ 11.21898414424550.06.036.03 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/764/764_ 11.20474834662360.05.475.47 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/830/830_ 11.21310454725410.06.396.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/740/740_ 11.20435834489580.05.125.12 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/710/710_ 11.203791464455120.05.015.01 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/853/853_ 11.1949191724707160.06.066.06 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/794/794_ 11.202948424691740.06.276.27 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/792/792_ 11.215482324707510.05.675.67 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/918/918_ 11.195514384818750.06.676.67 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/751/751_ 11.20353044501050.05.575.57 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/856/856_ 11.20391034719070.05.885.88 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/787/787_ 11.19566844795370.05.745.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/767/767_ 11.195835704643960.05.975.97 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0267/762/762W 11.21004613778.75.655.65 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0260/780/780_ 11.20173034585860.05.455.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/808/808_ 11.2119134533670.05.765.76 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/850/850_ 11.19538334670430.06.016.01 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/749/749_ 11.21122344619850.05.855.85 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/915/915_ 11.20234844804580.07.017.01 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/772/772_ 11.20204144707880.05.275.27 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/771/771_ 11.2040333544774230.05.405.40 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNdz5owGL33VxjuAUFF1 0-0260/811/811_ 11.203641694712720.06.016.01 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/753/753_ 11.381079484429440.05.445.44 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/863/863_ 11.38218334669950.05.975.97 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/857/857_ 11.381748384714070.06.396.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/836/836_ 11.3871254532330.06.786.78 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/799/799_ 11.374498414559820.06.396.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/851/851_ 11.3730232374769170.06.446.44 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/822/822_ 11.374148394774550.06.426.42 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/787/787_ 11.38241464823090.06.176.17 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/863/863_ 11.3823932084693930.06.286.28 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vEim6 1-0270/947/947_ 11.373548415033870.06.726.72 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/796/796_ 11.37384144745660.05.595.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/841/841_ 11.373714434842140.06.086.08 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/911/911_ 11.382068414571460.06.476.47 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/812/812_ 11.375710434544520.06.206.20 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/830/830_ 11.3739392834699140.06.276.27 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PAlca 1-0270/811/811_ 11.381249504725830.06.056.05 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/752/752_ 11.381914464488020.05.595.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/849/849_ 11.37533034746230.06.996.99 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/878/878_ 11.372698484612910.06.936.93 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/819/819_ 11.37594834510700.06.176.17 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/785/785_ 11.3838334655430.05.725.72 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/794/794_ 11.37482334588660.06.026.02 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/825/825_ 11.3941414461950.06.286.28 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/me
Found on 2023-10-26 15:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924ae419639b8Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 19-Oct-2023 16:26:36 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 hours 58 minutes 7 seconds Server load: 4.26 3.88 3.82 Total accesses: 3056 - Total Traffic: 29.3 MB - Total Duration: 693198 CPU Usage: u1.51 s1.11 cu0 cs0 - .00608% CPU load .0709 requests/sec - 713 B/second - 9.8 kB/request - 226.832 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0260/58/58_ 0.8049484123410.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/56/56_ 0.803813149010.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-02643/99/99W 0.81001552457.90.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0260/63/63_ 0.78357551139460.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/44/44_ 0.80193738135130.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.78318444120230.00.580.58 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/57/57_ 0.801549339121390.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.8018290152350.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /static/admin/javascript/hetong.js HTTP/1.1 0-0260/61/61_ 0.8021023139180.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.805923157880.00.520.52 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/42/42_ 0.79244220190470.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.7922944181240.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80642209156640.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/60/60_ 0.8087148119810.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/71/71_ 0.802128211151970.00.800.80 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9aASO 0-0260/45/45_ 0.7921813116900.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.7923923171290.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/51/51_ 0.7931373129760.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.79281046133600.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/67/67_ 0.8020014217850.00.700.70 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/65/65_ 0.783718205146130.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vBseF 0-0260/75/75_ 0.802014184060.00.860.86 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/48/48_ 0.80303498490.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.8013373119540.00.410.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80110185133600.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/46/46_ 0.821374264730.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.8254443151720.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/65/65_ 0.8242443150940.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/85/85_ 0.80373643182230.00.920.92 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.81204248110140.00.590.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.82101046146710.00.530.53 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/56/56_ 0.8121174100660.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/49/49_ 0.813705795010.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKGXx 1-0270/53/53_ 0.826013115650.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8219032150130.00.750.75 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0270/70/70_ 0.8217753148460.00.680.68 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/83/83_ 0.82138560152380.00.810.81 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/97/97_ 0.821318248163410.01.151.15 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vIcAF 1-0270/65/65_ 0.81253781125310.00.770.77 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/57/57_ 0.81197611124380.00.650.65 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/saml/sp/saml2-logout.php/default-sp?SAMLRequest 1-0270/46/46_ 0.82241193135200.00.380.38 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/69/69_ 0.8231663164430.00.760.76 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/68/68_ 0.8124033148360.00.830.83 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.8273741160840.00.740.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8129014193020.00.420.42 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/50/50_ 0.81334980106880.00.430.43 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/45/45_ 0.812128297155680.00.350.35 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9fQDN 1-0270/63/63_ 0.813145195153340.00.660.66 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec4Olu 1-0270/48/48_ 0.812344</
Found on 2023-10-19 16:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aeb13f2539Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 19-Oct-2023 16:26:34 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 hours 58 minutes 6 seconds Server load: 3.84 3.80 3.79 Total accesses: 3049 - Total Traffic: 29.3 MB - Total Duration: 693194 CPU Usage: u1.51 s1.11 cu0 cs0 - .00608% CPU load .0708 requests/sec - 713 B/second - 9.8 kB/request - 227.351 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0260/58/58_ 0.8049284123410.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/56/56_ 0.803793149010.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-02636/92/92W 0.81001552146.00.470.47 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0260/63/63_ 0.78357351139460.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/44/44_ 0.80193538135130.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.78318344120230.00.580.58 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/57/57_ 0.801548339121390.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.8018270152350.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /static/admin/javascript/hetong.js HTTP/1.1 0-0260/61/61_ 0.8021013139180.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.805903157880.00.520.52 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/42/42_ 0.79244120190470.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.7922924181240.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80641209156640.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/60/60_ 0.8086948119810.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/71/71_ 0.802126211151970.00.800.80 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9aASO 0-0260/45/45_ 0.7921793116900.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.7923903171290.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/51/51_ 0.7931363129760.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.79280846133600.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/67/67_ 0.8019994217850.00.700.70 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/65/65_ 0.783716205146130.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vBseF 0-0260/75/75_ 0.801994184060.00.860.86 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/48/48_ 0.80301498490.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.8013353119540.00.410.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80109985133600.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/46/46_ 0.821354264730.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.8254243151720.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/65/65_ 0.8242343150940.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/85/85_ 0.80373443182230.00.920.92 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.81204048110140.00.590.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.82100846146710.00.530.53 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/56/56_ 0.8121154100660.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/49/49_ 0.813703795010.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKGXx 1-0270/53/53_ 0.825993115650.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8219012150130.00.750.75 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0270/70/70_ 0.8217733148460.00.680.68 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/83/83_ 0.82138360152380.00.810.81 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/97/97_ 0.821316248163410.01.151.15 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vIcAF 1-0270/65/65_ 0.81253581125310.00.770.77 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/57/57_ 0.81197411124380.00.650.65 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/saml/sp/saml2-logout.php/default-sp?SAMLRequest 1-0270/46/46_ 0.82240193135200.00.380.38 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/69/69_ 0.8231563164430.00.760.76 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/68/68_ 0.8124013148360.00.830.83 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.8273541160840.00.740.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8128994193020.00.420.42 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/50/50_ 0.81334880106880.00.430.43 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/45/45_ 0.812127297155680.00.350.35 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9fQDN 1-0270/63/63_ 0.813143195153340.00.660.66 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec4Olu 1-0270/48/48_ 0.812342</
Found on 2023-10-19 16:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aec35e8596Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 19-Oct-2023 16:26:34 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 hours 58 minutes 6 seconds Server load: 3.84 3.80 3.79 Total accesses: 3051 - Total Traffic: 29.3 MB - Total Duration: 693196 CPU Usage: u1.51 s1.11 cu0 cs0 - .00608% CPU load .0708 requests/sec - 713 B/second - 9.8 kB/request - 227.203 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0260/58/58_ 0.8049284123410.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/56/56_ 0.803793149010.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-02638/94/94W 0.81001552250.30.480.48 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0260/63/63_ 0.78357351139460.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/44/44_ 0.80193538135130.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.78318344120230.00.580.58 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/57/57_ 0.801548339121390.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.8018270152350.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /static/admin/javascript/hetong.js HTTP/1.1 0-0260/61/61_ 0.8021013139180.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.805903157880.00.520.52 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/42/42_ 0.79244120190470.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.7922924181240.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80641209156640.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/60/60_ 0.8087048119810.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/71/71_ 0.802127211151970.00.800.80 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9aASO 0-0260/45/45_ 0.7921793116900.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.7923903171290.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/51/51_ 0.7931363129760.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.79280846133600.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/67/67_ 0.8019994217850.00.700.70 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/65/65_ 0.783717205146130.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vBseF 0-0260/75/75_ 0.801994184060.00.860.86 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/48/48_ 0.80301498490.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.8013363119540.00.410.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80109985133600.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/46/46_ 0.821364264730.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.8254243151720.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/65/65_ 0.8242343150940.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/85/85_ 0.80373543182230.00.920.92 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.81204048110140.00.590.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.82100846146710.00.530.53 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/56/56_ 0.8121154100660.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/49/49_ 0.813703795010.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKGXx 1-0270/53/53_ 0.826003115650.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8219012150130.00.750.75 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0270/70/70_ 0.8217733148460.00.680.68 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/83/83_ 0.82138360152380.00.810.81 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/97/97_ 0.821317248163410.01.151.15 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vIcAF 1-0270/65/65_ 0.81253581125310.00.770.77 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/57/57_ 0.81197511124380.00.650.65 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/saml/sp/saml2-logout.php/default-sp?SAMLRequest 1-0270/46/46_ 0.82240193135200.00.380.38 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/69/69_ 0.8231563164430.00.760.76 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/68/68_ 0.8124013148360.00.830.83 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.8273541160840.00.740.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8128994193020.00.420.42 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/50/50_ 0.81334880106880.00.430.43 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/45/45_ 0.812127297155680.00.350.35 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9fQDN 1-0270/63/63_ 0.813144195153340.00.660.66 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec4Olu 1-0270/48/48_ 0.812342</
Found on 2023-10-19 16:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31cb6924aecb6924aeadb01d54Apache Status Apache Server Status for calrossy-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2023-03-08T17:32:54 Current Time: Thursday, 19-Oct-2023 16:26:28 UTC Restart Time: Thursday, 19-Oct-2023 04:28:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 hours 58 minutes Server load: 3.92 3.81 3.80 Total accesses: 3023 - Total Traffic: 29.3 MB - Total Duration: 693181 CPU Usage: u1.51 s1.11 cu0 cs0 - .00608% CPU load .0702 requests/sec - 712 B/second - 9.9 kB/request - 229.302 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0260/58/58_ 0.8048684123410.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/56/56_ 0.803733149010.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-02610/66/66W 0.81001550813.80.440.44 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /server-status HTTP/1.1 0-0260/63/63_ 0.78356751139460.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/44/44_ 0.80192938135130.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.78317744120230.00.580.58 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/57/57_ 0.801542339121390.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.8018210152350.00.640.64 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /static/admin/javascript/hetong.js HTTP/1.1 0-0260/61/61_ 0.8020953139180.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.805843157880.00.520.52 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/42/42_ 0.79243520190470.00.370.37 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/64/64_ 0.7922864181240.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80635209156640.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/60/60_ 0.8086348119810.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/71/71_ 0.802121211151970.00.800.80 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELznKwTd9aASO 0-0260/45/45_ 0.7921733116900.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/66/66_ 0.7923843171290.00.610.61 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/51/51_ 0.7931303129760.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.79280246133600.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/67/67_ 0.8019934217850.00.700.70 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/65/65_ 0.783711205146130.00.490.49 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7vBseF 0-0260/75/75_ 0.801934184060.00.860.86 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/48/48_ 0.80295498490.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/59/59_ 0.8013303119540.00.410.41 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0260/58/58_ 0.80109385133600.00.630.63 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/46/46_ 0.821304264730.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.8253643151720.00.540.54 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/65/65_ 0.8241743150940.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/85/85_ 0.80372943182230.00.920.92 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.81203448110140.00.590.59 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/54/54_ 0.82100246146710.00.530.53 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/56/56_ 0.8121094100660.00.620.62 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/49/49_ 0.813697795010.00.390.39 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowFNzzFSj7PKGXx 1-0270/53/53_ 0.825943115650.00.450.45 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8218952150130.00.750.75 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0270/70/70_ 0.8217673148460.00.680.68 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/83/83_ 0.82137760152380.00.810.81 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/97/97_ 0.821310248163410.01.151.15 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLjtowFN3zFSj7vIcAF 1-0270/65/65_ 0.81252981125310.00.770.77 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/57/57_ 0.81196911124380.00.650.65 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /module.php/saml/sp/saml2-logout.php/default-sp?SAMLRequest 1-0270/46/46_ 0.82234193135200.00.380.38 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/69/69_ 0.8230963164430.00.760.76 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/68/68_ 0.8123953148360.00.830.83 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/62/62_ 0.8272941160840.00.740.74 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/72/72_ 0.8128934193020.00.420.42 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/50/50_ 0.81334280106880.00.430.43 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0270/45/45_ 0.812121297155680.00.350.35 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9fQDN 1-0270/63/63_ 0.813138195153340.00.660.66 127.0.0.1http/1.1ip-10-1-100-156.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec4Olu 1-0270/48/48_ 0.81233642<
Found on 2023-10-19 16:26
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2023-03-18 15:34
Last seen 2026-01-02 16:27
Open for 1021 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc777d3dc6a9256f6779256f677Found 3 files trough .DS_Store spidering: /img /slide-out /slide-out/img
Found on 2026-01-02 16:27 -
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6dFound 1 files trough .DS_Store spidering: /img
Found on 2025-01-17 04:41
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2023-03-18 15:34
Last seen 2026-01-02 16:27
Open for 1021 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc777d3dc6a9256f6779256f677Found 3 files trough .DS_Store spidering: /img /slide-out /slide-out/img
Found on 2026-01-02 16:27 -
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176421954ce7666e8346b66e8346b66e8346bFound 2 files trough .DS_Store spidering: /img /slide-out
Found on 2025-12-19 03:00 -
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6dFound 1 files trough .DS_Store spidering: /img
Found on 2025-01-17 04:41
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2023-02-21 13:24
Last seen 2026-01-02 11:48
Open for 1045 days-
Severity: medium
Fingerprint: 5f32cf5d6962f09c1f1b52f11f1b52f13e40d33474dd7428656cb48621925054Found 96 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/join/countryselectpopup /app/join/create-account /app/join/enter-otp-reset-password /app/join/finishcreateaccount /app/join/forgotpassword /app/join/login /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /assets/countries /assets/countrycodes /assets/fav-icon /assets/favicon /assets/fonts /assets/fonts/Almarai /assets/fonts/font-awesome-4.7.0 /assets/fonts/ionicons-2.0.1 /assets/fonts/Mada /assets/fonts/muli /assets/fonts/playfair-display /assets/fonts/readexPro /assets/fonts/Tajawal /assets/fonts/themify /assets/i18n /assets/img /assets/less /assets/static /assets/static/animate /assets/static/animsition /assets/static/bootstrap /assets/static/css-hamburgers /assets/static/daterangepicker /assets/static/lightbox2 /assets/static/slick /assets/stores /assets/vesion /constants
Found on 2026-01-02 11:48 -
Severity: medium
Fingerprint: 5f32cf5d6962f09c6cdae1676cdae167f8e80a9aaf9d67c2f8b406c09b4f66fbFound 69 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/join/countryselectpopup /app/join/create-account /app/join/enter-otp-reset-password /app/join/finishcreateaccount /app/join/forgotpassword /app/join/login /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2025-12-18 21:29 -
Severity: medium
Fingerprint: 5f32cf5d6962f09c600bfeed600bfeed3734ce88b190d074985818fa3e4d09e8Found 63 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2025-12-16 16:23 -
Severity: medium
Fingerprint: 5f32cf5d6962f09cdc8bf8eddc8bf8edc113a88829034a74d12762fabdc8e408Found 89 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/join/countryselectpopup /app/join/create-account /app/join/enter-otp-reset-password /app/join/finishcreateaccount /app/join/forgotpassword /app/join/login /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /assets/countries /assets/countrycodes /assets/fav-icon /assets/favicon /assets/fonts /assets/fonts/Almarai /assets/fonts/font-awesome-4.7.0 /assets/fonts/ionicons-2.0.1 /assets/fonts/Mada /assets/fonts/muli /assets/fonts/playfair-display /assets/fonts/readexPro /assets/fonts/Tajawal /assets/fonts/themify /assets/i18n /assets/img /assets/less /assets/static /assets/stores /assets/vesion /constants
Found on 2025-12-14 10:32 -
Severity: medium
Fingerprint: 5f32cf5d6962f09cef4a0ce8ef4a0ce8ac1e5925924793f90c2d9da79cae2efeFound 80 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/join/countryselectpopup /app/join/create-account /app/join/enter-otp-reset-password /app/join/finishcreateaccount /app/join/forgotpassword /app/join/login /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /assets/countries /assets/countrycodes /assets/fav-icon /assets/favicon /assets/fonts /assets/i18n /assets/img /assets/less /assets/static /assets/stores /assets/vesion /constants
Found on 2025-10-04 23:28 -
Severity: medium
Fingerprint: 5f32cf5d6962f09cddacc81addacc81add507d42adff8840fc459ca0125f5c7bFound 68 files trough .DS_Store spidering: /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/join/countryselectpopup /app/join/create-account /app/join/enter-otp-reset-password /app/join/finishcreateaccount /app/join/forgotpassword /app/join/login /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2024-06-24 09:44 -
Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c0400545dcf0375952ba613c620f7ed690Found 62 files trough .DS_Store spidering: /app /app/about /app/account /app/account/account-tiers /app/account/country-dropdown /app/account/edit-password-modal /app/account/edit-profile /app/account/point-expiry-popup /app/account/profile /app/account/transactions /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2024-06-20 04:42 -
Severity: medium
Fingerprint: 5f32cf5d6962f09c74247ea574247ea5e6e7c1907f2281ac6daf6022ea60557dFound 56 files trough .DS_Store spidering: /.well-known /app /app/about /app/account /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elite-member /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/join /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2024-02-05 10:32 -
Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b04003171c9aea094d5ee59e4bbe8d14c98Found 53 files trough .DS_Store spidering: /.well-known /app /app/about /app/bahraindatamigration /app/brands /app/brandsofnewfaces /app/contactus /app/datamigration /app/downloadapp /app/downloadapps /app/elitemobileprivacy /app/elitemobileterms /app/enrolpopupmsg /app/experience-intro /app/facesbrandpage /app/facescampaign /app/facesforfaq /app/facesregistration /app/facesthankyou /app/faq /app/faq-generalinfo /app/footer /app/gapfaqs /app/gapheader /app/gappreregister /app/gaptermsandconditions /app/gapthankyoupage /app/generated /app/header /app/headerfaces /app/home /app/installapp /app/notifications /app/offers /app/pagenotfound /app/pause /app/posthankyou /app/privacymobile /app/privacypolicy /app/referafriendlandingpage /app/registerhere /app/signupmodal /app/termconditionsmobile /app/termsconditions /app/termsoffaces /app/thankyou /app/tiersbenifits /app/version /app/viewexperiencepage /app/viewoffer /app/whymusemobileapp /assets /constants
Found on 2023-02-21 13:24
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
IP: 13.35.58.8
Domain: web.nalcam-bo-bo.ovg-dev.com
Port: 443
URL: https://web.nalcam-bo-bo.ovg-dev.comFirst seen 2024-08-12 23:42
Last seen 2026-01-02 08:08
Open for 507 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325becebFound 1 files trough .DS_Store spidering: /assets
Found on 2026-01-02 08:08
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
IP: 13.35.58.8
Domain: web.nalcam-bo-bo.ovg-dev.com
Port: 80
URL: http://web.nalcam-bo-bo.ovg-dev.comFirst seen 2024-08-12 23:42
Last seen 2026-01-02 06:13
Open for 507 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325becebFound 1 files trough .DS_Store spidering: /assets
Found on 2026-01-02 06:13
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2024-03-20 06:54
Last seen 2025-12-30 11:59
Open for 650 days-
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067daa8940172e2486d50Found 11 files trough .DS_Store spidering: /assets /assets/css /assets/img /assets/img/icon_1.png /assets/img/icon_2.png /assets/img/icon_4.png /assets/img/icon_5.png /assets/img/icon_6.png /assets/img/logo.png /index.html /privacy
Found on 2025-12-30 11:59
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2025-07-18 02:23
Last seen 2025-08-30 19:16
Open for 43 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d956ff55a956ff55a956ff55a956ff55aFound 1 files trough .DS_Store spidering: /icons
Found on 2025-08-30 19:16
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
IP: 13.35.58.8
Domain: dev.client.securovision.com
Port: 443
URL: https://dev.client.securovision.comFirst seen 2024-09-26 06:27
Last seen 2024-11-22 14:42
Open for 57 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf1d7ce3958a5585391a5585391Found 3 files trough .DS_Store spidering: /assets /assets/images /build
Found on 2024-11-22 14:42
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 13.35.58.94
Domain: s3-login.cloudworkengine.net
Port: 443
URL: https://s3-login.cloudworkengine.netFirst seen 2024-07-16 10:43
Last seen 2024-11-06 17:29
Open for 113 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18f2f88739Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 06-Nov-2024 17:29:10 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 13 hours 44 minutes 19 seconds Server load: 0.43 0.67 1.03 Total accesses: 1216 - Total Traffic: 3.5 MB - Total Duration: 361789 CPU Usage: u8.24 s14.01 cu0 cs0 - .00269% CPU load .00147 requests/sec - 4 B/second - 3050 B/request - 297.524 ms/request 1 requests currently being processed, 49 idle workers _______W__________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/10/10_ 0.2365358211182580.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/16/16_ 0.2360993038980.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /phpinfo HTTP/1.1 0-0330/30/30_ 0.24152421066420.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/27/27_ 0.235756716347190.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/22/22_ 0.2413217020400.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0330/69/69_ 0.25111041122970.00.190.19 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0330/11/11_ 0.255646211104600.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0338/32/32W 0.2500281859.50.130.13 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 0-0330/14/14_ 0.20137206557760.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_46978cf35 0-0330/9/9_ 0.20134698548167710.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.2013292163158810.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/14/14_ 0.2012889172107340.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_15434791c 0-0330/26/26_ 0.2012613831825190.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/14/14_ 0.20124473543180.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_14f3f56b6 0-0330/9/9_ 0.20119052333117280.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.201151276774610.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b8bb6a75e 0-0330/32/32_ 0.21112872328100.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0330/13/13_ 0.2110536713322900.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/10/10_ 0.21970821142240.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/33/33_ 0.2171436224690.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT 0-0330/37/37_ 0.23714247117560.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/27/27_ 0.2371407585730.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/15/15_ 0.2371349958960.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/29/29_ 0.2371272611830.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/20/20_ 0.2369603030000.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /.env HTTP/1.1 1-0340/14/14_ 0.29103168370180.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0340/93/93_ 0.30759045113370.00.150.15 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1 1-0340/9/9_ 0.3071436122670.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0340/91/91_ 0.3071436036840.00.130.13 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0340/28/28_ 0.31714078224240.00.140.14 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/12/12_ 0.31713658720300.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/58/58_ 0.3271261764910.00.180.18 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/47/47_ 0.3371111624740.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/24/24_ 0.3369595044480.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /.env HTTP/1.1 1-0340/34/34_ 0.335922057340300.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/36/36_ 0.3361020036640.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /_profiler/phpinfo HTTP/1.1 1-0340/19/19_ 0.33547086835940.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/28/28_ 0.3313222078100.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/21/21_ 0.335628475250.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0340/18/18_ 0.3313241552950.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/14/14_ 0.339541427560.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1 1-0340/10/10_ 0.291354307828790.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_0f17de2fa 1-0340/10/10_ 0.2913340913524020.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/15/15_ 0.29130415615330.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_56e0d9dc5 1-0340/11/11_ 0.29127725286996880.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/10/10_ 0.291258763202167070.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fJDT 1-0340/27/27_ 0.291225057326530.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.
Found on 2024-11-06 17:29 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18417d7c8cApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 05-Nov-2024 01:51:20 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 22 hours 6 minutes 28 seconds Server load: 1.74 2.86 2.86 Total accesses: 1037 - Total Traffic: 2.9 MB - Total Duration: 322795 CPU Usage: u6.92 s11.48 cu0 cs0 - .00269% CPU load .00152 requests/sec - 4 B/second - 2947 B/request - 311.278 ms/request 1 requests currently being processed, 49 idle workers _____________________________________W____________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/9/9_ 0.2083045178360.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_f68a0f4cb 0-0330/8/8_ 0.20564531338940.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/28/28_ 0.204525661720.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/26/26_ 0.204525143910.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0330/19/19_ 0.20295012120250.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/51/51_ 0.202843683122810.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.1810130235599330.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/23/23_ 0.1898396882274510.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0330/13/13_ 0.1996477557660.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6b49e412c 0-0330/8/8_ 0.19939623144156730.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.199208426346190.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/13/13_ 0.19914515105890.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6438c5790 0-0330/25/25_ 0.198893934218820.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/13/13_ 0.19860146843070.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e782bfb50 0-0330/8/8_ 0.1983215335110610.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.19804634773250.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_f650d03d6 0-0330/28/28_ 0.197789135621310.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/12/12_ 0.1975387420230.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fbfda6316 0-0330/8/8_ 0.197287931238860.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/25/25_ 0.19703289615550.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b05e6dc03 0-0330/26/26_ 0.1967096798790.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a62cfa952 0-0330/23/23_ 0.19637195485570.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_9a4d72166 0-0330/8/8_ 0.194738826942930.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/26/26_ 0.1935316111590.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0330/19/19_ 0.20133188329990.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_5bf8edcc4 1-0340/10/10_ 0.267537334663290.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/87/87_ 0.26728662110660.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e4f8be43d 1-0340/8/8_ 0.267031732022650.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/90/90_ 0.266708531036820.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/15/15_ 0.266369628020990.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/11/11_ 0.2643391718550.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/39/39_ 0.2622847126244340.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/43/43_ 0.261081244623080.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/22/22_ 0.26579541844480.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/33/33_ 0.2745253228840.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d71905042f48c 1-0340/35/35_ 0.274525136640.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 1-0340/18/18_ 0.254479534570.00.060.06 127.0.0.1http/1.1 1-0348/17/17W 0.270078049.50.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 1-0340/19/19_ 0.26983961868350.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/16/16_ 0.27206942552750.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/10/10_ 0.25987969226100.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fe4b45a3f 1-0340/9/9_ 0.269628432727230.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/9/9_ 0.2693777521310.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_88b0e650e 1-0340/14/14_ 0.26917288115210.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/10/10_ 0.268935018039490.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/8/8_ 0.26889093100670.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_88b0e650e
Found on 2024-11-05 01:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d183ed02c3eApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 02-Nov-2024 18:32:42 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 14 hours 47 minutes 51 seconds Server load: 2.29 1.58 1.22 Total accesses: 769 - Total Traffic: 2.0 MB - Total Duration: 209621 CPU Usage: u4.8 s8.34 cu0 cs0 - .00271% CPU load .00158 requests/sec - 4 B/second - 2765 B/request - 272.589 ms/request 1 requests currently being processed, 49 idle workers ________________W_________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/6/6_ 0.1350571315164110.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/5/5_ 0.1345148105130380.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/23/23_ 0.1340990535970.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4ddb39d23 0-0330/22/22_ 0.133847729336870.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/12/12_ 0.1336577512640.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4ded91c57 0-0330/48/48_ 0.133406335746680.00.160.16 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/7/7_ 0.133155313585880.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_53c05641f 0-0330/8/8_ 0.132881891535930.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.1326173551090.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_12138395d 0-0330/6/6_ 0.1423518341493730.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/8/8_ 0.141821544034030.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.14142553105700.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0330/23/23_ 0.1413576111840.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0330/11/11_ 0.141290928938260.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.14102494103780.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_ef78e53a3 0-0330/7/7_ 0.145482193065540.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0338/15/15W 0.150014069.50.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 0-0330/9/9_ 0.1362786519900.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_daf9a6529 0-0330/5/5_ 0.136027252018520.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/22/22_ 0.1359205611270.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_eb6cb5107 0-0330/22/22_ 0.135669578930360.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/16/16_ 0.13537198478630.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_dd51d1ff3 0-0330/5/5_ 0.135131946737360.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.13511426700.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/5/5_ 0.1350593226150.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/7/7_ 0.186171631943060.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/84/84_ 0.18598624101210.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_466adcd19 1-0340/5/5_ 0.185735532316080.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/83/83_ 0.1854850517970.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_68f5d5be7 1-0340/12/12_ 0.195316018530.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0340/7/7_ 0.1951168312470.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/24/24_ 0.1951136012080.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/30/30_ 0.1950579013300.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/15/15_ 0.194781958890.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b03f7fe6a 1-0340/19/19_ 0.1941652520330.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fa712be2d 1-0340/22/22_ 0.193908539624210.00.140.14 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/12/12_ 0.2038398833020.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0340/7/7_ 0.203345475677740.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/16/16_ 0.202818429866460.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.2035966536750.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a8a47246b 1-0340/8/8_ 0.2030942517510.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_8be4db06f 1-0340/7/7_ 0.20255247114020.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4396fe1c4 1-0340/6/6_ 0.2020869419920.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6e87c9e53 1-0340/12/12_ 0.201556357020.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_5e86d0f39 1-0340/8/8_ 0.2014195729140.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/6/6_ 0.2013224045160.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /
Found on 2024-11-02 18:32 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1818b65719Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 01-Nov-2024 15:19:04 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 11 hours 34 minutes 12 seconds Server load: 0.94 0.75 0.66 Total accesses: 627 - Total Traffic: 1.6 MB - Total Duration: 156930 CPU Usage: u3.73 s6.9 cu0 cs0 - .00274% CPU load .00162 requests/sec - 4 B/second - 2650 B/request - 250.287 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/4/4_ 0.08497037494151340.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.08480001249240.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/21/21_ 0.084626832615490.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/20/20_ 0.084371432630900.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.0841273512520.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e7c3c097d 0-0330/46/46_ 0.114062222930.00.150.15 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0330/5/5_ 0.1138693583090.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_ac193e81d 0-0330/6/6_ 0.11364962979120.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.1134341449500.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_8397575d9 0-0330/4/4_ 0.113223433517720.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.113003259280.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_3c81a5169 0-0330/5/5_ 0.112785135298540.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/4/4_ 0.112566859320.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_24512b5a6 0-0330/9/9_ 0.1123519116532380.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/4/4_ 0.1121767285775140.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/5/5_ 0.1119722524310.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_860272e31 0-0330/6/6_ 0.111768436912820.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/8/8_ 0.1115638519800.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_28175923b 0-0330/4/4_ 0.11132793088100.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/21/21_ 0.111088611611140.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_d2dc5ad09 0-0330/21/21_ 0.11831740114570.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/15/15_ 0.116934576930.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_5bf8edcc4 0-0330/4/4_ 0.11441138028010.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/4/4_ 0.1119005460.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_494c9c085 0-0330/4/4_ 0.1132032726100.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.161534538736670.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/83/83_ 0.16129354101110.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_d21fa7754 1-0340/4/4_ 0.16105393409610.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/82/82_ 0.167918517860.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_081403a0d 1-0340/7/7_ 0.1653643778200.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.162842512410.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_f470610a4 1-0340/23/23_ 0.161796812080.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0348/17/17W 0.160013019.50.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 1-0340/13/13_ 0.124922956760.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_2b0265695 1-0340/17/17_ 0.1246735620100.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_d42463b55 1-0340/19/19_ 0.144476419770.00.130.13 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0340/6/6_ 0.144328617726910.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_900af4c25 1-0340/5/5_ 0.143902933362490.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/14/14_ 0.143467131855960.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/4/4_ 0.144091130215560.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.143683414510770.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b575c3fd1 1-0340/5/5_ 0.1432579512490.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_82fa5a9f2 1-0340/4/4_ 0.143039135919650.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.142820556560.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fee63c548 1-0340/5/5_ 0.142601830321350.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/4/4_ 0.142384553
Found on 2024-11-01 15:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1813aac09bApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 30-Oct-2024 11:50:44 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 8 hours 5 minutes 52 seconds Server load: 1.08 1.32 1.38 Total accesses: 308 - Total Traffic: 654 kB - Total Duration: 27748 CPU Usage: u2.07 s3.37 cu0 cs0 - .00269% CPU load .00153 requests/sec - 3 B/second - 2174 B/request - 90.0909 ms/request 1 requests currently being processed, 49 idle workers ____________________W_____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/18/18_ 0.0018329122120.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0330/17/17_ 0.011799810210.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /secured/phpinfo.php HTTP/1.1 0-0330/7/7_ 0.01179962020.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /application-dev.properties HTTP/1.1 0-0330/29/29_ 0.011799240150.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /src/main/resources/application.properties HTTP/1.1 0-0330/2/2_ 0.0117701761700.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0330/2/2_ 0.01163955101990.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/6/6_ 0.02126252240860.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0330/1/1_ 0.021253151352700.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/3/3_ 0.02100655931870.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 0-0330/1/1_ 0.02831483256510.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/1/1_ 0.02581114358700.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/6/6_ 0.024624521390.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /resources/icons/clipboard.svg HTTP/1.1 0-0330/1/1_ 0.024047057611520.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/1/1_ 0.023176079715940.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/3/3_ 0.03287350270.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0330/5/5_ 0.03281233226530.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0330/1/1_ 0.032810410200.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/18/18_ 0.0427651190.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0338/8/8W 0.0400139.50.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 1-0340/3/3_ 0.052810420522290.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/80/80_ 0.06841715850.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 1-0340/1/1_ 0.0723471172340.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/2/2_ 0.00199253813230.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/18/18_ 0.001819811160.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0340/6/6_ 0.00179971030.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /appsettings.json HTTP/1.1 1-0340/10/10_ 0.01179949020.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /config/aws.json HTTP/1.1 1-0340/14/14_ 0.011799090130.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 1-0340/2/2_ 0.0116556562160.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/2/2_ 0.0115821664440.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/2/2_ 0.021262526180.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0340/11/11_ 0.02126245043420.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/1/1_ 0.02126252250.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 1-0340/3/3_ 0.0212624861120.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/2/2_ 0.031262332225370.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9ayc2 1-0340/1/1_ 0.031125352775550.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/3/3_ 0.03998006440.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/2/2_ 0.0378633193340.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/1/1_ 0.03491192464930.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/2/2_ 0.03462458280.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/1/1_ 0.03389153667320.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/1/1_ 0.0328771250.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/10/10_ 0.0428123761610.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-10-30 11:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d184ff9f7eaApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 28-Oct-2024 09:17:33 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 hours 32 minutes 41 seconds Server load: 1.29 1.53 1.57 Total accesses: 28 - Total Traffic: 35 kB - Total Duration: 546 CPU Usage: u.27 s.26 cu0 cs0 - .00266% CPU load .0014 requests/sec - 1 B/second - 1280 B/request - 19.5 ms/request 1 requests currently being processed, 49 idle workers _______________________________W__________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/18/18_ 0.00130022120.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0340/2/2_ 0.0017262813230.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0348/8/8W 0.0000119.50.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-10-28 09:17 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18cea3418dApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 26-Oct-2024 04:20:07 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 32 days 21 hours 18 minutes 17 seconds Server load: 0.56 0.84 1.19 Total accesses: 6761 - Total Traffic: 23.1 MB - Total Duration: 2750822 CPU Usage: u27.77 s49.25 cu0 cs0 - .00271% CPU load .00238 requests/sec - 8 B/second - 3586 B/request - 406.866 ms/request 1 requests currently being processed, 49 idle workers _________W________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/131/131_ 1.673565221910.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cbc03e21c 0-0340/108/108_ 1.674174298470.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_940feba21 0-0340/162/162_ 1.673045545650.00.620.62 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_403090b1c 0-0340/142/142_ 1.674765300050.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a2cc1eb34 0-0340/101/101_ 1.678573559630.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cfc31516d 0-0340/167/167_ 1.672394299850.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c3edc04b5 0-0340/119/119_ 1.671134520720.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ffc15a5d2 0-0340/132/132_ 1.6717238249610.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2247835c6 0-0340/123/123_ 1.67585185460.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ded22c167 0-0349/115/115W 1.67001770112.20.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/140/140_ 1.6615303370970.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_16d0d950e 0-0340/114/114_ 1.6614664339610.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ffe0f1b2f 0-0340/120/120_ 1.6612715399430.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1c236c988 0-0340/107/107_ 1.66140230652470.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_16f627c3a 0-0340/115/115_ 1.6613393351870.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d66e1ee33 0-0340/106/106_ 1.6712055213860.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4617fbf3e 0-0340/101/101_ 1.6711325323260.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_775e01cf7 0-0340/111/111_ 1.6710003266210.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_54b793a8c 0-0340/187/187_ 1.6710665333430.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c604e32d1 0-0340/190/190_ 1.6792931391850.00.730.73 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_68b0f8546 0-0340/148/148_ 1.6778052246960.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e0823e5ff 0-0340/188/188_ 1.6771331500800.00.690.69 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_27186f682 0-0340/118/118_ 1.675963488510.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_eb0a95be6 0-0340/136/136_ 1.676475379980.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_49918846d 0-0340/124/124_ 1.675415333670.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6de73f828 1-0350/117/117_ 1.704444284220.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/140/140_ 1.703314625370.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/160/160_ 1.702735302662800.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/183/183_ 1.7027233545170.00.720.72 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/150/150_ 1.702061901344710.00.530.53 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/114/114_ 1.70142283466310.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/167/167_ 1.691567238504820.00.690.69 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/122/122_ 1.70866577900.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/119/119_ 1.701492216590780.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/115/115_ 1.701431222474260.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/156/156_ 1.701304225650900.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/130/130_ 1.7010987451396700.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.701365232439050.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/118/118_ 1.701035317763940.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/122/122_ 1.7011673667484660.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/138/138_ 1.701236217347000.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/90/90_ 1.70966241682800.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/154/154_ 1.708222261779200.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/180/180_ 1.70892237585730.00.570.57 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/176/176_ 1.706212111703300.00.540.54 127.0.0.1http/1.1ip-10-1-
Found on 2024-10-26 04:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d180ea5cfe7Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 24-Oct-2024 16:36:38 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 31 days 9 hours 34 minutes 48 seconds Server load: 1.51 1.96 1.56 Total accesses: 5053 - Total Traffic: 17.7 MB - Total Duration: 2060153 CPU Usage: u26.18 s46.7 cu0 cs0 - .00269% CPU load .00186 requests/sec - 6 B/second - 3671 B/request - 407.709 ms/request 1 requests currently being processed, 49 idle workers ___________________________________W______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/97/97_ 1.262625365184310.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9f9174791 0-0340/67/67_ 1.2629281320249860.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/120/120_ 1.2623299322448570.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/113/113_ 1.263232759290070.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c169664a6 0-0340/73/73_ 1.264986810139447580.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/136/136_ 1.26219132451208540.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/88/88_ 1.2616456391322040.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/102/102_ 1.261918279221680.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_32596a792 0-0340/91/91_ 1.261372284165520.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8149c1590 0-0340/71/71_ 1.2612250401160840.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/112/112_ 1.26888875345670.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6f9d92e92 0-0340/83/83_ 1.2673815280940.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9b6926ce9 0-0340/88/88_ 1.2566806721263730.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/77/77_ 1.263678407355800.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/81/81_ 1.2679086333340.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9ccf1b8ac 0-0340/70/70_ 1.256357050196490.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fc4b714f2 0-0340/68/68_ 1.25606021270216230.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/70/70_ 1.2656069243233860.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/152/152_ 1.265770954267920.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6c26d22b0 0-0340/158/158_ 1.2653116541367660.00.640.64 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_22a4b1c25 0-0340/118/118_ 1.264684262184580.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/158/158_ 1.26444391301444630.00.610.61 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5cef6582e 0-0340/89/89_ 1.263785449459860.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6c5898f05 0-0340/108/108_ 1.2640914330345310.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/82/82_ 1.2634097295232130.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/80/80_ 1.263080575175930.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_432fef11e 1-0350/109/109_ 1.262474557386570.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_118264d66 1-0350/120/120_ 1.26231971369760.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/146/146_ 1.27136966462710.00.590.59 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/118/118_ 1.262055954130940.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6f9e60ba4 1-0350/74/74_ 1.2617825306346390.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/136/136_ 1.2710418369263060.00.590.59 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/86/86_ 1.261509693271500.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8ba05611f 1-0350/88/88_ 1.2778307529250.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/87/87_ 1.2756671032286680.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0358/110/110W 1.2700565709.50.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/96/96_ 1.2559164521090730.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_56613d7b8 1-0350/55/55_ 1.272176518203090.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4997dd9d6 1-0350/89/89_ 1.25561607184465330.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/81/81_ 1.2562057350303480.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/103/103_ 1.256523345146250.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a606aec52 1-0350/61/61_ 1.2554635317420580.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/115/115_ 1.25481643541512780.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/147/147_ 1.255149552407270.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_11dcb6570 1-0350/140/140_ 1.2639389621531230.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=
Found on 2024-10-24 16:36 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d181fd5c11bApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 22-Oct-2024 03:21:29 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 28 days 20 hours 19 minutes 39 seconds Server load: 1.21 1.55 1.74 Total accesses: 4710 - Total Traffic: 16.6 MB - Total Duration: 1887859 CPU Usage: u24.18 s42.67 cu0 cs0 - .00268% CPU load .00189 requests/sec - 7 B/second - 3704 B/request - 400.819 ms/request 1 requests currently being processed, 49 idle workers _____________________________W____________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/93/93_ 1.198360135176010.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/64/64_ 1.1999124231800.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/117/117_ 1.1945101608429750.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/110/110_ 1.191263558233780.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ef1ff7777 0-0340/69/69_ 1.1953233223241300.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/133/133_ 1.19330111151490.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/80/80_ 1.18947581194251700.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/98/98_ 1.18938923212460.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/87/87_ 1.189354654154740.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/67/67_ 1.18931285148150.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/105/105_ 1.1892172292337890.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/78/78_ 1.1890157431222640.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/83/83_ 1.1982338288243340.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/73/73_ 1.19891930346600.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/65/65_ 1.1984841169317320.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b9b745b5f 0-0340/63/63_ 1.197983372186460.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1907594e9 0-0340/63/63_ 1.1978631791183580.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/67/67_ 1.1974599233214740.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/132/132_ 1.19773193264260.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fcffbd1a7 0-0340/148/148_ 1.1956849791358290.00.580.58 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9d51b5719 0-0340/115/115_ 1.1942420128180870.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3778aa3a2 0-0340/155/155_ 1.19381983431427880.00.600.60 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/84/84_ 1.192966093454500.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_15aaf7e10 0-0340/105/105_ 1.193417096330230.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6cabb9bd7 0-0340/79/79_ 1.19164400213030.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/77/77_ 1.179932387160530.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/106/106_ 1.17721260382260.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_00b5fb4c7 1-0350/100/100_ 1.17153053365170.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_48fad4bc5 1-0350/139/139_ 1.16935395444730.00.560.56 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0358/90/90W 1.1800106569.50.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/69/69_ 1.1694130147336410.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/117/117_ 1.16929695239990.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_009a21095 1-0350/71/71_ 1.16938810137690.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/83/83_ 1.169045270474750.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0350/76/76_ 1.168921167178610.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/93/93_ 1.1684830850466970.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/93/93_ 1.16773272841077130.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/51/51_ 1.168748651185110.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_692446e1c 1-0350/86/86_ 1.167460568317620.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9eeb2a57b 1-0350/77/77_ 1.1679822358281260.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/86/86_ 1.16823253123030.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b4f460b76 1-0350/58/58_ 1.17596773198407510.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/112/112_ 1.174592071499410.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/135/135_ 1.1756498121384750.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/137/137_ 1.17329723521523940.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/99/99_ 1.1740975421135780.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/81/81_ 1.17
Found on 2024-10-22 03:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d188523542aApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 20-Oct-2024 03:39:43 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 26 days 20 hours 37 minutes 53 seconds Server load: 0.52 0.81 0.87 Total accesses: 4492 - Total Traffic: 16.0 MB - Total Duration: 1788207 CPU Usage: u22.51 s39.88 cu0 cs0 - .00269% CPU load .00194 requests/sec - 7 B/second - 3734 B/request - 398.087 ms/request 1 requests currently being processed, 49 idle workers _______________________________________________W__.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/90/90_ 1.1442282293141660.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/52/52_ 1.144362786205890.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f5a2f2a6c 0-0340/114/114_ 1.1441125240390700.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/107/107_ 1.1346132272223140.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/67/67_ 1.141060965229860.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ce07bd9c 0-0340/130/130_ 1.143977664131930.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_99d329a22 0-0340/78/78_ 1.143861890219980.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d38b167e0 0-0340/96/96_ 1.1437268289209440.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/85/85_ 1.14356795145320.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_115ff8269 0-0340/64/64_ 1.143359876145160.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d39a94d91 0-0340/103/103_ 1.1432265307325630.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/76/76_ 1.14306625212620.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_daf220048 0-0340/80/80_ 1.1424750186235980.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d0e3187e7 0-0340/69/69_ 1.142858953346160.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_50b6d0365 0-0340/63/63_ 1.1427255292307320.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/61/61_ 1.142063487178320.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f4791e633 0-0340/61/61_ 1.1415624104161630.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_22e3994e7 0-0340/65/65_ 1.14122004204850.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/130/130_ 1.1413002116262750.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/146/146_ 1.141157841354440.00.570.57 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/109/109_ 1.149160189176330.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/137/137_ 1.146660561389320.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_870d5598f 0-0340/82/82_ 1.14593114447750.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d89b6be67 0-0340/91/91_ 1.144972343221090.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/73/73_ 1.134863661177810.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a5cfbfb20 1-0350/74/74_ 1.11457036144700.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7112ce749 1-0350/103/103_ 1.1141383156373320.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/96/96_ 1.114069075250550.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1761e1239 1-0350/137/137_ 1.1134769220443290.00.560.56 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1421f62b6 1-0350/80/80_ 1.11393709994390.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/67/67_ 1.1138186479332390.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/115/115_ 1.1133168272231790.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/67/67_ 1.1136114298129880.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/64/64_ 1.11310933231473190.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/73/73_ 1.112976099174370.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cc1485f5e 1-0350/91/91_ 1.1125645106443820.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7d5ddf647 1-0350/91/91_ 1.111311645361065050.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/49/49_ 1.1128159288181900.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.12122194309660.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/75/75_ 1.1118129348268130.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.1123140361121650.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/56/56_ 1.121166391341880.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/101/101_ 1.1394513311488990.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/133/133_ 1.13115585375610.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/134/134_ 1.1330974391516730.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOSer
Found on 2024-10-20 03:39 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18b51cd7c0Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 18-Oct-2024 01:48:05 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 24 days 18 hours 46 minutes 14 seconds Server load: 2.78 1.99 2.02 Total accesses: 4287 - Total Traffic: 15.4 MB - Total Duration: 1699072 CPU Usage: u20.78 s36.9 cu0 cs0 - .00269% CPU load .002 requests/sec - 7 B/second - 3760 B/request - 396.331 ms/request 1 requests currently being processed, 49 idle workers ___________________________________W______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/88/88_ 1.08491430134360.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0340/50/50_ 1.0872257153203210.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/112/112_ 1.0845191106384280.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3dcc3440b 0-0340/105/105_ 1.0899280439217570.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/3pa/link-account.php?StateId=_8da 0-0340/56/56_ 1.0514667378193280.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6a1e05234 0-0340/111/111_ 1.0841876393129190.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/75/75_ 1.0838373135216050.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/94/94_ 1.083304977202160.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f4fa1f136 0-0340/83/83_ 1.08326953135410.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a721bbe89 0-0340/62/62_ 1.082749597128910.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75b7479c4 0-0340/101/101_ 1.081713992317700.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fa8032316 0-0340/74/74_ 1.091128366212410.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9b20bf134 0-0340/77/77_ 1.0519190076230920.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0a7c94ff6 0-0340/67/67_ 1.09528864340380.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e7b712e79 0-0340/61/61_ 1.092347301299850.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/58/58_ 1.05185779162169630.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/50/50_ 1.0517554110117210.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/59/59_ 1.0515168278195540.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_05ec0998a 0-0340/123/123_ 1.051657111257280.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/139/139_ 1.0512225701342830.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0340/105/105_ 1.05112513399157320.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/134/134_ 1.0699447741375650.00.540.54 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/79/79_ 1.089935111443790.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/87/87_ 1.07993880213090.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/71/71_ 1.08993088176460.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/72/72_ 1.0789155457106750.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/101/101_ 1.0748646954363330.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/94/94_ 1.0744501263242380.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/135/135_ 1.0730201383437140.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/78/78_ 1.07389576891160.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b35fbc7fc 1-0350/65/65_ 1.0736002345315620.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/113/113_ 1.0724796355218970.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/65/65_ 1.07328180121700.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 1-0350/62/62_ 1.0714220397403440.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/71/71_ 1.078326384165790.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0358/79/79W 1.0800435539.50.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/87/87_ 1.05175052431972740.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/47/47_ 1.072755528166470.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/76/76_ 1.06152885280228750.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/72/72_ 1.05175555420249090.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/81/81_ 1.05187057245101200.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/53/53_ 1.06149177321338840.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/96/96_ 1.0611924911460030.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/122/122_ 1.061441616303369630.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/131/131_ 1.069939971493490.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/94/94_ 1.06105504198116400.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0<
Found on 2024-10-18 01:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18fe8909e3Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 16-Oct-2024 03:46:06 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 22 days 20 hours 44 minutes 16 seconds Server load: 2.66 2.71 2.94 Total accesses: 4155 - Total Traffic: 15.0 MB - Total Duration: 1657318 CPU Usage: u19 s33.82 cu0 cs0 - .00267% CPU load .0021 requests/sec - 7 B/second - 3777 B/request - 398.873 ms/request 1 requests currently being processed, 49 idle workers __________________W_______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/86/86_ 1.03799878134350.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/49/49_ 1.02800277200150.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/111/111_ 1.037998598382150.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/98/98_ 1.0280061217207310.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/55/55_ 0.91803867191710.00.180.18 127.0.0.1http/1.1 0-0340/110/110_ 1.03799307121310.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/74/74_ 1.03721656213330.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/93/93_ 1.035997969200610.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_78aae9f80 0-0340/81/81_ 1.0354776118129400.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_49f2c5935 0-0340/61/61_ 1.034975869126960.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_716ad5ad9 0-0340/100/100_ 1.034474881315860.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7eaf9b0f5 0-0340/73/73_ 1.033973793211070.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b086781ee 0-0340/77/77_ 1.052618276230920.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0a7c94ff6 0-0340/66/66_ 1.0334547224339090.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/60/60_ 1.0329623809293820.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/58/58_ 1.0520060162169630.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/50/50_ 1.05982310117210.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/58/58_ 1.008043953193970.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0348/113/113W 1.0500257229.50.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/138/138_ 1.0080277461342820.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_d1 0-0340/104/104_ 1.00802585149340.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn.php?StateId=_f28de39 0-0340/121/121_ 1.018018671365160.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/72/72_ 1.01801138435190.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/71/71_ 1.01801397185410.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/67/67_ 1.01800910138640.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/71/71_ 1.0480061997600.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/99/99_ 1.04800189344240.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/93/93_ 1.05799688237100.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/134/134_ 1.0552264407429470.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/77/77_ 1.0579906789790.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/64/64_ 1.0562624343308710.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/112/112_ 1.0547253328211870.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/64/64_ 1.0557385369121700.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/61/61_ 1.05422421384395490.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/70/70_ 1.0537225393158100.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/71/71_ 1.0529289117432540.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/87/87_ 1.059334431972740.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/46/46_ 1.053389746155900.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fdc7c3c10 1-0350/75/75_ 1.01804411223140.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0350/72/72_ 1.059837420249090.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/81/81_ 1.0521338245101200.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/52/52_ 1.01804330332420.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/78/78_ 1.0380265501456310.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/121/121_ 1.038029349243560.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/130/130_ 1.04801332971493340.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/93/93_ 1.038019725112440.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cl
Found on 2024-10-16 03:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18a40e3e10Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 14-Oct-2024 01:53:29 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 20 days 18 hours 51 minutes 38 seconds Server load: 0.68 0.76 0.84 Total accesses: 3281 - Total Traffic: 11.7 MB - Total Duration: 1320313 CPU Usage: u17 s30.41 cu0 cs0 - .00264% CPU load .00183 requests/sec - 6 B/second - 3732 B/request - 402.412 ms/request 1 requests currently being processed, 49 idle workers W_________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0348/59/59W 0.7800123969.50.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/45/45_ 0.783079438190490.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/57/57_ 0.7839759206168770.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/71/71_ 0.7747612262173920.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/49/49_ 0.7711661054186410.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0e9c448ee 0-0340/97/97_ 0.7613958318486290.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/54/54_ 0.76138479306137430.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/74/74_ 0.7613652767108150.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4bffbf9cc 0-0340/69/69_ 0.761354675112560.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_af045330c 0-0340/53/53_ 0.76133553780118770.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/68/68_ 0.7613165670135980.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_766e0e43c 0-0340/63/63_ 0.76129756280162030.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/52/52_ 0.771251449153470.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/52/52_ 0.7712786556147920.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5c577ba5c 0-0340/43/43_ 0.77125976247245520.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/36/36_ 0.7712409690154910.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8022df35e 0-0340/35/35_ 0.77122215308109660.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/34/34_ 0.77120342112175790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_19e5684aa 0-0340/99/99_ 0.77118471320249740.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/102/102_ 0.771139311041262080.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d87f0eb76 0-0340/77/77_ 0.7710310322562030.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/101/101_ 0.77907671961353600.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/64/64_ 0.77735716149940.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/58/58_ 0.7785095512167530.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/56/56_ 0.7767236788220.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/63/63_ 0.842932225780190.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/75/75_ 0.8214042154313310.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_439876d67 1-0350/72/72_ 0.821393285191670.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_927af61ff 1-0350/106/106_ 0.82134607356360990.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/61/61_ 0.8213739127381070.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/47/47_ 0.821355787147550.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/53/53_ 0.821326978057260.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_583806258 1-0350/56/56_ 0.82130797310110920.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/55/55_ 0.82128902143276870.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75fe4cab1 1-0350/59/59_ 0.82127017269138230.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/64/64_ 0.821251280288630.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/58/58_ 0.82119508303937330.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/40/40_ 0.821252099253820.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/61/61_ 0.8211764256122800.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7cdd4e63d 1-0350/57/57_ 0.8212138262160410.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_51fa254cb 1-0350/70/70_ 0.8212325535390490.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/41/41_ 0.82115782319132320.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/62/62_ 0.839643611434830.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/103/103_ 0.821120877140218520.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/112/112_ 0.837700401334760.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0350/77/77_ 0.838948036883120.00.310.31 127.0.0.1http/1.1ip-10-1-8
Found on 2024-10-14 01:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1872d4e890Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 12-Oct-2024 23:06:05 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 19 days 16 hours 4 minutes 14 seconds Server load: 1.34 1.38 1.20 Total accesses: 3246 - Total Traffic: 11.6 MB - Total Duration: 1314682 CPU Usage: u16.11 s28.83 cu0 cs0 - .00264% CPU load .00191 requests/sec - 7 B/second - 3748 B/request - 405.016 ms/request 1 requests currently being processed, 49 idle workers __________________________________________W_______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/51/51_ 0.7644838258123910.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/44/44_ 0.7645931290181720.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/56/56_ 0.764784050164650.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0eb865f57 0-0340/70/70_ 0.7648666310168670.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/49/49_ 0.772016654186410.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0e9c448ee 0-0340/97/97_ 0.764313918486290.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/54/54_ 0.7642035306137430.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/74/74_ 0.764008367108150.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4bffbf9cc 0-0340/69/69_ 0.76390235112560.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_af045330c 0-0340/53/53_ 0.7637109780118770.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/68/68_ 0.763521270135980.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_766e0e43c 0-0340/63/63_ 0.7633312280162030.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/52/52_ 0.77287009153470.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/52/52_ 0.773142156147920.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5c577ba5c 0-0340/43/43_ 0.7729532247245520.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/36/36_ 0.772765290154910.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8022df35e 0-0340/35/35_ 0.7725771308109660.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/34/34_ 0.7723898112175790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_19e5684aa 0-0340/99/99_ 0.7722027320249740.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/102/102_ 0.77174871041262080.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d87f0eb76 0-0340/77/77_ 0.77665922562030.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/100/100_ 0.76550423081349670.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/62/62_ 0.7651841268148550.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/57/57_ 0.765344191157280.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_051990ec4 0-0340/54/54_ 0.76502426086860.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_65028355c 1-0350/62/62_ 0.82467908375040.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3ede017f5 1-0350/75/75_ 0.824397754313310.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_439876d67 1-0350/72/72_ 0.82428845191670.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_927af61ff 1-0350/106/106_ 0.8238163356360990.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/61/61_ 0.824094727381070.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/47/47_ 0.82391347147550.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/53/53_ 0.82362538057260.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_583806258 1-0350/56/56_ 0.8234353310110920.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/55/55_ 0.8232457143276870.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75fe4cab1 1-0350/59/59_ 0.8230573269138230.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/64/64_ 0.82286840288630.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/58/58_ 0.8223064303937330.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/40/40_ 0.82287659253820.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/61/61_ 0.822119856122800.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7cdd4e63d 1-0350/57/57_ 0.822493862160410.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_51fa254cb 1-0350/70/70_ 0.822681135390490.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/41/41_ 0.8219338319132320.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0358/52/52W 0.83001434789.50.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/103/103_ 0.82156437140218520.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/111/111_ 0.80527753151334750.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0
Found on 2024-10-12 23:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1812d1fb0eApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 10-Oct-2024 16:28:02 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 17 days 9 hours 26 minutes 11 seconds Server load: 0.75 0.97 1.07 Total accesses: 2931 - Total Traffic: 10.5 MB - Total Duration: 1175798 CPU Usage: u14.22 s25.47 cu0 cs0 - .00264% CPU load .00195 requests/sec - 7 B/second - 3769 B/request - 401.159 ms/request 1 requests currently being processed, 49 idle workers ____W_____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/45/45_ 0.6555552153117700.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/36/36_ 0.655579243155640.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/46/46_ 0.645587084139190.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/57/57_ 0.645589677153570.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/verify_login.php HT 0-0348/36/36W 0.6800163569.50.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/94/94_ 0.665494214977920.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/51/51_ 0.66501588128750.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/71/71_ 0.6643335197020.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 0-0340/66/66_ 0.66402658109470.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/50/50_ 0.6740234894410.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/65/65_ 0.6740205203102440.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1 0-0340/60/60_ 0.673897358149530.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/49/49_ 0.6738479144145310.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/47/47_ 0.67389659139830.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/40/40_ 0.6738545198163770.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/33/33_ 0.67384719150120.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/32/32_ 0.6736855793190.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/31/31_ 0.6710637259171410.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/96/96_ 0.6763412233880.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e81bf2691 0-0340/78/78_ 0.6456187411228500.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/64/64_ 0.6456155848330.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/94/94_ 0.6456044101329700.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/42/42_ 0.645600345105910.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/52/52_ 0.645592214148940.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/51/51_ 0.64559034877980.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/56/56_ 0.7055792759450.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/59/59_ 0.705495910576170.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/65/65_ 0.70549421182510.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/102/102_ 0.73402490240340.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/58/58_ 0.704384910568440.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/43/43_ 0.72402587143090.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/50/50_ 0.7340211849500.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/53/53_ 0.733897743101840.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/52/52_ 0.733896554254090.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/56/56_ 0.7338927106127130.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_694b4268ff24 1-0350/59/59_ 0.743846136288200.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/proofup.php?StateId=_f37ea304 1-0350/55/55_ 0.7577858925270.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/37/37_ 0.7338545844800.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/58/58_ 0.753370114180.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/54/54_ 0.75252921151490.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/67/67_ 0.743844720771960.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_f37ea304ebcf 1-0350/37/37_ 0.6956209857640.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/33/33_ 0.6956111471399060.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/99/99_ 0.6956111867080.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/107/107_ 0.6955987600541326240.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1 1-0350/70/70_ 0.6956003860840.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1
Found on 2024-10-10 16:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d181a8eb796Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 08-Oct-2024 22:04:36 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 15 days 15 hours 2 minutes 45 seconds Server load: 0.75 1.05 1.13 Total accesses: 1986 - Total Traffic: 6.9 MB - Total Duration: 439143 CPU Usage: u12.49 s22.72 cu0 cs0 - .00261% CPU load .00147 requests/sec - 5 B/second - 3636 B/request - 221.119 ms/request 1 requests currently being processed, 49 idle workers ________W_________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/41/41_ 0.4435723223111740.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/12/12_ 0.44488664282340.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/25/25_ 0.44538777124930.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/43/43_ 0.44657314865290.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/19/19_ 0.4268497247149620.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 0-0340/78/78_ 0.44277047452600.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/32/32_ 0.441467011229140.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/49/49_ 0.441075515244590.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0348/39/39W 0.440032389.50.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/43/43_ 0.39198228187520.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/51/51_ 0.39196918073720.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/37/37_ 0.391685617107210.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/35/35_ 0.4016214632846890.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/42/42_ 0.401418837135490.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/22/22_ 0.40122555678810.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/26/26_ 0.4095240086140.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/22/22_ 0.40917236574220.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/24/24_ 0.40739007163460.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/72/72_ 0.41686662156700.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT 0-0340/44/44_ 0.4268626816542250.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wfresh=0&wauth=http%3a%2f%2fsc 0-0340/52/52_ 0.43680205134430.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/57/57_ 0.44679921190180.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1 0-0340/26/26_ 0.44679581118780.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/34/34_ 0.44668291030010.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/39/39_ 0.4466356821950.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/33/33_ 0.4942681121890.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/42/42_ 0.493126527821270.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/60/60_ 0.492354136271390.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/69/69_ 0.491283182057300.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/42/42_ 0.4989208559390.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/31/31_ 0.43187503445110.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/28/28_ 0.4416665530734650.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/32/32_ 0.44150499746410.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/26/26_ 0.441397584227620.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/32/32_ 0.44122456447430.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/31/31_ 0.4475746431109480.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.447267449322160.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/22/22_ 0.44942124328750.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d7d3a8c24d679 1-0350/19/19_ 0.446866618232380.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/20/20_ 0.44686663848490.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/32/32_ 0.4468666037350.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/script.js HTTP/1.1 1-0350/18/18_ 0.456851336923290.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 1-0350/19/19_ 0.456840015242090.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 1-0350/89/89_ 0.4568020727660.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/92/92_ 0.46679585596300.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/57/57_ 0.466682916645960.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/49/49_ 0.48663564651110.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login
Found on 2024-10-08 22:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d185e45563dApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 06-Oct-2024 15:00:38 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 days 7 hours 58 minutes 47 seconds Server load: 0.76 0.55 0.56 Total accesses: 1773 - Total Traffic: 6.1 MB - Total Duration: 335928 CPU Usage: u10.61 s19.29 cu0 cs0 - .0026% CPU load .00154 requests/sec - 5 B/second - 3603 B/request - 189.469 ms/request 1 requests currently being processed, 49 idle workers _________W________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/40/40_ 0.38714717107270.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/9/9_ 0.38814893678260.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/23/23_ 0.3882809122122970.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/42/42_ 0.38113265464330.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/18/18_ 0.36136708251144670.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/77/77_ 0.385030728951110.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/31/31_ 0.384115726126890.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3vr0Dc%2BQo 0-0340/48/48_ 0.3828478441530.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/31/31_ 0.3818629228840.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0348/33/33W 0.380087479.50.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/48/48_ 0.35196571073420.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/35/35_ 0.351888337101760.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/34/34_ 0.35174767040320.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/40/40_ 0.351607814133830.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/17/17_ 0.3515565511648730.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/25/25_ 0.36155301486140.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/21/21_ 0.361516384872920.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/21/21_ 0.361481687161330.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/67/67_ 0.361470761143200.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/22/22_ 0.361431516543290.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/41/41_ 0.36131859730040.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/54/54_ 0.36130333080430.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/21/21_ 0.3712302816918460.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/32/32_ 0.38113626329790.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=s3.cloudworkengine.net 0-0340/33/33_ 0.38113572521690.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/15/15_ 0.424829119120360.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/41/41_ 0.4238269715700.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/59/59_ 0.4221358164140.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/68/68_ 0.431838040890.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/40/40_ 0.352072428455630.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/26/26_ 0.3518884110835890.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/27/27_ 0.35188760928500.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/30/30_ 0.35162221638450.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/22/22_ 0.351596746135960.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/27/27_ 0.36155320442230.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/30/30_ 0.371511716100850.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/29/29_ 0.371481518321160.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/18/18_ 0.37152828418250.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/13/13_ 0.37144076428510.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/17/17_ 0.37142236647680.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/31/31_ 0.37131949737340.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/17/17_ 0.37131843715910.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/18/18_ 0.37124196639050.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/85/85_ 0.39113606327450.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9YxiV 1-0350/82/82_ 0.41113587492360.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/44/44_ 0.42113285428730.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/40/40_ 0.4292360447480.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/36/36
Found on 2024-10-06 15:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18a370842dApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 04-Oct-2024 14:27:40 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 days 7 hours 25 minutes 50 seconds Server load: 0.53 0.87 0.91 Total accesses: 1499 - Total Traffic: 5.4 MB - Total Duration: 319854 CPU Usage: u9.27 s16.09 cu0 cs0 - .0026% CPU load .00153 requests/sec - 5 B/second - 3760 B/request - 213.378 ms/request 1 requests currently being processed, 49 idle workers ____________W_____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/38/38_ 0.34806275105410.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0340/8/8_ 0.34113268777540.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/22/22_ 0.341132837120520.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/38/38_ 0.3311333634464010.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=pVPLbtswEPwVgXe9ozokb 0-0340/17/17_ 0.32115393170139640.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTdrZcVO 0-0340/76/76_ 0.345151411345310.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/29/29_ 0.344833143219260.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/43/43_ 0.3538100133410.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/30/30_ 0.3533643026980.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/25/25_ 0.353255910086300.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/48/48_ 0.3521794073420.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/35/35_ 0.35140567101760.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0348/24/24W 0.350040279.50.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/35/35_ 0.3011550535124410.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/16/16_ 0.30115497946400.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/21/21_ 0.301154664485790.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/20/20_ 0.30115461871940.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/19/19_ 0.311154427159350.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/49/49_ 0.3211541644141980.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/21/21_ 0.321154054941980.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/39/39_ 0.33115333829800.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/48/48_ 0.33115315878760.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/20/20_ 0.33115232715070.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/19/19_ 0.33115217828770.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/29/29_ 0.33113758820710.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/14/14_ 0.354948019316520.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/39/39_ 0.35440915714170.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/41/41_ 0.3533863062390.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/65/65_ 0.353362213340600.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=pZNPbxoxEMW%2Fysr3%2F 1-0350/40/40_ 0.35324658455630.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/26/26_ 0.351406410835890.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/27/27_ 0.3513983928500.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/28/28_ 0.31115527034160.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/20/20_ 0.311155097134520.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/23/23_ 0.31115477836910.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/28/28_ 0.3211545547100640.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/27/27_ 0.33115429159320980.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3fr4jynju3W 1-0350/14/14_ 0.3211545588390.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/9/9_ 0.33115416721750.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/15/15_ 0.33115405846240.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/29/29_ 0.3311536011135450.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_1540f52424d0 1-0350/15/15_ 0.331153283615750.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/16/16_ 0.34115232134000.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/32/32_ 0.341152274915860.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/29/29_ 0.341137679688360.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_80 1-0350/39/39_ 0.34113730019790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/35/35_ 0.351132793439230.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-south
Found on 2024-10-04 14:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d182a57303dApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 02-Oct-2024 18:04:58 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 11 hours 3 minutes 8 seconds Server load: 0.65 1.01 0.98 Total accesses: 1031 - Total Traffic: 3.5 MB - Total Duration: 209264 CPU Usage: u7.69 s13.47 cu0 cs0 - .00259% CPU load .00126 requests/sec - 4 B/second - 3595 B/request - 202.972 ms/request 1 requests currently being processed, 49 idle workers _______W__________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/13/13_ 0.214276631586360.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/6/6_ 0.216136927419050.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/17/17_ 0.21672827120120.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/36/36_ 0.208525152756400.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/10/10_ 0.2010754417348130.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/61/61_ 0.2214683036890.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /test;/actuator;/env HTTP/1.1 0-0340/24/24_ 0.221047309650.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0348/24/24W 0.220018059.50.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/22/22_ 0.161412021129980.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/21/21_ 0.1714058816254100.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/36/36_ 0.1714057415162530.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/20/20_ 0.17140562978570.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/12/12_ 0.18140541865450.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/23/23_ 0.1814052557116230.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/11/11_ 0.18140517824330.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/14/14_ 0.181404637839010.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/18/18_ 0.19134357171610.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/12/12_ 0.19134357749950.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/24/24_ 0.201245877123280.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/10/10_ 0.2011782923924920.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swFLzvr0Dc%2BSZ 0-0340/18/18_ 0.20104384023900.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /debug/actuator HTTP/1.1 0-0340/44/44_ 0.2099182067270.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /internal/actuator HTTP/1.1 0-0340/4/4_ 0.209057318012880.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.208941810119120.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/18/18_ 0.208626208800.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /v1/manage HTTP/1.1 1-0350/12/12_ 0.261049111312640.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/37/37_ 0.262878712270.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/12/12_ 0.2014776938737340.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/49/49_ 0.22141149127400.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0350/25/25_ 0.22140588918590.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/20/20_ 0.22140574930350.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/12/12_ 0.22140548021600.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/14/14_ 0.22140541810780.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/18/18_ 0.22140508340134200.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C88xGSb 1-0350/14/14_ 0.22140473834480.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.22140463843930.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/23/23_ 0.2213361272317250.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0350/11/11_ 0.221343572625500.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.221178361419730.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/12/12_ 0.2211532922345110.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/19/19_ 0.2210467809800.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /debug/actuator HTTP/1.1 1-0350/11/11_ 0.2499525012320.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /internal/actuator HTTP/1.1 1-0350/6/6_ 0.249384722913080.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/30/30_ 0.248967917814850.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/25/25_ 0.24869157416010.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/34/34_ 0.2485687015500.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /v1/manage HTTP/1.1 1-0350/21/21_ 0.2467274028410.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/20/20_ 0.206722819890.00.040.04 127.0.0.1</
Found on 2024-10-02 18:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d184ad969f2Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 30-Sep-2024 11:30:35 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 4 hours 28 minutes 44 seconds Server load: 5.45 2.18 1.56 Total accesses: 679 - Total Traffic: 2.7 MB - Total Duration: 164489 CPU Usage: u5.75 s10.22 cu0 cs0 - .00257% CPU load .00109 requests/sec - 4 B/second - 4115 B/request - 242.252 ms/request 1 requests currently being processed, 49 idle workers _______________________________________________W__.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/10/10_ 0.1124705514776860.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/4/4_ 0.1127556071710.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/11/11_ 0.1524309148119770.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/35/35_ 0.152436711245850.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_77a4dc988366 0-0340/9/9_ 0.1429626444660.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/3/3_ 0.11235785128332540.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/16/16_ 0.11229654417310.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/8/8_ 0.112252435914970.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/21/21_ 0.112083152677720.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.11173288015570.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 0-0340/33/33_ 0.12167888141400.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/17/17_ 0.1216135568460.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/6/6_ 0.1215481201610.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0340/22/22_ 0.121492961115070.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/10/10_ 0.1212410535224160.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/6/6_ 0.131098141632330.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d45257740 0-0340/11/11_ 0.1392880012010.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /admin/actuator; HTTP/1.1 0-0340/9/9_ 0.1374999449760.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/21/21_ 0.13682934121630.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/9/9_ 0.133770658620130.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/14/14_ 0.14246396223890.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/40/40_ 0.1424613867260.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.1424515849280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/6/6_ 0.15244851217090.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.15244611428770.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1 1-0350/8/8_ 0.152315271455460.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/16/16_ 0.15228161642120.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/11/11_ 0.1521050639329600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.15190333418970.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/24/24_ 0.16172963018410.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 1-0350/19/19_ 0.16161501830170.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/8/8_ 0.16161052011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0350/13/13_ 0.16154735010610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0350/11/11_ 0.16133705048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.env HTTP/1.1 1-0350/11/11_ 0.161098132332650.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/16/16_ 0.1710367022043760.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/22/22_ 0.17743724315790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/6/6_ 0.17925770170.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /admin/actuator; HTTP/1.1 1-0350/5/5_ 0.17627422166910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/11/11_ 0.17306151440630.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/15/15_ 0.182464179790.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/7/7_ 0.1824627912310.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/5/5_ 0.182460308480.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/29/29_ 0.18244955111290.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/24/24_ 0.1824469814530.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/19/19_ 0.1924401915480.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/7/7_ 0.1924330817180.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0358/10/10W 0.19009839.50.020.02
Found on 2024-09-30 11:30 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1800abda4fApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 28-Sep-2024 12:52:18 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 5 hours 50 minutes 28 seconds Server load: 0.58 0.92 1.06 Total accesses: 513 - Total Traffic: 2.1 MB - Total Duration: 129852 CPU Usage: u4.19 s7.4 cu0 cs0 - .00256% CPU load .00113 requests/sec - 4 B/second - 4335 B/request - 253.123 ms/request 1 requests currently being processed, 49 idle workers __________W_______________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/10/10_ 0.117915914776860.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/4/4_ 0.1110766471710.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/10/10_ 0.11129010405116790.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/24/24_ 0.11134681116310.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0340/4/4_ 0.09195834494930.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/3/3_ 0.1167889128332540.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/16/16_ 0.1161758417310.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/8/8_ 0.11573465914970.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/21/21_ 0.11404182677720.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.115392015570.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 0-0348/23/23W 0.120041339.50.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/15/15_ 0.0819775018250.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/5/5_ 0.0819775081600.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/4/4_ 0.081976551110750.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/9/9_ 0.08197155117110.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/2/2_ 0.08197155015280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/7/7_ 0.09197147012000.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/4/4_ 0.0919648571220.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/16/16_ 0.091964431108210.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0340/8/8_ 0.0919583408410.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/8/8_ 0.09195774021220.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/31/31_ 0.0917727222839190.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.091601722517590.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/3/3_ 0.091589173958830.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.091548191585920.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/8/8_ 0.15636311455460.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/16/16_ 0.1560264642120.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/11/11_ 0.154261039329600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.1522437418970.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/24/24_ 0.165067018410.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 1-0350/17/17_ 0.08197750127630.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/7/7_ 0.09197742011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/12/12_ 0.10197655710610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/10/10_ 0.10197647048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/4/4_ 0.1119715514830.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0350/15/15_ 0.11197155739360.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.111964427309810.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/2/2_ 0.111971470160.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0350/4/4_ 0.111964421192580.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.12195834013080.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/4/4_ 0.1219583482360.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/4/4_ 0.121957740240.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/2/2_ 0.121653552364910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/19/19_ 0.1215997012980.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/19/19_ 0.1315771815840.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/10/10_ 0.1414228908600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/script.js HTTP/1.1 1-0350/6/6_ 0.1513467905560.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /ads.txt HTTP/1.1 1-0350/2/2_ 0.151096501392810.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.c
Found on 2024-09-28 12:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d187b96afe1Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 26-Sep-2024 16:25:58 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 9 hours 24 minutes 8 seconds Server load: 0.72 0.61 0.64 Total accesses: 413 - Total Traffic: 1.8 MB - Total Duration: 118019 CPU Usage: u2.68 s4.77 cu0 cs0 - .00254% CPU load .00141 requests/sec - 6 B/second - 4567 B/request - 285.76 ms/request 1 requests currently being processed, 49 idle workers ___________________________________________W______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/9/9_ 0.0743783073900.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/2/2_ 0.06438098360.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/9/9_ 0.06438168108690.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/4/4_ 0.055591802610.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/4/4_ 0.0935854494930.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/2/2_ 0.074235516870.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/15/15_ 0.074172886480.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/6/6_ 0.0741588110320.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/20/20_ 0.0741588102380.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.0738002115560.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/15/15_ 0.0837993039410.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/15/15_ 0.083777018250.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/5/5_ 0.083777081600.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/4/4_ 0.08376751110750.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/9/9_ 0.0837175117110.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/2/2_ 0.0837175015280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/7/7_ 0.0937167012000.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/4/4_ 0.093650571220.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/16/16_ 0.09364631108210.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0340/8/8_ 0.093585408410.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/8/8_ 0.0935794021220.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/31/31_ 0.091729222839190.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.091922517590.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.0411272646920.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST / HTTP/1.1 0-0340/1/1_ 0.041002601372750.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/7/7_ 0.074235312550.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 1-0350/15/15_ 0.01416827820.00.100.10 127.0.0.1http/1.1 1-0350/10/10_ 0.0741578021730.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/25/25_ 0.073800219610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/20/20_ 0.0838002718400.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.0837770127630.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/7/7_ 0.0937762011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/12/12_ 0.1037675710610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/10/10_ 0.1037667048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/4/4_ 0.113717514830.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0350/15/15_ 0.1137175739360.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.11364627309810.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/2/2_ 0.11371670160.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0350/4/4_ 0.11364621192580.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.1235854013080.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/4/4_ 0.123585482360.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/4/4_ 0.12357940240.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/2/2_ 0.1253752364910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0358/9/9W 0.12002939.50.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/1/1_ 0.061036461743480.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/1/1_ 0.0684177000.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 1-0350/1/1_ 0.06554292675350.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/1/1_ 0.0643821120.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/chr
Found on 2024-09-26 16:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18ac8b928bApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 24-Sep-2024 21:53:07 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 14 hours 51 minutes 17 seconds Server load: 0.74 0.85 0.87 Total accesses: 52 - Total Traffic: 202 kB - Total Duration: 2982 CPU Usage: u1.28 s2.12 cu0 cs0 - .00243% CPU load .000372 requests/sec - 1 B/second - 3977 B/request - 57.3462 ms/request 1 requests currently being processed, 49 idle workers ____________________________W_____________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/1/1_ 0.001257053426850.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/5/5_ 0.001154390260.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0340/1/1_ 0.00952702374740.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/18/18_ 0.001046412160.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/3/3_ 0.00115451102450.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/15/15_ 0.011154167820.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/1/1_ 0.017505754310860.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0358/8/8W 0.01001649.50.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-09-24 21:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18fb31f46eApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 22-Sep-2024 09:46:12 UTC Restart Time: Thursday, 19-Sep-2024 02:39:16 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 7 hours 6 minutes 56 seconds Server load: 0.70 0.69 0.75 Total accesses: 546 - Total Traffic: 2.0 MB - Total Duration: 120447 CPU Usage: u2.75 s4.86 cu0 cs0 - .00267% CPU load .00192 requests/sec - 7 B/second - 3889 B/request - 220.599 ms/request 1 requests currently being processed, 49 idle workers _________W________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/9/9_ 0.13147616014640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /wp-login.php HTTP/1.1 0-0350/18/18_ 0.1313622816684860.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/34/34_ 0.13129992116950.00.100.10 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0350/11/11_ 0.1398616415930.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/16/16_ 0.1481872335130.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/7/7_ 0.144764762323640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/14/14_ 0.143608119714460.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/13/13_ 0.1430655385450.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/4/4_ 0.14226291695420.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0358/10/10W 0.14007759.50.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /server-status HTTP/1.1 0-0350/4/4_ 0.101912755180.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/60/60_ 0.101912295136300.00.190.19 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.101912565210.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/12/12_ 0.101911334854400.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.1019113356370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.1119101953930.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/6/6_ 0.11190997468980.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.1119094464860.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/1/1_ 0.061908886130.00.000.00 127.0.0.1http/1.1 0-0350/15/15_ 0.1118595968030.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/9/9_ 0.111789212467380.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/15/15_ 0.1116595617147760.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/2/2_ 0.111697752254630.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/12/12_ 0.121627458132710.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e5aa738421db9 0-0350/7/7_ 0.13162718345300.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65131ed38c045 1-0360/11/11_ 0.12162706334900.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14a1c3474c7b8 1-0360/16/16_ 0.13141652341116870.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9bQVJ 1-0360/10/10_ 0.13133852992480.00.100.10 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/16/16_ 0.1311784339027270.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/9/9_ 0.138880220020900.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET / HTTP/1.1 1-0360/26/26_ 0.133881317451970.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0360/4/4_ 0.1359613016540.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /wp-login.php HTTP/1.1 1-0360/10/10_ 0.133144341917570.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/9/9_ 0.1328272311700.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0360/4/4_ 0.13940016338410.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0360/12/12_ 0.081912564344630.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/6/6_ 0.081912759710160.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/8/8_ 0.0919122511731440.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_13b5d5cb290b 1-0360/4/4_ 0.0919116650511020.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C88xHyQ 1-0360/2/2_ 0.0919114464850.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.09191019513730.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/3/3_ 0.09190998644140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/19/19_ 0.10190941769520.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/14/14_ 0.10190935024000.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/15/15_ 0.10189517639420.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/8/8_ 0.11185953019680.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/19/19_ 0.1117040912200.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-036<
Found on 2024-09-22 09:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18869712e8Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 20-Sep-2024 10:25:55 UTC Restart Time: Thursday, 19-Sep-2024 02:39:16 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 7 hours 46 minutes 39 seconds Server load: 0.39 0.70 0.84 Total accesses: 440 - Total Traffic: 1.7 MB - Total Duration: 99607 CPU Usage: u1.25 s2.01 cu0 cs0 - .00285% CPU load .00385 requests/sec - 15 B/second - 4133 B/request - 226.38 ms/request 1 requests currently being processed, 49 idle workers ______________________________________________W___.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/8/8_ 0.0830049914640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/17/17_ 0.0929955681540.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/16/16_ 0.092981937715830.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJPb9swDMXvA%2FodBN3 0-0350/6/6_ 0.092972557600.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/11/11_ 0.092237456600.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0350/6/6_ 0.1021009611170.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/13/13_ 0.10209084410500.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/8/8_ 0.10208953723520.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.1020888482040.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.102088151370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/4/4_ 0.10208585180.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/60/60_ 0.10208125136300.00.190.19 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.10208395210.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/12/12_ 0.10207154854400.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.102071556370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.112060253930.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/6/6_ 0.1120580468980.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.112052764860.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/1/1_ 0.06204716130.00.000.00 127.0.0.1http/1.1 0-0350/15/15_ 0.111554168030.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/9/9_ 0.1185042467380.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/14/14_ 0.083043212344330.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_b7959bd1c9c9 0-0350/1/1_ 0.08304426120.00.000.00 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/9/9_ 0.0830399630920.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/1/1_ 0.08303891723440.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1 1-0360/5/5_ 0.053037863010.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/14/14_ 0.06299766107010.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/9/9_ 0.06299646500.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/15/15_ 0.072971210619460.00.070.07 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVJNT9wwEL1X6n%2BwfM% 1-0360/8/8_ 0.0722391516890.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0360/25/25_ 0.082099210948480.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_cbb91b32c7e7 1-0360/3/3_ 0.0721000516530.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/9/9_ 0.082090859190.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.082088864560.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/3/3_ 0.08208814835140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/12/12_ 0.08208394344630.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/6/6_ 0.08208589710160.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/8/8_ 0.092080811731440.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_13b5d5cb290b 1-0360/4/4_ 0.092074950511020.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C88xHyQ 1-0360/2/2_ 0.092072764850.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.0920602513730.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/3/3_ 0.0920580644140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/19/19_ 0.1020524769520.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/14/14_ 0.1020518024000.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/15/15_ 0.1019100639420.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/8/8_ 0.1115536019680.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0368/9/9W 0.11002149.5
Found on 2024-09-20 10:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1825a7f4b8Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 26-Aug-2024 11:52:59 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 6 days 10 hours 58 minutes 35 seconds Server load: 0.78 0.97 1.24 Total accesses: 6251 - Total Traffic: 18.8 MB - Total Duration: 2368784 CPU Usage: u7.58 s10.16 cu0 cs0 - .00318% CPU load .0112 requests/sec - 35 B/second - 3145 B/request - 378.945 ms/request 1 requests currently being processed, 49 idle workers ___________________________W______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/124/124_ 1.5048484518220.00.430.43 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/131/131_ 1.52405523550.00.400.40 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_13db8da15 0-0390/114/114_ 1.521556528420.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2a6234df5 0-0390/118/118_ 1.521697167503200.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/129/129_ 1.513730141382650.00.400.40 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/152/152_ 1.513932513760330.00.500.50 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/116/116_ 1.5041984250820.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_00ada024e 0-0390/134/134_ 1.5140456594830.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_1684d8404 0-0390/107/107_ 1.5045805333490.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/125/125_ 1.5044134552680.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_952fa06ee 0-0390/128/128_ 1.5041575454530.00.410.41 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/124/124_ 1.51384933675570.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_e4c869c63 0-0390/146/146_ 1.513813166253640.00.480.48 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/127/127_ 1.51306673757070.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a3509cf8f 0-0390/120/120_ 1.5127727414590.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f9173c0e2 0-0390/155/155_ 1.5226817245650.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_205484613 0-0390/120/120_ 1.5226186416950.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_63de4bc0c 0-0390/153/153_ 1.52245937420330.00.490.49 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/132/132_ 1.5221721326361980.00.410.41 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/118/118_ 1.521906176432080.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/138/138_ 1.5216214398080.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_13e1f7b0d 0-0390/149/149_ 1.5213104604170.00.490.49 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_6a27bad46 0-0390/115/115_ 1.52103348559760.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_66cce3393 0-0390/109/109_ 1.527946494750.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_948dcaf9b 0-0390/107/107_ 1.524242659398760.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/109/109_ 1.46445336668580.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_78edab971 1-0400/151/151_ 1.46460920608740.00.440.44 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_db9ad15ac 1-0408/116/116W 1.4700608559.50.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 1-0400/114/114_ 1.471444405360.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_41203778b 1-0400/116/116_ 1.472527404620.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_117f7bc9a 1-0400/134/134_ 1.4629337438440.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_04ed8d2f1 1-0400/128/128_ 1.464237147509250.00.400.40 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/117/117_ 1.464168152599010.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/119/119_ 1.4641194338370.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_26824d057 1-0400/119/119_ 1.4639535277160.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0a9e0cc9c 1-0400/111/111_ 1.4638677353740.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_bbdf4126e 1-0400/111/111_ 1.4638364442510.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b5d5b4047 1-0400/129/129_ 1.4637786315860.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c87a9bf41 1-0400/137/137_ 1.46338912417660.00.440.44 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3fe6462ee 1-0400/151/151_ 1.462756150384090.00.530.53 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/130/130_ 1.4726641771100540.00.430.43 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/114/114_ 1.472495149620800.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/124/124_ 1.4723147378900.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_bc89052e0 1-0400/114/114_ 1.4721585556380.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/112/112_ 1.47173250321170.00.330.33 127.0.0.1http/1.1
Found on 2024-08-26 11:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1824011ec4Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 24-Aug-2024 04:51:52 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 3 hours 57 minutes 29 seconds Server load: 0.47 0.95 1.01 Total accesses: 4291 - Total Traffic: 13.3 MB - Total Duration: 1632778 CPU Usage: u4.99 s6.78 cu0 cs0 - .00327% CPU load .0119 requests/sec - 38 B/second - 3251 B/request - 380.512 ms/request 1 requests currently being processed, 49 idle workers _______________W__________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/88/88_ 1.06308746389990.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2316ab669 0-0390/93/93_ 1.0631506263840.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cf543b027 0-0390/76/76_ 1.0633375272370.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a6039ba95 0-0390/80/80_ 1.0558685406020.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/91/91_ 1.0658334264150.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/115/115_ 1.0612232501542090.00.400.40 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/80/80_ 1.062005278200910.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/97/97_ 1.0615196481700.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4a363e659 0-0390/70/70_ 1.06277143240350.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3e99a0321 0-0390/90/90_ 1.062377167413480.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/89/89_ 1.061788170331840.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/86/86_ 1.06931147442380.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/111/111_ 1.066185193060.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/90/90_ 1.06458151510750.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/70/70_ 1.06124147261160.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0398/105/105W 1.0700105879.50.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 0-0390/70/70_ 1.056633133298830.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_22cff867d 0-0390/116/116_ 1.0564247310770.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_72bc933c0 0-0390/97/97_ 1.056272142253270.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/78/78_ 1.056096140267990.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/80/80_ 1.06525989293120.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_58c08162e 0-0390/113/113_ 1.0648723207482140.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/78/78_ 1.063740203372520.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/71/71_ 1.06356055235700.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9a9d139bc 0-0390/70/70_ 1.063468181222950.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/72/72_ 1.022632157496550.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/114/114_ 1.0230384515440.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_5e7200592 1-0400/70/70_ 1.0231144452490.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_73e0bf0cc 1-0400/77/77_ 1.023321151345110.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/79/79_ 1.0234464278730.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_855ad0767 1-0400/96/96_ 1.031476315970.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3560a7040 1-0400/91/91_ 1.0223405301260.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/78/78_ 1.0219545284880.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_07b5b4a02 1-0400/84/84_ 1.0217804165080.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_873e9bb80 1-0400/84/84_ 1.031323173227180.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/74/74_ 1.031148769185820.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/77/77_ 1.03670200324650.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/91/91_ 1.03589151203010.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/101/101_ 1.03524153248470.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/113/113_ 1.03767285440.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/76/76_ 1.0166961082718310.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/78/78_ 1.016547329365690.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/86/86_ 1.016386145315870.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/73/73_ 1.0161426390410.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2b95e527c 1-0400/72/72_ 1.025924165236880.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /s
Found on 2024-08-24 04:51 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18de85b503Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 22-Aug-2024 06:53:00 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 5 hours 58 minutes 37 seconds Server load: 0.66 1.06 1.37 Total accesses: 2738 - Total Traffic: 8.9 MB - Total Duration: 966471 CPU Usage: u2.7 s3.86 cu0 cs0 - .00338% CPU load .0141 requests/sec - 48 B/second - 3426 B/request - 352.984 ms/request 1 requests currently being processed, 49 idle workers _______W__________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/57/57_ 0.68136120352770.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cd0893aae 0-0390/64/64_ 0.681490196146930.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/42/42_ 0.68155815655400.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/42/42_ 0.683414197175120.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/61/61_ 0.67736622873640.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/85/85_ 0.6780674249730.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c5b7dcf29 0-0390/51/51_ 0.685616136950.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_855a75229 0-0398/58/58W 0.6800393689.50.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 0-0390/40/40_ 0.68107557137590.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_281ebfc07 0-0390/62/62_ 0.688794379020.00.190.19 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4adf943c2 0-0390/61/61_ 0.683971108201410.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/57/57_ 0.6779594214750.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f47f6918d 0-0390/78/78_ 0.677882156110400.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/61/61_ 0.6864245122320.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_35b9c5aa2 0-0390/41/41_ 0.6858441371214480.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1 0-0390/66/66_ 0.68493626469660.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_17f5bae29 0-0390/40/40_ 0.6847515121710.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/86/86_ 0.684165174192880.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/65/65_ 0.6841125141940.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/48/48_ 0.6840445102370.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/52/52_ 0.6831458241840.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b2d91cd49 0-0390/79/79_ 0.6828776374200.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0f7c69205 0-0390/49/49_ 0.68248640224910.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9f37d0105 0-0390/41/41_ 0.682187651400.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_aba7a694f 0-0390/42/42_ 0.68172013177800.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_819e40a36 1-0400/42/42_ 0.659114409820.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2419f8a59 1-0400/84/84_ 0.6512756281150.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_7b0907f58 1-0400/41/41_ 0.6514766366010.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/41/41_ 0.6515376173040.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/51/51_ 0.6516055130680.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_8bfb65926 1-0400/48/48_ 0.64598757180700.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_10717d0ee 1-0400/62/62_ 0.65787698490.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_25fef5142 1-0400/49/49_ 0.65452144215040.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a35cffcd1 1-0400/53/53_ 0.65129161100110.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/51/51_ 0.638124160137550.00.170.17 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/44/44_ 0.638002251104170.00.130.13 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/47/47_ 0.6379225270030.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_612d29e75 1-0400/60/60_ 0.637666410108260.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1 1-0400/70/70_ 0.636953252183990.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/82/82_ 0.6457286225900.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ca1e89325 1-0400/47/47_ 0.6448001354313190.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/50/50_ 0.64431860117480.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f3a06b3cd 1-0400/56/56_ 0.6441355234390.00.190.19 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/42/42_ 0.64407222318850.00.130.13 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/41/41_ 0.643878398175680.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl
Found on 2024-08-22 06:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1847b8f75eApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 20-Aug-2024 03:02:55 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 hours 8 minutes 32 seconds Server load: 2.79 2.38 1.82 Total accesses: 793 - Total Traffic: 3.3 MB - Total Duration: 177042 CPU Usage: u.31 s.29 cu0 cs0 - .00778% CPU load .103 requests/sec - 454 B/second - 4420 B/request - 223.256 ms/request 1 requests currently being processed, 49 idle workers _______________W__________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/10/10_ 0.191805576050.00.070.07 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_072acc098 0-0390/24/24_ 0.192021514580.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c76679cda 0-0390/5/5_ 0.1924894400.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d241a8cc2 0-0390/6/6_ 0.1838991507180.00.030.03 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/27/27_ 0.20621420290.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c8659f29e 0-0390/50/50_ 0.201028559970.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/16/16_ 0.201461411100.00.060.06 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_622743ec3 0-0390/11/11_ 0.20113841178750.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_bc46c88cb 0-0390/6/6_ 0.19174471400.00.020.02 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/25/25_ 0.19155315544030.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/25/25_ 0.201303425500.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0561d405b 0-0390/19/19_ 0.20875514860.00.100.10 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a49887710 0-0390/40/40_ 0.20770526900.00.170.17 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/16/16_ 0.2043518820180.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/4/4_ 0.2019155320.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_41cbb3c4a 0-0398/19/19W 0.20002899.50.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 0-0390/3/3_ 0.18462384300.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0390/44/44_ 0.18460222646380.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0390/27/27_ 0.184488830400.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f4bdca6cd 0-0390/9/9_ 0.18392954440.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/4/4_ 0.18368374700.00.020.02 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3bc16e7a8 0-0390/17/17_ 0.18338517486920.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/12/12_ 0.18308616748020.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/4/4_ 0.19301861330.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4fd0be4f0 0-0390/4/4_ 0.192589534400.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0873aecb6 1-0400/3/3_ 0.18165964460.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_76c28170c 1-0400/20/20_ 0.181764419150.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/3/3_ 0.1819456004120490.00.010.01 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/6/6_ 0.18221465960.00.020.02 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_7fb8675a3 1-0400/13/13_ 0.1825004430790.00.070.07 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3094011ee 1-0400/13/13_ 0.1927117129550.00.060.06 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/26/26_ 0.181473624130.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_8c5b8fc78 1-0400/14/14_ 0.181357571240.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_24b405130 1-0400/18/18_ 0.18125418420090.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/16/16_ 0.181037303672380.00.070.07 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/9/9_ 0.18893615480.00.030.03 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_69a0082a9 1-0400/9/9_ 0.1880822051630.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/24/24_ 0.1866218135060.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/35/35_ 0.19509547470.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/44/44_ 0.196569363860.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/10/10_ 0.1746132006113330.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1 1-0400/14/14_ 0.1746021012340.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0400/18/18_ 0.1845413857620.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_92e6a314c442b 1-0400/5/5_ 0.183970183120790.00.030.03 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/5/5_ 0.1839144710.00.020.02 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_93a319f9c 1-0400/11/11_ 0.18375418
Found on 2024-08-20 03:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d180375e2f1Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 18-Aug-2024 03:15:57 UTC Restart Time: Friday, 16-Aug-2024 02:39:00 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 36 minutes 57 seconds Server load: 1.31 1.26 1.46 Total accesses: 2246 - Total Traffic: 7.0 MB - Total Duration: 820895 CPU Usage: u2.42 s3.21 cu0 cs0 - .00322% CPU load .0128 requests/sec - 42 B/second - 3285 B/request - 365.492 ms/request 1 requests currently being processed, 49 idle workers _W________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/42/42_ 0.5355164182440.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0378/55/55W 0.5500130239.50.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/42/42_ 0.542345103770.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f6b73ea54 0-0370/42/42_ 0.544865240440.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b72ec88b2 0-0370/48/48_ 0.546924172640.00.170.17 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/51/51_ 0.5353161619169480.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/38/38_ 0.5348903215370.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3a16b70bc 0-0370/38/38_ 0.544784473150.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/39/39_ 0.544704207280540.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/37/37_ 0.5443993210770.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0b7cd8499 0-0370/40/40_ 0.54402553241020.00.130.13 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4d2250b72 0-0370/39/39_ 0.543810221103220.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/64/64_ 0.543592595360.00.190.19 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8c0c9a534 0-0370/38/38_ 0.54320040207490.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_03fcd35dc 0-0370/62/62_ 0.542898222212410.00.220.22 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/48/48_ 0.54273815170110.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_dd181a816 0-0370/44/44_ 0.5424165133040.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_60c66572e 0-0370/57/57_ 0.54226121272340.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/51/51_ 0.542363394440.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5688fb6da 0-0370/38/38_ 0.541969366060.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4b3b5afb9 0-0370/37/37_ 0.54144824061900.00.100.10 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/38/38_ 0.541251226249320.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/37/37_ 0.5411515170370.00.100.10 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ac2d5c5a6 0-0370/39/39_ 0.5410485161020.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d3cae61f7 0-0370/51/51_ 0.54793752208610.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/52/52_ 0.544920252257540.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.5454385192330.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e29c4b000 1-0380/41/41_ 0.54555620391820.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/38/38_ 0.5520920291320.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/48/48_ 0.55361234170340.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.54480922261440.00.130.13 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/43/43_ 0.5447693213660.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c1fa1dcd7 1-0380/41/41_ 0.5444501562158340.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/38/38_ 0.554386531334890.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/59/59_ 0.5538795220960.00.230.23 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7d3af482c 1-0380/63/63_ 0.553756383540.00.260.26 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_809a7ca3c 1-0380/60/60_ 0.5534495174000.00.210.21 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_195912be7 1-0380/43/43_ 0.5530514133570.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b81911632 1-0380/39/39_ 0.5528644332190.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/43/43_ 0.552526417170850.00.130.13 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/43/43_ 0.552383358137370.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/69/69_ 0.5523346145540.00.210.21 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/40/40_ 0.55200921790100.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/50/50_ 0.551385214111130.00.170.17 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/38/38_ 0.5519445155140.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_
Found on 2024-08-18 03:15 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1834eebd94Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 16-Aug-2024 04:11:01 UTC Restart Time: Friday, 16-Aug-2024 02:39:00 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 hour 32 minutes 1 second Server load: 1.06 1.54 1.64 Total accesses: 113 - Total Traffic: 359 kB - Total Duration: 60656 CPU Usage: u.09 s.1 cu0 cs0 - .00344% CPU load .0205 requests/sec - 66 B/second - 3253 B/request - 536.779 ms/request 1 requests currently being processed, 49 idle workers _________________________________________W________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/1/1_ 0.0118716130.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b8d9e9403 0-0370/1/1_ 0.0120622184360.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 0-0370/1/1_ 0.0121752174350.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/1/1_ 0.012260480.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_def114029 0-0370/1/1_ 0.012312163632730.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/2/2_ 0.0116702167310.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/2/2_ 0.0114603988240.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ad33f86b2 0-0370/2/2_ 0.0113145190.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b5afee07c 0-0370/3/3_ 0.011208451100.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/2/2_ 0.0175138880.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_eb4e26fe2 0-0370/2/2_ 0.01504156331380.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/2/2_ 0.012806220.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_32611560a 0-0370/12/12_ 0.0217291330.00.070.07 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0370/2/2_ 0.021553820.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ef634999d 0-0370/9/9_ 0.026176450.00.030.03 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0370/8/8_ 0.034282570.00.030.03 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0370/2/2_ 0.03451680.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8fbbdb4ee 0-0370/1/1_ 0.0032276130.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/1/1_ 0.003069490.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_863ff6822 0-0370/1/1_ 0.0028992164330.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/1/1_ 0.00270437740.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_58bd305e3 0-0370/1/1_ 0.0025352084160.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/1/1_ 0.002494360.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2269c2ce4 0-0370/1/1_ 0.002406490.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_38ecf5872 0-0370/1/1_ 0.002378404680930.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/1/1_ 0.0118425100.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_51a964d57 1-0380/1/1_ 0.0118832064120.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/1/1_ 0.01206936730.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_89730fe7f 1-0380/1/1_ 0.012196490.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_392491758 1-0380/1/1_ 0.0123035110.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9b4a949c7 1-0380/2/2_ 0.01162636220.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8a8bb6dba 1-0380/3/3_ 0.0114163380.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_30bde50b5 1-0380/2/2_ 0.0112192264610.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/2/2_ 0.01117944330.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/2/2_ 0.015855818121390.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/2/2_ 0.01351204650.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_442b6c3ea 1-0380/3/3_ 0.011845011330.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b7b5025ad 1-0380/2/2_ 0.011761160.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0380/2/2_ 0.019140920.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cd2632dd0 1-0380/8/8_ 0.0152023190.00.020.02 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0380/2/2_ 0.01333140.00.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e83aa9f80 1-0388/9/9W 0.010034049.50.010.01 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/1/1_ 0.003205511020.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/1/1_ 0.0030516120.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_229518d09 1-0380/1/1_ 0.002858490.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/1/1_ 0.0026076110.00.000.00 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/sele
Found on 2024-08-16 04:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d186e9d4043Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 14-Aug-2024 05:03:34 UTC Restart Time: Tuesday, 13-Aug-2024 06:58:05 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 22 hours 5 minutes 28 seconds Server load: 3.13 3.61 3.17 Total accesses: 812 - Total Traffic: 2.4 MB - Total Duration: 377469 CPU Usage: u.93 s1.71 cu0 cs0 - .00332% CPU load .0102 requests/sec - 31 B/second - 3054 B/request - 464.863 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/15/15_ 0.209115110840.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/14/14_ 0.1928993120130.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_757f4ea33 0-0350/20/20_ 0.20552526440.00.060.06 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/16/16_ 0.2050129290310.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/22/22_ 0.204123149410.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_06a05c5f8 0-0358/25/25W 0.200083829.50.060.06 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /server-status HTTP/1.1 0-0350/16/16_ 0.1937021281577670.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/15/15_ 0.19363751735150.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/21/21_ 0.1935893950690.00.060.06 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/14/14_ 0.193281625260.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8dbb7b5c8 0-0350/14/14_ 0.193232317360.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_776f774c3 0-0350/15/15_ 0.193120655170.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/15/15_ 0.1930273151830.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_653dc75ee 0-0350/15/15_ 0.1928542697122350.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/18/18_ 0.192820345510.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_83b1e61e5 0-0350/14/14_ 0.1927233487250.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8a964c744 0-0350/23/23_ 0.20638447650.00.110.11 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/16/16_ 0.192616530840.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/14/14_ 0.192591454140.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0e5dad7a4 0-0350/15/15_ 0.191726448540.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/14/14_ 0.1915646135180.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_86d7ac303 0-0350/16/16_ 0.191367884710.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_03b8af692 0-0350/15/15_ 0.191273523840.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f63ea6e74 0-0350/15/15_ 0.2011581599390.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f339d5c0f 0-0350/14/14_ 0.201074519180.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_08318dfd6 1-0360/29/29_ 0.1836736165790.00.090.09 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.183626675740.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.183385299168140.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.193252346140.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cc9b6a9f1 1-0360/15/15_ 0.19312831235070.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.193046528100.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_94ac975aa 1-0360/15/15_ 0.192936557150.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/17/17_ 0.192877568240.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_166bda1c2 1-0360/15/15_ 0.192836471170.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a52b56daf 1-0360/16/16_ 0.192736518470.00.050.05 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c560b4aff 1-0360/15/15_ 0.192662365144060.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/15/15_ 0.1926021323850.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.19230729151180.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.191649411920.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f76c7f3c2 1-0360/16/16_ 0.191544436540.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b1ad8f7d2 1-0360/14/14_ 0.19135331260400.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/15/15_ 0.19125937343260.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.20112928623570.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/14/14_ 0.201045521188030.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/15/15_ 0.2070427229200.00.040.04 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl
Found on 2024-08-14 05:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18f5714928Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 12-Aug-2024 04:21:30 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 days 18 hours 11 minutes 28 seconds Server load: 3.13 3.12 3.02 Total accesses: 6155 - Total Traffic: 17.9 MB - Total Duration: 2390040 CPU Usage: u9.65 s17.13 cu0 cs0 - .00264% CPU load .00606 requests/sec - 18 B/second - 3044 B/request - 388.309 ms/request 1 requests currently being processed, 49 idle workers _______________________________________________W__.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/142/142_ 1.405792208679940.00.420.42 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/121/121_ 1.41114339814800.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/118/118_ 1.4131233488410.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5658efa2a 0-0370/129/129_ 1.404149246372960.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/144/144_ 1.4049114286360.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/157/157_ 1.4050965595020.00.460.46 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e29fed201 0-0370/131/131_ 1.405537232419160.00.410.41 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/118/118_ 1.405187256524260.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/120/120_ 1.4047863358130.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_08d155896 0-0370/116/116_ 1.404442230242870.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/148/148_ 1.4039203648540.00.390.39 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4ae58fc4f 0-0370/121/121_ 1.4037355314840.00.410.41 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_32c26454f 0-0370/116/116_ 1.4137033209510.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_41cd33135 0-0370/117/117_ 1.413257217315490.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/119/119_ 1.4128525237790.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ac42ebfd0 0-0370/124/124_ 1.4126634325900.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0c8bd9d9b 0-0370/114/114_ 1.4125163296500.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c746eb7bd 0-0370/112/112_ 1.411958408533020.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/108/108_ 1.4118795428100.00.310.31 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c000ba382 0-0370/132/132_ 1.4115215512050.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_159ea5d76 0-0370/120/120_ 1.4111955396240.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_50e44abfd 0-0370/114/114_ 1.417115340790.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_665436e98 0-0370/116/116_ 1.4110014485140.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_355265e34 0-0370/117/117_ 1.413305312130.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_07dee2dc1 0-0370/124/124_ 1.412963379330.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a1ff751b5 1-0380/116/116_ 1.39528345627570.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ff4a93dcd 1-0380/119/119_ 1.3930691339383570.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/110/110_ 1.3938564611780.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_560fe33f7 1-0380/111/111_ 1.3944526758310.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3ea4384dd 1-0380/116/116_ 1.394951245598260.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/120/120_ 1.3947995591770.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0f31ab113 1-0380/122/122_ 1.3939705484370.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3f8497a74 1-0380/120/120_ 1.3943905579720.00.420.42 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c367af15c 1-0380/119/119_ 1.3937273564340.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5fedecb69 1-0380/145/145_ 1.3934875606050.00.490.49 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2bcfda51f 1-0380/114/114_ 1.393180245366430.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/131/131_ 1.3928293519960.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2c9272534 1-0380/116/116_ 1.392552235562830.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/115/115_ 1.3923945609360.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_667ad5b2e 1-0380/132/132_ 1.3919353446210.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/118/118_ 1.3917945469790.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fd37d9c31 1-0380/135/135_ 1.391342282505930.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/123/123_ 1.396385577630.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_89486fcd6 1-0380/131/131_ 1.3910226352160.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5950d731a 1-0380/116/116_ 1.393052406751280.00.330.33 127.0
Found on 2024-08-12 04:21 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18dcf887d6Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 10-Aug-2024 04:20:24 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 18 hours 10 minutes 22 seconds Server load: 0.75 1.38 1.43 Total accesses: 4505 - Total Traffic: 13.2 MB - Total Duration: 1770763 CPU Usage: u8.03 s14.03 cu0 cs0 - .00262% CPU load .00534 requests/sec - 16 B/second - 3064 B/request - 393.066 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/111/111_ 1.04333255591860.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/89/89_ 1.045526651850.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9b77e7c53 0-0370/87/87_ 1.0324915396660.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_af55b1426 0-0370/98/98_ 1.033413211243440.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/111/111_ 1.0238175197160.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d855bdf43 0-0378/102/102W 1.0400390609.50.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/99/99_ 1.041054365220.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3457ab636 0-0370/88/88_ 1.04404364800.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ce0d65195 0-0370/88/88_ 1.0236785291240.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_50814662f 0-0370/85/85_ 1.0235533153180.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_def114029 0-0370/118/118_ 1.033199227270110.00.300.30 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/91/91_ 1.0328854243840.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f1473b7b2 0-0370/84/84_ 1.0327723148500.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ab82c674e 0-0370/77/77_ 1.0327176208920.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6580323a2 0-0370/87/87_ 1.0324533186730.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3b6340dcf 0-0370/93/93_ 1.032336200194980.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/78/78_ 1.032192202222660.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/81/81_ 1.031909249429320.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/76/76_ 1.031749211300570.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/101/101_ 1.0314833380280.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b17eec347 0-0370/89/89_ 1.0312373257060.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_07c7b44cb 0-0370/82/82_ 1.038713227260.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1ab3b8710 0-0370/81/81_ 1.039636378130.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_57455080e 0-0370/87/87_ 1.048225187130.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ad007e5fd 0-0370/92/92_ 1.04633226311220.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/81/81_ 1.0380335497030.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/85/85_ 1.022466202286850.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/79/79_ 1.0231743443270.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_17d07776e 1-0380/80/80_ 1.023577214627600.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/83/83_ 1.0139214424830.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/89/89_ 1.0237495478510.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_db1f624b6 1-0380/90/90_ 1.0233223338820.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6935f4fd7 1-0380/89/89_ 1.023503212496470.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/88/88_ 1.022788235316450.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/113/113_ 1.0227584455490.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/84/84_ 1.0225965222740.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_93f53ac65 1-0380/80/80_ 1.0224166347600.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/84/84_ 1.0222604339580.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9db6d6fbe 1-0380/83/83_ 1.021998426446910.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/101/101_ 1.021840233310380.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/86/86_ 1.0215374365940.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/104/104_ 1.021400201380090.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/89/89_ 1.028433405140.00.300.30 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_819dfef31 1-0380/100/100_ 1.021103964272680.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/83/83_ 1.02811211639550.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOSer
Found on 2024-08-10 04:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d189ec49637Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 08-Aug-2024 23:34:00 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 8 days 13 hours 23 minutes 57 seconds Server load: 3.60 3.89 3.84 Total accesses: 3542 - Total Traffic: 10.4 MB - Total Duration: 1356697 CPU Usage: u6.98 s12.17 cu0 cs0 - .00259% CPU load .00479 requests/sec - 14 B/second - 3082 B/request - 383.031 ms/request 1 requests currently being processed, 49 idle workers ___________________W______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/84/84_ 0.804395321354930.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/70/70_ 0.804870299514910.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/66/66_ 0.8012924318900.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/81/81_ 0.80260912202440.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c63a162a2 0-0370/93/93_ 0.8033018180660.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b353d7d1c 0-0370/72/72_ 0.8040915197930.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/79/79_ 0.8043394303860.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/68/68_ 0.80377415204740.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b523cec80 0-0370/71/71_ 0.8031395234230.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f86d3c216 0-0370/67/67_ 0.803005493850.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5c2230082 0-0370/99/99_ 0.8022006201720.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1e32645af 0-0370/73/73_ 0.8018413120170.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ad963427 0-0370/67/67_ 0.801630215111370.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/60/60_ 0.801518238136230.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/70/70_ 0.80102914153740.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8bf8a2cf4 0-0370/73/73_ 0.80859229128550.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/61/61_ 0.806876184200.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_37f548d9d 0-0370/63/63_ 0.8054514353260.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d610381c0 0-0370/59/59_ 0.803932802257960.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0378/72/72W 0.8000332539.50.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/68/68_ 0.7958166212940.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_978f81cc5 0-0370/63/63_ 0.8054314177680.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_06b905ae9 0-0370/63/63_ 0.7956004809356610.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/66/66_ 0.8052884145400.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/71/71_ 0.8050303170000.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2517062e4 1-0380/63/63_ 0.8142804284950.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2a56d0878 1-0380/64/64_ 0.821214237235900.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/62/62_ 0.811876898376460.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/63/63_ 0.8130715575380.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7151af3da 1-0380/64/64_ 0.8135137333490.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1cdaa57e1 1-0380/71/71_ 0.813227254384050.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/72/72_ 0.812353228314290.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/72/72_ 0.8128612533427650.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/70/70_ 0.8118005240820.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_54366f4c5 1-0380/96/96_ 0.8115265395030.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_51a964d57 1-0380/63/63_ 0.821332220179200.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/62/62_ 0.8210204318650.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4f450ff7c 1-0380/66/66_ 0.828523245810.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4271d53f4 1-0380/64/64_ 0.826114236850.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f53a78c8b 1-0380/80/80_ 0.8248269264310.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/68/68_ 0.823264256220.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_96b9bcaa4 1-0380/85/85_ 0.8160984337510.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/70/70_ 0.8152996317550.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f9e5054b3 1-0380/81/81_ 0.8156465188500.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a8d4480a0 1-0380/65/65_ 0.81505964538800.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3
Found on 2024-08-08 23:33 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18c4cab317Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 06-Aug-2024 20:03:59 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 6 days 9 hours 53 minutes 57 seconds Server load: 1.47 2.69 2.15 Total accesses: 2305 - Total Traffic: 6.9 MB - Total Duration: 792234 CPU Usage: u5.05 s8.78 cu0 cs0 - .0025% CPU load .00416 requests/sec - 13 B/second - 3131 B/request - 343.702 ms/request 1 requests currently being processed, 49 idle workers W_________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0378/51/51W 0.5300240029.50.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/49/49_ 0.522231040216840.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/43/43_ 0.517837473470.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_af360521c 0-0370/59/59_ 0.5110888360290.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0596c0414 0-0370/71/71_ 0.5113873897000.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_585915a5c 0-0370/47/47_ 0.51160553114860.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_28ae50f54 0-0370/53/53_ 0.51161633163100.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_030521cba 0-0370/41/41_ 0.51148704112450.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/46/46_ 0.51132983189630.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2c97352ff 0-0370/46/46_ 0.5111827745940.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3cf416afd 0-0370/75/75_ 0.5110873393730.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e9a103012 0-0370/50/50_ 0.519983350770.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fdd4eeb83 0-0370/45/45_ 0.5187957547340.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8de6a1c88 0-0370/38/38_ 0.518777389130.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0ef3b2cf6 0-0370/44/44_ 0.517609369890.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e29eca015 0-0370/46/46_ 0.5273131457880.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_017224e90 0-0370/40/40_ 0.526457562640.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_414586961 0-0370/41/41_ 0.5259956263350.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_893bb8773 0-0370/37/37_ 0.524437853390.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_496b7c0c5 0-0370/42/42_ 0.5244243122210.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b797c1412 0-0370/47/47_ 0.5234595155150.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d8b5b186e 0-0370/41/41_ 0.522512347170.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2cb04a0a0 0-0370/42/42_ 0.5232356186660.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6acc53ebb 0-0370/39/39_ 0.521777448490.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/45/45_ 0.527455129440.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.49161434104510.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.507617239153920.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/37/37_ 0.509990423305640.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/40/40_ 0.5012599280242180.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/41/41_ 0.4914308224191870.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.5013303266273040.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/47/47_ 0.50108796266470.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/49/49_ 0.50108941774334090.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.5098584202000.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/75/75_ 0.508783228187630.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/42/42_ 0.507842240152770.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/37/37_ 0.5073252320270720.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/42/42_ 0.506592247154740.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.5164415159570.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/59/59_ 0.5155762308221780.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/43/43_ 0.514430225121810.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/64/64_ 0.5144194240170.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/46/46_ 0.5117853246060.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_33a5b8e47 1-0380/37/37_ 0.5134515102020.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.5117543350890.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource
Found on 2024-08-06 20:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1801763c7dApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 04-Aug-2024 23:00:07 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 12 hours 50 minutes 5 seconds Server load: 6.00 6.95 10.19 Total accesses: 1702 - Total Traffic: 4.9 MB - Total Duration: 593206 CPU Usage: u3.42 s5.99 cu0 cs0 - .0024% CPU load .00434 requests/sec - 13 B/second - 3027 B/request - 348.535 ms/request 1 requests currently being processed, 49 idle workers ____W_____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/36/36_ 0.36103404110190.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_407e9db00 0-0370/33/33_ 0.36111665180640.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_32e777584 0-0370/29/29_ 0.351953521153920.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/50/50_ 0.3522306052600.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0378/54/54W 0.360079029.50.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/38/38_ 0.369707570070.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_471bf24f2 0-0370/43/43_ 0.36101523150420.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_31a462d92 0-0370/33/33_ 0.368460841200.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3928aacee 0-0370/29/29_ 0.3523280124181830.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ee3afced 0-0370/32/32_ 0.3522765537440.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_bafb9247c 0-0370/46/46_ 0.352133648363790.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/42/42_ 0.3521323435990.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/37/37_ 0.3521290325260.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/30/30_ 0.351963564182400.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/33/33_ 0.351926119536250.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/31/31_ 0.351855722541590.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/31/31_ 0.3518530550970.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/30/30_ 0.3618008234221870.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/27/27_ 0.361753721737190.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/29/29_ 0.3616151559060.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1b2b3050e 0-0370/31/31_ 0.3615144313950.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ef3e85ba 0-0370/27/27_ 0.3614868437030.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8355e8cf6 0-0370/31/31_ 0.36139593167970.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1cd35e9c5 0-0370/31/31_ 0.3612853838050.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8f2b397c2 0-0370/30/30_ 0.36112795118690.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e125e8263 1-0380/32/32_ 0.361042223973490.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/30/30_ 0.35202667112330.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f2e1d43b5 1-0380/29/29_ 0.3522758229275360.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.368442226173320.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/32/32_ 0.36101334111990.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.369644250256870.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.3522871232241000.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/29/29_ 0.3524367252221830.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/31/31_ 0.35219268132760.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a11a9b638 1-0380/67/67_ 0.35213293166020.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_60a612d38 1-0380/34/34_ 0.35213043124120.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7a97f51f6 1-0380/29/29_ 0.35195605204700.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_301d75652 1-0380/34/34_ 0.35193025135560.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ed2ff9458 1-0380/29/29_ 0.3518612775580.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f8a35bdb9 1-0380/48/48_ 0.35185466160410.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4bb000795 1-0380/27/27_ 0.3518509389790.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_85a97cdb0 1-0380/51/51_ 0.351799635228520.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2aabe019b 1-0380/31/31_ 0.3615025242212730.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/28/28_ 0.35164277073270.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_52a88768e 1-0380/30/30_ 0.3613967219204730.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid
Found on 2024-08-04 23:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d180730212aApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 02-Aug-2024 21:19:23 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 11 hours 9 minutes 21 seconds Server load: 0.83 1.06 1.19 Total accesses: 1037 - Total Traffic: 2.9 MB - Total Duration: 323470 CPU Usage: u1.87 s3.3 cu0 cs0 - .00243% CPU load .00487 requests/sec - 14 B/second - 2948 B/request - 311.929 ms/request 1 requests currently being processed, 49 idle workers _______________________________________W__________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/24/24_ 0.215228487170.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e0835de6d 0-0370/21/21_ 0.2160233175440.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_208f728bb 0-0370/18/18_ 0.221106535700.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_30a91eeb9 0-0370/22/22_ 0.211613519260.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_bc2c70034 0-0370/35/35_ 0.213074518100.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6935f4fd7 0-0370/26/26_ 0.213179338010.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_91ceade8a 0-0370/31/31_ 0.214010735320.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8bf8a2cf4 0-0370/21/21_ 0.213156424110.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_28ba4fedc 0-0370/18/18_ 0.2129753165760.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_38194fc78 0-0370/21/21_ 0.212897315250.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3fb9c3502 0-0370/35/35_ 0.221551542600.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f5d58b219 0-0370/24/24_ 0.221463526700.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_069db32a4 0-0370/26/26_ 0.221317315600.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5fd70db35 0-0370/19/19_ 0.221173558010.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2a56d0878 0-0370/19/19_ 0.221046311320.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e5ec42a79 0-0370/20/20_ 0.2234535860.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_286179964 0-0370/19/19_ 0.2019244733020.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0d6faa62d 0-0370/18/18_ 0.20189403207300.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8b5d84fc6 0-0370/15/15_ 0.21877840523330.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/17/17_ 0.218552353240.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4288a1130 0-0370/19/19_ 0.21842438880.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4a9215819 0-0370/15/15_ 0.217927518420.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a6956f0dd 0-0370/19/19_ 0.2179013149350.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4d54a7dfe 0-0370/19/19_ 0.216186820480.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4e640fc6c 0-0370/18/18_ 0.216074544770.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1feb91df6 1-0380/20/20_ 0.20533120626130.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.20128021245450.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.201674259143760.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/21/21_ 0.20314919655210.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/20/20_ 0.20321822138390.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/20/20_ 0.2031684125450.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/22/22_ 0.2029023036189960.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.20300220243490.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.201602190104410.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/23/23_ 0.20153919544290.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/22/22_ 0.20134921428510.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.20116320448740.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.201069214067590.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.2036321234730.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0388/27/27W 0.200093919.50.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/15/15_ 0.201896321842370.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.2018885208188790.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.208000221166530.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.208600536560.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2b2d5c89c 1-0380/18/18_ 0.20790722351240.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl
Found on 2024-08-02 21:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d184a6c5710Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 01-Aug-2024 11:29:02 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 1 hour 18 minutes 59 seconds Server load: 2.45 1.96 2.02 Total accesses: 537 - Total Traffic: 1.5 MB - Total Duration: 135712 CPU Usage: u.83 s1.41 cu0 cs0 - .00246% CPU load .00589 requests/sec - 17 B/second - 2959 B/request - 252.723 ms/request 1 requests currently being processed, 49 idle workers __________W_______________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/13/13_ 0.1011591361500.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_aebdaae52 0-0370/13/13_ 0.101161545930.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.1018507324100.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a1102f4a8 0-0370/14/14_ 0.11624074060.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d47052b24 0-0370/25/25_ 0.11875216420.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0370/15/15_ 0.109319420400.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d96eeac29 0-0370/23/23_ 0.109767715330.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_40bd2acbc 0-0370/12/12_ 0.10909735430.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e5b2bde37 0-0370/10/10_ 0.11805822813220.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/12/12_ 0.117061710140.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0f518f4eb 0-0378/17/17W 0.11002829.50.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/11/11_ 0.102004235180.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4e22a275c 0-0370/12/12_ 0.1019858014230.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/10/10_ 0.1019605431660.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.1018494310260.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4fbb9f35d 0-0370/10/10_ 0.1018477329160.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c758c7763 0-0370/10/10_ 0.1016752614660.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0370/7/7_ 0.10159957202270.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7cdc6ad82 0-0370/7/7_ 0.101581039670.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d2aeb2999 0-0370/8/8_ 0.1014675717110.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75c38450a 0-0370/11/11_ 0.1014425466990.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_87858dacd 0-0370/7/7_ 0.101279823313720.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.101278755370.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/10/10_ 0.10116402359880.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/9/9_ 0.10116291213690.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/9/9_ 0.0911606315150.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_757f4ea33 1-0380/8/8_ 0.081961568229550.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/10/10_ 0.097043242695450.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/13/13_ 0.099082436640.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/10/10_ 0.09932734416040.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/12/12_ 0.09910526232840.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.098046416310.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/9/9_ 0.0980695729570.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_904828ca4 1-0380/10/10_ 0.09623277086820.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.0820047434630.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.081987729390.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET / HTTP/1.1 1-0380/9/9_ 0.081959359960.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f7ccc9400 1-0380/9/9_ 0.08184995800.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/8/8_ 0.0818482415340.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.0817638315810.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8e6d9b44d 1-0380/7/7_ 0.081653823014300.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.0815815444700.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.08136003147050.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ab83ead1f 1-0380/8/8_ 0.0815804415210.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/10/10_ 0.0812793446050.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_aa44d402d 1-0380/8/8_ 0.0812702423410.00.020.02
Found on 2024-08-01 11:28 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d182dec96a3Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 30-Jul-2024 12:53:32 UTC Restart Time: Tuesday, 30-Jul-2024 02:38:01 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 hours 15 minutes 31 seconds Server load: 0.26 0.82 0.93 Total accesses: 400 - Total Traffic: 1.2 MB - Total Duration: 92183 CPU Usage: u.43 s.62 cu0 cs0 - .00284% CPU load .0108 requests/sec - 33 B/second - 3100 B/request - 230.458 ms/request 1 requests currently being processed, 49 idle workers __________________________________W_______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/23/23_ 0.086496433760.00.040.04 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/6/6_ 0.084924128958920.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/6/6_ 0.084906445310.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/9/9_ 0.08646137560.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d0a4b5fe1 0-0350/7/7_ 0.084892421830.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/6/6_ 0.0864401917870.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c0d7f2d2d 0-0350/5/5_ 0.084875310610.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_64522e1ca 0-0350/12/12_ 0.08595833220.00.040.04 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/4/4_ 0.08634156170.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2ad472dad 0-0350/8/8_ 0.08506328716860.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/13/13_ 0.084845331850.00.050.05 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_63e84d22d 0-0350/9/9_ 0.0859835750.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0d4f0b2b6 0-0350/8/8_ 0.08229738540.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_83fc0c500 0-0350/7/7_ 0.08230958910.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_73f9ab1ab 0-0350/13/13_ 0.084206315580.00.050.05 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a460a1f36 0-0350/9/9_ 0.091628354410.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ba42562c5 0-0350/7/7_ 0.09122846770.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/6/6_ 0.099004450.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/6/6_ 0.0711405512460.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_e3ef048af 0-0350/6/6_ 0.07909436110.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_30c14ac5b 0-0350/6/6_ 0.0788185490.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_75a9a8c02 0-0350/5/5_ 0.087603618850.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b43a5c084 0-0350/34/34_ 0.087381425550.00.120.12 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/10/10_ 0.087102339420.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_2a270d4ed 0-0350/7/7_ 0.087090310760.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_50777873c 1-0360/6/6_ 0.064861115424140.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/11/11_ 0.064881430830.00.040.04 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/5/5_ 0.059081423420.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/6/6_ 0.06163828111610.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/8/8_ 0.06421836316470.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/5/5_ 0.06307063714010.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/5/5_ 0.06230285923000.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/7/7_ 0.06161835570.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9aff0ee00 1-0360/8/8_ 0.0691126222160.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0368/12/12W 0.06005359.50.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /server-status HTTP/1.1 1-0360/8/8_ 0.0510294117735070.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/4/4_ 0.0586232555380.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/12/12_ 0.0573923037500.00.040.04 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/10/10_ 0.05711127215620.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/4/4_ 0.05709541080.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/5/5_ 0.056501812650.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d624e651e 1-0360/4/4_ 0.056482316370.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cecae6c03 1-0360/7/7_ 0.05645239510.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b74d9447d 1-0360/6/6_ 0.066429455290.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/4/4_ 0.06633626112160.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/7/7_ 0.0659762621229
Found on 2024-07-30 12:53 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18c3423f05Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 28-Jul-2024 20:42:52 UTC Restart Time: Wednesday, 24-Jul-2024 05:01:20 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 15 hours 41 minutes 31 seconds Server load: 0.56 0.76 0.80 Total accesses: 1575 - Total Traffic: 4.5 MB - Total Duration: 299544 CPU Usage: u3.62 s6.96 cu0 cs0 - .00263% CPU load .00392 requests/sec - 11 B/second - 2982 B/request - 190.187 ms/request 1 requests currently being processed, 49 idle workers _________________________________________W________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/37/37_ 0.3493043130500.00.140.14 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7af59a2b4 0-0370/35/35_ 0.355740326170.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5f94294c1 0-0370/39/39_ 0.35825022766530.00.120.12 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/29/29_ 0.357068318890.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_506459e12 0-0370/33/33_ 0.3570493132080.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_eab4e5be7 0-0370/27/27_ 0.3569939537490.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/34/34_ 0.3568832353200.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1e0cfb8ba 0-0370/23/23_ 0.349346756580.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_90a46259c 0-0370/30/30_ 0.3410043434310.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/23/23_ 0.354067339130.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_78c9a26d6 0-0370/27/27_ 0.355652410580.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/23/23_ 0.355634424080.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/28/28_ 0.354469335520.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_63b537860 0-0370/50/50_ 0.354438356150.00.120.12 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cde4bcfa3 0-0370/29/29_ 0.3536432476960.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/39/39_ 0.3529754111960.00.160.16 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0370/36/36_ 0.351965469020.00.110.11 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/35/35_ 0.351188447830.00.110.11 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0370/30/30_ 0.35451842150.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f5e4384ff 0-0370/33/33_ 0.3412562450580.00.100.10 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_232de6eba 0-0370/29/29_ 0.3412544338030.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7f7325383 0-0370/45/45_ 0.3412178629770.00.100.10 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/26/26_ 0.341207026818880.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/26/26_ 0.3411114248150030.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/22/22_ 0.3410030439840.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.355660344950.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6766c8398 1-0380/35/35_ 0.346107364900.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c7aecd55d 1-0380/39/39_ 0.346895649850.00.130.13 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f809d8fb0 1-0380/26/26_ 0.349298444260.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/27/27_ 0.348244344280.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_13a94b703 1-0380/35/35_ 0.347058379340.00.130.13 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5a8920465 1-0380/30/30_ 0.347043419530.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/40/40_ 0.355646330550.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5cae071f6 1-0380/43/43_ 0.3556273115360.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_757314033 1-0380/24/24_ 0.354459355690.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_76d42a92f 1-0380/25/25_ 0.354426332210.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3bd327059 1-0380/40/40_ 0.354061430530.00.170.17 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/31/31_ 0.353124661380.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_43307f87a 1-0380/33/33_ 0.352886476370.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0380/29/29_ 0.36126426659990.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVNNb%2BIwEL33V0S555N 1-0380/35/35_ 0.361177447540.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0388/36/36W 0.360034969.50.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/29/29_ 0.34125494155680.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/31/31_ 0.3412537469610.00.090.09 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/24/24_ 0.34120765102410.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cdcafd6da 1-0380/31/31
Found on 2024-07-28 20:42 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18d0013f8fApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 26-Jul-2024 13:39:08 UTC Restart Time: Wednesday, 24-Jul-2024 05:01:20 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 8 hours 37 minutes 48 seconds Server load: 0.28 0.52 0.61 Total accesses: 226 - Total Traffic: 684 kB - Total Duration: 31806 CPU Usage: u1.7 s3.45 cu0 cs0 - .00253% CPU load .00111 requests/sec - 3 B/second - 3099 B/request - 140.735 ms/request 1 requests currently being processed, 49 idle workers _____________W____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/17/17_ 0.0514766415950.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/10/10_ 0.054605563960.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/9/9_ 0.0512101218860.00.030.03 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/3/3_ 0.05989551980.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/5/5_ 0.0576580430.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/4/4_ 0.05729185520.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/4/4_ 0.05561414030.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/2/2_ 0.051950315313070.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.052694301940.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0370/2/2_ 0.035755265970.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/3/3_ 0.053572103590.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0370/3/3_ 0.05222852790.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/3/3_ 0.0540552630.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0378/10/10W 0.06005369.50.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/2/2_ 0.035211751870.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/6/6_ 0.034849102760.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0370/2/2_ 0.0546613844890.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.05454211787200.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/2/2_ 0.054281549611210.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.05400173098860.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.053776102020.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0370/19/19_ 0.053538713520.00.030.03 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0370/2/2_ 0.053280722030.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/2/2_ 0.0526995017850.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0370/2/2_ 0.0526231018830.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0380/6/6_ 0.05416282810.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/10/10_ 0.054675111290.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/3/3_ 0.0557721046870.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/4/4_ 0.05122182307570.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/5/5_ 0.05118013169160.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swFLzvr0DcwRCcL 1-0380/10/10_ 0.05767358940.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/3/3_ 0.0575399320.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/20/20_ 0.05337585510.00.030.03 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/3/3_ 0.0517741237460.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/5/5_ 0.05392019300.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0380/2/2_ 0.035945752180.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/8/8_ 0.0455321113630.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0380/2/2_ 0.04492188815660.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.04474841434600.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.0545633853730.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/3/3_ 0.054498891750.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.05416321164780.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.053817953630.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/2/2_ 0.053772305300.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0380/2/2_ 0.05331481344270.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.05288582145680.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.052696601640.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0380/2/2_ 0.052689102020.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0380/2/2_ 0.052541258570.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/2/2_ 0.05167801223960.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1
Found on 2024-07-26 13:39 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d186a71798aApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 24-Jul-2024 14:10:26 UTC Restart Time: Wednesday, 24-Jul-2024 05:01:20 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 hours 9 minutes 6 seconds Server load: 0.75 1.03 0.88 Total accesses: 65 - Total Traffic: 205 kB - Total Duration: 4456 CPU Usage: u.35 s.48 cu0 cs0 - .00252% CPU load .00197 requests/sec - 6 B/second - 3229 B/request - 68.5538 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/12/12_ 0.0032612114320.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0370/8/8_ 0.0111099030.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /phpinfo HTTP/1.1 0-0370/7/7_ 0.0032604015990.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/1/1_ 0.0031144000.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0370/1/1_ 0.0031093000.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0370/1/1_ 0.0031040000.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0370/1/1_ 0.01118601933860.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/1/1_ 0.0172481002010.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/4/4_ 0.0111088010.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /phpinfo HTTP/1.1 1-0380/8/8_ 0.0011109030.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /phpinfo HTTP/1.1 1-0380/1/1_ 0.00185692364720.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/2/2_ 0.0032612120.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0380/3/3_ 0.003261225560.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0380/6/6_ 0.00311181440.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0380/1/1_ 0.0031068000.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0388/8/8W 0.01002519.50.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-07-24 14:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18e72363d9Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 22-Jul-2024 08:11:21 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 5 hours 36 minutes 15 seconds Server load: 0.51 1.09 1.32 Total accesses: 1130 - Total Traffic: 2.9 MB - Total Duration: 92675 CPU Usage: u5.78 s9.38 cu0 cs0 - .00243% CPU load .00181 requests/sec - 4 B/second - 2702 B/request - 82.0133 ms/request 1 requests currently being processed, 49 idle workers ___________________________________________W______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/5/5_ 0.2044223751820.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/9/9_ 0.2061452013310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0360/17/17_ 0.2045705912600.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/8/8_ 0.208405313810420.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/7/7_ 0.1819855230416140.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/38/38_ 0.2014987028040.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0360/31/31_ 0.20149831196800.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0360/7/7_ 0.201496713314870.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 0-0360/40/40_ 0.17148780440.00.050.05 127.0.0.1http/1.1 0-0360/8/8_ 0.20511302980.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/12/12_ 0.20370747580.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/9/9_ 0.17302411703990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/75/75_ 0.18287079311100.00.280.28 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6d24a9cf9bc3 0-0360/20/20_ 0.202575319035490.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/53/53_ 0.18286957014260.00.330.33 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/12/12_ 0.18277379742340.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/6/6_ 0.18257114313763430.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 0-0360/35/35_ 0.182435753888020.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/5/5_ 0.1820531906460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/22/22_ 0.18164613043570.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/13/13_ 0.1915271430516130.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/7/7_ 0.191121533387400.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/15/15_ 0.199110587300.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/8/8_ 0.19858015780.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/19/19_ 0.1984725827870.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/5/5_ 0.192849531688110.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/7/7_ 0.2095355037180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/22/22_ 0.20892561354550.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.208578503760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/19/19_ 0.22149250108880.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/93/93_ 0.208471001420.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/12/12_ 0.2214426078030.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0370/25/25_ 0.2013262403060.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0370/8/8_ 0.1926584668570.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/109/109_ 0.1928706702910.00.310.31 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/10/10_ 0.202507642757340.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/8/8_ 0.2015973845359040.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/9/9_ 0.225102754900.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/41/41_ 0.204856527311830.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/13/13_ 0.20235826015720.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/10/10_ 0.211517808990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/71/71_ 0.204457611711200.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/22/22_ 0.221497420038990.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 1-0378/16/16W 0.22005759.50.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/78/78_ 0.19287098321550.00.230.23 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https://s3-id.cloudwor 1-0370/11/11_ 0.2020521802990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/7/7_ 0.212897578400.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/11/11_ 0.207053215313930.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/9/9_ 0.20194344773060.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1
Found on 2024-07-22 08:11 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d185c6f3211Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 20-Jul-2024 10:27:40 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 7 hours 52 minutes 34 seconds Server load: 0.79 1.04 1.21 Total accesses: 1035 - Total Traffic: 2.7 MB - Total Duration: 80074 CPU Usage: u4.29 s6.89 cu0 cs0 - .00243% CPU load .00225 requests/sec - 6 B/second - 2705 B/request - 77.3662 ms/request 1 requests currently being processed, 49 idle workers ___________________W______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/4/4_ 0.121752810300.00.010.01 127.0.0.1http/1.1 0-0360/8/8_ 0.1519231565113310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/16/16_ 0.151912364760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0360/7/7_ 0.152067321327660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/7/7_ 0.183393130416140.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/33/33_ 0.1616808619170.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/24/24_ 0.161642071510.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/6/6_ 0.1716103020512200.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/40/40_ 0.171596640440.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 0-0360/7/7_ 0.1714619402980.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/11/11_ 0.17138209357490.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/9/9_ 0.17137790703990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/75/75_ 0.18122458311100.00.280.28 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6d24a9cf9bc3 0-0360/19/19_ 0.16172981631690.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/53/53_ 0.18122336014260.00.330.33 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/12/12_ 0.18112758742340.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/6/6_ 0.1892493313763430.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 0-0360/35/35_ 0.18789543888020.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/5/5_ 0.184069806460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0368/12/12W 0.180043539.50.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/11/11_ 0.15209859010020.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/6/6_ 0.152096947620.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/12/12_ 0.1520802405250.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/7/7_ 0.152079924670.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C8BwjQp 0-0360/18/18_ 0.1520786306210.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/5/5_ 0.191203331688110.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/6/6_ 0.15208529144537180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/21/21_ 0.1620800251840.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fQjM 1-0370/7/7_ 0.1620787163490.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/14/14_ 0.19160560398250.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/90/90_ 0.1820770701150.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/11/11_ 0.1915353415878030.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/7/7_ 0.1520984501140.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET //stage3-login.cloudworkengine.net/module.php/core/frontpag 1-0370/8/8_ 0.1910122668570.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/109/109_ 0.1912244602910.00.310.31 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/10/10_ 0.20861442757340.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/7/7_ 0.1521840713549970.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/7/7_ 0.1914140716350660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/40/40_ 0.1819125546360.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0370/13/13_ 0.2071205015720.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/9/9_ 0.1817296478990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/70/70_ 0.1817532408850.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/18/18_ 0.19161236011920.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /app/config/parameters.yml HTTP/1.1 1-0370/8/8_ 0.19138177355620.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/78/78_ 0.19122477321550.00.230.23 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https://s3-id.cloudwor 1-0370/11/11_ 0.204059702990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/4/4_ 0.181738612104340.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.1820128753510860.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9bRiR 1-0370/9/9_ 0.202972377306
Found on 2024-07-20 10:27 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18b093a836Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 18-Jul-2024 11:46:04 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 9 hours 10 minutes 58 seconds Server load: 1.14 1.19 1.36 Total accesses: 907 - Total Traffic: 2.4 MB - Total Duration: 67804 CPU Usage: u2.74 s4.48 cu0 cs0 - .00247% CPU load .0031 requests/sec - 8 B/second - 2825 B/request - 74.7563 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/4/4_ 0.1271850300.00.010.01 127.0.0.1http/1.1 0-0360/8/8_ 0.152421965113310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/16/16_ 0.15231404760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0360/7/7_ 0.15386361327660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/6/6_ 0.158132131910050.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0368/23/23W 0.16009129.50.080.08 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/6/6_ 0.131266708330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/5/5_ 0.1312658168090.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/8/8_ 0.131265650350.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/6/6_ 0.1312653702970.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/9/9_ 0.1412541534610.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0360/8/8_ 0.1412519502580.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/66/66_ 0.1412503524110510.00.260.26 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/19/19_ 0.164885631690.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/49/49_ 0.14124607514050.00.330.33 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0360/10/10_ 0.141161836840.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0360/5/5_ 0.1411477214670.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/34/34_ 0.141102100250.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 0-0360/4/4_ 0.1510966216460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0360/4/4_ 0.156942827041740.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/11/11_ 0.1541763010020.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/6/6_ 0.15415987620.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/12/12_ 0.153992805250.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/7/7_ 0.15398964670.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C8BwjQp 0-0360/18/18_ 0.153976706210.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/4/4_ 0.141161911134740.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/6/6_ 0.1540433144537180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/21/21_ 0.163990651840.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fQjM 1-0370/7/7_ 0.163977563490.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/13/13_ 0.13126575698190.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/90/90_ 0.183961101150.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/10/10_ 0.13126569074860.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/7/7_ 0.154174901140.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET //stage3-login.cloudworkengine.net/module.php/core/frontpag 1-0370/5/5_ 0.1411585045500.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0370/104/104_ 0.14124617462540.00.300.30 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/9/9_ 0.1411475261830.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0370/7/7_ 0.155031113549970.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/6/6_ 0.141254345747380.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/40/40_ 0.182315946360.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0370/11/11_ 0.15109662413660.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0370/9/9_ 0.18486878990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/70/70_ 0.18722808850.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/9/9_ 0.13126581611890.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/7/7_ 0.1412539034910.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3c9974c40f7b 1-0370/74/74_ 0.14125179012160.00.210.21 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/10/10_ 0.1510526362990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/4/4_ 0.1857652104340.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.183319153510860.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9bRiR 1-0370/6/6_ 0.1
Found on 2024-07-18 11:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1837c4f5d0Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:04 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 58 seconds Server load: 0.89 1.00 1.26 Total accesses: 139 - Total Traffic: 529 kB - Total Duration: 28740 CPU Usage: u.99 s1.79 cu0 cs0 - .0024% CPU load .0012 requests/sec - 4 B/second - 3897 B/request - 206.763 ms/request 2 requests currently being processed, 48 idle workers ____________K_______________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038618770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072612000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039699427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039505080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349161262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261027260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404562310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03646/46/46K 0.0300272171.70.170.17 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /login.action HTTP/1.1 0-0360/4/4_ 0.00114013013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950540298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039485074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027733229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037074168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557875711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238861783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03743/43/43W 0.0200792121.90.120.12 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/2/2_ 0.0090386140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d1825dca4eeApache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:03 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 57 seconds Server load: 0.89 1.00 1.26 Total accesses: 127 - Total Traffic: 475 kB - Total Duration: 28701 CPU Usage: u.98 s1.79 cu0 cs0 - .00239% CPU load .0011 requests/sec - 4 B/second - 3829 B/request - 225.992 ms/request 2 requests currently being processed, 48 idle workers ____________W_______________________________K_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038618770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072612000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039699427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039505080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349151262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261017260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404562310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03641/41/41W 0.0200254161.80.160.16 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/4/4_ 0.00114013013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950440298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039484074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027733229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037074168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557865711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238851783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03736/36/36K 0.020077177.40.080.08 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /v2/_catalog HTTP/1.1 1-0370/2/2_ 0.0090386140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18fb7fc4c8Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:03 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 57 seconds Server load: 0.89 1.00 1.26 Total accesses: 113 - Total Traffic: 454 kB - Total Duration: 28538 CPU Usage: u.98 s1.79 cu0 cs0 - .00239% CPU load .000976 requests/sec - 4 B/second - 4114 B/request - 252.549 ms/request 2 requests currently being processed, 48 idle workers ____________W_______________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038518770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072611000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039698427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039504080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349151262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261017260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404462310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03630/30/30W 0.020091145.50.140.14 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64c12d8a90622 0-0360/4/4_ 0.00114012013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950440298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039484074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027732229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037064168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557865711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238851783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03733/33/33W 0.020077072.80.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/2/2_ 0.0090385140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3184596d1884596d18ca488822Apache Status Apache Server Status for s3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:04 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 58 seconds Server load: 0.89 1.00 1.26 Total accesses: 149 - Total Traffic: 552 kB - Total Duration: 28841 CPU Usage: u.99 s1.79 cu0 cs0 - .0024% CPU load .00129 requests/sec - 4 B/second - 3793 B/request - 193.564 ms/request 2 requests currently being processed, 48 idle workers ____________W_______________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038618770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072612000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039699427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039505080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349161262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261027260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404662310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03646/46/46W 0.0300272171.70.170.17 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/4/4_ 0.00114013013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950540298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039485074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027733229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037074168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557875711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238861783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03754/54/54K 0.0200893146.40.140.14 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/2/2_ 0.0090386140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at s3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 13.35.58.8
Domain: stage3-login.cloudworkengine.net
Port: 443
URL: https://stage3-login.cloudworkengine.netFirst seen 2024-07-16 10:43
Last seen 2024-11-06 14:23
Open for 113 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b139a2fe65fApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 06-Nov-2024 14:23:58 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 10 hours 39 minutes 6 seconds Server load: 1.19 1.03 1.07 Total accesses: 1194 - Total Traffic: 3.5 MB - Total Duration: 361207 CPU Usage: u8.13 s13.82 cu0 cs0 - .00269% CPU load .00146 requests/sec - 4 B/second - 3069 B/request - 302.518 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/10/10_ 0.2354246211182580.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/16/16_ 0.2349881038980.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /phpinfo HTTP/1.1 0-0330/30/30_ 0.2441301066420.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/27/27_ 0.234645516347190.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/22/22_ 0.242105020400.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0338/59/59W 0.2400122929.60.180.18 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 0-0330/10/10_ 0.2013111752100370.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_7221272db 0-0330/24/24_ 0.20128602361281740.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/14/14_ 0.20126093557760.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_46978cf35 0-0330/9/9_ 0.20123586548167710.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.2012180963158810.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/14/14_ 0.2011777872107340.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_15434791c 0-0330/26/26_ 0.2011502631825190.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/14/14_ 0.20113361543180.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_14f3f56b6 0-0330/9/9_ 0.20107940333117280.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.201040156774610.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b8bb6a75e 0-0330/32/32_ 0.21101760328100.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0330/13/13_ 0.219425513322900.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/10/10_ 0.21859701142240.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/33/33_ 0.2160323224690.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT 0-0330/37/37_ 0.23603127117560.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/27/27_ 0.2360295585730.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/15/15_ 0.2360237958960.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/29/29_ 0.2360160611830.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/20/20_ 0.2358491030000.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /.env HTTP/1.1 1-0340/14/14_ 0.2992056370180.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0340/93/93_ 0.30647925113370.00.150.15 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1 1-0340/9/9_ 0.3060323122670.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0340/91/91_ 0.3060323036840.00.130.13 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0340/28/28_ 0.31602958224240.00.140.14 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/12/12_ 0.31602538720300.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/58/58_ 0.3260149764910.00.180.18 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/47/47_ 0.3359999624740.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/24/24_ 0.3358483044480.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /.env HTTP/1.1 1-0340/34/34_ 0.334810857340300.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/36/36_ 0.3349908036640.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /_profiler/phpinfo HTTP/1.1 1-0340/19/19_ 0.33435966835940.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/28/28_ 0.332110078100.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/20/20_ 0.2912682634075160.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/18/18_ 0.332129552950.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/12/12_ 0.29129333526220.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_72addfad4 1-0340/10/10_ 0.291243187828790.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_0f17de2fa 1-0340/10/10_ 0.2912229713524020.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/15/15_ 0.29119303615330.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_56e0d9dc5 1-0340/11/11_ 0.29116613286996880.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/10/10_ 0.291147633202167070.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fJDT 1-0340/27/27_ 0.291113937326530.00.0
Found on 2024-11-06 14:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1321c2a17fApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 04-Nov-2024 16:02:35 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 12 hours 17 minutes 44 seconds Server load: 2.36 1.69 1.08 Total accesses: 994 - Total Traffic: 2.8 MB - Total Duration: 308404 CPU Usage: u6.56 s10.89 cu0 cs0 - .00269% CPU load .00153 requests/sec - 4 B/second - 2930 B/request - 310.266 ms/request 1 requests currently being processed, 49 idle workers _______________________W__________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/8/8_ 0.1786064381178240.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/7/7_ 0.1783555532680.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_8940c25c3 0-0330/26/26_ 0.1781033461570.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/25/25_ 0.1776013343890.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/18/18_ 0.1773494317810.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_1e4e99d2e 0-0330/50/50_ 0.1770982349150.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.186597835599330.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/23/23_ 0.1863071882274510.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0330/13/13_ 0.1961153557660.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6b49e412c 0-0330/8/8_ 0.19586383144156730.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.195676026346190.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/13/13_ 0.19561275105890.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6438c5790 0-0330/25/25_ 0.195361534218820.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/13/13_ 0.19506906843070.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e782bfb50 0-0330/8/8_ 0.1947891335110610.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.19451394773250.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_f650d03d6 0-0330/28/28_ 0.194256635621310.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/12/12_ 0.1940063420230.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fbfda6316 0-0330/8/8_ 0.193755531238860.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/25/25_ 0.19350039615550.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b05e6dc03 0-0330/26/26_ 0.1931772798790.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a62cfa952 0-0330/23/23_ 0.19283955485570.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_9a4d72166 0-0330/8/8_ 0.191206426942930.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0338/16/16W 0.190011549.60.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 0-0330/18/18_ 0.1786682628320.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/10/10_ 0.264004934663290.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/87/87_ 0.26375412110660.00.110.11 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e4f8be43d 1-0340/8/8_ 0.263499332022650.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/90/90_ 0.263176131036820.00.120.12 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/15/15_ 0.262837228020990.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/11/11_ 0.268067718550.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/38/38_ 0.2586687519080.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/42/42_ 0.2586662014150.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /robots.txt HTTP/1.1 1-0340/21/21_ 0.2586055436110.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/21/21_ 0.2583549220490.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a032b385c 1-0340/34/34_ 0.2578522336620.00.170.17 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4f9f71c4e 1-0340/18/18_ 0.2573505534570.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_d62d69fde 1-0340/9/9_ 0.2568492577950.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a58b69c2a 1-0340/19/19_ 0.26630721868350.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/15/15_ 0.257099536144240.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/10/10_ 0.25634729226100.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fe4b45a3f 1-0340/9/9_ 0.266096032727230.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/9/9_ 0.2658453521310.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_88b0e650e 1-0340/14/14_ 0.26564048115210.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/10/10_ 0.265402618039490.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/8/8_ 0.26535853100670.00.020.02
Found on 2024-11-04 16:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133911eb43Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 02-Nov-2024 14:46:19 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 11 hours 1 minute 28 seconds Server load: 0.80 0.82 0.69 Total accesses: 744 - Total Traffic: 2.0 MB - Total Duration: 200276 CPU Usage: u4.66 s8.11 cu0 cs0 - .00271% CPU load .00158 requests/sec - 4 B/second - 2802 B/request - 269.188 ms/request 1 requests currently being processed, 49 idle workers ____________W_____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/6/6_ 0.1336987315164110.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/5/5_ 0.1331565105130380.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/23/23_ 0.1327406535970.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4ddb39d23 0-0330/22/22_ 0.132489329336870.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/12/12_ 0.1322994512640.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4ded91c57 0-0330/48/48_ 0.132048035746680.00.160.16 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/7/7_ 0.131796913585880.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_53c05641f 0-0330/8/8_ 0.131523491535930.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.1312590551090.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_12138395d 0-0330/6/6_ 0.149934341493730.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/8/8_ 0.14463144034030.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/11/11_ 0.146713105700.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0338/13/13W 0.140011799.60.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 0-0330/10/10_ 0.1255664532480.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_3bdfe5a78 0-0330/5/5_ 0.12531561427103690.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.135234713126940.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/7/7_ 0.13506495613960.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_2b60bf484 0-0330/9/9_ 0.1349203519900.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_daf9a6529 0-0330/5/5_ 0.134668952018520.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/22/22_ 0.1345622611270.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_eb6cb5107 0-0330/22/22_ 0.134311178930360.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/16/16_ 0.13401368478630.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_dd51d1ff3 0-0330/5/5_ 0.133773646737360.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.13375586700.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0330/5/5_ 0.1337010226150.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/7/7_ 0.184813331943060.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/84/84_ 0.18462794101210.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_466adcd19 1-0340/5/5_ 0.184377132316080.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/83/83_ 0.1841267517970.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_68f5d5be7 1-0340/12/12_ 0.193957618530.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0340/7/7_ 0.1937585312470.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/24/24_ 0.1937552012080.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/30/30_ 0.1936996013300.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/15/15_ 0.193423658890.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b03f7fe6a 1-0340/19/19_ 0.1928068520330.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fa712be2d 1-0340/22/22_ 0.192550139624210.00.140.14 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/12/12_ 0.2024814833020.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0340/7/7_ 0.201987175677740.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/16/16_ 0.201460029866460.00.080.08 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.2022382536750.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_a8a47246b 1-0340/8/8_ 0.2017358517510.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_8be4db06f 1-0340/7/7_ 0.20119407114020.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4396fe1c4 1-0340/6/6_ 0.207285419920.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_6e87c9e53 1-0340/12/12_ 0.20198057020.00.060.06 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_5e86d0f39 1-0340/8/8_ 0.20611729140.00.050.05 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/5/5_ 0.175642129645150.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET
Found on 2024-11-02 14:46 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1320aaa949Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 01-Nov-2024 09:00:13 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 5 hours 15 minutes 22 seconds Server load: 6.11 1.98 1.15 Total accesses: 586 - Total Traffic: 1.5 MB - Total Duration: 144310 CPU Usage: u3.52 s6.48 cu0 cs0 - .00274% CPU load .00161 requests/sec - 4 B/second - 2661 B/request - 246.263 ms/request 1 requests currently being processed, 49 idle workers ______________________________________________W___.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/4/4_ 0.08269727494151340.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.08252691249240.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/21/21_ 0.082353732615490.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/20/20_ 0.082098332630900.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/10/10_ 0.0818543512520.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e7c3c097d 0-0330/46/46_ 0.111789122930.00.150.15 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0330/5/5_ 0.1115963583090.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_ac193e81d 0-0330/6/6_ 0.11137662979120.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/9/9_ 0.1111610449500.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_8397575d9 0-0330/4/4_ 0.11950333517720.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/6/6_ 0.11730159280.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_3c81a5169 0-0330/5/5_ 0.11512035298540.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/4/4_ 0.11293759320.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_24512b5a6 0-0330/9/9_ 0.11789116532380.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.064972031817990.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.0647212524190.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_12bef603b 0-0330/5/5_ 0.064495845440.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_1dcdbc7e3 0-0330/7/7_ 0.064239332119690.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.0639902791930.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_1b3ec70ca 0-0330/20/20_ 0.07374663208810.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/20/20_ 0.073504466540.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4c853d17c 0-0330/14/14_ 0.083326637676820.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0330/3/3_ 0.083262132220410.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0330/3/3_ 0.083020010360.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_4df9a752e 0-0330/3/3_ 0.082868433519560.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/5/5_ 0.1241985428910.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_401ddeb38 1-0340/82/82_ 0.12395204622101020.00.100.10 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/3/3_ 0.1237082132800.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_086a0a208 1-0340/81/81_ 0.123467234417750.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.123326610660.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/5/5_ 0.1232240712290.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_e7b329792 1-0340/21/21_ 0.122981335610960.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/9/9_ 0.122778332112920.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/13/13_ 0.122649856760.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_2b0265695 1-0340/17/17_ 0.1224004620100.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_d42463b55 1-0340/19/19_ 0.142203319770.00.130.13 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0340/6/6_ 0.142055517726910.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_900af4c25 1-0340/5/5_ 0.141629933362490.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/14/14_ 0.141194131855960.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/4/4_ 0.141818030215560.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.141410314510770.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_b575c3fd1 1-0340/5/5_ 0.149848512490.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_82fa5a9f2 1-0340/4/4_ 0.14766035919650.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/6/6_ 0.14547456560.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/multiauth/selectsource.php?AuthState=_fee63c548 1-0340/5/5_ 0.14328730321350.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0340/4/4_ 0.141114
Found on 2024-11-01 09:00 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1312b8b693Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 30-Oct-2024 11:04:30 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 7 hours 19 minutes 39 seconds Server load: 0.71 1.90 1.60 Total accesses: 289 - Total Traffic: 622 kB - Total Duration: 27492 CPU Usage: u2.03 s3.33 cu0 cs0 - .00269% CPU load .00145 requests/sec - 3 B/second - 2203 B/request - 95.128 ms/request 1 requests currently being processed, 49 idle workers ___________________W______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0330/18/18_ 0.0018051722120.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0330/17/17_ 0.011772080210.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /secured/phpinfo.php HTTP/1.1 0-0330/7/7_ 0.01177188020.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /application-dev.properties HTTP/1.1 0-0330/29/29_ 0.011771510150.00.030.03 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /src/main/resources/application.properties HTTP/1.1 0-0330/2/2_ 0.0117424361700.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0330/2/2_ 0.01161182101990.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/6/6_ 0.02123479240860.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0330/1/1_ 0.021225411352700.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 0-0330/3/3_ 0.0297881931870.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 0-0330/1/1_ 0.02803753256510.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/1/1_ 0.02553374358700.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/6/6_ 0.024347221390.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /resources/icons/clipboard.svg HTTP/1.1 0-0330/1/1_ 0.023769757611520.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/1/1_ 0.022898779715940.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0330/3/3_ 0.03259620270.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 0-0330/5/5_ 0.03253493226530.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0330/1/1_ 0.032533110200.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0338/8/8W 0.0400119.60.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 1-0340/3/3_ 0.052533020522290.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0340/80/80_ 0.06564315850.00.090.09 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 1-0340/2/2_ 0.00196480813230.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/18/18_ 0.001792081160.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0340/6/6_ 0.00177198030.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /appsettings.json HTTP/1.1 1-0340/10/10_ 0.01177176020.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /config/aws.json HTTP/1.1 1-0340/14/14_ 0.011771350130.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST / HTTP/1.1 1-0340/2/2_ 0.0116279162160.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/2/2_ 0.0115544364440.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0340/2/2_ 0.021234796180.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0340/11/11_ 0.02123472043420.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0340/1/1_ 0.02123479250.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 1-0340/3/3_ 0.0212347561120.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/2/2_ 0.031234592225370.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9ayc2 1-0340/1/1_ 0.031097612775550.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/3/3_ 0.03970266440.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/2/2_ 0.0375860193340.00.020.02 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/1/1_ 0.03463462464930.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0340/2/2_ 0.03434728280.00.040.04 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0340/1/1_ 0.03361413667320.00.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0340/1/1_ 0.0325997250.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET / HTTP/1.1 1-0340/10/10_ 0.0425350761610.00.070.07 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-10-30 11:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13aed5f845Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 28-Oct-2024 08:55:45 UTC Restart Time: Monday, 28-Oct-2024 03:44:51 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 hours 10 minutes 54 seconds Server load: 1.11 1.18 1.24 Total accesses: 10 - Total Traffic: 13 kB - Total Duration: 528 CPU Usage: u.25 s.24 cu0 cs0 - .00263% CPU load .000536 requests/sec - 0 B/second - 1331 B/request - 52.8 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0338/8/8W 0.00002049.60.010.01 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /server-status HTTP/1.1 1-0340/2/2_ 0.0015955813230.00.000.00 127.0.0.1http/1.1ip-10-1-103-145.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-10-28 08:55 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1386f9f47dApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 26-Oct-2024 07:52:58 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 33 days 51 minutes 8 seconds Server load: 0.67 1.23 1.37 Total accesses: 7050 - Total Traffic: 23.9 MB - Total Duration: 2853687 CPU Usage: u28.01 s49.51 cu0 cs0 - .00272% CPU load .00247 requests/sec - 8 B/second - 3556 B/request - 404.778 ms/request 1 requests currently being processed, 49 idle workers _________________________________________W________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/136/136_ 1.735222215227520.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/113/113_ 1.7352684298910.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/167/167_ 1.7351825546150.00.640.64 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/147/147_ 1.735317222305090.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/106/106_ 1.735583230564640.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/172/172_ 1.735140269305600.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/124/124_ 1.7348341517551470.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/137/137_ 1.7351055250800.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/128/128_ 1.734757277191390.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/130/130_ 1.744691209182290.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/146/146_ 1.744628218375780.00.460.46 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/120/120_ 1.744548216344340.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/126/126_ 1.7544045399920.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/113/113_ 1.7444954652970.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/121/121_ 1.754447212357150.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/112/112_ 1.754363217218670.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/107/107_ 1.7543174335120.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/117/117_ 1.7522523273530.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/193/193_ 1.754278222338280.00.570.57 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/195/195_ 1.73563451392390.00.740.74 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/153/153_ 1.7355374247370.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/193/193_ 1.7354832381506810.00.710.71 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/123/123_ 1.735397215493830.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/141/141_ 1.7354375380530.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/129/129_ 1.7353585334290.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/122/122_ 1.7652935293900.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9d66953e2 1-0350/145/145_ 1.7652013634400.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b0faec8c7 1-0350/165/165_ 1.7651595696060.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4d01ef72d 1-0350/188/188_ 1.7647234554910.00.730.73 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c974534ad 1-0350/155/155_ 1.7651223406670.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_77b252ec2 1-0350/119/119_ 1.7650885498890.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7bbe6e36d 1-0350/173/173_ 1.7746594605030.00.710.71 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0feeffec7 1-0350/127/127_ 1.7647973591700.00.460.46 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f7f8862d8 1-0350/125/125_ 1.7745915621550.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f98436ea5 1-0350/121/121_ 1.7745215492780.00.460.46 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2028e365f 1-0350/162/162_ 1.7744236668970.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_dcdd3e23e 1-0350/136/136_ 1.78429641403050.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_81f6fecd6 1-0350/90/90_ 1.7744724458350.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_48de664eb 1-0350/125/125_ 1.7826327779820.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/128/128_ 1.7843375502920.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c52ede7ec 1-0350/145/145_ 1.7843843352040.00.520.52 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c14b46d03 1-0358/103/103W 1.7800694129.60.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/159/159_ 1.765557281799090.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f3e91444a 1-0350/185/185_ 1.7656104877290.00.580.58 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_29d51ff12 1-0350/181/181_ 1.76541741729850.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /mod
Found on 2024-10-26 07:52 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133e7ed553Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 24-Oct-2024 10:09:50 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 31 days 3 hours 8 minutes Server load: 0.68 1.87 1.92 Total accesses: 5015 - Total Traffic: 17.6 MB - Total Duration: 2046986 CPU Usage: u25.97 s46.32 cu0 cs0 - .00269% CPU load .00186 requests/sec - 6 B/second - 3680 B/request - 408.173 ms/request 1 requests currently being processed, 49 idle workers ___________________________W______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/97/97_ 1.26304665184310.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9f9174791 0-0340/67/67_ 1.266073320249860.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/120/120_ 1.2691322448570.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/113/113_ 1.26911959290070.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c169664a6 0-0340/73/73_ 1.262666010139447580.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/135/135_ 1.2575900342159520.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/87/87_ 1.2568763299314210.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/101/101_ 1.257144349220100.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3890cb099 0-0340/90/90_ 1.2561529100163830.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7f7dcdfca 0-0340/70/70_ 1.2549785106152810.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_47d15128c 0-0340/111/111_ 1.254710365344150.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d46e6db71 0-0340/82/82_ 1.2544912365280820.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/88/88_ 1.2543598721263730.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/76/76_ 1.25442720347650.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 0-0340/80/80_ 1.25442440331600.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /phpinfo HTTP/1.1 0-0340/70/70_ 1.254036250196490.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fc4b714f2 0-0340/68/68_ 1.25373941270216230.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/70/70_ 1.2632861243233860.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/152/152_ 1.263450154267920.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6c26d22b0 0-0340/158/158_ 1.2629909541367660.00.640.64 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_22a4b1c25 0-0340/118/118_ 1.262363462184580.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/158/158_ 1.26212311301444630.00.610.61 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5cef6582e 0-0340/89/89_ 1.261464649459860.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6c5898f05 0-0340/108/108_ 1.2617706330345310.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/82/82_ 1.2610889295232130.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/80/80_ 1.26759875175930.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_432fef11e 1-0350/109/109_ 1.26153757386570.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_118264d66 1-0358/110/110W 1.2600369719.60.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/143/143_ 1.2456759371462400.00.580.58 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/117/117_ 1.247350977129860.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_de70b7f9d 1-0350/73/73_ 1.24690428340270.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/135/135_ 1.2448082354255670.00.590.59 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/85/85_ 1.2466487367269630.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/86/86_ 1.244607152527060.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_73582fef9 1-0350/86/86_ 1.2544725114266030.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/102/102_ 1.25442310563710.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.env HTTP/1.1 1-0350/96/96_ 1.2535956521090730.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_56613d7b8 1-0350/54/54_ 1.25442610192730.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /info.php HTTP/1.1 1-0350/89/89_ 1.25329537184465330.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/81/81_ 1.2538849350303480.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/103/103_ 1.254202645146250.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a606aec52 1-0350/61/61_ 1.2531427317420580.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/115/115_ 1.25249563541512780.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/147/147_ 1.252828752407270.00.450.45 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_11dcb6570 1-0350/140/140_ 1.2616182621531230.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d974dc55f 1-0350/102/102_ 1.262292352143410.00.3
Found on 2024-10-24 10:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133da3905dApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 22-Oct-2024 13:58:03 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 29 days 6 hours 56 minutes 13 seconds Server load: 1.05 0.82 0.76 Total accesses: 4756 - Total Traffic: 16.8 MB - Total Duration: 1900385 CPU Usage: u24.45 s43.45 cu0 cs0 - .00268% CPU load .00188 requests/sec - 6 B/second - 3693 B/request - 399.576 ms/request 1 requests currently being processed, 49 idle workers __________________W_______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process <SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/93/93_ 1.1946554135176010.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/64/64_ 1.19481074231800.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/117/117_ 1.19427051608429750.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/110/110_ 1.195082958233780.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ef1ff7777 0-0340/69/69_ 1.1991427223241300.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/133/133_ 1.1938524111151490.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/81/81_ 1.1936781360258900.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/99/99_ 1.1932262323218940.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_33e5fb3b1 0-0340/88/88_ 1.1929233341161580.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/68/68_ 1.192618449149130.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0546c3ce2 0-0340/106/106_ 1.1924697243342760.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/79/79_ 1.202168363223920.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8af3db6cf 0-0340/84/84_ 1.2014545128245900.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/74/74_ 1.202014752347650.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4772e3e04 0-0340/67/67_ 1.20179923322830.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d36605fb3 0-0340/68/68_ 1.2061910186480.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.env HTTP/1.1 0-0340/65/65_ 1.2017357186180.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/67/67_ 1.19112793233214740.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0348/140/140W 1.2000265519.60.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/148/148_ 1.1995044791358290.00.580.58 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9d51b5719 0-0340/115/115_ 1.1980615128180870.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3778aa3a2 0-0340/155/155_ 1.19763923431427880.00.600.60 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/84/84_ 1.196785593454500.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_15aaf7e10 0-0340/105/105_ 1.197236596330230.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6cabb9bd7 0-0340/79/79_ 1.19546340213030.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/77/77_ 1.1748127387160530.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/106/106_ 1.174540760382260.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_00b5fb4c7 1-0350/100/100_ 1.173972553365170.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_48fad4bc5 1-0350/140/140_ 1.1827737127447280.00.560.56 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cc0b39dc1 1-0350/100/100_ 1.18381861106620.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/70/70_ 1.183381153337480.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_697543d5b 1-0350/118/118_ 1.182478592241830.00.510.51 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/72/72_ 1.1830780356144810.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.18231642516525080.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/77/77_ 1.18215183178680.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/94/94_ 1.181487879468570.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/94/94_ 1.18698761078650.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f22b839f7 1-0350/52/52_ 1.1818504306191240.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/86/86_ 1.1611279968317620.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9eeb2a57b 1-0350/78/78_ 1.183949556292400.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/87/87_ 1.181093159124220.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/58/58_ 1.17978713198407510.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/112/112_ 1.178411571499410.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/135/135_ 1.1794692121384750.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/137/137_ 1.17711673521523940.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/99/99_ 1.1779170421135780.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl
Found on 2024-10-22 13:57 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13e06b256dApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 20-Oct-2024 12:45:31 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 27 days 5 hours 43 minutes 40 seconds Server load: 2.16 0.88 0.70 Total accesses: 4532 - Total Traffic: 16.1 MB - Total Duration: 1798043 CPU Usage: u22.8 s40.41 cu0 cs0 - .00269% CPU load .00193 requests/sec - 7 B/second - 3721 B/request - 396.744 ms/request 1 requests currently being processed, 49 idle workers _________________________________W________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/91/91_ 1.141957662142910.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_915509c12 0-0340/53/53_ 1.1422305474215380.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/115/115_ 1.1416855284396380.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/108/108_ 1.1425029222227590.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/67/67_ 1.144335765229860.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ce07bd9c 0-0340/131/131_ 1.141412962133190.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a7cab100d 0-0340/79/79_ 1.1511157391227820.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/97/97_ 1.158096147212400.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_496efd65c 0-0340/86/86_ 1.155238416153660.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/65/65_ 1.15256464146450.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5c0f666c1 0-0340/104/104_ 1.1559320332040.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/76/76_ 1.14634105212620.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_daf220048 0-0340/80/80_ 1.1457498186235980.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d0e3187e7 0-0340/69/69_ 1.146133753346160.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_50b6d0365 0-0340/63/63_ 1.1460003292307320.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/61/61_ 1.145338287178320.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f4791e633 0-0340/61/61_ 1.1448372104161630.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_22e3994e7 0-0340/65/65_ 1.14449484204850.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/130/130_ 1.1445750116262750.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/146/146_ 1.144432641354440.00.570.57 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/109/109_ 1.1441908189176330.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/137/137_ 1.1439407561389320.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_870d5598f 0-0340/82/82_ 1.1433341114447750.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d89b6be67 0-0340/91/91_ 1.1437720343221090.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/74/74_ 1.1429963331184440.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/75/75_ 1.1324042317151060.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/104/104_ 1.1318596326379860.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/97/97_ 1.131587467251900.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_26e7588fc 1-0350/138/138_ 1.13429266444620.00.560.56 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8feed055f 1-0350/81/81_ 1.1313133311100630.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/68/68_ 1.131004453333450.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_95c3ce570 1-0350/116/116_ 1.131649404239870.00.500.50 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/68/68_ 1.137002376137410.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0358/72/72W 1.1400473289.60.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/73/73_ 1.116250899174370.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cc1485f5e 1-0350/91/91_ 1.1158393106443820.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7d5ddf647 1-0350/91/91_ 1.114586445361065050.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/49/49_ 1.1160907288181900.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.12449674309660.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/75/75_ 1.1150877348268130.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/84/84_ 1.1155888361121650.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/56/56_ 1.124441091341880.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/101/101_ 1.13421983311488990.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/133/133_ 1.13443065375610.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/134/134_ 1.13358454391516730.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?sp
Found on 2024-10-20 12:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13d7b85045Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 18-Oct-2024 13:58:46 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 25 days 6 hours 56 minutes 56 seconds Server load: 0.84 0.65 0.76 Total accesses: 4365 - Total Traffic: 15.6 MB - Total Duration: 1728471 CPU Usage: u21.2 s37.81 cu0 cs0 - .0027% CPU load .002 requests/sec - 7 B/second - 3755 B/request - 395.984 ms/request 1 requests currently being processed, 49 idle workers _____W____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/89/89_ 1.11563271135790.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_844a46bbf 0-0340/51/51_ 1.11735548204170.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a3cc82818 0-0340/113/113_ 1.11304280385890.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_06b931300 0-0340/106/106_ 1.1184585217690.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_3509379af 0-0340/65/65_ 1.112979478222060.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0348/119/119W 1.1100130599.60.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/75/75_ 1.0882215135216050.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/94/94_ 1.087689177202160.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f4fa1f136 0-0340/83/83_ 1.08765373135410.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a721bbe89 0-0340/62/62_ 1.087133797128910.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75b7479c4 0-0340/101/101_ 1.086098192317700.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fa8032316 0-0340/74/74_ 1.095512566212410.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9b20bf134 0-0340/78/78_ 1.09432456231050.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d71212649 0-0340/67/67_ 1.094912964340380.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e7b712e79 0-0340/61/61_ 1.0946189301299850.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/59/59_ 1.093722663170900.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_810e9938a 0-0340/59/59_ 1.10316578125160.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/60/60_ 1.103164182197190.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/127/127_ 1.103165774258850.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/140/140_ 1.112979611342850.00.560.56 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0340/106/106_ 1.1128101317163670.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/135/135_ 1.11225803581382830.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/80/80_ 1.111432178445370.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2bae4f839 0-0340/88/88_ 1.111981748214070.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f3d4392aa 0-0340/72/72_ 1.1191985176570.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_529e455ba 1-0350/73/73_ 1.1079611891144570.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/102/102_ 1.104476342370190.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/95/95_ 1.101339332249030.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/135/135_ 1.0774043383437140.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/78/78_ 1.07827986891160.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b35fbc7fc 1-0350/65/65_ 1.0779843345315620.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/113/113_ 1.0768638355218970.00.490.49 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/65/65_ 1.07766600121700.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 1-0350/62/62_ 1.0758062397403440.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/71/71_ 1.0752167384165790.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/89/89_ 1.09438331435590.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/89/89_ 1.09316581972790.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0350/47/47_ 1.0746597528166470.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/77/77_ 1.09316419228940.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/73/73_ 1.0934170347256040.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/82/82_ 1.0940273359108380.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/54/54_ 1.09311136338960.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_de4ee4244 1-0350/99/99_ 1.092978581478430.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/128/128_ 1.092979534370700.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/132/132_ 1.09170714011501520.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-035
Found on 2024-10-18 13:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b132087377cApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 16-Oct-2024 16:40:27 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 23 days 9 hours 38 minutes 37 seconds Server load: 0.38 0.96 1.20 Total accesses: 4179 - Total Traffic: 15.0 MB - Total Duration: 1671816 CPU Usage: u19.48 s34.64 cu0 cs0 - .00268% CPU load .00207 requests/sec - 7 B/second - 3765 B/request - 400.052 ms/request 1 requests currently being processed, 49 idle workers __________________________________________W_______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/86/86_ 1.031264488134350.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/49/49_ 1.021264887200150.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/111/111_ 1.0312644698382150.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/98/98_ 1.02126522217207310.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/56/56_ 1.052741678193280.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6a1e05234 0-0340/110/110_ 1.031263917121310.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/74/74_ 1.031186266213330.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/93/93_ 1.0310644069200610.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_78aae9f80 0-0340/81/81_ 1.03101237118129400.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_49f2c5935 0-0340/61/61_ 1.039621969126960.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_716ad5ad9 0-0340/100/100_ 1.039120981315860.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7eaf9b0f5 0-0340/73/73_ 1.038619893211070.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b086781ee 0-0340/77/77_ 1.057264376230920.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0a7c94ff6 0-0340/66/66_ 1.0381008224339090.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/60/60_ 1.0376084809293820.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/58/58_ 1.0566521162169630.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/50/50_ 1.055628410117210.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/59/59_ 1.053242478195540.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_05ec0998a 0-0340/123/123_ 1.05464531257280.00.400.40 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/139/139_ 1.05299901342830.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0340/104/104_ 1.001267195149340.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn.php?StateId=_f28de39 0-0340/121/121_ 1.0112664771365160.00.470.47 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/72/72_ 1.011265748435190.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/71/71_ 1.011266007185410.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/67/67_ 1.011265520138640.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/71/71_ 1.04126522997600.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/99/99_ 1.041264799344240.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/93/93_ 1.051264298237100.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/134/134_ 1.0598725407429470.00.550.55 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/77/77_ 1.05126367789790.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/64/64_ 1.05109085343308710.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/112/112_ 1.0593714328211870.00.480.48 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/64/64_ 1.05103846369121700.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/61/61_ 1.05887031384395490.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/70/70_ 1.0583686393158100.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/71/71_ 1.0575750117432540.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/87/87_ 1.0555795431972740.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/46/46_ 1.058035846155900.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fdc7c3c10 1-0350/76/76_ 1.0633628280228750.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/72/72_ 1.0556298420249090.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/81/81_ 1.0567799245101200.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/53/53_ 1.0629919321338840.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0358/86/86W 1.06001459979.60.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/122/122_ 1.06249036303369630.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/130/130_ 1.041265942971493340.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/93/93_ 1.0312665825112440.00.340.34 127.0.0.1ht
Found on 2024-10-16 16:40 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b137072a3dfApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 14-Oct-2024 08:47:40 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 21 days 1 hour 45 minutes 50 seconds Server load: 0.34 0.69 0.81 Total accesses: 3499 - Total Traffic: 12.6 MB - Total Duration: 1407922 CPU Usage: u17.34 s30.93 cu0 cs0 - .00265% CPU load .00192 requests/sec - 7 B/second - 3765 B/request - 402.378 ms/request 1 requests currently being processed, 49 idle workers ____________________W_____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/69/69_ 0.79248431124000.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/45/45_ 0.7827930438190490.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/57/57_ 0.7864611206168770.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/71/71_ 0.7772463262173920.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/53/53_ 0.85187690189910.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/99/99_ 0.79222871687930.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/65/65_ 0.792186681145480.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/83/83_ 0.80198801172280.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/71/71_ 0.80198808112750.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/55/55_ 0.80191539119900.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/88/88_ 0.821906751301850.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/65/65_ 0.821904944181880.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/64/64_ 0.84188360221970.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/61/61_ 0.8318954268234030.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/52/52_ 0.84188471268050.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/45/45_ 0.85188181156850.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/38/38_ 0.851881879111350.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/35/35_ 0.85188049175970.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/102/102_ 0.85187818249950.00.370.37 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/104/104_ 0.86855971263070.00.430.43 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0348/85/85W 0.860064169.60.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/101/101_ 0.771156191961353600.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/64/64_ 0.77984226149940.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/58/58_ 0.77109946512167530.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/56/56_ 0.7792088788220.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/63/63_ 0.845417325780190.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/77/77_ 0.84243656313520.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/73/73_ 0.8421908150194670.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/111/111_ 0.85198520406210.00.440.44 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/65/65_ 0.8421866881400.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/51/51_ 0.8419880270153040.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/93/93_ 0.87190739175380.00.390.39 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/57/57_ 0.87190678111100.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/57/57_ 0.88190413954359850.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1 1-0350/65/65_ 0.88189549138570.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/66/66_ 0.88188360288840.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0350/70/70_ 0.901878165948750.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/42/42_ 0.8818847954030.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/66/66_ 0.91187690173930.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/65/65_ 0.90188010221210.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/74/74_ 0.8918818990760.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/42/42_ 0.9199632253177390.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVNNj9owEL3vr4hyzydRA 1-0350/62/62_ 0.8312128711434830.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/104/104_ 0.917486122220960.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/112/112_ 0.8310185501334760.00.350.35 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0350/77/77_ 0.8311433136883120.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/65/65_ 0.8396820074300.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.c
Found on 2024-10-14 08:47 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1333af5073Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 12-Oct-2024 09:41:53 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 19 days 2 hours 40 minutes 3 seconds Server load: 0.87 0.94 1.03 Total accesses: 3185 - Total Traffic: 11.5 MB - Total Duration: 1286431 CPU Usage: u15.7 s27.95 cu0 cs0 - .00264% CPU load .00193 requests/sec - 7 B/second - 3774 B/request - 403.903 ms/request 1 requests currently being processed, 49 idle workers ________________________________________________W_.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/50/50_ 0.76459476118740.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_563ce3b10 0-0340/43/43_ 0.7646466740175920.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/55/55_ 0.754725065163640.00.290.29 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_245f7391c 0-0340/70/70_ 0.76415310168670.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/48/48_ 0.761193065185330.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b97e6d17c 0-0340/96/96_ 0.764536123382610.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/53/53_ 0.76447125131300.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ccc997673 0-0340/73/73_ 0.7643993237106800.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/68/68_ 0.764319170112460.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_334c87d25 0-0340/52/52_ 0.7642294304103170.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/67/67_ 0.76401741556134580.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/62/62_ 0.7638057338156420.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/51/51_ 0.7619895320153290.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/50/50_ 0.763652784146800.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e9e376bfa 0-0340/42/42_ 0.76348133514240560.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/35/35_ 0.761849368153100.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c949f470d 0-0340/34/34_ 0.7616923281103490.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/33/33_ 0.761525546173530.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4691c4025 0-0340/98/98_ 0.7613578375243330.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/101/101_ 0.76102993161260000.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/76/76_ 0.7684456657530.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ad37633b8 0-0340/100/100_ 0.7667903081349670.00.380.38 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/62/62_ 0.763589268148550.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0340/57/57_ 0.76518991157280.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_051990ec4 0-0340/54/54_ 0.7619916086860.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_65028355c 1-0350/61/61_ 0.804682224673370.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/74/74_ 0.8045818298312220.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/71/71_ 0.804520970191550.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c81e35ca1 1-0350/105/105_ 0.80429565316353850.00.420.42 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/60/60_ 0.804454029675590.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/45/45_ 0.804379596146370.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e9a724376 1-0350/52/52_ 0.80412955655650.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c0f449df4 1-0350/55/55_ 0.803892592104710.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_478373e36 1-0350/54/54_ 0.8037502709274000.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/58/58_ 0.803590455132850.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d1eac2c9a 1-0350/61/61_ 0.80193384288400.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ec95df1c 1-0350/57/57_ 0.8014565266931250.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/39/39_ 0.803118335551980.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/60/60_ 0.801291363121660.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_47938845e 1-0350/56/56_ 0.801623152159150.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1163175d1 1-0350/69/69_ 0.801786029683420.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/40/40_ 0.8011271352125930.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/44/44_ 0.8077466591431500.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0350/102/102_ 0.8094837375700.00.310.31 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4e41e6e4e 1-0350/111/111_ 0.8045243151334750.00.350.35 127.0.0.1http/1.1
Found on 2024-10-12 09:41 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13b232d80eApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 10-Oct-2024 09:26:17 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 17 days 2 hours 24 minutes 26 seconds Server load: 0.54 0.76 0.96 Total accesses: 2900 - Total Traffic: 10.5 MB - Total Duration: 1173710 CPU Usage: u13.98 s25.05 cu0 cs0 - .00264% CPU load .00196 requests/sec - 7 B/second - 3790 B/request - 404.728 ms/request 1 requests currently being processed, 49 idle workers _______________________________________W__________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/45/45_ 0.6530247153117700.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/36/36_ 0.653048643155640.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/46/46_ 0.643056584139190.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/57/57_ 0.643059177153570.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/verify_login.php HT 0-0340/28/28_ 0.64308828162260.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/94/94_ 0.662963714977920.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/51/51_ 0.66248538128750.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/71/71_ 0.6618030197020.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 0-0340/66/66_ 0.66149608109470.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/50/50_ 0.6714929894410.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/65/65_ 0.6714900203102440.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1 0-0340/60/60_ 0.671366858149530.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/49/49_ 0.6713174144145310.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/47/47_ 0.67136609139830.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/40/40_ 0.6713240198163770.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/33/33_ 0.67131669150120.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/32/32_ 0.6711550793190.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/30/30_ 0.633114210166230.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/93/93_ 0.63311238221480.00.340.34 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/78/78_ 0.6430882411228500.00.320.32 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/64/64_ 0.6430849848330.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/94/94_ 0.6430739101329700.00.360.36 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/42/42_ 0.643069845105910.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/52/52_ 0.643061714148940.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/51/51_ 0.64305984877980.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/56/56_ 0.7030486759450.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/59/59_ 0.702965410576170.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/65/65_ 0.70296371182510.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/102/102_ 0.73149440240340.00.410.41 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/58/58_ 0.701854410568440.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/43/43_ 0.72149537143090.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/50/50_ 0.7314906849500.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/53/53_ 0.731367243101840.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/52/52_ 0.731366054254090.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/56/56_ 0.7313622106127130.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_694b4268ff24 1-0350/59/59_ 0.741315636288200.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/proofup.php?StateId=_f37ea304 1-0350/52/52_ 0.69311129923720.00.230.23 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/37/37_ 0.7313240844800.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/52/52_ 0.693111262113780.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0358/44/44W 0.7500151449.60.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/67/67_ 0.741314220771960.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_f37ea304ebcf 1-0350/37/37_ 0.6930904857640.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/33/33_ 0.6930806471399060.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/99/99_ 0.6930806867080.00.300.30 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/107/107_ 0.6930682600541326240.00.330.33 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1 1-0350/70/70_ 0.6930698860840.00.280.28 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET
Found on 2024-10-10 09:26 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b134102f0d8Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 08-Oct-2024 10:13:07 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 15 days 3 hours 11 minutes 16 seconds Server load: 1.34 1.32 1.19 Total accesses: 1960 - Total Traffic: 6.8 MB - Total Duration: 434561 CPU Usage: u12.08 s22.08 cu0 cs0 - .00261% CPU load .0015 requests/sec - 5 B/second - 3661 B/request - 221.715 ms/request 1 requests currently being processed, 49 idle workers _________________________W________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/40/40_ 0.382270207107270.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/12/12_ 0.4461764282340.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/25/25_ 0.44111887124930.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/43/43_ 0.44230424865290.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/19/19_ 0.4225807247149620.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 0-0340/77/77_ 0.3820585628951110.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/31/31_ 0.3819670626126890.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3vr0Dc%2BQo 0-0340/48/48_ 0.38184027441530.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/31/31_ 0.381574119228840.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/43/43_ 0.39155539187520.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/51/51_ 0.39154229073720.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/37/37_ 0.391258727107210.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/35/35_ 0.4011945732846890.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/42/42_ 0.40991947135490.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/22/22_ 0.4079866678810.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/26/26_ 0.4052551086140.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/22/22_ 0.40490346574220.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/24/24_ 0.40312117163460.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/72/72_ 0.41259772156700.00.240.24 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT 0-0340/44/44_ 0.4225937816542250.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wfresh=0&wauth=http%3a%2f%2fsc 0-0340/52/52_ 0.43253315134430.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/57/57_ 0.44253031190180.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1 0-0340/26/26_ 0.44252691118780.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/34/34_ 0.44241401030010.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/39/39_ 0.4423667821950.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0358/23/23W 0.490021849.60.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/41/41_ 0.42193818715700.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/59/59_ 0.42176907164140.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/68/68_ 0.43157387040890.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/41/41_ 0.4315425910257680.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/31/31_ 0.43144814445110.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/28/28_ 0.4412396630734650.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/32/32_ 0.44107810746410.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/26/26_ 0.44970684227620.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/32/32_ 0.4479766447430.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/31/31_ 0.4433057431109480.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.442998549322160.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/22/22_ 0.44515234328750.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d7d3a8c24d679 1-0350/19/19_ 0.442597718232380.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/20/20_ 0.44259773848490.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/32/32_ 0.4425977037350.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/script.js HTTP/1.1 1-0350/18/18_ 0.452582436923290.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 1-0350/19/19_ 0.452571115242090.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?wauth=http%3a%2f%2fschemas.mic 1-0350/89/89_ 0.4525331727660.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/92/92_ 0.46252695596300.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/57/57_ 0.462414016645960.00.210.21 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/49/49_ 0.48236664651110.00.270.27 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.c
Found on 2024-10-08 10:13 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1326b2134eApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 06-Oct-2024 09:04:31 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 13 days 2 hours 2 minutes 41 seconds Server load: 0.28 0.79 0.82 Total accesses: 1751 - Total Traffic: 6.1 MB - Total Duration: 335592 CPU Usage: u10.44 s18.92 cu0 cs0 - .0026% CPU load .00155 requests/sec - 5 B/second - 3631 B/request - 191.657 ms/request 1 requests currently being processed, 49 idle workers ___________________________W______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/40/40_ 0.38501047107270.00.190.19 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/9/9_ 0.38601223678260.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/23/23_ 0.3861443122122970.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/42/42_ 0.3891899464330.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/18/18_ 0.36115341251144670.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/77/77_ 0.382894028951110.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/31/31_ 0.381979126126890.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3vr0Dc%2BQo 0-0340/48/48_ 0.387112441530.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/30/30_ 0.35187054026980.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/25/25_ 0.3518597010086300.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/48/48_ 0.35175205073420.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/35/35_ 0.351674677101760.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/34/34_ 0.35153400040320.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/40/40_ 0.351394154133830.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/17/17_ 0.3513428811648730.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/25/25_ 0.36133934486140.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/21/21_ 0.361302724872920.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/21/21_ 0.361268017161330.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/67/67_ 0.361257101143200.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/22/22_ 0.361217846543290.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/41/41_ 0.36110493730040.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/54/54_ 0.36108967080430.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/21/21_ 0.3710166116918460.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/32/32_ 0.3892259329790.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=s3.cloudworkengine.net 0-0340/33/33_ 0.3892206521690.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/15/15_ 0.422692419120360.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/41/41_ 0.4216902715700.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0358/49/49W 0.420064109.60.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/65/65_ 0.3518703313340600.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=pZNPbxoxEMW%2Fysr3%2F 1-0350/40/40_ 0.351858768455630.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/26/26_ 0.3516747410835890.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/27/27_ 0.35167394928500.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/30/30_ 0.35140854638450.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/22/22_ 0.351383086135960.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/27/27_ 0.36133953442230.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/30/30_ 0.371298046100850.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/29/29_ 0.371267858321160.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/18/18_ 0.37131462418250.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/13/13_ 0.37122710428510.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/17/17_ 0.37120870647680.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/31/31_ 0.37110583737340.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/17/17_ 0.37110476715910.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/18/18_ 0.37102829639050.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/85/85_ 0.3992239327450.00.250.25 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9YxiV 1-0350/82/82_ 0.4192221492360.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/44/44_ 0.4291918428730.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/40/40_ 0.4270993447480.00.220.22 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A
Found on 2024-10-06 09:04 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133117a918Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 04-Oct-2024 22:09:11 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 11 days 15 hours 7 minutes 20 seconds Server load: 0.59 0.98 0.99 Total accesses: 1546 - Total Traffic: 5.5 MB - Total Duration: 323612 CPU Usage: u9.48 s16.58 cu0 cs0 - .00259% CPU load .00154 requests/sec - 5 B/second - 3711 B/request - 209.322 ms/request 1 requests currently being processed, 49 idle workers __________________W_______________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/38/38_ 0.341083185105410.00.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 0-0340/8/8_ 0.34140959777540.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/22/22_ 0.341409747120520.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/38/38_ 0.3314102734464010.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=pVPLbtswEPwVgXe9ozokb 0-0340/17/17_ 0.32143084170139640.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTdrZcVO 0-0340/76/76_ 0.347920511345310.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/29/29_ 0.347602243219260.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/43/43_ 0.3565791133410.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/30/30_ 0.3561334026980.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/25/25_ 0.356025010086300.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/48/48_ 0.3549485073420.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/HEAD HTTP/1.1 0-0340/35/35_ 0.35417467101760.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/34/34_ 0.3527680040320.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/40/40_ 0.35136954133830.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/17/17_ 0.35856811648730.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/25/25_ 0.368214486140.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/21/21_ 0.3645514872920.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/21/21_ 0.3610817161330.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0348/57/57W 0.3600143159.60.180.18 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/21/21_ 0.321430964941980.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/39/39_ 0.33143024829800.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/48/48_ 0.33143006878760.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/20/20_ 0.33142923715070.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/19/19_ 0.33142907828770.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/29/29_ 0.33141448820710.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/14/14_ 0.357717119316520.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/39/39_ 0.35717815714170.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/41/41_ 0.3561554062390.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/65/65_ 0.356131313340600.00.260.26 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=pZNPbxoxEMW%2Fysr3%2F 1-0350/40/40_ 0.35601558455630.00.160.16 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/26/26_ 0.354175410835890.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/27/27_ 0.3541674928500.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/30/30_ 0.3515134638450.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/22/22_ 0.35125876135960.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/27/27_ 0.368233442230.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/30/30_ 0.3740846100850.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/29/29_ 0.3710648321160.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/18/18_ 0.375741418250.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/9/9_ 0.33143107721750.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/15/15_ 0.33143096846240.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/29/29_ 0.3314305111135450.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_1540f52424d0 1-0350/15/15_ 0.331430193615750.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/16/16_ 0.34142923134000.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/32/32_ 0.341429184915860.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/29/29_ 0.341414589688360.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_80 1-0350/39/39_ 0.34141421019790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/35/35_ 0.351409703439230.00.200.20 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0</
Found on 2024-10-04 22:09 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13e722b3a3Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Wednesday, 02-Oct-2024 22:23:50 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 15 hours 22 minutes Server load: 0.36 0.71 0.85 Total accesses: 1049 - Total Traffic: 3.6 MB - Total Duration: 209454 CPU Usage: u7.85 s13.7 cu0 cs0 - .00259% CPU load .00126 requests/sec - 4 B/second - 3555 B/request - 199.67 ms/request 1 requests currently being processed, 49 idle workers ___________________________W______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/13/13_ 0.215829931586360.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/6/6_ 0.217690227419050.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/17/17_ 0.21828157120120.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/36/36_ 0.2010078352756400.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/10/10_ 0.2012307717348130.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/61/61_ 0.2230215036890.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /test;/actuator;/env HTTP/1.1 0-0340/24/24_ 0.222600509650.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/34/34_ 0.2315524118110.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/22/22_ 0.161567351129980.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0340/21/21_ 0.1715612016254100.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/36/36_ 0.1715610715162530.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/20/20_ 0.17156095978570.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/12/12_ 0.18156073865450.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/23/23_ 0.1815605757116230.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/11/11_ 0.18156050824330.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/14/14_ 0.181559957839010.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/18/18_ 0.19149890171610.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/12/12_ 0.19149890749950.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/24/24_ 0.201401197123280.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/10/10_ 0.2013336223924920.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swFLzvr0Dc%2BSZ 0-0340/18/18_ 0.20119916023900.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /debug/actuator HTTP/1.1 0-0340/44/44_ 0.20114714067270.00.150.15 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /internal/actuator HTTP/1.1 0-0340/4/4_ 0.2010610518012880.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.2010495110119120.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/18/18_ 0.2010179408800.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /v1/manage HTTP/1.1 1-0350/12/12_ 0.262602311312640.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/37/37_ 0.2618410712270.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0358/20/20W 0.260039199.60.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/49/49_ 0.22156682127400.00.170.17 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 1-0350/25/25_ 0.22156120918590.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/20/20_ 0.22156107930350.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/12/12_ 0.22156080021600.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/14/14_ 0.22156073810780.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/18/18_ 0.22156040340134200.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C88xGSb 1-0350/14/14_ 0.22156005834480.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.22155995843930.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/23/23_ 0.2214914572317250.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0350/11/11_ 0.221498902625500.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.221333681419730.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/12/12_ 0.2213086122345110.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/19/19_ 0.2212021009800.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /debug/actuator HTTP/1.1 1-0350/11/11_ 0.24115058012320.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /internal/actuator HTTP/1.1 1-0350/6/6_ 0.2410938022913080.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/30/30_ 0.2410521217814850.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/25/25_ 0.241024477416010.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/34/34_ 0.24101220015500.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /v1/manage HTTP/1.1 1-0350/21/21_ 0.2482807028410.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/20/20_ 0.208276019890.00.040.04 127.0.0
Found on 2024-10-02 22:23 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1380d74fb9Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 30-Sep-2024 22:31:11 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 15 hours 29 minutes 20 seconds Server load: 3.94 2.23 1.49 Total accesses: 711 - Total Traffic: 2.7 MB - Total Duration: 167543 CPU Usage: u6.11 s10.92 cu0 cs0 - .00258% CPU load .00108 requests/sec - 4 B/second - 4006 B/request - 235.644 ms/request 1 requests currently being processed, 49 idle workers __________________________W_______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/12/12_ 0.1536681480060.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_220c66b9f 0-0340/5/5_ 0.153960459213560.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/11/11_ 0.1563946148119770.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/35/35_ 0.156400311245850.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/cid.php?StateId=_77a4dc988366 0-0340/9/9_ 0.1469262444660.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/4/4_ 0.152403121136760.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/21/21_ 0.161093709360.00.130.13 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/8/8_ 0.112648795914970.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/21/21_ 0.112479512677720.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.11212924015570.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 0-0340/33/33_ 0.12207524141400.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/17/17_ 0.1220099168460.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/6/6_ 0.1219444901610.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0340/22/22_ 0.121889331115070.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/10/10_ 0.1216374135224160.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/6/6_ 0.131494501632330.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d45257740 0-0340/11/11_ 0.13132517012010.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /admin/actuator; HTTP/1.1 0-0340/9/9_ 0.13114635449760.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/21/21_ 0.131079294121630.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0340/9/9_ 0.137734258620130.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/14/14_ 0.14642756223890.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/40/40_ 0.1464249867260.00.140.14 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.1464151849280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0340/6/6_ 0.15641211217090.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.15640971428770.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1 1-0350/11/11_ 0.2016025710380.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0358/24/24W 0.20006379.60.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/11/11_ 0.1525014239329600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.15229970418970.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/24/24_ 0.16212599018410.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 1-0350/19/19_ 0.16201137830170.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/8/8_ 0.16200688011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0350/13/13_ 0.16194371010610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0350/11/11_ 0.16173341048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.env HTTP/1.1 1-0350/11/11_ 0.161494502332650.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/16/16_ 0.1714330622043760.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/22/22_ 0.171140084315790.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/6/6_ 0.171322140170.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /admin/actuator; HTTP/1.1 1-0350/5/5_ 0.171023782166910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/11/11_ 0.17702521440630.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/15/15_ 0.186427779790.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/7/7_ 0.1864264912310.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/5/5_ 0.186423908480.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/29/29_ 0.18641315111290.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/24/24_ 0.1864105814530.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/19/19_ 0.1964037915480.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/7/7_ 0.1963966817180.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0350/20/20_ 0.20396281
Found on 2024-09-30 22:31 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1348f1ed00Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 28-Sep-2024 18:02:10 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 11 hours 19 seconds Server load: 2.80 1.76 1.24 Total accesses: 538 - Total Traffic: 2.2 MB - Total Duration: 130559 CPU Usage: u4.36 s7.71 cu0 cs0 - .00256% CPU load .00114 requests/sec - 4 B/second - 4257 B/request - 242.675 ms/request 1 requests currently being processed, 49 idle workers _____________W____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/10/10_ 0.119775014776860.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/4/4_ 0.1112625571710.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/10/10_ 0.11147601405116790.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0340/24/24_ 0.11153272116310.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0340/4/4_ 0.09214426494930.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/3/3_ 0.1186480128332540.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/16/16_ 0.1180349417310.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 0-0340/8/8_ 0.11759385914970.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/21/21_ 0.11590102677720.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/7/7_ 0.1123983015570.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 0-0340/33/33_ 0.1218583141400.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0340/17/17_ 0.121205068460.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0340/6/6_ 0.12550801610.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0348/12/12W 0.1200115029.60.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 0-0340/9/9_ 0.08215746117110.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/2/2_ 0.08215746015280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/7/7_ 0.09215738012000.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/4/4_ 0.0921507671220.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/16/16_ 0.092150341108210.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0340/8/8_ 0.0921442608410.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/8/8_ 0.09214365021220.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/31/31_ 0.0919586422839190.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.091787632517590.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/3/3_ 0.091775083958830.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.091734111585920.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/8/8_ 0.15822221455460.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/16/16_ 0.1578856642120.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET / HTTP/1.1 1-0350/11/11_ 0.156120139329600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/30/30_ 0.1541028418970.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0350/24/24_ 0.1623658018410.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /gateway; HTTP/1.1 1-0350/19/19_ 0.1612196830170.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/8/8_ 0.1611747011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0350/13/13_ 0.165430010610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0350/10/10_ 0.10216238048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/4/4_ 0.1121574614830.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0350/15/15_ 0.11215746739360.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.112150347309810.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/2/2_ 0.112157380160.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0350/4/4_ 0.112150341192580.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.12214426013080.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/4/4_ 0.1221442682360.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/4/4_ 0.122143650240.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/2/2_ 0.121839462364910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/19/19_ 0.1217856112980.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/19/19_ 0.1317630915840.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0350/10/10_ 0.1416088008600.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/script.js HTTP/1.1 1-0350/6/6_ 0.1515327005560.00.080.08 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /ads.txt HTTP/1.1 1-0350/2/2_ 0.151282411392810.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/9/9_ <
Found on 2024-09-28 18:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13ff88db75Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 26-Sep-2024 17:03:33 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 10 hours 1 minute 42 seconds Server load: 0.90 1.14 0.88 Total accesses: 432 - Total Traffic: 1.8 MB - Total Duration: 119046 CPU Usage: u2.71 s4.81 cu0 cs0 - .00255% CPU load .00146 requests/sec - 6 B/second - 4425 B/request - 275.569 ms/request 1 requests currently being processed, 49 idle workers ____________________________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/9/9_ 0.0746037073900.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/2/2_ 0.06460638360.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/9/9_ 0.06460718108690.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/4/4_ 0.055817202610.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0340/4/4_ 0.0938108494930.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0340/2/2_ 0.074460916870.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/15/15_ 0.074398286480.00.120.12 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/6/6_ 0.0743842110320.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/20/20_ 0.0743842102380.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/3/3_ 0.0740256115560.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/15/15_ 0.0840247039410.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/15/15_ 0.084002418250.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/5/5_ 0.084002481600.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/4/4_ 0.08399291110750.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/9/9_ 0.0839429117110.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 0-0340/2/2_ 0.0839429015280.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/7/7_ 0.0939421012000.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 0-0340/4/4_ 0.093875971220.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0340/16/16_ 0.09387171108210.00.060.06 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0340/8/8_ 0.093810808410.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0340/8/8_ 0.0938048021220.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 0-0340/31/31_ 0.091954722839190.00.110.11 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/2/2_ 0.0924462517590.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/3/3_ 0.0911913958830.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/1/1_ 0.041025141372750.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/7/7_ 0.074460812550.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 1-0350/15/15_ 0.01439377820.00.100.10 127.0.0.1http/1.1 1-0350/10/10_ 0.0743832021730.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0350/25/25_ 0.074025619610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/20/20_ 0.0840256718400.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.0840024127630.00.090.09 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/7/7_ 0.0940017011510.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/12/12_ 0.1039929710610.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/10/10_ 0.1039921048420.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/4/4_ 0.113942914830.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 1-0350/15/15_ 0.1139429739360.00.070.07 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/17/17_ 0.11387177309810.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/2/2_ 0.11394210160.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.js HTTP/1.1 1-0350/4/4_ 0.11387161192580.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0350/6/6_ 0.1238108013080.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0350/4/4_ 0.123810882360.00.020.02 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/4/4_ 0.12380480240.00.040.04 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/post.css HTTP/1.1 1-0350/2/2_ 0.1276292364910.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0350/19/19_ 0.12224412980.00.030.03 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0358/9/9W 0.13005799.60.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/1/1_ 0.0686431000.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /wp-login.php HTTP/1.1 1-0350/1/1_ 0.06576832675350.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0350/1/1_ 0.0646075120.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.c
Found on 2024-09-26 17:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b139519e012Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 24-Sep-2024 18:58:35 UTC Restart Time: Monday, 23-Sep-2024 07:01:50 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 11 hours 56 minutes 45 seconds Server load: 0.47 0.52 0.66 Total accesses: 34 - Total Traffic: 180 kB - Total Duration: 2812 CPU Usage: u1.2 s1.96 cu0 cs0 - .00244% CPU load .000263 requests/sec - 1 B/second - 5.3 kB/request - 82.7059 ms/request 1 requests currently being processed, 49 idle workers ________W_________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0340/1/1_ 0.001152333426850.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0340/5/5_ 0.001049680260.00.050.05 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0340/1/1_ 0.00847982374740.00.000.00 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0348/8/8W 0.00002109.60.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /server-status HTTP/1.1 1-0350/3/3_ 0.00104979102450.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0350/15/15_ 0.011049447820.00.100.10 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0350/1/1_ 0.016458554310860.00.010.01 127.0.0.1http/1.1ip-10-1-89-175.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-09-24 18:58 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13d8ff1b63Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 22-Sep-2024 17:01:31 UTC Restart Time: Thursday, 19-Sep-2024 02:39:16 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 14 hours 22 minutes 14 seconds Server load: 0.85 0.73 0.51 Total accesses: 578 - Total Traffic: 2.1 MB - Total Duration: 122452 CPU Usage: u3 s5.27 cu0 cs0 - .00266% CPU load .00186 requests/sec - 7 B/second - 3782 B/request - 211.855 ms/request 1 requests currently being processed, 49 idle workers ______________________________________W___________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/9/9_ 0.13173734014640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /wp-login.php HTTP/1.1 0-0350/18/18_ 0.1316234616684860.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/34/34_ 0.13156111116950.00.100.10 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0350/11/11_ 0.13124735415930.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/16/16_ 0.14107991335130.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/7/7_ 0.147376662323640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/14/14_ 0.146219919714460.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/13/13_ 0.1456773385450.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/4/4_ 0.14487471695420.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/20/20_ 0.142611117800.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0350/5/5_ 0.158645901990.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET / HTTP/1.1 0-0350/65/65_ 0.1538375145330.00.210.21 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0350/3/3_ 0.157416591410.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET / HTTP/1.1 0-0350/12/12_ 0.102172514854400.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.1021725156370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.1121713853930.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/6/6_ 0.11217116468980.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.1121706364860.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/1/1_ 0.062170076130.00.000.00 127.0.0.1http/1.1 0-0350/15/15_ 0.1121207768030.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/9/9_ 0.112050392467380.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/15/15_ 0.1119207517147760.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/2/2_ 0.111958942254630.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/12/12_ 0.121888638132710.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e5aa738421db9 0-0350/7/7_ 0.13188837345300.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65131ed38c045 1-0360/11/11_ 0.12188824334900.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14a1c3474c7b8 1-0360/16/16_ 0.13167771341116870.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9bQVJ 1-0360/10/10_ 0.13159971992480.00.100.10 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/16/16_ 0.1314396239027270.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/9/9_ 0.1311492120020900.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET / HTTP/1.1 1-0360/26/26_ 0.136493217451970.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0360/4/4_ 0.1385732016540.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /wp-login.php HTTP/1.1 1-0360/10/10_ 0.135756241917570.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/9/9_ 0.1354391311700.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0360/4/4_ 0.133551816338410.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0360/15/15_ 0.138621044860.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/7/7_ 0.131765420914360.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 1-0360/11/11_ 0.137400031690.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0368/12/12W 0.130014329.60.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /server-status HTTP/1.1 1-0360/2/2_ 0.0921726264850.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.09217138513730.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/3/3_ 0.09217116644140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/19/19_ 0.10217060769520.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/14/14_ 0.10217053024000.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/15/15_ 0.10215635639420.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/8/8_ 0.11212071019680.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/19/19_ 0.1119652812200.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0360/10/10_ 0.111938560200.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-
Found on 2024-09-22 17:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b139d727076Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 20-Sep-2024 21:39:29 UTC Restart Time: Thursday, 19-Sep-2024 02:39:16 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 19 hours 13 seconds Server load: 0.70 0.76 0.82 Total accesses: 499 - Total Traffic: 1.9 MB - Total Duration: 104532 CPU Usage: u1.64 s2.73 cu0 cs0 - .00282% CPU load .00322 requests/sec - 12 B/second - 3964 B/request - 209.483 ms/request 1 requests currently being processed, 49 idle workers __W_______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/9/9_ 0.1317613014640.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /wp-login.php HTTP/1.1 0-0350/18/18_ 0.13622516684860.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0358/24/24W 0.130016909.60.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /server-status HTTP/1.1 0-0350/6/6_ 0.097013957600.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/11/11_ 0.096278856600.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0350/6/6_ 0.1061423611170.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/13/13_ 0.10613224410500.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/8/8_ 0.10613103723520.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.1061302482040.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.106129551370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/4/4_ 0.10612725180.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/60/60_ 0.10612265136300.00.190.19 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.10612535210.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/12/12_ 0.10611304854400.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/3/3_ 0.106113056370.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.116101653930.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/6/6_ 0.1160995468980.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.116094164860.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/1/1_ 0.06608856130.00.000.00 127.0.0.1http/1.1 0-0350/15/15_ 0.115595668030.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/9/9_ 0.11489182467380.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/15/15_ 0.113595317147760.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/2/2_ 0.11397732254630.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1 0-0350/12/12_ 0.12327428132710.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e5aa738421db9 0-0350/7/7_ 0.1332716345300.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65131ed38c045 1-0360/11/11_ 0.1232703334900.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14a1c3474c7b8 1-0360/16/16_ 0.1311650341116870.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9bQVJ 1-0360/10/10_ 0.133850992480.00.100.10 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1 1-0360/15/15_ 0.077012610619460.00.070.07 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jVJNT9wwEL1X6n%2BwfM% 1-0360/8/8_ 0.0762805516890.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0360/25/25_ 0.086140610948480.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_cbb91b32c7e7 1-0360/3/3_ 0.0761414516530.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/9/9_ 0.086132259190.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.086130264560.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/3/3_ 0.08612954835140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/12/12_ 0.08612534344630.00.080.08 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/6/6_ 0.08612729710160.00.020.02 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/8/8_ 0.096122211731440.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_13b5d5cb290b 1-0360/4/4_ 0.096116350511020.00.030.03 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C88xHyQ 1-0360/2/2_ 0.096114164850.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/4/4_ 0.0961016513730.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/3/3_ 0.0960995644140.00.010.01 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/19/19_ 0.1060938769520.00.090.09 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/14/14_ 0.1060932024000.00.060.06 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/15/15_ 0.1059514639420.00.050.05 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/8/8_ 0.1155950019680.00.040.04 127.0.0.1http/1.1ip-10-1-101-246.ap-southeast-2.GET /favicon.ico HTTP/1.1 1-0360/19/19_ 0.114040612200.00.030.03 127.0.0.1http/1.1i
Found on 2024-09-20 21:39 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13cd4a4b41Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Monday, 26-Aug-2024 04:38:56 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 6 days 3 hours 44 minutes 33 seconds Server load: 2.56 2.31 2.07 Total accesses: 5941 - Total Traffic: 17.9 MB - Total Duration: 2296176 CPU Usage: u7.25 s9.69 cu0 cs0 - .00318% CPU load .0112 requests/sec - 35 B/second - 3153 B/request - 386.497 ms/request 1 requests currently being processed, 49 idle workers _______________________________________________W__.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/118/118_ 1.4547976511340.00.410.41 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4219df824 0-0390/125/125_ 1.4549475519290.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_110266581 0-0390/107/107_ 1.4554836518620.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_bd73c166f 0-0390/113/113_ 1.4597251499450.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_8755c58f0 0-0390/124/124_ 1.452575179376390.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/147/147_ 1.453641165743800.00.490.49 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/110/110_ 1.454152173247000.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/128/128_ 1.453859234584450.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/101/101_ 1.4547374306910.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f58b6491c 0-0390/120/120_ 1.4544495531410.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/123/123_ 1.4540295450690.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/119/119_ 1.453477196673380.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/141/141_ 1.4527106244600.00.460.46 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_71bdc7b61 0-0390/122/122_ 1.4522808830746510.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/113/113_ 1.4521684410950.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_1513f6500 0-0390/149/149_ 1.4519534222600.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_92ccd5df3 0-0390/115/115_ 1.4518196414590.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4a088945c 0-0390/148/148_ 1.4517446382370.00.470.47 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_58712c684 0-0390/127/127_ 1.4515234331340.00.390.39 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_5cb9479fc 0-0390/113/113_ 1.4511364419750.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_fcc8e1f95 0-0390/132/132_ 1.4514248363410.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_e38c0232d 0-0390/144/144_ 1.45355599740.00.480.48 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/109/109_ 1.447216216528980.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/103/103_ 1.44628424483520.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_10a8a127a 0-0390/101/101_ 1.4560616318030.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_299eb9238 1-0400/104/104_ 1.394456196659540.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/145/145_ 1.3947624596930.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_eaa724f14 1-0400/103/103_ 1.3949001398570610.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/107/107_ 1.39508352398000.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9fb3f9c3a 1-0400/110/110_ 1.39582680389420.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_00b1c97c0 1-0400/127/127_ 1.3922143470434270.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/122/122_ 1.394226184505020.00.380.38 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/112/112_ 1.3940774495589580.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/114/114_ 1.3938787336730.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_09cbdf146 1-0400/114/114_ 1.39375761273510.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b4dd0186b 1-0400/106/106_ 1.3935896347320.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/106/106_ 1.392975233423660.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/124/124_ 1.392649160308220.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/131/131_ 1.392427159410470.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/146/146_ 1.3919876377550.00.510.51 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9abd296bd 1-0400/111/111_ 1.3918881571090630.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/109/109_ 1.3917954604920.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4a39beb7b 1-0400/119/119_ 1.3915705371180.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_7d964aac5 1-0400/108/108_ 1.391173170548350.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/106/106_ 1.4010826305850.00.310.31
Found on 2024-08-26 04:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1353009045Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Saturday, 24-Aug-2024 20:19:01 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 19 hours 24 minutes 38 seconds Server load: 1.48 1.27 1.21 Total accesses: 4803 - Total Traffic: 14.7 MB - Total Duration: 1815785 CPU Usage: u5.75 s7.61 cu0 cs0 - .00322% CPU load .0116 requests/sec - 37 B/second - 3211 B/request - 378.052 ms/request 1 requests currently being processed, 49 idle workers ____________________W_____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/97/97_ 1.1755394402880.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_1fdb92073 0-0390/104/104_ 1.1756594334970.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_8f3a4ad48 0-0390/87/87_ 1.1757243282730.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_02d0a123a 0-0390/90/90_ 1.184636414700.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b556f014d 0-0390/100/100_ 1.173337159277470.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/124/124_ 1.1738746567550.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_913f37733 0-0390/90/90_ 1.175095172217490.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/107/107_ 1.17444943494870.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9dae9d373 0-0390/79/79_ 1.1754575249200.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_09dffe02c 0-0390/99/99_ 1.1752654434540.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/100/100_ 1.1746616346940.00.330.33 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_19d085395 0-0390/95/95_ 1.1735916472720.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a1fb92643 0-0390/120/120_ 1.173506173203410.00.400.40 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/100/100_ 1.17283583539090.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET / HTTP/1.1 0-0390/80/80_ 1.1724765269080.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9a168f543 0-0390/126/126_ 1.17208148164500.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET / HTTP/1.1 0-0390/80/80_ 1.17203036318240.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_82d4a3e4a 0-0390/127/127_ 1.1719035324990.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/107/107_ 1.181361166309150.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/90/90_ 1.1810394309850.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_5f397b192 0-0398/98/98W 1.1800310799.60.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 0-0390/122/122_ 1.176382592572700.00.420.42 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/87/87_ 1.17617433387850.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_5889bdbce 0-0390/80/80_ 1.1760565246850.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/79/79_ 1.1760144238540.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cb2a35512 1-0400/82/82_ 1.145281138562260.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/124/124_ 1.1455174544410.00.360.36 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_694c855d8 1-0400/80/80_ 1.1455486502090.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_50f95ebd0 1-0400/87/87_ 1.135665148355410.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/88/88_ 1.1359814372400.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_401a49513 1-0400/106/106_ 1.1427605332380.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c34e620fe 1-0400/100/100_ 1.145193146312860.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/88/88_ 1.144806182370740.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/93/93_ 1.1446524269710.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9409b7ad8 1-0400/93/93_ 1.1442356238770.00.290.29 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_434df2240 1-0400/83/83_ 1.1438124802295160.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/86/86_ 1.1435604381980.00.260.26 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_214971c74 1-0400/101/101_ 1.1434824218080.00.300.30 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_1fb877fb0 1-0400/111/111_ 1.1432174283540.00.370.37 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/123/123_ 1.1422996287430.00.450.45 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_fd7fecad4 1-0400/89/89_ 1.142064143841270.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/88/88_ 1.1419331088525760.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/96/96_ 1.141720184333650.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/84/84_ 1.141142146447260.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/85/85_ 1.1466139260660.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9412b2fc4 1-0
Found on 2024-08-24 20:18 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b139c8a0557Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Thursday, 22-Aug-2024 21:19:32 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 20 hours 25 minutes 9 seconds Server load: 1.23 1.33 1.38 Total accesses: 3192 - Total Traffic: 10.2 MB - Total Duration: 1117695 CPU Usage: u3.45 s4.66 cu0 cs0 - .00329% CPU load .013 requests/sec - 43 B/second - 3348 B/request - 350.155 ms/request 1 requests currently being processed, 49 idle workers ______________________________W___________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/66/66_ 0.7923977363370.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_06a4bb6a0 0-0390/72/72_ 0.792608175172230.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/51/51_ 0.792700560600.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a52353713 0-0390/50/50_ 0.7840276202950.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/71/71_ 0.79144485240.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_88d2ada5c 0-0390/94/94_ 0.79523160259360.00.340.34 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/59/59_ 0.791032408148920.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/76/76_ 0.79666149438340.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/48/48_ 0.791784214149640.00.130.13 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/70/70_ 0.7915535381010.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_67412d710 0-0390/69/69_ 0.7968341209740.00.240.24 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a1152909c 0-0390/66/66_ 0.794885242650.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/88/88_ 0.792439161980.00.310.31 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_41e411844 0-0390/70/70_ 0.796235206560.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_83f1e7951 0-0390/49/49_ 0.7851011233690.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET / HTTP/1.1 0-0390/77/77_ 0.785075073950.00.190.19 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /favicon.ico HTTP/1.1 0-0390/48/48_ 0.7849694133020.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_17d55b0f0 0-0390/94/94_ 0.784414198241820.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/74/74_ 0.7842925154380.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_78fd2d18d 0-0390/57/57_ 0.784070160119440.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/60/60_ 0.793723553276630.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/88/88_ 0.7934695381850.00.320.32 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/57/57_ 0.793250157346370.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/51/51_ 0.793173465880.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_02aced5ab 0-0390/50/50_ 0.792779561200750.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/51/51_ 0.74158343425310.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cb8a69f08 1-0400/93/93_ 0.742199254356790.00.280.28 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/50/50_ 0.7424938370970.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_00a9e209a 1-0400/50/50_ 0.74261811233140.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_280a5c747 1-0400/59/59_ 0.7427515159210.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_22d3714f6 1-0408/64/64W 0.7600192829.60.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 1-0400/70/70_ 0.7415189201980.00.230.23 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_b88b03ffc 1-0400/57/57_ 0.7410245233760.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/62/62_ 0.756764111240.00.200.20 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a925de22a 1-0400/61/61_ 0.756504161170.00.190.19 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_37c5a700e 1-0400/54/54_ 0.755055111580.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/56/56_ 0.75378185280780.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/69/69_ 0.751746123980.00.210.21 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_97536eeda 1-0400/79/79_ 0.76114617207560.00.270.27 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/90/90_ 0.7450894240070.00.350.35 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_405bc9ab4 1-0400/55/55_ 0.744997150458730.00.170.17 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/58/58_ 0.744900144150080.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/65/65_ 0.74440212255490.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/52/52_ 0.7440828333650.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_34339b878 1-0400/49/49_ 0.7440575179380.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/56/56_
Found on 2024-08-22 21:19 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13c57f2eecApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Tuesday, 20-Aug-2024 21:10:54 UTC Restart Time: Tuesday, 20-Aug-2024 00:54:23 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 20 hours 16 minutes 31 seconds Server load: 0.67 1.39 1.61 Total accesses: 1511 - Total Traffic: 5.4 MB - Total Duration: 422365 CPU Usage: u1.19 s1.51 cu0 cs0 - .0037% CPU load .0207 requests/sec - 77 B/second - 3733 B/request - 279.527 ms/request 1 requests currently being processed, 49 idle workers __________________________W_______________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0390/23/23_ 0.3854637500.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ea62001f7 0-0390/38/38_ 0.37220542100.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/19/19_ 0.37260412240.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/19/19_ 0.372205586480.00.070.07 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ce7a9f17f 0-0390/39/39_ 0.37380722238070.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/63/63_ 0.374687173160660.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/28/28_ 0.3753675632290.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_93f53ac65 0-0390/28/28_ 0.3749612084244480.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/18/18_ 0.375908611550.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_8140b32a8 0-0390/37/37_ 0.3756374147930.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_07ce707b4 0-0390/37/37_ 0.375302542070.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d4e8ac46e 0-0390/31/31_ 0.3745456130490.00.130.13 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_efaf8051f 0-0390/56/56_ 0.37431425260330.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/28/28_ 0.373560531300.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/17/17_ 0.373354666020.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ce486b45f 0-0390/43/43_ 0.373208615620.00.100.10 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d09c253b1 0-0390/17/17_ 0.372998741880.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_625d6b7e6 0-0390/58/58_ 0.372741161152870.00.220.22 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0390/43/43_ 0.37242617743330.00.160.16 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4a5477c42 0-0390/25/25_ 0.372284523840.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_4028510ef 0-0390/30/30_ 0.3719594121840.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_686d96167 0-0390/41/41_ 0.3713496148880.00.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_a39487404 0-0390/25/25_ 0.379063983100.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_5fa6ad4b6 0-0390/18/18_ 0.375232021440.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f4747b929 0-0390/19/19_ 0.37440680320.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c4c2a676d 1-0400/16/16_ 0.3556535208950.00.040.04 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_d3d7c4fc1 1-0408/43/43W 0.3600104479.60.150.15 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /server-status HTTP/1.1 1-0400/16/16_ 0.36166153182090.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/19/19_ 0.36235488410.00.050.05 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_0ca476cea 1-0400/29/29_ 0.3626617553280.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/25/25_ 0.353539534190.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/38/38_ 0.355556630610.00.140.14 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_c00ca039a 1-0400/26/26_ 0.35535116194200.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/30/30_ 0.355050552950.00.110.11 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_aa3a281ba 1-0400/28/28_ 0.35477219286670.00.100.10 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/21/21_ 0.354648453870.00.070.07 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_3a8a4971a 1-0400/25/25_ 0.354464152178620.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/37/37_ 0.354309581150.00.120.12 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/47/47_ 0.35356717271740.00.180.18 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/56/56_ 0.353342780830.00.250.25 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_ba89cf3a3 1-0400/24/24_ 0.353164248239510.00.080.08 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_dcf58c9b0 1-0400/28/28_ 0.35286115384610.00.090.09 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/34/34_ 0.352665579730.00.130.13 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_39d824521 1-0400/18/18_ 0.3523192033175560.00.060.06 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0400/19/19_ 0.35224439477870.00.060.06 127.0.0.1http/1.1ip-10-1-107-9.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl
Found on 2024-08-20 21:10 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13d71b39c6Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Sunday, 18-Aug-2024 20:01:24 UTC Restart Time: Friday, 16-Aug-2024 02:39:00 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 17 hours 22 minutes 24 seconds Server load: 4.21 2.50 1.53 Total accesses: 2779 - Total Traffic: 8.5 MB - Total Duration: 1028057 CPU Usage: u3.17 s4.24 cu0 cs0 - .00315% CPU load .0118 requests/sec - 38 B/second - 3219 B/request - 369.938 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/52/52_ 0.6642293192260.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_33daeae86 0-0370/74/74_ 0.6643003157800.00.220.22 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c32514cf1 0-0370/51/51_ 0.6644063144790.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a54a41572 0-0370/53/53_ 0.66455799255860.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c82c7da0c 0-0370/57/57_ 0.6648854177330.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/61/61_ 0.664100181219330.00.190.19 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/49/49_ 0.663989219248780.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/48/48_ 0.663872487060.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/49/49_ 0.663722202371030.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/50/50_ 0.6635187296510.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d94c48309 0-0370/51/51_ 0.6633615260950.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f73c3d577 0-0370/51/51_ 0.66325734156910.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/74/74_ 0.672570266139630.00.220.22 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/49/49_ 0.672351217232010.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/73/73_ 0.672214209230110.00.260.26 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/58/58_ 0.67196333255240.00.180.18 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_40a480bce 0-0370/54/54_ 0.6717594155320.00.170.17 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5962ff6f8 0-0370/67/67_ 0.678551408136170.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/61/61_ 0.67974195109960.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0030deafa 0-0370/49/49_ 0.67740587320.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_24beff63d 0-0370/47/47_ 0.6727923687940.00.130.13 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0378/55/55W 0.6700268479.60.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/48/48_ 0.6653855293030.00.130.13 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_77455e7b7 0-0370/50/50_ 0.6651724250910.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/61/61_ 0.6650755223360.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e6731e659 1-0380/62/62_ 0.6740165273560.00.210.21 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a8b532d9b 1-0380/54/54_ 0.674111108226720.00.190.19 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/54/54_ 0.674264232125420.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/47/47_ 0.6743268132370.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_491b41e71 1-0380/59/59_ 0.674422496278880.00.170.17 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/54/54_ 0.67388023397830.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/53/53_ 0.6737667259330.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_618ab4a71 1-0380/52/52_ 0.6736448179310.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a3b943f85 1-0380/50/50_ 0.673480547446230.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/69/69_ 0.673285219246820.00.260.26 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/73/73_ 0.672948225114040.00.290.29 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/70/70_ 0.6724775200650.00.230.23 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c01caf9ce 1-0380/53/53_ 0.6723125153460.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/49/49_ 0.6719865395860.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_47692037f 1-0380/53/53_ 0.671898211234030.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/53/53_ 0.671512635244660.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/80/80_ 0.679095233260.00.240.24 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8ea42b352 1-0380/50/50_ 0.678266105640.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/61/61_ 0.67195217139040.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/48/48_ 0.67626241186090.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%
Found on 2024-08-18 20:01 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1365a1c74bApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-07-17T18:57:26 Current Time: Friday, 16-Aug-2024 20:06:39 UTC Restart Time: Friday, 16-Aug-2024 02:39:00 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 17 hours 27 minutes 39 seconds Server load: 1.60 2.07 1.67 Total accesses: 1027 - Total Traffic: 3.6 MB - Total Duration: 326026 CPU Usage: u.94 s1.24 cu0 cs0 - .00347% CPU load .0163 requests/sec - 59 B/second - 3652 B/request - 317.455 ms/request 1 requests currently being processed, 49 idle workers ____________W_____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/19/19_ 0.252685229134130.00.060.06 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/22/22_ 0.253461569110.00.100.10 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c96e0d983 0-0370/19/19_ 0.25361920126640.00.090.09 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/18/18_ 0.253971275367350.00.060.06 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/23/23_ 0.254157193112140.00.100.10 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/28/28_ 0.25231220886550.00.090.09 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/14/14_ 0.2518344127040.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_baf00dd0f 0-0370/14/14_ 0.25139420423220.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/15/15_ 0.251188594270.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d93f5b522 0-0370/15/15_ 0.25965522300.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_41c97e915 0-0370/16/16_ 0.2548120959930.00.060.06 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/16/16_ 0.25121576210.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d619d0d0f 0-0379/32/32W 0.2500449312.80.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/13/13_ 0.2468333485410.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0a45ce827 0-0370/37/37_ 0.246587581177200.00.150.15 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/24/24_ 0.24638220066900.00.080.08 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/21/21_ 0.246278565370.00.080.08 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/33/33_ 0.245824629730.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_880bedd49 0-0370/27/27_ 0.24596019546450.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/13/13_ 0.245664330010.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_da5448c87 0-0370/14/14_ 0.24548220510120.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/13/13_ 0.255299523540.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_115fd7f54 0-0370/13/13_ 0.25489232454800.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/13/13_ 0.25471264932180.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/25/25_ 0.2545344120940.00.100.10 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/28/28_ 0.26198342744480.00.120.12 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.262579518990.00.080.08 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4646a92d9 1-0380/18/18_ 0.26316722053570.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/15/15_ 0.2635742934020.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/23/23_ 0.2639574122740.00.070.07 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/22/22_ 0.261685532720.00.070.07 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b4f424046 1-0380/15/15_ 0.2613363232520.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cdcbe93ee 1-0380/18/18_ 0.261136434570.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b5a2f2a47 1-0380/15/15_ 0.2655747215150.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fa8b98031 1-0380/34/34_ 0.2626912187390.00.160.16 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9646a4ee6 1-0380/41/41_ 0.2639454290.00.200.20 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/37/37_ 0.267063559490.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_20c3d7291 1-0380/17/17_ 0.266766544480.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_190546291 1-0380/13/13_ 0.266559350850.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_bdb9a44d0 1-0380/19/19_ 0.26631521145100.00.060.06 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/17/17_ 0.26620622552470.00.050.05 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/46/46_ 0.265914460400.00.140.14 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/17/17_ 0.265669531200.00.060.06 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d38418f5f 1-0380/27/27_ 0.265462428380.00.110.11 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.2654974312860.00.040.04 127.0.0.1http/1.1ip-10-1-91-106.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_202fe4f29
Found on 2024-08-16 20:06 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b138e54eba4Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 14-Aug-2024 20:45:20 UTC Restart Time: Tuesday, 13-Aug-2024 06:58:05 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 13 hours 47 minutes 14 seconds Server load: 1.90 1.36 1.35 Total accesses: 1436 - Total Traffic: 4.1 MB - Total Duration: 593263 CPU Usage: u1.54 s2.92 cu0 cs0 - .00328% CPU load .0106 requests/sec - 31 B/second - 2999 B/request - 413.136 ms/request 1 requests currently being processed, 49 idle workers _____________W____________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0350/26/26_ 0.3517384141190.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_03847e05d 0-0350/27/27_ 0.3687270180080.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/31/31_ 0.35148068112230.00.090.09 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0350/29/29_ 0.3513985118690.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_57959c49d 0-0350/33/33_ 0.351151275175040.00.100.10 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/48/48_ 0.36923273116160.00.110.11 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/31/31_ 0.367865649240.00.090.09 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e6b30c824 0-0350/28/28_ 0.3662937286030.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/33/33_ 0.365675171280.00.100.10 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cf3212827 0-0350/27/27_ 0.36463581090.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ea7d78588 0-0350/26/26_ 0.3637726355580.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/27/27_ 0.362503154750.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8f5a6dede 0-0350/27/27_ 0.361445181470.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_35f6f38e2 0-0358/35/35W 0.3600148219.60.090.09 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /server-status HTTP/1.1 0-0350/29/29_ 0.344832558370.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_afb3696ec 0-0350/25/25_ 0.344689282110820.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/35/35_ 0.3516625133740.00.140.14 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0382e1386 0-0350/28/28_ 0.344286543175490.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/25/25_ 0.343976577070.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cf0fbddb3 0-0350/27/27_ 0.34349393690110.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/25/25_ 0.3532734146820.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/28/28_ 0.352813271102500.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/27/27_ 0.352634441150.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/28/28_ 0.3520893149130.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cf32849f6 0-0350/25/25_ 0.351874549930.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0e460fbe6 1-0360/45/45_ 0.35729495140.00.140.14 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a2f03954e 1-0360/26/26_ 0.356213100410.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_26da9b8d8 1-0360/27/27_ 0.355458186590.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_789c41410 1-0360/26/26_ 0.35445386420.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4dfa00189 1-0360/27/27_ 0.35262564260.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_352f1e0f2 1-0360/27/27_ 0.35204362060.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a22cabeda 1-0360/29/29_ 0.3596385130.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e9b89ab06 1-0360/30/30_ 0.3577379730.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7cd1ceeac 1-0360/28/28_ 0.3349035498520.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9c297189c 1-0360/28/28_ 0.334771438510.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f03dedbdd 1-0360/26/26_ 0.334372765172180.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/26/26_ 0.33418226786260.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/25/25_ 0.353733587190.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_47858e66e 1-0360/25/25_ 0.353327277101130.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/27/27_ 0.35299428692560.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/27/27_ 0.3526543331184770.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/27/27_ 0.35214927857050.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/25/25_ 0.35203626745940.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/26/26_ 0.3517825225740.00.070.07 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_78e1d2e94 1-0360/28/28_ 0.351728116290990.00.080.08 127.0.0.1http/1.1ip-10-1-101-36.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1
Found on 2024-08-14 20:45 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b130a6c9ea6Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 12-Aug-2024 19:59:43 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 12 days 9 hours 49 minutes 41 seconds Server load: 0.63 0.65 0.86 Total accesses: 6679 - Total Traffic: 19.3 MB - Total Duration: 2546916 CPU Usage: u10.21 s18.03 cu0 cs0 - .00263% CPU load .00623 requests/sec - 18 B/second - 3035 B/request - 381.332 ms/request 1 requests currently being processed, 49 idle workers ___________W______________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/153/153_ 1.5113655702270.00.450.45 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7b1fc7121 0-0370/131/131_ 1.5122134828420.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/127/127_ 1.5157024489470.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1feb91df6 0-0370/139/139_ 1.512533392530.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9cdbfb741 0-0370/154/154_ 1.516394350380.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_63375d764 0-0370/167/167_ 1.51705329647640.00.490.49 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/141/141_ 1.5112243444380.00.440.44 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8633e90a2 0-0370/129/129_ 1.5110043549610.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_17795c485 0-0370/130/130_ 1.515664367440.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9e23196f8 0-0370/127/127_ 1.513665248640.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b19056333 0-0370/158/158_ 1.52194203662700.00.420.42 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0378/138/138W 1.5200329339.60.440.44 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/126/126_ 1.5160785225360.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a94097046 0-0370/127/127_ 1.5158045330430.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fb0500a6e 0-0370/130/130_ 1.5151906259250.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a638023c5 0-0370/133/133_ 1.514743235352820.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/123/123_ 1.5145184314480.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/123/123_ 1.514367386555700.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/118/118_ 1.5142044446670.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1334be804 0-0370/141/141_ 1.5141084602360.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/131/131_ 1.5139615476890.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/123/123_ 1.5131614367830.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/126/126_ 1.5133384494460.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e50ddec89 0-0370/128/128_ 1.5128205336180.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_89e3ec621 0-0370/133/133_ 1.5122723445490.00.410.41 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fa48e2c12 1-0380/126/126_ 1.501013270646990.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/129/129_ 1.50548466403640.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/121/121_ 1.518232634930.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/122/122_ 1.51519211772730.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/126/126_ 1.516484636110.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/135/135_ 1.515804610610.00.390.39 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ad836de8f 1-0380/132/132_ 1.512423504540.00.390.39 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6fdffb512 1-0380/130/130_ 1.51284221655000.00.440.44 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/130/130_ 1.5062785664180.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d0d19524f 1-0380/156/156_ 1.505871727632440.00.530.53 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/124/124_ 1.5057973376480.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2abee90fe 1-0380/141/141_ 1.5048805527460.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7f77857dd 1-0380/125/125_ 1.504550224573180.00.370.37 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/125/125_ 1.5043905614460.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_afa2f5328 1-0380/143/143_ 1.5043216528650.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f70f51d2b 1-0380/127/127_ 1.504137225590360.00.400.40 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/144/144_ 1.504020207510890.00.390.39 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/133/133_ 1.5029435656890.00.430.43 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d10204e72 1-0380/141/141_ 1.5038135373870.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a46550da8 1-0380/125/125_ 1.5023025783930.00.360.36 127.0.0.1http/1.1ip-10-1-89-222.ap-southe
Found on 2024-08-12 19:59 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133207c1dfApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 10-Aug-2024 15:38:49 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 10 days 5 hours 28 minutes 47 seconds Server load: 1.17 1.14 1.05 Total accesses: 4886 - Total Traffic: 14.3 MB - Total Duration: 1903647 CPU Usage: u8.42 s14.79 cu0 cs0 - .00263% CPU load .00553 requests/sec - 16 B/second - 3060 B/request - 389.613 ms/request 1 requests currently being processed, 49 idle workers ____________________________________W_____________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/117/117_ 1.134035325616450.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/95/95_ 1.1243805661240.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b8d98a3c8 0-0370/94/94_ 1.13295245406070.00.310.31 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/105/105_ 1.1316686259740.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ee47434a4 0-0370/118/118_ 1.1328365230440.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0b0b4c56b 0-0370/133/133_ 1.1331023410260.00.380.38 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_187367f10 0-0370/108/108_ 1.1336794365960.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/94/94_ 1.133131252386580.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/96/96_ 1.1326143293100.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/92/92_ 1.13187584169570.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7acf0c769 0-0370/125/125_ 1.131399220304980.00.330.33 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/98/98_ 1.131129237259160.00.340.34 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/93/93_ 1.13935202166270.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/89/89_ 1.136363214790.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9adce9e04 0-0370/96/96_ 1.13118210200560.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/100/100_ 1.126566233267730.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/89/89_ 1.1264685233310.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8d233a6ab 0-0370/87/87_ 1.1263876443290.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/82/82_ 1.1263195314560.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/108/108_ 1.1261635389640.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6a780e571 0-0370/96/96_ 1.1257443323950.00.300.30 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_569cf65aa 0-0370/88/88_ 1.125191216246820.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/87/87_ 1.1255565410750.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c11aa4156 0-0370/93/93_ 1.1249533191510.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ee5d410f2 0-0370/99/99_ 1.124652230325090.00.310.31 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/88/88_ 1.1035255506780.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8520c2179 1-0380/94/94_ 1.111615295750.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_08b10e598 1-0380/86/86_ 1.1113195449930.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d76118411 1-0380/87/87_ 1.112449214636730.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/90/90_ 1.10307134528700.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/96/96_ 1.102631233497220.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/97/97_ 1.1115155375810.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b3e5231fb 1-0380/96/96_ 1.1117495536500.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1f72a215c 1-0380/96/96_ 1.111054239321860.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/120/120_ 1.11862228551230.00.420.42 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/91/91_ 1.11539228286730.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0388/95/95W 1.1100428009.60.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/90/90_ 1.1065513449770.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_18cd78730 1-0380/89/89_ 1.106432201473280.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/107/107_ 1.106346202318860.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/92/92_ 1.1063123382690.00.300.30 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c933d7279 1-0380/110/110_ 1.105789234393820.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/95/95_ 1.1050115448630.00.320.32 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a6960afc0 1-0380/106/106_ 1.105648212287110.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/89/89_ 1.1047005648590.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cG
Found on 2024-08-10 15:38 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13839bc4a1Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 08-Aug-2024 20:12:38 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 8 days 10 hours 2 minutes 35 seconds Server load: 1.07 1.03 1.14 Total accesses: 3421 - Total Traffic: 10.1 MB - Total Duration: 1301162 CPU Usage: u6.81 s11.95 cu0 cs0 - .00258% CPU load .0047 requests/sec - 14 B/second - 3095 B/request - 380.346 ms/request 1 requests currently being processed, 49 idle workers ___________________________________________W______.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/81/81_ 0.7650423348330.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b8b7a1e12 0-0370/68/68_ 0.7652584508810.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/63/63_ 0.7824043228650.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_65d56d410 0-0370/79/79_ 0.7838404202110.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_81a27c013 0-0370/91/91_ 0.7745075175730.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4c07237a7 0-0370/69/69_ 0.774886220187480.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/77/77_ 0.774961221303670.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/66/66_ 0.774614215204300.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/69/69_ 0.7744003229010.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1b78dfca1 0-0370/65/65_ 0.7742271093630.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_93dcc728b 0-0370/97/97_ 0.7836355201480.00.250.25 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a7b0f2383 0-0370/71/71_ 0.7833385120030.00.260.26 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8f23c03d8 0-0370/65/65_ 0.782550804106950.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/58/58_ 0.7825173131340.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ec410936a 0-0370/68/68_ 0.782032212152810.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/71/71_ 0.7817926122290.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a635deac6 0-0370/59/59_ 0.781680196183960.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/61/61_ 0.781390205348840.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/57/57_ 0.78892232201810.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/63/63_ 0.786201380332380.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/67/67_ 0.784185212820.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_42f88b52f 0-0370/61/61_ 0.7661256177480.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9f3452558 0-0370/61/61_ 0.7663786255730.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b36d24c33 0-0370/63/63_ 0.765858202140720.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/69/69_ 0.765651214169860.00.220.22 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/60/60_ 0.7749384284650.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/62/62_ 0.7820544226370.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7efaef6e0 1-0380/60/60_ 0.7734205358380.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cc717980d 1-0380/61/61_ 0.7742681894487050.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/62/62_ 0.7745753330200.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b69e8f5b7 1-0380/69/69_ 0.7744334378820.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d855bdf43 1-0380/70/70_ 0.7737805309550.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d8dd5f167 1-0380/70/70_ 0.7739465376860.00.280.28 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6395cd131 1-0380/68/68_ 0.7731255235720.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9844e10fa 1-0380/94/94_ 0.77253734394830.00.350.35 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_9704a62b7 1-0380/61/61_ 0.7724235170380.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0adfee7ba 1-0380/60/60_ 0.7818995318450.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f819cdaa5 1-0380/64/64_ 0.7817224245630.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b4d0bab0a 1-0380/62/62_ 0.7815335218040.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_29f7498c0 1-0380/78/78_ 0.791209274262820.00.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/65/65_ 0.798784251230.00.230.23 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/84/84_ 0.795705337420.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/68/68_ 0.7760043312480.00.240.24 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4a06fc7f4 1-0388/69/69W 0.7900188269.60.190.19 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/63/63_ 0.7757065532980.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsour
Found on 2024-08-08 20:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b130029e353Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 06-Aug-2024 15:25:40 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 6 days 5 hours 15 minutes 38 seconds Server load: 0.87 0.74 0.91 Total accesses: 2218 - Total Traffic: 6.7 MB - Total Duration: 763088 CPU Usage: u4.83 s8.47 cu0 cs0 - .00248% CPU load .00413 requests/sec - 13 B/second - 3150 B/request - 344.043 ms/request 1 requests currently being processed, 49 idle workers ________________________________________________W_.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/43/43_ 0.51595261239920.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/48/48_ 0.5118055196040.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/42/42_ 0.5013352473390.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2b3170a15 0-0370/58/58_ 0.5014615360220.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5811eddc7 0-0370/70/70_ 0.4916604496840.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/44/44_ 0.49174114108770.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/50/50_ 0.49175445157280.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7b2fa779d 0-0370/40/40_ 0.4916638516112370.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/45/45_ 0.491601555189560.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/45/45_ 0.49146711545790.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4846341a2 0-0370/74/74_ 0.5014585393660.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ae185eb46 0-0370/49/49_ 0.50144932150690.00.200.20 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8680bc9ba 0-0370/44/44_ 0.5014383345830.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1d3d7017f 0-0370/37/37_ 0.5013917489070.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_55a27ae65 0-0370/43/43_ 0.5012136369820.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1d85b19d5 0-0370/43/43_ 0.5010994757430.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a07424785 0-0370/39/39_ 0.5010968462520.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5bfcc83c0 0-0370/40/40_ 0.5094145263220.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e3572798e 0-0370/36/36_ 0.508509853230.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_513c9cbc0 0-0370/41/41_ 0.5073785122140.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/44/44_ 0.506277210145930.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/40/40_ 0.51414920547090.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/41/41_ 0.514376274186530.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/38/38_ 0.51291620848390.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/42/42_ 0.512365217123920.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/38/38_ 0.4817432240104420.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0380/38/38_ 0.4812166640149130.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/36/36_ 0.4814518231297160.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.48158622818236580.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.48166253187260.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_21629bf71 1-0380/43/43_ 0.48165933267710.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b1d969691 1-0380/46/46_ 0.48146085266350.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/48/48_ 0.4814650240298610.00.210.21 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/41/41_ 0.4814390231197160.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/74/74_ 0.4813945517183050.00.290.29 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/41/41_ 0.4813383264147950.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/36/36_ 0.48121104224320.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/41/41_ 0.4810984235149800.00.130.13 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/36/36_ 0.489894265121550.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/58/58_ 0.489399221175610.00.140.14 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/42/42_ 0.4873863117290.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_82e7fa0c8 1-0380/63/63_ 0.486341226240080.00.150.15 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/44/44_ 0.4834548240510.00.170.17 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1b22e641a 1-0380/36/36_ 0.485344223101910.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/39/39_ 0.4829103350490.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cG
Found on 2024-08-06 15:25 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13e91370a1Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 04-Aug-2024 16:48:13 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 4 days 6 hours 38 minutes 11 seconds Server load: 0.51 0.63 0.69 Total accesses: 1641 - Total Traffic: 4.8 MB - Total Duration: 581157 CPU Usage: u3.26 s5.62 cu0 cs0 - .0024% CPU load .00444 requests/sec - 13 B/second - 3047 B/request - 354.148 ms/request 1 requests currently being processed, 49 idle workers ___W______________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/35/35_ 0.3550915110100.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_771e94917 0-0370/32/32_ 0.3452745180530.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4490080b8 0-0370/28/28_ 0.3413314349700.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1d341c07a 0-0378/40/40W 0.350052569.60.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/46/46_ 0.353095770580.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_355a2dbce 0-0370/37/37_ 0.354028569960.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_992326d16 0-0370/42/42_ 0.3541286150350.00.160.16 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_55bc378c5 0-0370/32/32_ 0.353765541030.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ca6b622e5 0-0370/29/29_ 0.35966124181830.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_5ee3afced 0-0370/32/32_ 0.35451537440.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_bafb9247c 0-0370/45/45_ 0.3313854354130.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_2c37ddb21 0-0370/41/41_ 0.3313721335910.00.180.18 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a404e8a25 0-0370/36/36_ 0.3413640525180.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_200a07a0f 0-0370/29/29_ 0.3413583369560.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_56702c8ef 0-0370/32/32_ 0.3411747532340.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_84f799146 0-0370/30/30_ 0.3410730737070.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4abc6e3db 0-0370/30/30_ 0.3410654550870.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_98519abd8 0-0370/29/29_ 0.34102954217180.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d9d99a11c 0-0370/26/26_ 0.3410106532850.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_1498c07b1 0-0370/28/28_ 0.349978358950.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a8f04e921 0-0370/30/30_ 0.349872613890.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d3aea8753 0-0370/26/26_ 0.349648336940.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4949accd6 0-0370/30/30_ 0.3484525167900.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_b28c1796a 0-0370/30/30_ 0.3470486537890.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f5afb0573 0-0370/29/29_ 0.3455817118590.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4bb4522e8 1-0380/31/31_ 0.35522220068700.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/29/29_ 0.34136031647112190.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/29/29_ 0.35445229275360.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/32/32_ 0.353751219168780.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/31/31_ 0.354114255111910.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/32/32_ 0.353984214251860.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.35557232241000.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/29/29_ 0.352053252221830.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/30/30_ 0.3413881318132590.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/66/66_ 0.3413749221165950.00.270.27 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.34136953124060.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/28/28_ 0.3413321219204590.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/33/33_ 0.3412168209135440.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/28/28_ 0.341165622975420.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/47/47_ 0.3410672221160280.00.110.11 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/26/26_ 0.341059719989720.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/50/50_ 0.3410219231227810.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/30/30_ 0.349654234207880.00.090.09 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/27/27_ 0.341003222171870.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/29/29_ 0.348563278200330.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.ph
Found on 2024-08-04 16:48 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13a02d1a44Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 02-Aug-2024 13:45:03 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 days 3 hours 35 minutes 1 second Server load: 0.94 0.84 0.92 Total accesses: 920 - Total Traffic: 2.6 MB - Total Duration: 294315 CPU Usage: u1.64 s2.88 cu0 cs0 - .00243% CPU load .00495 requests/sec - 14 B/second - 2980 B/request - 319.908 ms/request 1 requests currently being processed, 49 idle workers _________________________________________W________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/22/22_ 0.195950386340.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_80d1d7ff1 0-0370/19/19_ 0.1961515171330.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fe40ca13e 0-0370/16/16_ 0.192252335500.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fe088bc46 0-0370/20/20_ 0.194278513080.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_912681e79 0-0370/33/33_ 0.194638513800.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8be6457e1 0-0370/24/24_ 0.195200332960.00.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6e23436d0 0-0370/29/29_ 0.195286430910.00.120.12 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_52aa9bdcb 0-0370/19/19_ 0.195100319770.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_61554e635 0-0370/16/16_ 0.1945325161510.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8d03cab04 0-0370/19/19_ 0.194440311120.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_166bda1c2 0-0370/33/33_ 0.193093642400.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_082c57719 0-0370/22/22_ 0.1924398921900.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/21/21_ 0.192322515140.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_653dc75ee 0-0370/17/17_ 0.192279357810.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_da5df3de9 0-0370/17/17_ 0.192210311150.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c39d26198 0-0370/18/18_ 0.191964535650.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_adfd9f4f2 0-0370/18/18_ 0.19825332860.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a68c6d2e1 0-0370/17/17_ 0.194223207240.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4ec5010a9 0-0370/13/13_ 0.188192310560.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_0d28ef594 0-0370/14/14_ 0.188098344520.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f3dcee089 0-0370/17/17_ 0.18796258730.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_be4692fb9 0-0370/13/13_ 0.187382314190.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_54ab23486 0-0370/17/17_ 0.1872776144600.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e1483fcf9 0-0370/17/17_ 0.187190520210.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f2d197ab5 0-0370/16/16_ 0.196465740280.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8e37f832b 1-0380/18/18_ 0.17596520921930.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.18229721936460.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.17440170138510.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.175091451190.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.17522427633800.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.175110209125220.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/20/20_ 0.1744605021129160.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.17462421739380.00.080.08 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/17/17_ 0.173665265100540.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/21/21_ 0.18302724740230.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/20/20_ 0.18238719724110.00.060.06 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.182258539100.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/17/17_ 0.18221621524690.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.182202426000.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.18850293589170.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.1844822238000.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0388/28/28W 0.1800184549.60.070.07 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/17/17_ 0.177388243162030.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.17812121136370.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.177339446690.00.050.05 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0<
Found on 2024-08-02 13:44 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b135fcb559fApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 01-Aug-2024 09:03:01 UTC Restart Time: Wednesday, 31-Jul-2024 10:10:02 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 22 hours 52 minutes 59 seconds Server load: 3.13 3.22 2.44 Total accesses: 511 - Total Traffic: 1.5 MB - Total Duration: 128562 CPU Usage: u.75 s1.29 cu0 cs0 - .00248% CPU load .0062 requests/sec - 18 B/second - 3017 B/request - 251.589 ms/request 1 requests currently being processed, 49 idle workers ____W_____________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/13/13_ 0.102830361500.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_aebdaae52 0-0370/13/13_ 0.10285545930.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.109747324100.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a1102f4a8 0-0370/13/13_ 0.09118091303910.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c8ceb42af 0-0378/15/15W 0.11006379.60.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/15/15_ 0.10559420400.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d96eeac29 0-0370/23/23_ 0.101007715330.00.100.10 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_40bd2acbc 0-0370/12/12_ 0.1033635430.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e5b2bde37 0-0370/9/9_ 0.091503348660.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_764c59be1 0-0370/11/11_ 0.091302389980.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_360cbab8f 0-0370/9/9_ 0.101179131470.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_41883f197 0-0370/11/11_ 0.101128235180.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4e22a275c 0-0370/12/12_ 0.1011097014230.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/10/10_ 0.1010845431660.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.109734310260.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_4fbb9f35d 0-0370/10/10_ 0.109717329160.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c758c7763 0-0370/10/10_ 0.107992614660.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0370/7/7_ 0.1072357202270.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_7cdc6ad82 0-0370/7/7_ 0.10704939670.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d2aeb2999 0-0370/8/8_ 0.105914717110.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_75c38450a 0-0370/11/11_ 0.105665466990.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_87858dacd 0-0370/7/7_ 0.10403823313720.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/8/8_ 0.10402755370.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/10/10_ 0.1028802359880.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/9/9_ 0.1028681213690.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/9/9_ 0.092845315150.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_757f4ea33 1-0380/8/8_ 0.081085568229550.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/9/9_ 0.081239022146920.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/13/13_ 0.09322436640.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/10/10_ 0.0956734416040.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/12/12_ 0.0934526232840.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/12/12_ 0.081389923416150.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/8/8_ 0.081506126028430.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/9/9_ 0.081179762771420.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/14/14_ 0.0811287434630.00.040.04 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.081111729390.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET / HTTP/1.1 1-0380/9/9_ 0.081083259960.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f7ccc9400 1-0380/9/9_ 0.0897395800.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/8/8_ 0.089722415340.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.088878315810.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8e6d9b44d 1-0380/7/7_ 0.08777823014300.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.087055444700.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/11/11_ 0.0848403147050.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_ab83ead1f 1-0380/8/8_ 0.087044415210.00.020.02 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/10/10_ 0.084032446050.00.030.03 127.0.0.1http/1.1ip-10-1-89-222.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_aa44d402d 1-0380/8/8_ 0.083942423410.00.020.02 127.0
Found on 2024-08-01 09:02 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133a2e5909Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 30-Jul-2024 06:12:17 UTC Restart Time: Tuesday, 30-Jul-2024 02:38:01 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 hours 34 minutes 16 seconds Server load: 0.98 1.16 1.21 Total accesses: 179 - Total Traffic: 597 kB - Total Duration: 45275 CPU Usage: u.17 s.22 cu0 cs0 - .00303% CPU load .0139 requests/sec - 47 B/second - 3415 B/request - 252.933 ms/request 1 requests currently being processed, 49 idle workers W_________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0358/10/10W 0.0400259.60.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /server-status HTTP/1.1 0-0350/2/2_ 0.0049138332890.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/2/2_ 0.004881844870.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/2/2_ 0.0071523436990.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/2/2_ 0.0248112320890.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1 0-0350/1/1_ 0.0060686120.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_aa7c65ba6 0-0350/1/1_ 0.02477345900.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/5/5_ 0.004946632670.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/1/1_ 0.0060535100.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_14827a0c3 0-0350/3/3_ 0.004934505480.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/5/5_ 0.02475710725450.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/cid.php?StateId=_3651d5442ca6 0-0350/1/1_ 0.0056055100.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_f9f0abae1 0-0350/4/4_ 0.024721473150.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0350/4/4_ 0.024731823470.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/trigger-update.php HTTP/1.1 0-0350/9/9_ 0.024749714900.00.040.04 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/3/3_ 0.02443035690.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9961739b8 0-0350/2/2_ 0.0237316250.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_9df85ffde 0-0350/2/2_ 0.0237203130.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_30149cc2b 0-0350/3/3_ 0.0229255240.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_df0021112 0-0350/2/2_ 0.0217313130.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_6955552bb 0-0350/3/3_ 0.026234230.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0350/3/3_ 0.02510312440.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_fa8d4401b 0-0350/27/27_ 0.04468725020.00.100.10 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0350/8/8_ 0.0442416733970.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/cid.php?StateId=_268222c528aa 0-0350/5/5_ 0.04241410610.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/1/1_ 0.01476737750.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/7/7_ 0.01477371540.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/3/3_ 0.02629323250.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_cf8e9a77a 1-0360/2/2_ 0.0147217260.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/2/2_ 0.01475973430.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/2/2_ 0.014749481140.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0360/2/2_ 0.01473375720.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/2/2_ 0.0144254180.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/4/4_ 0.02372626911260.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/2/2_ 0.0237144180.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/5/5_ 0.02173727611360.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/2/2_ 0.025224190.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_406a8704f 1-0360/10/10_ 0.0249011350.00.030.03 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 1-0360/7/7_ 0.024394810020.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_26 1-0360/2/2_ 0.0342640930.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0360/2/2_ 0.032353130.00.010.01 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/multiauth/selectsource.php?AuthState=_76d2afb46 1-0360/1/1_ 0.008180370.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/2/2_ 0.006693763840.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/nextmail/trigger-update.php HTTP/1.1 1-0360/1/1_ 0.006059274454890.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/1/1_ 0.006048480.00.000.00 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0360/4/4_ 0.014952516870.00.020.02 127.0.0.1http/1.1ip-10-1-96-48.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState
Found on 2024-07-30 06:12 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b134df5d1b1Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Sunday, 28-Jul-2024 01:03:19 UTC Restart Time: Wednesday, 24-Jul-2024 05:01:20 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 20 hours 1 minute 58 seconds Server load: 0.73 0.93 0.80 Total accesses: 964 - Total Traffic: 2.8 MB - Total Duration: 179194 CPU Usage: u2.85 s5.72 cu0 cs0 - .00259% CPU load .00291 requests/sec - 8 B/second - 3026 B/request - 185.886 ms/request 1 requests currently being processed, 49 idle workers _________________________________W________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/27/27_ 0.222831189364060.00.110.11 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/24/24_ 0.221282410510.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f07012b1d 0-0370/23/23_ 0.222372350900.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_10cc6f008 0-0370/18/18_ 0.22233148100.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/19/19_ 0.222309227104340.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/15/15_ 0.222294420390.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/19/19_ 0.22151521820010.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/14/14_ 0.22355724228870.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/18/18_ 0.223774323080.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_00d826b9a 0-0370/11/11_ 0.21626926324330.00.030.03 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/19/19_ 0.2254549940.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/13/13_ 0.227110413210.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/18/18_ 0.206966414110.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0370/34/34_ 0.21653325432720.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/15/15_ 0.216253655230.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/26/26_ 0.2156584101260.00.120.12 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/21/21_ 0.225630337110.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c7f2a5c4b 0-0370/17/17_ 0.225390332220.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f0f79b1c3 0-0370/15/15_ 0.225374413850.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/21/21_ 0.224820544060.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_a726cc99d 0-0370/22/22_ 0.224447530190.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_464c0b158 0-0370/34/34_ 0.223821724370.00.070.07 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cb6dbd9db 0-0370/16/16_ 0.22380438280.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_fa7877c0e 0-0370/15/15_ 0.22378836134200.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_400ac4bd5 0-0370/15/15_ 0.223760430790.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_c2e3687bb 1-0380/23/23_ 0.22580414350.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0380/24/24_ 0.221509323120.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_cee3cf61c 1-0380/18/18_ 0.22169223127620.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_ 0.21237824132630.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/15/15_ 0.212365428980.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/25/25_ 0.222320620050.00.100.10 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.22230338280.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_e25d09f34 1-0380/32/32_ 0.2241825925280.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0388/24/24W 0.2200109479.60.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /server-status HTTP/1.1 1-0380/14/14_ 0.206814429650.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_70f1d0579 1-0380/15/15_ 0.206525321670.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6c93381fa 1-0380/27/27_ 0.206259324940.00.140.14 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_819c4f291 1-0380/19/19_ 0.20567123141320.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/19/19_ 0.205643351700.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_8d0604ca2 1-0380/17/17_ 0.205619332980.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_f30c736ab 1-0380/19/19_ 0.205381331870.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_d7934bd93 1-0380/18/18_ 0.2052843229070.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0380/16/16_ 0.21469062224170.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/17/17_ 0.21442323551760.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/16/16_ 0.21381223220510.00.040.04 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 1-0380/18/18_
Found on 2024-07-28 01:03 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13869da7b7Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Friday, 26-Jul-2024 03:49:12 UTC Restart Time: Wednesday, 24-Jul-2024 05:01:20 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 22 hours 47 minutes 52 seconds Server load: 1.06 1.28 1.19 Total accesses: 172 - Total Traffic: 580 kB - Total Duration: 28630 CPU Usage: u1.42 s2.86 cu0 cs0 - .00254% CPU load .00102 requests/sec - 3 B/second - 3453 B/request - 166.453 ms/request 1 requests currently being processed, 49 idle workers _____________________W____________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0370/16/16_ 0.0360542015860.00.080.08 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0370/9/9_ 0.03416851402840.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/8/8_ 0.035307114118820.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.0349260931880.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.03480746130.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/3/3_ 0.03474762225360.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9bQSN 0-0370/2/2_ 0.034746243950.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0370/1/1_ 0.036323050010000.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/1/1_ 0.0378073971940.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.032215665970.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/2/2_ 0.0338344683380.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.033403152680.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/2/2_ 0.033053152530.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/2/2_ 0.03247431005280.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.031672051870.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 0-0370/6/6_ 0.031309502760.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1 0-0370/2/2_ 0.0511217844890.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.05100251787200.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0370/2/2_ 0.05741949611210.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.0546213098860.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/2/2_ 0.05236502020.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0378/9/9W 0.05003469.60.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /server-status HTTP/1.1 0-0370/1/1_ 0.0281738991980.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/1/1_ 0.037851189217850.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0370/1/1_ 0.037221694118830.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/5/5_ 0.03385241312640.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/9/9_ 0.0347225511070.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0380/2/2_ 0.034747034790.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/multiauth/selectsource.php?AuthState=_6d95700b2 1-0380/3/3_ 0.03551491462960.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/4/4_ 0.03518071132830.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/9/9_ 0.034867648840.00.060.06 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=s3.cloudworkengine.net 1-0380/2/2_ 0.03480377140.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/19/19_ 0.03347661395350.00.020.02 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.03315291154990.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.032810849519020.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.032406152180.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/8/8_ 0.0419925113630.00.050.05 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0380/2/2_ 0.04138228815660.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.04120881434600.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.0510236853730.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/3/3_ 0.05959291750.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0380/2/2_ 0.0562361164780.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/2/2_ 0.05278353630.00.010.01 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET / HTTP/1.1 1-0380/2/2_ 0.05232705300.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0380/1/1_ 0.0282533781570.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/1/1_ 0.0281494701400.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/1/1_ 0.0378305821640.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/1/1_ 0.03735251012020.00.000.00 127.0.0.1http/1.1ip-10-1-88-193.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0380/1/1_ 0.03654974238460.00.000.00 127.0.0.1http/1.1ip
Found on 2024-07-26 03:49 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b133e811ed6Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Wednesday, 24-Jul-2024 02:35:35 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 9 days 29 seconds Server load: 1.52 1.88 1.94 Total accesses: 1212 - Total Traffic: 3.1 MB - Total Duration: 102850 CPU Usage: u7.23 s11.56 cu0 cs0 - .00242% CPU load .00156 requests/sec - 4 B/second - 2692 B/request - 84.8597 ms/request 1 requests currently being processed, 49 idle workers W_________________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0368/13/13W 0.22001969.60.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/10/10_ 0.2221515513420.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/18/18_ 0.22834702600.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 0-0360/9/9_ 0.22252658412120.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/10/10_ 0.21773694018750.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/38/38_ 0.20167641028040.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0360/31/31_ 0.201676381196800.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0360/7/7_ 0.2016762113314870.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 0-0360/40/40_ 0.171675330440.00.050.05 127.0.0.1http/1.1 0-0360/8/8_ 0.2015776702980.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/12/12_ 0.2015636247580.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/10/10_ 0.2015133303990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 0-0360/76/76_ 0.201122399112920.00.280.28 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/20/20_ 0.2017840719035490.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/71/71_ 0.21105539116980.00.360.36 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/13/13_ 0.2110073682500.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/7/7_ 0.2192345463520.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/36/36_ 0.219200616111250.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/6/6_ 0.2184925156760.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/30/30_ 0.2274002144370.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/14/14_ 0.226420022920730.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/8/8_ 0.225946457510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/16/16_ 0.224052957410.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/9/9_ 0.22326830780.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/20/20_ 0.223175127920.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/6/6_ 0.2210360158220.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/8/8_ 0.234448815540290.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/23/23_ 0.2334201916380.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/11/11_ 0.233209853870.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/19/19_ 0.221675790108880.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/94/94_ 0.23253312406230.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/12/12_ 0.22167080078030.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0370/26/26_ 0.236213353170.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/9/9_ 0.239302645217620.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/110/110_ 0.2211180132980.00.310.31 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/11/11_ 0.239216637400.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/9/9_ 0.237360026864410.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/9/9_ 0.22157756754900.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/42/42_ 0.23189547013240.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/14/14_ 0.23849528117340.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/10/10_ 0.2116783208990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/72/72_ 0.23560743019810.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/22/22_ 0.2216762920038990.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 1-0370/26/26_ 0.2215264615800.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0370/79/79_ 0.2215018316724910.00.230.23 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/12/12_ 0.2384659504000.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/7/7_ 0.2118162978400.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/12/12_ 0.2321827013930.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/14/14_ 0.23740051115540.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 1-0370/23/23_ 0.2116764113240.00.080.08 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/microsoft.svg HTTP/1.1 SrvChild Server number - generation PID
Found on 2024-07-24 02:35 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13f4150883Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Monday, 22-Jul-2024 21:16:26 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 7 days 18 hours 41 minutes 20 seconds Server load: 1.08 0.99 1.15 Total accesses: 1152 - Total Traffic: 2.9 MB - Total Duration: 93471 CPU Usage: u6.18 s10.08 cu0 cs0 - .00242% CPU load .00171 requests/sec - 4 B/second - 2678 B/request - 81.138 ms/request 1 requests currently being processed, 49 idle workers ______________W___________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/5/5_ 0.2091328751820.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/9/9_ 0.20108557013310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.git/config HTTP/1.1 0-0360/17/17_ 0.2092809912600.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/8/8_ 0.2013115813810420.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/7/7_ 0.1824565630416140.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/38/38_ 0.2062092028040.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/facebook.svg HTTP/1.1 0-0360/31/31_ 0.20620881196800.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 0-0360/7/7_ 0.206207113314870.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 0-0360/40/40_ 0.17619830440.00.050.05 127.0.0.1http/1.1 0-0360/8/8_ 0.205221802980.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/12/12_ 0.205081247580.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/10/10_ 0.204578403990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 0-0360/76/76_ 0.2066899112920.00.280.28 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/20/20_ 0.207285819035490.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0368/61/61W 0.200016939.60.340.34 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/12/12_ 0.18324483742340.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/6/6_ 0.18304219313763430.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 0-0360/35/35_ 0.182906803888020.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/5/5_ 0.1825242406460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/22/22_ 0.18211718043570.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/13/13_ 0.1919981930516130.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/7/7_ 0.191592583387400.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/15/15_ 0.1913821087300.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/8/8_ 0.191329055780.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/19/19_ 0.19131830827870.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/5/5_ 0.193320581688110.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/7/7_ 0.20142460037180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/22/22_ 0.201363611354550.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.2013288903760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/19/19_ 0.22620290108880.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/93/93_ 0.2013181501420.00.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/12/12_ 0.2261531078030.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.git/config HTTP/1.1 1-0370/25/25_ 0.2017972903060.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0370/8/8_ 0.1931295168570.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/110/110_ 0.22625232980.00.310.31 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/10/10_ 0.202978692757340.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/8/8_ 0.2020684345359040.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/9/9_ 0.2252207754900.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/41/41_ 0.209567027311830.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/13/13_ 0.20282931015720.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/10/10_ 0.216228308990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.env HTTP/1.1 1-0370/71/71_ 0.209168111711200.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/22/22_ 0.226207920038990.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/webauthn_auth.php?StateId=_f7 1-0370/26/26_ 0.224709715800.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 1-0370/79/79_ 0.224463316724910.00.230.23 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/11/11_ 0.2025232202990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/7/7_ 0.217607978400.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/11/11_ 0.2011763715313930.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/9/9_ 0.20241449773060.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/23/23_ 0.21
Found on 2024-07-22 21:16 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1344e6ff3bApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Saturday, 20-Jul-2024 19:20:46 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 5 days 16 hours 45 minutes 40 seconds Server load: 0.61 0.77 0.96 Total accesses: 1056 - Total Traffic: 2.7 MB - Total Duration: 81782 CPU Usage: u4.56 s7.41 cu0 cs0 - .00243% CPU load .00214 requests/sec - 5 B/second - 2681 B/request - 77.4451 ms/request 1 requests currently being processed, 49 idle workers ________________________________W_________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/4/4_ 0.122072670300.00.010.01 127.0.0.1http/1.1 0-0360/8/8_ 0.1522430165113310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/16/16_ 0.152232224760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0360/7/7_ 0.152387181327660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/7/7_ 0.186591730416140.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/33/33_ 0.1620007219170.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/24/24_ 0.161961931510.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/6/6_ 0.1719301620512200.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/40/40_ 0.171916500440.00.050.05 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 0-0360/7/7_ 0.1717818002980.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/11/11_ 0.17170195357490.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/9/9_ 0.17169776703990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/75/75_ 0.18154444311100.00.280.28 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6d24a9cf9bc3 0-0360/19/19_ 0.16204966631690.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/53/53_ 0.18154322014260.00.330.33 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/12/12_ 0.18144743742340.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/6/6_ 0.18124479313763430.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 0-0360/35/35_ 0.181109403888020.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/5/5_ 0.187268406460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/22/22_ 0.1831978043570.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0360/13/13_ 0.192007930516130.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST / HTTP/1.1 0-0360/6/6_ 0.152416797620.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/12/12_ 0.1524000905250.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/7/7_ 0.152399774670.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C8BwjQp 0-0360/18/18_ 0.1523984906210.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/5/5_ 0.191523181688110.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/6/6_ 0.15240515144537180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/21/21_ 0.1623998751840.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fQjM 1-0370/7/7_ 0.1623985763490.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/14/14_ 0.19192545398250.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/90/90_ 0.1823969301150.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/11/11_ 0.1918552015878030.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0378/15/15W 0.20003019.60.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/8/8_ 0.1913321168570.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/109/109_ 0.1915443202910.00.310.31 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/10/10_ 0.201181292757340.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/8/8_ 0.202710345359040.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/7/7_ 0.1917339216350660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/40/40_ 0.1822324146360.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0370/13/13_ 0.20103191015720.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 1-0370/9/9_ 0.1820495078990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/70/70_ 0.1820731008850.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/18/18_ 0.19193221011920.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /app/config/parameters.yml HTTP/1.1 1-0370/8/8_ 0.19170162355620.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/78/78_ 0.19154463321550.00.230.23 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https://s3-id.cloudwor 1-0370/11/11_ 0.207258302990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/4/4_ 0.182058462104340.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.1823327353510860.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9bRiR 1-0370/9/9_ 0.206170977306
Found on 2024-07-20 19:20 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b131795f7f6Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Thursday, 18-Jul-2024 12:50:45 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 3 days 10 hours 15 minutes 39 seconds Server load: 0.98 1.24 1.29 Total accesses: 928 - Total Traffic: 2.5 MB - Total Duration: 68012 CPU Usage: u2.77 s4.54 cu0 cs0 - .00247% CPU load .00313 requests/sec - 8 B/second - 2796 B/request - 73.2888 ms/request 1 requests currently being processed, 49 idle workers ______W___________________________________________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/4/4_ 0.12110660300.00.010.01 127.0.0.1http/1.1 0-0360/8/8_ 0.152810065113310.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/16/16_ 0.15270214760.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 0-0360/7/7_ 0.15425171327660.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/6/6_ 0.158520231910050.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/33/33_ 0.16387119170.00.090.09 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1 0-0368/14/14W 0.1600469.60.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 0-0360/5/5_ 0.1313046268090.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/8/8_ 0.131304460350.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 0-0360/6/6_ 0.1313041802970.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/9/9_ 0.1412929634610.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fs3-id.cl 0-0360/8/8_ 0.1412907602580.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/66/66_ 0.1412891624110510.00.260.26 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/19/19_ 0.168766631690.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/49/49_ 0.14128488514050.00.330.33 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0360/10/10_ 0.141200636840.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 0-0360/5/5_ 0.1411865314670.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/34/34_ 0.141140900250.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 0-0360/4/4_ 0.1511354316460.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0360/4/4_ 0.157330927041740.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 0-0360/11/11_ 0.1545644010020.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET / HTTP/1.1 0-0360/6/6_ 0.15454787620.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 0-0360/12/12_ 0.154380905250.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 0-0360/7/7_ 0.15437764670.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdb5swFH3vr0C8BwjQp 0-0360/18/18_ 0.154364806210.00.040.04 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/4/4_ 0.141200721134740.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/6/6_ 0.1544314144537180.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/21/21_ 0.164378751840.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELznKwTd9fQjM 1-0370/7/7_ 0.164365663490.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/13/13_ 0.13130456698190.00.070.07 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/90/90_ 0.184349201150.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/10/10_ 0.13130450074860.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /robots.txt HTTP/1.1 1-0370/7/7_ 0.154563001140.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET //stage3-login.cloudworkengine.net/module.php/core/frontpag 1-0370/5/5_ 0.1411973145500.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0370/104/104_ 0.14128498462540.00.300.30 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/9/9_ 0.1411863361830.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1 1-0370/7/7_ 0.155419213549970.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/6/6_ 0.141293155747380.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 1-0370/40/40_ 0.182704046360.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fs3-lo 1-0370/11/11_ 0.15113543413660.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1 1-0370/9/9_ 0.18874978990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/70/70_ 0.181110908850.00.100.10 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /_profiler/phpinfo HTTP/1.1 1-0370/9/9_ 0.13130462611890.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 1-0370/7/7_ 0.1412927134910.00.030.03 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3c9974c40f7b 1-0370/74/74_ 0.14129059012160.00.210.21 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/10/10_ 0.1510914362990.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1 1-0370/4/4_ 0.1896462104340.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/10/10_ 0.183707253510860.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVPLbtswELznKwTd9bRiR 1-0370/6/6_ 0.15
Found on 2024-07-18 12:50 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b134b47c83bApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:04 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 58 seconds Server load: 0.89 1.00 1.26 Total accesses: 146 - Total Traffic: 543 kB - Total Duration: 28825 CPU Usage: u.99 s1.79 cu0 cs0 - .0024% CPU load .00126 requests/sec - 4 B/second - 3808 B/request - 197.432 ms/request 2 requests currently being processed, 48 idle workers ____________K_______________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038618770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072612000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039699427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039505080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349161262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261027260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404562310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03646/46/46K 0.0300272171.70.170.17 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /login.action HTTP/1.1 0-0360/4/4_ 0.00114013013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950540298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039485074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027733229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037074168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557875711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238861783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03750/50/50W 0.0200877136.20.130.13 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/2/2_ 0.0090386140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1344e7871eApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:07 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 9 minutes 1 second Server load: 0.81 0.99 1.25 Total accesses: 247 - Total Traffic: 866 kB - Total Duration: 29109 CPU Usage: u1 s1.82 cu0 cs0 - .00244% CPU load .00213 requests/sec - 7 B/second - 3590 B/request - 117.85 ms/request 3 requests currently being processed, 47 idle workers ____________K_____________________W_________K_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009039018770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072616000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039702427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039508080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349191262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261057260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404962310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03664/64/64K 0.0421305252.00.250.25 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0360/4/4_ 0.00114017013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950840298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039488074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-03765/65/65W 0.050070175.70.170.17 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/1/1_ 0.0027737229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037114168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557905711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238891783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03768/68/68K 0.03201057203.50.200.20 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.DS_Store HTTP/1.1 1-0370/2/2_ 0.0090390140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b1334fd83caApache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:11 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 9 minutes 5 seconds Server load: 0.75 0.97 1.25 Total accesses: 257 - Total Traffic: 878 kB - Total Duration: 29111 CPU Usage: u1 s1.82 cu0 cs0 - .00244% CPU load .00222 requests/sec - 7 B/second - 3498 B/request - 113.272 ms/request 1 requests currently being processed, 49 idle workers __________________________________W_______________.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009039418770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072620000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039706427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039512080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349231262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261097260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00405362310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/64/64_ 0.04113050.00.250.25 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1 0-0360/4/4_ 0.00114021013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003951240298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039492074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-03775/75/75W 0.050072187.50.180.18 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/1/1_ 0.0027740229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037154168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557945711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238931783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-0370/68/68_ 0.031010570.00.200.20 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /.DS_Store HTTP/1.1 1-0370/2/2_ 0.0090394140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43 -
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5595b13a5595b13df1e6128Apache Status Apache Server Status for stage3-login.cloudworkengine.net (via 127.0.0.1) Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 Server MPM: worker Server Built: 2024-04-10T17:45:18 Current Time: Tuesday, 16-Jul-2024 10:44:04 UTC Restart Time: Monday, 15-Jul-2024 02:35:06 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 1 day 8 hours 8 minutes 57 seconds Server load: 0.89 1.00 1.26 Total accesses: 135 - Total Traffic: 521 kB - Total Duration: 28730 CPU Usage: u.99 s1.79 cu0 cs0 - .0024% CPU load .00117 requests/sec - 4 B/second - 3951 B/request - 212.815 ms/request 2 requests currently being processed, 48 idle workers ____________K_______________________________W_____.............. ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-0360/9/9_ 0.009038618770.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/google.svg HTTP/1.1 0-0360/1/1_ 0.0072612000.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /wp-login.php HTTP/1.1 0-0360/2/2_ 0.0039699427940.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fda1cb34c2a74 0-0360/4/4_ 0.0039505080.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/apple.svg HTTP/1.1 0-0360/1/1_ 0.00349161262530.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1 0-0360/3/3_ 0.00261027260.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-0360/3/3_ 0.00404562310.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1 0-03645/45/45K 0.0301271170.70.170.17 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1 0-0360/4/4_ 0.00114013013510.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1 1-0370/10/10_ 0.003950440298020.00.060.06 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p 1-0370/5/5_ 0.0039485074220.00.020.02 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /favicon.ico HTTP/1.1 1-0370/1/1_ 0.0027733229045800.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/1/1_ 0.001037074168320.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/fallback/skip.php?spentityid=s3.cloudworkengine 1-0370/3/3_ 0.00557865711330.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf993d56968cf 1-0370/1/1_ 0.00238851783560.00.000.00 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1 1-03740/40/40W 0.0200782114.60.110.11 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /server-status HTTP/1.1 1-0370/2/2_ 0.0090386140.00.010.01 127.0.0.1http/1.1ip-10-1-91-201.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot mod_fcgid status: Total FastCGI processes: 0 Apache/2.4.52 (Ubuntu) Server at stage3-login.cloudworkengine.net Port 80
Found on 2024-07-16 10:43
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2024-05-09 18:43
Last seen 2024-05-19 08:56
Open for 9 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85Found 1 files trough .DS_Store spidering: /js
Found on 2024-05-19 08:56
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2024-05-09 06:44
Last seen 2024-05-19 06:54
Open for 10 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85Found 1 files trough .DS_Store spidering: /js
Found on 2024-05-19 06:54
-
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2024-05-09 09:21
Last seen 2024-05-13 02:21
Open for 3 days-
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d819fde85819fde85819fde85819fde85Found 1 files trough .DS_Store spidering: /js
Found on 2024-05-13 02:21
-
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-12 21:19
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Mon, 12 Jan 2026 21:19:45 GMT X-Amzn-Trace-Id: Root=1-6965656d-34079975038d2ab31218d766;Parent=03b96e90f94f1352;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: b5d9794f-119e-4d7f-817c-1b77ad5fcb31 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/9e39d5b715dbae1a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -nlFhwkdElsHRU0omoW_KrPCiTb8FVZLABwYdt1XHn-gZW8sKswZVQ== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/9e39d5b715dbae1a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-4c396fc805a5bba7.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-9a10d06ead7c9010.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 729456.com
2026-01-12 17:20
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6899 Connection: close Server: nginx Date: Mon, 12 Jan 2026 17:20:44 GMT Last-Modified: Mon, 05 May 2025 14:54:18 GMT Accept-Ranges: bytes ETag: "6818d11a-1af3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: TCGAid7NgjqF4Kt2LcO8b9jlLNA8LwjvpkfE-fBfUsMxMM1QyC98Rw== Age: 2 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49271.link', '49271.link', '49271.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 729456.com
2026-01-12 17:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 12 Jan 2026 17:20:46 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://729456.com/ X-Cache: Redirect from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zpOIlLP7FhR3F9W2wG7XDkcnh3QBAm43zqX333HF73U7r5sYu2e6aA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 530345.com
2026-01-12 15:10
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6909 Connection: close Server: nginx Date: Mon, 12 Jan 2026 15:10:09 GMT Last-Modified: Mon, 05 May 2025 14:40:46 GMT Accept-Ranges: bytes ETag: "6818cdee-1afd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mjoXOsmBZgmshJLAQEjOZILHbcSwMVPqEX93XmX3AYGlZuuRHVUyNw== Age: 3 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49265.link', '49265.link', '49265.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 530345.com
2026-01-12 15:10
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 12 Jan 2026 15:10:11 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://530345.com/ X-Cache: Redirect from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NQjO7yaRMJ241IXEWfbeD0kwNEzP_ykf7gfNwfd_xGtJ4GY8l3lI9g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 727456.com
2026-01-12 14:51
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 12 Jan 2026 14:51:59 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://727456.com/ X-Cache: Redirect from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: VSJr2t66_HwnQtzmXZVCXC-Ial9Mc3vWkZcM0RGIKEGVhwZ6qqwXBQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 727456.com
2026-01-12 14:51
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6888 Connection: close Server: nginx Date: Mon, 12 Jan 2026 14:51:58 GMT Last-Modified: Mon, 05 May 2025 14:57:10 GMT Accept-Ranges: bytes ETag: "6818d1c6-1ae8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: UDKldathvuNi0u1upbOSxLtg17IQmshg8xJu6-yKAuoJoqBuYqADWg== Age: 2 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49267.link', '49267.link', '49267.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 597456.com
2026-01-12 14:13
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6886 Connection: close Server: nginx Date: Mon, 12 Jan 2026 14:13:15 GMT Last-Modified: Mon, 05 May 2025 14:42:35 GMT Accept-Ranges: bytes ETag: "6818ce5b-1ae6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3qFiJDf4RO8zYeMp7gu9T6-MiYBBlF4XbKY0UFLMZXX2tgUGk5W8JQ== Age: 3 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49261.link', '49261.link', '49261.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 597456.com
2026-01-12 14:13
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 12 Jan 2026 14:13:17 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://597456.com/ X-Cache: Redirect from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: sSEwK0vUa0mM6rXqTmbfGTXrfzDYNaS74XFuPth1rDV942ZsiApjyA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 3 days ago by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-11 21:25
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Sun, 11 Jan 2026 21:25:18 GMT X-Amzn-Trace-Id: Root=1-6964153a-24b67d6d5dc994c1236b120c;Parent=533394f92ef1aa07;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 64727755-da14-4896-9a2b-6ab4051acbe6 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/9e39d5b715dbae1a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nA8LTF0gfVjtp8fMlxU2VRDxmO3TMKdMrjVBzeAtf8lWjisPw7N3cA== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/9e39d5b715dbae1a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-4c396fc805a5bba7.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-9a10d06ead7c9010.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-11 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · chesed-verachamim.co.il
2026-01-11 04:09
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 721 Connection: close Last-Modified: Mon, 05 May 2025 21:07:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cWTa1zIY_660zNbsmMswTrj8RhJOctos Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 10 Jan 2026 04:15:26 GMT ETag: "c7c7963f49fd6b310bd03041d9b008d0" X-Cache: Hit from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: FxVX5IVtBqSekG_9OOxdnUFznhwTT21_JyIAz3_nJrYMbnNetgmYCw== Age: 86017 Page title: כלל ישראל- חסד ורחמים <!doctype html><html lang="en" dir="rtl"><head><meta charset="utf-8"/><meta name="robots" content="noindex"><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>כלל ישראל- חסד ורחמים</title><script defer="defer" src="/static/js/main.0711a60a.js"></script><link href="/static/css/main.da5a4aa5.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2026-01-11 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · chesed-verachamim.co.il
2026-01-11 04:09
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 11 Jan 2026 04:09:02 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://chesed-verachamim.co.il/ X-Cache: Redirect from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LNw6QHg82VXIlA_Yk6QS48maOOwKdClfN1YLsGTnLy2wFB-4VKCSkA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-11 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-10 21:06
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Sat, 10 Jan 2026 21:06:56 GMT X-Amzn-Trace-Id: Root=1-6962bf6d-441c8ea44f7ff2ba0475d27a;Parent=1e493a854aa80bb1;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: fd100462-4325-421a-ab36-2bf6caaee398 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/9e39d5b715dbae1a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 2iPxvcfXsvZzSXgurfuiuiHd6FG1pRJheZhKnNEjNsHQyLZ9ZRv1Iw== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/9e39d5b715dbae1a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-4c396fc805a5bba7.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-9a10d06ead7c9010.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-10 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · sparkmanmedicine.com
2026-01-10 03:43
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 10 Jan 2026 03:43:29 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://sparkmanmedicine.com/ X-Cache: Redirect from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: KjIXeAT71WMeF5L6G7SdgH1L6c74PlOPj7xGNBt0qA1u3uYPsZ5kUA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · hidenseek3d.com
2026-01-09 22:59
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1362 Connection: close Date: Fri, 09 Jan 2026 22:59:24 GMT Last-Modified: Thu, 20 Apr 2023 10:00:08 GMT x-amz-version-id: null ETag: "684b45aa188a24dc25a98a1ca74f609c" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3ZF-q7c_JImI96Mt-hIOAjjSG2yClZ79AJ2xAkDWHDTSaZ_SO2m83g== Page title: Hide N Seek 3D <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Hide N Seek 3D</title> <meta name="description" content="Hide N Seek 3D"> <meta name="keywords" content="Hide N Seek 3D"> <link rel="stylesheet" href="assets/css/index.css"> <link rel="shortcut icon" href="favicon.ico"> </head> <body> <div class="container"> <div class="header"> <!-- <img src="assets/img/icon.png" alt=""> --> <span>Hide N Seek 3D</span> </div> <div class="center"> <div class="center-left"> <img src="assets/img/image_018_0520.jpg" alt=""> <img src="assets/img/image_018_1238.jpg" alt=""> <img src="assets/img/image_020_0887.jpg" alt=""> </div> <div class="center-right"> <h2>Looking for an exciting and thrilling game to play? Look no further than Hide N Seek 3D: Escape!</h2> <a href="https://play.google.com/store/apps/details?id=com.hicat.hicat" target="_blank"> <img src="assets/img/gp.webp" alt=""> </a> </div> </div> <div class="bottom"> <a href="/privacy/">Privacy Policy</a> </div> </div> </body> </html>Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · wokamolehealthycuisine.com
2026-01-09 22:28
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 16116 Connection: close Last-Modified: Tue, 02 Sep 2025 14:45:03 GMT x-amz-version-id: UBG4K0FBl8OxQFt6Kan2t_Yhatq1I2je Server: AmazonS3 Date: Fri, 09 Jan 2026 22:28:59 GMT ETag: "fccdb38cc3035a58d464b32fe04036ff" X-Cache: Hit from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: y7p0xYEjAtM8x45IusRtsId-NmsgY8beCfbrjIuDXE8wdWkeA2lPCg== Age: 20413 Page title: Home | Wokamole Healthy Cuisine <!doctype html> <html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=6.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="description" content="Bryan, TX 77802 Chinese food for Pickup - Delivery Order from Wokamole Healthy Cuisine in Bryan, TX 77802, phone: 979-846-0009 "> <meta name="keywords" content="Bryan, TX 77802 Chinese food for Pickup Delivery Order Chinese food for Pickup, Delivery Best Chinese food for Pickup"> <link rel="shortcut icon" href="/assets/images/ico/favicon.ico"> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="/assets/images/ico/apple-touch-icon-144-precomposed.png"> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="/assets/images/ico/apple-touch-icon-114-precomposed.png"> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="/assets/images/ico/apple-touch-icon-72-precomposed.png"> <link rel="apple-touch-icon-precomposed" href="/assets/images/ico/apple-touch-icon-57-precomposed.png"> <title>Home | Wokamole Healthy Cuisine</title> <link rel="canonical" href="https://wokamolehealthycuisine.com"> <link rel="stylesheet" href="/assets/css/main.css"/> <script> !function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled onFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]); posthog.init('phc_wRTKEH4zhknRP3t80Ttjj05BeWL43PdhQQGpg0mE6OV',{api_host:'https://app.posthog.com'}) </script> </head> <body> <section style="display: none;"> <a href="#header" aria-label="skip to navigation">Skip to Navigation</a> <a href="#main" aria-label="skip to main content">Skip to Main Content</a> </section> <header id="header"> <nav class="navbar" aria-label="Navigation"> <ul id="navlinks" class="navbar__container"><li><a class="navbar--link" href="/#home">Home</a></li><li><a class="navbar--link" href="/order/">Order Online</a></li><li><a class="navbar--link" href="/#contact">Contact Us</a></li></ul> </nav> </header> <main id="main"> <section id="home" class="hero__container"> <div class="hero__sliders-container"><img id="hero-slider1" class="hero--image" loading="lazy" src="/assets/images/slider1.jpg" alt="Chinese Food"><img id="hero-slider2" class="hero--image" loading="lazy" src="/assets/images/slider2.jpg" alt="Chinese Food"><ol class="carousel-indicators"><li tabindex="0" role="button"><span class="acsb-sr-only" aria-hidden="false">Carousel slide 1</span></li><li tabindex="0" role="button"><span class="acsb-sr-only" aria-hidden="false">Carousel slide 2</span></li></ol></div> <div class="hero__overlay"> <h1 id="name" class="title"><span class="welcome-title">Welcome To Wokamole Healthy Cuisine</span></h1> <div class="stars mt-3">★★★★★★★★★★★★★★★★★★★★</div> <h2 id="slogan" class="slogan mt-1 mb-3">Best food, Great value</h2> <a id="order_online_link" class="button button-primaryFound 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · wokamolehealthycuisine.com
2026-01-09 22:28
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 22:29:01 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wokamolehealthycuisine.com/ X-Cache: Redirect from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: UeonJeJAukqvehHx30wlhjCxmxJj6AnFsDvewHOTQxsQzneXHaRqZw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2026-01-09 21:55
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 09 Jan 2026 21:55:43 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: d-avkjwWg27AjwV3edqSWkvN7FoKaIv1KKIkhqVUQj4kSik4vCxcYQ== Age: 21300 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2026-01-09 21:55
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 09 Jan 2026 21:55:43 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: QLsoW3FZULoti-xITSIV2cyBayA5yWS7U0DI18IWtTtSSc8cjUnC4Q== Age: 21299 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-09 21:19
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Fri, 09 Jan 2026 21:19:29 GMT X-Amzn-Trace-Id: Root=1-696170e1-4e0f764f5aa05e3f1d5d10cb;Parent=7941ef3866c826dc;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 4c83ad1c-26d9-4155-b145-6776d5f78050 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" X-Cache: Miss from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: FfpGKjDRohEB85R4KLygXeNLuO9oItmfJcBWrT4fEhoYMpM3FRxp0Q== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/9e39d5b715dbae1a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-4c396fc805a5bba7.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-9a10d06ead7c9010.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.experience-muse.com
2026-01-09 15:29
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 17445 Connection: close Last-Modified: Fri, 14 Mar 2025 04:07:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 09 Jan 2026 15:29:09 GMT ETag: "576946448809ac113fb5ef6093e0e51a" X-Cache: Hit from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Z5KhexlYkGTTjMgqm5HnwspxyUxyx-wHQbEuF-DLXXeccugB5STjxw== Age: 42810 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Permissions-Policy: autoplay=(), camera=(), fullscreen=*, geolocation=(self "https://maps.gstatic.com" "https://maps.googleapis.com" "https://maps.google.com"), microphone=(), payment=() Page title: MUSE: Loyalty Programme <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <!-- <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval'https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src *"> --> <title>MUSE: Loyalty Programme</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable = no"> <meta name="description" content="Your Permission to Indulge"> <meta name="keywords" content="muse loyalty program, muse loyalty, muse app, muse points, Chalhoub, shopping, luxury, brands, fashion, beauty, points, membership, benefits, card, offers, tiers, bonus, shop, inspiration, SWAROVSKI, MICHAEL KORS, LEVEL SHOES, LACOSTE, TORY BURCH, TRYANO, LOCCITANE, KENZO, TANAGRA,تطبيق ميوز, تطبيق ميوز لجمع النقاط, برنامج ميوز, برنامج الولاء ميوز, موقع برنامج ميوز, موقع تطبيق ميوز, برنامج ميوز لجمع النقاط"> <meta property="og:url" content="https://www.muse.loyaltycloud1.com/"/> <meta property="og:type" content="website"/> <meta property="og:title" content="Loyalty that rewards you across the region"/> <meta property="og:description" content="Designed to enhance your shopping experience, MUSE gives you exclusive access to a world of aspirational brands like L'Occitane, Swarovski, Level Shoes, Faces and more, at your fingertips."/> <meta property="og:image" content="https://images.ctfassets.net/v0a9igg04qv1/3TQEcvGwmmEVUlCAvSI1RM/dab670dd9f87f0d283163bc712e1bc4f/og_image_muse.jpg"/> <link rel="preload" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"> <style type="text/css">@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e4.woff) format('woff');}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff) format('woff');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff) format('woff');unFound 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · greenderby.com
2026-01-09 14:44
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 14:44:20 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://greenderby.com/ X-Cache: Redirect from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uT5iOH3GGWSGOZrusvWiEIW3U6KKDTIcTnNOBvmoKaiOOIo8T1NpqA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · greenderby.com
2026-01-09 14:44
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Date: Fri, 09 Jan 2026 14:44:21 GMT Location: https://www.greenderby.com/ X-Cache: Miss from cloudfront Via: 1.1 3de687dde9ccf524586562826ee53358.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: yqIVR9LMAZpbYoIvUTKpOAzeMdgBy7rPv-w20iTkHY2VDGDihdaSCA==
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · web.nalcam-bo-bo.ovg-dev.com
2026-01-09 07:27
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Fri, 09 Jan 2026 07:00:57 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: k7A3Toa1tnru0ezKjejqf5PkPWEI3WTyG67Xe0txXkPBi-A5RF6EcQ== Age: 1603 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · web.nalcam-bo-bo.ovg-dev.com
2026-01-09 07:00
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Fri, 09 Jan 2026 07:00:57 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: lX4hWdl64e3UEC1TxMOLnLPrI2az_yqHdTAnlIfE4ZCCnPjD4CZJjQ== Age: 2 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · newbooksmag.com
2026-01-09 02:52
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 02:52:57 GMT Server: Apache/2 Link: <https://newbooksmag.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: i2s8k1cNJ81vxZmuWNcdCgZjt8XSUKPwscFIAt36F5DpYsaAGMMpnw==
Found 2026-01-09 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-08 21:42
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Thu, 08 Jan 2026 21:42:14 GMT X-Amzn-Trace-Id: Root=1-696024b2-778d213d1f28872d47db140c;Parent=6fb4157233f38d76;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: a6efd983-3e4d-4a3c-8865-ed717e1bf27a content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: rEH-ZhkXgHjvdRJ-Il1RkzHMEOvs9nLAY20esbbmphf1nKmA37e_sw== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-08 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.flightin.com
2026-01-08 19:10
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Thu, 08 Jan 2026 19:10:31 GMT Pragma: no-cache Cache-Control: no-cache, must-revalidate Server: nginx Vary: Accept-Encoding P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Set-Cookie: IMWEBVSSID=nvimsu6bgh4i85ggln6onk48bsg24ib7k8g2ikc6k1tfhberl8kvhivnbj8hraj5aj56ks1uhu5l85v9k36lt1so0odpi0cgvuomhk1; path=/; SameSite=None; Secure=true; domain=flightin.com; HttpOnly Set-Cookie: al=KR; expires=Wed, 04-Nov-2026 19:10:30 GMT; Max-Age=25920000; path=/; domain=flightin.com; HttpOnly Set-Cookie: _imweb_login_state=N; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT X-Cache: Miss from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -GDa1s0i6TOfBQPhKZ5SKiy6FXJ2uXVPY_ewGFrDWPeTOysh66kNeg==
Found 2026-01-08 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-07 21:24
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Wed, 07 Jan 2026 21:24:59 GMT X-Amzn-Trace-Id: Root=1-695ecf27-461efbaa5d9db73817032a6f;Parent=34de637fe1690747;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 8b711fb5-d59b-43f4-bbde-fd8fa40c7bb5 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 fe1df26b55e8c12763613686df86f7f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: DSxWOtUvOeI-E352yAzk5RF3rIjphv9NBpM0RE3Zgh95R44O9Yz0aA== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · lotusbook365.blue
2026-01-07 17:04
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7470 Connection: close Date: Wed, 07 Jan 2026 17:04:26 GMT Cache-Control: public, max-age=0, s-maxage=31536000 Server: AmazonS3 Accept-Ranges: bytes ETag: "019090147744b8d9c8d0feae2c8a70e3" Last-Modified: Wed, 07 Jan 2026 16:39:29 GMT X-Cache: Hit from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z6EbBwMmNJZ1iKIL9PcvSLzxYZ7nciShEhvwpM8AXKUcgnITSkFE8w== Age: 2 <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1.0,user-scalable=no,shrink-to-fit=no"> <title></title> <base href="/"> <meta content="" name="description"> <meta content="" name="keywords"> <!-- Favicons --> <link rel="icon" type="image/png" href="assets/img/favicon.png"> <!-- Google Fonts --> <!-- <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300;400;700&display=swap" rel="stylesheet"> --> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin=""> <style type="text/css">@font-face{font-family:'Lato';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwaPGQ3q5d0N7w.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Lato';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ3q5d0.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}@font-face{font-family:'Lato';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXiWtFCfQ7A.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Lato';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXiWtFCc.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}@font-face{font-family:'Lato';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGQ3q5d0N7w.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Lato';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}@font-face{font-family:'Lato';font-style:normal;font-weight:900;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwaPGQ3q5d0N7w.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Lato';font-style:normal;font-weight:900;font-display:swap;src:url(https://fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ3q5d0.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}</style> <!-- assets CSS Files --> <!-- <link rel="stylesheet" type="text/css" href="assets/css/style.css"> --> <style>:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#2Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · lotusbook365.blue
2026-01-07 17:04
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 07 Jan 2026 17:04:29 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://lotusbook365.blue/ X-Cache: Redirect from cloudfront Via: 1.1 d51f8b07f1cd9f6dbf62bb0b0c961f1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: GrjAEs2q44tb98WNN3e-HVTKH0RQu9JgYaXX6irerGSvoNmS8GHXNw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 914456.com
2026-01-07 10:43
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6886 Connection: close Server: nginx Date: Wed, 07 Jan 2026 10:43:21 GMT Last-Modified: Mon, 05 May 2025 14:50:05 GMT Accept-Ranges: bytes ETag: "6818d01d-1ae6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ZPX4CgX4ndgwBizuwIXyvbbP_NNBoGjBvS1lMH13aSsWJdfAIJ1qoQ== Age: 2 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49283.link', '49283.link', '49283.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 914456.com
2026-01-07 10:43
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 07 Jan 2026 10:43:23 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://914456.com/ X-Cache: Redirect from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: QMOeJaO1UyDIeh5RNE7p2-kdnAuWPWLK0KvEr4tOrcM2cU80dAvhTg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · thpay.cc
2026-01-07 03:01
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 07 Jan 2026 03:01:21 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://thpay.cc/ X-Cache: Redirect from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: h7etZnpzqMZJfYxfcGVsP8u9c_qFKvB9_4GIlgCfe_AzmbuDA8rLLA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · thpay.cc
2026-01-07 03:01
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 689 Connection: close Server: nginx Date: Wed, 07 Jan 2026 03:01:21 GMT Accept-Ranges: bytes Last-Modified: Thu, 11 Sep 2025 06:28:54 GMT ETag: "68c26c26-2b1" Set-Cookie: sl-session=liTyDwEeX2l5vcHdeIkuGA==; Path=/; Max-Age=86400; HttpOnly Timing-Allow-Origin: * Via: mly inter, 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Mly-Id: 3f5371ad3e8bf11b773ed615bb49902d X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: pqroZNPKxEo83N9OA36Dr0LKyboAh-Ez0-jvpX4KWblSH-vAQHKWgQ== Page title: THPay <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="./favico.ico" /> <meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,minimum-scale=1.0,user-scalable=no"> <title>THPay</title> <script type="module" crossorigin src="./assets/index-67a93266.js"></script> <link rel="modulepreload" crossorigin href="./assets/.pnpm-ba92aabb.js"> <link rel="stylesheet" href="./assets/.pnpm-d01ddc96.css"> <link rel="stylesheet" href="./assets/index-04336f7f.css"> </head> <body> <div id="app"></div> <script src="https://res.cdn.openinstall.io/openinstall.js"></script> </body> </html>Found 2026-01-07 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-06 21:16
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Tue, 06 Jan 2026 21:16:52 GMT X-Amzn-Trace-Id: Root=1-695d7bc0-506733fe2a81ac0843b97142;Parent=53fc0cccf28d5797;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: cb1f87b3-0bc7-4573-89e6-69391d4c958b content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: jVrRcwZ4UHr4YS2dN6Kn4x7avaMrbGwMDJAa9_R3P7t75IhmKrWzAA== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-06 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · viduesa.lk
2026-01-06 14:49
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 4944 Connection: close Date: Tue, 06 Jan 2026 14:49:50 GMT Last-Modified: Sat, 03 Jan 2026 03:20:13 GMT x-amz-version-id: YIN6OEla_SZehhiTG.GNXDbWdjy3Y7.H ETag: "7669f808869b84df65ea8e0c0986c449" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: F-7CRjuda6IeboXlq32hCA6vDRWi_29RL1b2IR7_iugZqQOflDyieA== <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width,initial-scale=1.0" /> <meta name="facebook-domain-verification" content="w09zf1axxp1q4deop2yi806o9as9c5" /> <link rel="shortcut icon" class="favicon" href="/favicon.ico" type="image/x-icon" /> <link rel="icon" class="favicon" href="/favicon.ico" type="image/x-icon" /> <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900" crossorigin="anonymous" /> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css" crossorigin="anonymous" /> <script src="/js/pre-loader.js"></script> <script src="/js/scrollbar.js"></script> <title></title> <style> #initial-preloader { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: #fff; display: flex; flex-direction: column; justify-content: center; align-items: center; z-index: 9999; transition: opacity 0.3s; } .loader-text-container { margin-top: 200px; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Arial, sans-serif; color: #1976d2; text-align: center; max-width: 80%; } #initial-preloader.hide { opacity: 0; pointer-events: none; } @keyframes loader { 0%, 10%, 100% { width: 60px; height: 60px; } 65% { width: 120px; height: 120px; } } @keyframes loaderBlock { 0%, 30% { transform: rotate(0); } 55% { background-color: #6aaaff; } 100% { transform: rotate(90deg); } } @keyframes loaderBlockInverse { 0%, 20% { transform: rotate(0); } 55% { background-color: #6aaaff; } 100% { transform: rotate(-90deg); } } .loader { position: absolute; top: 50%; left: 50%; width: 60px; height: 60px; transform: translate(-50%, -50%) rotate(45deg) translate3d(0, 0, 0); animation: loader 1s infinite ease-in-out; } .loader span { position: absolute; display: block; width: 30px; height: 30px; background-color: #1976d2; animation: loaderBlock 1s infinite ease-in-out both; } .loader span:nth-child(1) { top: 0; left: 0; } .loader span:nth-child(2) { top: 0; right: 0; animation: loaderBlockInverse 1s infinite ease-in-out both; } .loader span:nth-child(3) { bottom: 0; left: 0; animation: loaderBlockInverse 1s infinite ease-in-out both; } .loader span:nth-child(4) { bottom: 0; right: 0; } #loading-percentage { margin-top: 10px; font-size: 16px; font-weight: bold; color: #1976d2; } #loading-error { display: none; margin-top: -200px; padding: 15px 20px; background-color: #ffebee; border-left: 4px solid #f44336; color: #333; font-size: 14px; text-align: left; border-radius: 4px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1); } #loading-error.error-active { display: block; } #loading-error h3 { margin-top: 0; color: #d32f2f; font-size: 16px; font-weight: 500; } #loading-error p { margin-bottom: 5px; } #loading-error .error-suggestion { margin-top: 10px; font-style: italic; } .reload-button { margin-top: 15px; padding: 8px 16px; background-color: #1976d2; color: white; border: none; border-radius: 4px; cursor: pointer; font-weight: 500; transition: background-color 0.3s; } .reload-button:hover { background-color: #1565c0; } </style> <script type="module" crossorigin src="/assets/inFound 2026-01-06 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · viduesa.lk
2026-01-06 14:49
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 4944 Connection: close Date: Tue, 06 Jan 2026 14:49:50 GMT Last-Modified: Sat, 03 Jan 2026 03:20:13 GMT x-amz-version-id: YIN6OEla_SZehhiTG.GNXDbWdjy3Y7.H ETag: "7669f808869b84df65ea8e0c0986c449" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nWhHNx26UXHi9tSplNaB09yqoB7WdZUScSFFx7qX3QKY0Egs9DrELg== <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width,initial-scale=1.0" /> <meta name="facebook-domain-verification" content="w09zf1axxp1q4deop2yi806o9as9c5" /> <link rel="shortcut icon" class="favicon" href="/favicon.ico" type="image/x-icon" /> <link rel="icon" class="favicon" href="/favicon.ico" type="image/x-icon" /> <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900" crossorigin="anonymous" /> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css" crossorigin="anonymous" /> <script src="/js/pre-loader.js"></script> <script src="/js/scrollbar.js"></script> <title></title> <style> #initial-preloader { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: #fff; display: flex; flex-direction: column; justify-content: center; align-items: center; z-index: 9999; transition: opacity 0.3s; } .loader-text-container { margin-top: 200px; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Arial, sans-serif; color: #1976d2; text-align: center; max-width: 80%; } #initial-preloader.hide { opacity: 0; pointer-events: none; } @keyframes loader { 0%, 10%, 100% { width: 60px; height: 60px; } 65% { width: 120px; height: 120px; } } @keyframes loaderBlock { 0%, 30% { transform: rotate(0); } 55% { background-color: #6aaaff; } 100% { transform: rotate(90deg); } } @keyframes loaderBlockInverse { 0%, 20% { transform: rotate(0); } 55% { background-color: #6aaaff; } 100% { transform: rotate(-90deg); } } .loader { position: absolute; top: 50%; left: 50%; width: 60px; height: 60px; transform: translate(-50%, -50%) rotate(45deg) translate3d(0, 0, 0); animation: loader 1s infinite ease-in-out; } .loader span { position: absolute; display: block; width: 30px; height: 30px; background-color: #1976d2; animation: loaderBlock 1s infinite ease-in-out both; } .loader span:nth-child(1) { top: 0; left: 0; } .loader span:nth-child(2) { top: 0; right: 0; animation: loaderBlockInverse 1s infinite ease-in-out both; } .loader span:nth-child(3) { bottom: 0; left: 0; animation: loaderBlockInverse 1s infinite ease-in-out both; } .loader span:nth-child(4) { bottom: 0; right: 0; } #loading-percentage { margin-top: 10px; font-size: 16px; font-weight: bold; color: #1976d2; } #loading-error { display: none; margin-top: -200px; padding: 15px 20px; background-color: #ffebee; border-left: 4px solid #f44336; color: #333; font-size: 14px; text-align: left; border-radius: 4px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1); } #loading-error.error-active { display: block; } #loading-error h3 { margin-top: 0; color: #d32f2f; font-size: 16px; font-weight: 500; } #loading-error p { margin-bottom: 5px; } #loading-error .error-suggestion { margin-top: 10px; font-style: italic; } .reload-button { margin-top: 15px; padding: 8px 16px; background-color: #1976d2; color: white; border: none; border-radius: 4px; cursor: pointer; font-weight: 500; transition: background-color 0.3s; } .reload-button:hover { background-color: #1565c0; } </style> <script type="module" crossorigin src="/assets/inFound 2026-01-06 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-03 21:19
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Sat, 03 Jan 2026 21:19:56 GMT X-Amzn-Trace-Id: Root=1-695987fc-67703eed1d81aad10b7aef7b;Parent=13a67fe96084f04c;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 480f9383-7bab-4752-a35d-c2b82182a4da content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" X-Cache: Miss from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: C_Kx9nEmT1H9kItTyaaczk-YMKFeCMjnvSfshvNsGTeKuXt34pau3Q== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-03 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 783234.com
2026-01-03 04:17
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 03 Jan 2026 04:17:40 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://783234.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NV_agoDP8geNg4ymBtzTjmy-m2jaSRpRr4GxuIYMJn_FJ9doa85-ug== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-03 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 783234.com
2026-01-03 04:17
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6884 Connection: close Server: nginx Date: Sat, 03 Jan 2026 04:17:39 GMT Last-Modified: Mon, 05 May 2025 14:59:34 GMT Accept-Ranges: bytes ETag: "6818d256-1ae4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: s5rSG348WRgAKUOu81Lyuheg7Lf7PlkmA1o-B9OvQ4V9jPy7PMCELQ== Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49286.link', '49286.link', '49286.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } forFound 2026-01-03 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · amsrchrdr.com
2026-01-03 02:19
HTTP/1.1 302 Found Content-Length: 0 Connection: close accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Content-DPR, Device-Memory, DPR, Viewport-Width, Width, Downlink, ECT, RTT, Save-Data access-control-allow-origin: * date: Sat, 03 Jan 2026 02:19:06 GMT location: https://www.google.com/search?q= set-cookie: UserId=94C1FB10-E84A-11F0-9B86-B9B075D6F96C; Domain=amsrchrdr.com; Path=/; Expires=Tue, 01 Jan 2036 02:19:06 GMT set-cookie: UserData=2026-01-03T02%3A19%3A06.945Z; Domain=amsrchrdr.com; Path=/; Expires=Tue, 01 Jan 2036 02:19:06 GMT x-powered-by: Express X-Cache: Miss from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: xgf3Y7NGZdEnELIXKVph_RZX-9CGgMUffNtfL7fKPQ4kSbdG2IdTcA==
Found 2026-01-03 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 723234.com
2026-01-02 22:05
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 02 Jan 2026 22:05:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://723234.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: RpIcP7CD1XPAkIRd0Pe90vC1Io79YhVdnqL5iFCiqZrFc2eyQylhqw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 723234.com
2026-01-02 22:05
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6886 Connection: close Server: nginx Date: Fri, 02 Jan 2026 22:05:24 GMT Last-Modified: Mon, 05 May 2025 14:51:38 GMT Accept-Ranges: bytes ETag: "6818d07a-1ae6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Yp_RhAzuTk75RWwzYyk9bHIDmwrfb7RJoFDGM0crrcjzMafXjIqI9g== Age: 1 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49284.link', '49284.link', '49284.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-02 21:31
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Fri, 02 Jan 2026 21:31:19 GMT X-Amzn-Trace-Id: Root=1-69583923-72e737c75563cff900956026;Parent=156303a8c117c3a1;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: ad60a9bc-2122-40ce-bc41-f9de04c4d3e9 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nuJF_K5xUgDhZK-E8sC20BG19de4Ymx72oeLSFME-0NhbJattbajug== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2026-01-02 16:27
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 02 Jan 2026 06:05:15 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NZvMbuY96o_grmMRT_QNWa-3GYGWdMl1hoxzRARi3FAyyMoRTix0yQ== Age: 37318 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2026-01-02 16:27
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 02 Jan 2026 06:05:15 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 fe1df26b55e8c12763613686df86f7f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nY8l8ZL-e45UPXBleZqFgiYYElmoWV41GuNLQ2octbqo85WWAzsrNA== Age: 37317 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.experience-muse.com
2026-01-02 11:48
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 17445 Connection: close Last-Modified: Fri, 14 Mar 2025 04:07:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 01 Jan 2026 19:35:09 GMT ETag: "576946448809ac113fb5ef6093e0e51a" X-Cache: Hit from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Bd0BVktWDJp6lW75BeUn_l8pzPr4UUXkAfIiiqNYbipm8_oBtwpcoQ== Age: 58385 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Permissions-Policy: autoplay=(), camera=(), fullscreen=*, geolocation=(self "https://maps.gstatic.com" "https://maps.googleapis.com" "https://maps.google.com"), microphone=(), payment=() Page title: MUSE: Loyalty Programme <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <!-- <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval'https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src *"> --> <title>MUSE: Loyalty Programme</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable = no"> <meta name="description" content="Your Permission to Indulge"> <meta name="keywords" content="muse loyalty program, muse loyalty, muse app, muse points, Chalhoub, shopping, luxury, brands, fashion, beauty, points, membership, benefits, card, offers, tiers, bonus, shop, inspiration, SWAROVSKI, MICHAEL KORS, LEVEL SHOES, LACOSTE, TORY BURCH, TRYANO, LOCCITANE, KENZO, TANAGRA,تطبيق ميوز, تطبيق ميوز لجمع النقاط, برنامج ميوز, برنامج الولاء ميوز, موقع برنامج ميوز, موقع تطبيق ميوز, برنامج ميوز لجمع النقاط"> <meta property="og:url" content="https://www.muse.loyaltycloud1.com/"/> <meta property="og:type" content="website"/> <meta property="og:title" content="Loyalty that rewards you across the region"/> <meta property="og:description" content="Designed to enhance your shopping experience, MUSE gives you exclusive access to a world of aspirational brands like L'Occitane, Swarovski, Level Shoes, Faces and more, at your fingertips."/> <meta property="og:image" content="https://images.ctfassets.net/v0a9igg04qv1/3TQEcvGwmmEVUlCAvSI1RM/dab670dd9f87f0d283163bc712e1bc4f/og_image_muse.jpg"/> <link rel="preload" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"> <style type="text/css">@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e4.woff) format('woff');}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff) format('woff');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff) format('woff');unFound 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 597678.com
2026-01-02 08:47
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 02 Jan 2026 08:47:43 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://597678.com/ X-Cache: Redirect from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hS1IUSLl-5viKHQpY3AC9xvQtMTetD7Elh9pTdVGeIq0YbbRnK2rJA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 597678.com
2026-01-02 08:47
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6888 Connection: close Server: nginx Date: Fri, 02 Jan 2026 08:47:43 GMT Last-Modified: Mon, 05 May 2025 14:48:35 GMT Accept-Ranges: bytes ETag: "6818cfc3-1ae8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -KJTMh9D2u_XpVUyyCyPy1P1SqqLmeWI8SOKperFMowmB1PKhI8V-Q== Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49260.link', '49260.link', '49260.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · web.nalcam-bo-bo.ovg-dev.com
2026-01-02 08:08
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Fri, 02 Jan 2026 06:13:12 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: U07j2_xcIqud_40OUacm_h7LM8FZPqdN-MdGXhWG2iVzDH9u2mpizQ== Age: 6927 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · web.nalcam-bo-bo.ovg-dev.com
2026-01-02 06:13
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Fri, 02 Jan 2026 06:13:12 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 3de687dde9ccf524586562826ee53358.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: BYxYVd6QcQSpgw_nWjVSCExG1lDAfOhTbSODpzlDuOzjVs-AEYdUyw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · ivorypay.io
2026-01-02 01:13
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Date: Fri, 02 Jan 2026 01:13:41 GMT Location: https://www.ivorypay.io/ X-Cache: Miss from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bxsEFCRH0ZdYxzwVJCcbl9q5MlKc47bzgfLfFKJA-5O-_ubrOBnHkg==
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · ivorypay.io
2026-01-02 01:13
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 02 Jan 2026 01:13:40 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://ivorypay.io/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: b6KtDI0YTOsjz59T4AgtE10Nop5cm9iD1eUD0rVpEjejOj_oAS5yRQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · newbooksmag.com
2026-01-02 00:11
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 02 Jan 2026 00:11:11 GMT Server: Apache/2 Link: <https://newbooksmag.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 5zcACAiZW7_QTjYA5gbA_62YygLi1Nzi_x6t9R9liW4WlDLn5yW0QA==
Found 2026-01-02 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2026-01-01 21:33
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Thu, 01 Jan 2026 21:33:31 GMT X-Amzn-Trace-Id: Root=1-6956e82b-29136dc262187e7c3b02d034;Parent=33bfcff54b84f962;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 17ade28c-08e8-4b5c-b3c1-bf565700684d content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" X-Cache: Miss from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OH9NEQtRqhYuYNbF2vLaRTYlRxWjNXqhAPgndS9mfpHfJP0peNZgLw== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2026-01-01 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · hpens.com
2026-01-01 04:36
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Thu, 01 Jan 2026 04:36:09 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://hpens.com/ X-Cache: Redirect from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pdJI6xivrE2HwLtWGlntBsYZTYu9X60H_oaH_UE4uomlhCkurMvxyw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2026-01-01 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · hpens.com
2026-01-01 04:36
HTTP/1.1 308 Permanent Redirect Transfer-Encoding: chunked Connection: close Date: Thu, 01 Jan 2026 04:36:08 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Set-Cookie: AWSALB=Dhr5PDX0NJdaAje5RzJFjgFvkZToKlvJFrdZjP7F+i3kaPEj9xL7vxJrt2uZ/ozGl2TKemb8irfgv6YzpV5BkQR1f2ffCo40iEZCDRGVBrnYKzjKNkk7HebwROpT; Expires=Thu, 08 Jan 2026 04:36:08 GMT; Path=/ Set-Cookie: AWSALBCORS=Dhr5PDX0NJdaAje5RzJFjgFvkZToKlvJFrdZjP7F+i3kaPEj9xL7vxJrt2uZ/ozGl2TKemb8irfgv6YzpV5BkQR1f2ffCo40iEZCDRGVBrnYKzjKNkk7HebwROpT; Expires=Thu, 08 Jan 2026 04:36:08 GMT; Path=/; SameSite=None Location: http://www.hpens.com/ X-Cache: Miss from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: bzt2a-ddVBvqBV9sbmXaQbsaZ7liUO32FCa6aVrrQnNpvzy4ewbGkw==
Found 2026-01-01 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2025-12-31 21:22
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Wed, 31 Dec 2025 21:22:17 GMT X-Amzn-Trace-Id: Root=1-69559404-4d1665fc2c48345b5c2ffd30;Parent=5774c93536f26ead;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 4bc37e06-c8a4-471e-8d3b-3b0d1e1c9f5d content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 7Pub8bB9rxJlgqPb9DKL2BZUicQL1roGVKU981fhoUvGkYYhLdQWKA== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2025-12-31 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · doando.co
2025-12-31 19:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 31 Dec 2025 19:20:18 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://doando.co/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Kb2MMH3uCueVTESLgS2wZ-O2gZQFX03kRVzTqwd4Jr94TaymbtPLZg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-31 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · doando.co
2025-12-31 19:20
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 481 Connection: close Date: Fri, 05 Sep 2025 01:35:02 GMT Cache-Control: public, max-age=0, s-maxage=31536000 Server: AmazonS3 Accept-Ranges: bytes ETag: "6d95b48fc1b97d0b69526cf622367389" Last-Modified: Thu, 04 Sep 2025 21:09:36 GMT X-Cache: Hit from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8PEVHNsg8RPrzmm8HXIMBi4wD4CVzo3pdAzRYyIjMqGYJb5jW8EF4w== Age: 10172715 Page title: Doando.co - Plataforma de Doações <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/vite.svg" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>Doando.co - Plataforma de Doações</title> <script type="module" crossorigin src="/assets/index-BsLQcAUo.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-DZ5AE753.css"> </head> <body> <div id="root"></div> </body> </html>Found 2025-12-31 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · biofactum.info
2025-12-31 03:06
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1969 Connection: close Date: Wed, 31 Dec 2025 03:06:21 GMT x-amz-meta-timestamp: 2025-08-18T10:07:07.340109 Last-Modified: Mon, 18 Aug 2025 10:07:15 GMT ETag: "f0dec8760486eb8b39a0683e33b823e5" Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: aApWuRdYD6WBUb34THe3GVRKFDm823kEQKees8791mEvsLvRZPw8JQ== Age: 2 Page title: BioFactum.info - Biotechnology News & Innovation <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#00c853"/><meta name="description" content="BioFactum.info - Daily news covering breakthroughs in biotech, CRISPR, longevity research, and medical innovation. For professionals, investors, and enthusiasts tracking the biology revolution."/><meta name="keywords" content="biotechnology, CRISPR, gene editing, synthetic biology, longevity research, medical innovation, biotech startups, genetics, bioinformatics, personalized medicine"/><meta name="author" content="BioFactum"/><meta property="og:title" content="BioFactum.info - Biotechnology News & Innovation"/><meta property="og:description" content="Daily news covering breakthroughs in biotech, CRISPR, longevity research, and medical innovation."/><meta property="og:type" content="website"/><meta property="og:url" content="https://biofactum.info"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="BioFactum.info - Biotechnology News & Innovation"/><meta name="twitter:description" content="Daily news covering breakthroughs in biotech, CRISPR, longevity research, and medical innovation."/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"><title>BioFactum.info - Biotechnology News & Innovation</title><script defer="defer" src="/static/js/main.4ddf5351.js"></script><link href="/static/css/main.e6c13ad2.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-31 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · biofactum.info
2025-12-31 03:06
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 31 Dec 2025 03:06:21 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://biofactum.info/ X-Cache: Redirect from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: jkJwMG2suzv1C09rXy9Sd8SppZqOe_yxzM4GEWmobAT-C5f11wJNAA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-31 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2025-12-30 21:27
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Tue, 30 Dec 2025 21:27:20 GMT X-Amzn-Trace-Id: Root=1-695443b5-3304e8ee0065f72d4e6386c0;Parent=07acd89cd166e95d;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: ec1b4900-0e1a-462f-8601-5883ae67d784 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hU6h6sS8wAjgz7BSAm9qGa73gJ1zboyoVXhvrrdX_5VdhPdqmpTHRQ== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2025-12-30 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2025-12-30 14:42
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Date: Mon, 29 Dec 2025 19:57:29 GMT Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ebf31a208b1563522327c20ddd946a5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hUsDjbygBe3QyIWT2cZEGlczISVVLc75FKt7RfCtKL8yVUS111qIUQ== Age: 67523 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-30 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2025-12-30 14:42
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Date: Mon, 29 Dec 2025 19:57:29 GMT Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SClyKTd_B4b9XovqWd__12GaS4gRsNecm4kl6YSYvuYAzt2dzAlD9g== Age: 67521 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-30 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · hidenseek3d.com
2025-12-30 11:59
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1362 Connection: close Date: Tue, 30 Dec 2025 11:59:49 GMT Last-Modified: Thu, 20 Apr 2023 10:00:08 GMT x-amz-version-id: null ETag: "684b45aa188a24dc25a98a1ca74f609c" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: uAxfK7owrXksK96KeqEOL-51XTdaFe1wtzW4GdVeiT2EyGy21myiaA== Page title: Hide N Seek 3D <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Hide N Seek 3D</title> <meta name="description" content="Hide N Seek 3D"> <meta name="keywords" content="Hide N Seek 3D"> <link rel="stylesheet" href="assets/css/index.css"> <link rel="shortcut icon" href="favicon.ico"> </head> <body> <div class="container"> <div class="header"> <!-- <img src="assets/img/icon.png" alt=""> --> <span>Hide N Seek 3D</span> </div> <div class="center"> <div class="center-left"> <img src="assets/img/image_018_0520.jpg" alt=""> <img src="assets/img/image_018_1238.jpg" alt=""> <img src="assets/img/image_020_0887.jpg" alt=""> </div> <div class="center-right"> <h2>Looking for an exciting and thrilling game to play? Look no further than Hide N Seek 3D: Escape!</h2> <a href="https://play.google.com/store/apps/details?id=com.hicat.hicat" target="_blank"> <img src="assets/img/gp.webp" alt=""> </a> </div> </div> <div class="bottom"> <a href="/privacy/">Privacy Policy</a> </div> </div> </body> </html>Found 2025-12-30 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · newbooksmag.com
2025-12-30 08:48
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 30 Dec 2025 08:48:56 GMT Server: Apache/2 Link: <https://newbooksmag.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OZvGHt0T3q2c5RLLVpUUR-eN3JlaYxKGt4XNcULPGcUk5OZyUb6k9w==
Found 2025-12-30 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · wintogames.com
2025-12-29 22:26
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 29 Dec 2025 22:26:22 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gZ62Tz_KPeUtkXL_xcuKddS5McaJK8ibmBsRBPaQmSC0rd5N5IlLkg== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: gZ62Tz_KPeUtkXL_xcuKddS5McaJK8ibmBsRBPaQmSC0rd5N5IlLkg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-29 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · wintogames.com
2025-12-29 22:26
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 29 Dec 2025 22:26:22 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wintogames.com/ X-Cache: Redirect from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EzKKaNaCPboaISAHlQ-UGWSsd1EoZ80HK_CxHzOH40ACX0hC2IOOdA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-29 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · chesed-verachamim.co.il
2025-12-23 10:40
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 721 Connection: close Last-Modified: Mon, 05 May 2025 21:07:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: cWTa1zIY_660zNbsmMswTrj8RhJOctos Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 23 Dec 2025 10:40:07 GMT ETag: "c7c7963f49fd6b310bd03041d9b008d0" X-Cache: Hit from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: a5A7RtyfCOC6A93nK4px0VvaiFWow2n-8cKG1-lFzGv9gqyYdHgLfQ== Age: 24601 Page title: כלל ישראל- חסד ורחמים <!doctype html><html lang="en" dir="rtl"><head><meta charset="utf-8"/><meta name="robots" content="noindex"><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>כלל ישראל- חסד ורחמים</title><script defer="defer" src="/static/js/main.0711a60a.js"></script><link href="/static/css/main.da5a4aa5.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-23 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · chesed-verachamim.co.il
2025-12-23 10:40
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Tue, 23 Dec 2025 10:40:08 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://chesed-verachamim.co.il/ X-Cache: Redirect from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1X90HV6WHkxket2OPNEJnmEHDXnS5-yeOZkk1Cr-RLV1me_wUnfLMQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-23 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2025-12-23 09:42
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Tue, 23 Dec 2025 04:18:11 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: az5avnAS2nIL0l5cI6uCr3MVi_SczId8PYOOhAo5ccSc3tSGWRWg6Q== Age: 19443 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-23 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2025-12-23 09:42
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Tue, 23 Dec 2025 04:18:11 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Tc6zajqxvk9G4Kh1etNQ6rd_GVPaZ7F_Xpwf1YYwdVvIR0zxnxw3OQ== Age: 19443 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-23 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2025-12-23 02:31
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20234 Connection: close Date: Tue, 23 Dec 2025 02:31:44 GMT X-Amzn-Trace-Id: Root=1-6949ff0d-3c78dd5523170f601a65d874;Parent=3976c497ae18024f;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: 13d8eaf0-7cfa-4410-abd0-84107d06f43d content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/d71980d6c7992b0a.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: rToykk_bjVC-loUXAjDBntIX978CZGQecss9O-2OlKqRlp35YfhbcA== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/d71980d6c7992b0a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-39ed73880cee26e5.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-e24b62fd62c9c06f.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/5574-8657578a0543dbb1.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/6478-2c395e7d445b1af8.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-be1781753b703b04.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2025-12-23 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · mclarenvaleandfleurieucoast.com.au
2025-12-22 23:06
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 23:06:10 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://mclarenvaleandfleurieucoast.com.au/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: chJkD4NRXiZnf1PUO11YWme9EkcUupzYTGsTcS4EX0r4heSo9BQp6Q== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · mclarenvaleandfleurieucoast.com.au
2025-12-22 23:06
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 22 Dec 2025 23:06:10 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zgTZ0Yd6lfYVMMLIYW0Cil3Kh68sVF604eyLVYsuqGIkUFJ68ADPtA== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: zgTZ0Yd6lfYVMMLIYW0Cil3Kh68sVF604eyLVYsuqGIkUFJ68ADPtA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.experience-muse.com
2025-12-22 20:29
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 17445 Connection: close Last-Modified: Fri, 14 Mar 2025 04:07:01 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 22 Dec 2025 20:29:42 GMT ETag: "576946448809ac113fb5ef6093e0e51a" X-Cache: Hit from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: oAqk5qlhziravEOGcBtG74DYDQ4LKPhqAPS1s_wOqO6q0XIgI1aiUQ== Age: 52557 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Permissions-Policy: autoplay=(), camera=(), fullscreen=*, geolocation=(self "https://maps.gstatic.com" "https://maps.googleapis.com" "https://maps.google.com"), microphone=(), payment=() Page title: MUSE: Loyalty Programme <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <!-- <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval'https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src *"> --> <title>MUSE: Loyalty Programme</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable = no"> <meta name="description" content="Your Permission to Indulge"> <meta name="keywords" content="muse loyalty program, muse loyalty, muse app, muse points, Chalhoub, shopping, luxury, brands, fashion, beauty, points, membership, benefits, card, offers, tiers, bonus, shop, inspiration, SWAROVSKI, MICHAEL KORS, LEVEL SHOES, LACOSTE, TORY BURCH, TRYANO, LOCCITANE, KENZO, TANAGRA,تطبيق ميوز, تطبيق ميوز لجمع النقاط, برنامج ميوز, برنامج الولاء ميوز, موقع برنامج ميوز, موقع تطبيق ميوز, برنامج ميوز لجمع النقاط"> <meta property="og:url" content="https://www.muse.loyaltycloud1.com/"/> <meta property="og:type" content="website"/> <meta property="og:title" content="Loyalty that rewards you across the region"/> <meta property="og:description" content="Designed to enhance your shopping experience, MUSE gives you exclusive access to a world of aspirational brands like L'Occitane, Swarovski, Level Shoes, Faces and more, at your fingertips."/> <meta property="og:image" content="https://images.ctfassets.net/v0a9igg04qv1/3TQEcvGwmmEVUlCAvSI1RM/dab670dd9f87f0d283163bc712e1bc4f/og_image_muse.jpg"/> <link rel="preload" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"> <style type="text/css">@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e4.woff) format('woff');}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff) format('woff');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff) format('woff');unFound 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 909456.com
2025-12-22 19:40
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6886 Connection: close Server: nginx Date: Mon, 22 Dec 2025 19:40:07 GMT Last-Modified: Mon, 05 May 2025 14:47:22 GMT Accept-Ranges: bytes ETag: "6818cf7a-1ae6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 4EnIpR1IlmuQH-Rd1slhwO9GyDuTVvKyua2N7Hi5WBm8_eSrr7zdtw== Age: 1 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49275.link', '49275.link', '49275.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 909456.com
2025-12-22 19:40
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 19:40:07 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://909456.com/ X-Cache: Redirect from cloudfront Via: 1.1 d51f8b07f1cd9f6dbf62bb0b0c961f1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LfhKH_q-o-YwMGe7Gd5h_44mh1QgsnQ7EeUFttidt8jirD-Rm2oBeg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · odtraining.com
2025-12-22 18:11
HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 22 Dec 2025 18:11:22 GMT Set-Cookie: XSRF-TOKEN=eyJpdiI6ImJpNjYxNXdHYk1tYXlETEg0NzRYSnc9PSIsInZhbHVlIjoiazg5eEd5dWFSb0tUTjJYT2RlME9KNUFvUDluN1V6elgxdlpKNVNuKzNyRzVDTzI4ZXpweDVNM29zclhIeHd3RnY3ZmxpekVETEtEQUk3MnR5QlFKa0xSMjJMRm9nalNkSU96SjcyTDBsQU1MMGpQOGVhRXpUK25CelY4MFRsdnAiLCJtYWMiOiJjM2RhNWNkMzc1NGJiNDIzNWYwNzAxNTMyNDY3YjQ4MTA0N2IyZmMzMzZiZjA4ZGFmZmUwZDYwZTBiYTkwZWZiIn0%3D; expires=Mon, 22-Dec-2025 20:11:22 GMT; Max-Age=7200; path=/; secure Set-Cookie: acadle_session=eyJpdiI6IlU4QU5pXC83K2ZNYW9JZTdwXC80OXNGQT09IiwidmFsdWUiOiJOWktscFVWb0I0RGhtaEFhV2c5M3VJQlVxbmo0RnJVSFVpRllsZTB3MVdmQ3ZPaFRmVGljWGp5Rnd2UXQ5R3pHTGJPNjdPSUF3UUpzQU1XeVk4bVd3ZDZSRUlmMmhnU1wvNmJIRjdzYldLWGRid2ZtbE0yN2VZK0FmTTVOT2VmNUciLCJtYWMiOiJhYTQ4Zjg3OTA1NmY0NTY4OTE1YTg4NWYzMmE3ODgzYjYyNzYzMjAyNGRiYzU2ODU1MmFhMjI1MWUzOWU2OThlIn0%3D; expires=Mon, 22-Dec-2025 20:11:22 GMT; Max-Age=7200; path=/; secure; httponly Server: Acadle Cache-Control: no-cache, private Location: https://odtraining.com/home X-RateLimit-Limit: 60 X-RateLimit-Remaining: 49 X-Frame-Options: SAMEORIGIN X-Cache: Miss from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NdQLKgr8dsMwBoASzhlGFQ0tKIyoQindPA-OFVin-8SD91LFKrFdgw== Page title: Redirecting to https://odtraining.com/home <!DOCTYPE html> <html> <head> <meta charset="UTF-8" /><script type="text/javascript">(window.NREUM||(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]},feature_flags:["soft_nav"]};(window.NREUM||(NREUM={})).loader_config={licenseKey:"NRJS-98b74a44edc44437801",applicationID:"738291733",browserID:"849677570"};;/*! For license information please see nr-loader-rum-1.306.0.min.js.LICENSE.txt */ (()=>{var e,t,r={122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e||"object"!=typeof e)return(0,n.R)(3);if(!t||"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),a=0===Object.keys(r).length?e:r;for(let o in a)if(void 0!==e[o])try{if(null===e[o]){r[o]=null;continue}Array.isArray(e[o])&&Array.isArray(t[o])?r[o]=Array.from(new Set([...e[o],...t[o]])):"object"==typeof e[o]&&"object"==typeof t[o]?r[o]=i(e[o],t[o]):r[o]=e[o]}catch(e){r[o]||(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},154:(e,t,r)=>{"use strict";r.d(t,{OF:()=>c,RI:()=>i,WN:()=>u,bv:()=>a,eN:()=>l,gm:()=>o,mw:()=>s,sb:()=>d});var n=r(863);const i="undefined"!=typeof window&&!!window.document,a="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator||"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceof WorkerNavigator),o=i?window:"undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self||"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis),s=Boolean("hidden"===o?.document?.visibilityState),c=/iPad|iPhone|iPod/.test(o.navigator?.userAgent),d=c&&"undefined"==typeof SharedWorker,u=((()=>{const e=o.navigator?.userAgent?.match(/Firefox[/\s](\d+\.\d+)/);Array.isArray(e)&&e.length>=2&&e[1]})(),Date.now()-(0,n.t)()),l=()=>"undefined"!=typeof PerformanceNavigationTiming&&o?.performance?.getEntriesByType("navigation")?.[0]?.responseStart},163:(e,t,r)=>{"use strict";r.d(t,{j:()=>E});var n=r(384),i=r(741);var a=r(555);r(860).K7.genericEvents;const o="experimental.resources",s="register",c=e=>{if(!e||"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var d=r(614),u=r(944),l=r(122);const f="[data-nr-mask]",g=e=>(0,l.a)(e,(()=>{const e={feature_flags:[],experimental:{allow_registered_children:!1,resources:!1},mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,autoStart:!0},api:{get allow_registered_children(){return e.feature_flags.includes(s)||e.experimental.allow_registered_children},set allow_registered_children(t){e.experimental.allow_registered_children=t},duplicate_registered_data:!1},browser_consent_mode:{enabled:!1},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},get feature_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},harvest:{interval:30},jserrors:{enabled:!0,autoStart:!0},logging:{enabled:!0,autoStart:!0},metrics:{enabled:!0,autoStart:!0},obfuscate:void 0,page_action:{enabled:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,autoStart:!0},performance:{capture_marks:!1,capture_measures:!1,capture_detail:!0,resources:{get enabled(){return e.feature_flags.includes(o)||e.experimental.resources},set enabled(t){e.experimental.resources=t},asset_types:[],first_party_domains:[],ignore_newrelic:!0}},privacy:{cookies_enabled:!0},proxy:{assets:void 0,beacon:void 0},session:{expiresMs:d.wk,inactiveMs:d.BB},session_replay:{autoStart:!0,enabled:!1,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get maFound 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · odtraining.com
2025-12-22 18:11
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 18:11:18 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://odtraining.com/ X-Cache: Redirect from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: tHHpn9t-RD-k43FJn43XncIpqgXa9vUPbnAChCeb65FOZbXAm3AuCw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · newbooksmag.com
2025-12-22 16:54
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 22 Dec 2025 16:54:29 GMT Server: Apache/2 Link: <https://newbooksmag.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: uSNU8HLOVcgCxoRFrTpEzbeCN2UHkYbdTPKts9JiEPqfujowpnkACA==
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · web.nalcam-bo-bo.ovg-dev.com
2025-12-22 13:18
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Sun, 21 Dec 2025 23:49:43 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ZXo_kUKK47Ec79PSLiKqJ9actRXECCTP4OeP3XmAmUbtcVALUS5_ZQ== Age: 48501 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · web.nalcam-bo-bo.ovg-dev.com
2025-12-22 13:00
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Sun, 21 Dec 2025 23:49:43 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 7aDJ_N7NGAwzzJ8yHZl4NfFECb2plw83D4upe6VLPwYRlRAKkIf6jQ== Age: 47455 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · patient-summary.pl.noa.ai
2025-12-22 11:07
HTTP/1.1 301 Moved Permanently Content-Type: text/html Content-Length: 162 Connection: close Date: Mon, 22 Dec 2025 11:07:59 GMT X-Request-Id: 8df7694cfd8bf2900205fe4663607568 Location: https://patient-summary.pl.noa.ai X-Content-Type-Options: nosniff X-Cache: Miss from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: y2xqdgfpHAdMcgAxTyjqNxy53aQ7-vGStzh5eDq4hw9LpJC393joIg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · patient-summary.pl.noa.ai
2025-12-22 11:07
HTTP/1.1 200 OK Transfer-Encoding: chunked Connection: close Date: Mon, 22 Dec 2025 11:07:58 GMT X-Content-Type-Options: nosniff X-Request-Id: f2ecef77940a6346f13d079230fedde4 Strict-Transport-Security: max-age=31536000 X-Cache: Miss from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PZ_epORtFIpetVuldKQMuK5J2wNbqxX-j3xtWFtjVb2LIw3JMcg-BQ== noa-patient-summary-api
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · dashboard.weproov-recette.com
2025-12-22 09:09
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 09:09:48 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://dashboard.weproov-recette.com/ X-Cache: Redirect from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2rJFc5Nkg3oeiuWejeg0l9OZcsrBhzQPVIJ9uO3fEQe-V0-OS5VgtQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · partneruniversity.kroll.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:27 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://partneruniversity.kroll.com/ X-Cache: Redirect from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zivCYS1x1KPbHuz2SPraOkEeNi0h4rN5bHkc_t66YALzj7sxbYa0dQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · partneruniversity.kroll.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT x-request-id: CUSTOMER-AGK-a9af-4f67-bcab-acfc1b654ec7-t1766388027199 set-cookie: _csrf-prod=0nO4xbqQvVMRJe12JmZXL7eBEBG76vjfmj6LDaA3o7MpCM9%2B0g4EUVRZXgdQguebBlvw8WuIgXeT%2FCId%2FiiaBmbrckmu8eQ9St4lOgUIJRYd7VgafTWZ4E9R2UCLnuW3xVXc6A%3D%3D; Max-Age=2592000; Domain=partneruniversity.kroll.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3ArP_lQCP7x2tLEsJP9rwSNY0e-EC4nkJb.WGx0D1G2kMe9UDVbG4DSd%2BYLM8H8f6BlLu6F5m2ywSM; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 15 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: fvSDzsfhMYgqkCYKlBpcw4-HMEVEnzJNHjuntkNOBwJqxwR3CDqTRw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=22,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="fvSDzsfhMYgqkCYKlBpcw4-HMEVEnzJNHjuntkNOBwJqxwR3CDqTRw==",cdn-downstream-fbl;dur=192 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · digdeeper.sysdig.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:27 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://digdeeper.sysdig.com/ X-Cache: Redirect from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: tVyZjarMbuw3m1kQDATUKcF5G6QWaPiHVCT5LxfSzeQxe1LzW44Vew== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · enablement.radware.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT x-request-id: CUSTOMER-AGK-1365-4362-a626-0fc13fb26eb0-t1766388027417 set-cookie: _csrf-prod=B7SfpXa6Xxt1LUEtbEt%2F3aminfW4tBCMK1NUsCsvcroiTlw0HjsukoUV2Q1bPwz52s6Y3gXHGgt844uj9KNy3xoAmzlX1ktSiRYWiol8Pd9wICdi%2FLw%2BiFxKR5Dhbg9vei20%2Bw%3D%3D; Max-Age=2592000; Domain=enablement.radware.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AGlNJwX8oGyFDnc6s1rMaoN_FtJFIayho.OzATszmp%2FudQGxG8msViLdg%2B1NabxQeCD2IVtnq%2ByH4; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 14 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pp3EBxCa02fyapx7mjSZeQR_mGkUmdMYMyyDB1fZ4sVFu1hSejGiIA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=19,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="pp3EBxCa02fyapx7mjSZeQR_mGkUmdMYMyyDB1fZ4sVFu1hSejGiIA==",cdn-downstream-fbl;dur=188 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · enablement.radware.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:27 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://enablement.radware.com/ X-Cache: Redirect from cloudfront Via: 1.1 d51f8b07f1cd9f6dbf62bb0b0c961f1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nFBV2qYqdWrQMBiS1IDsbxJWTmm9NvBVRo2jKDWN00nedNi3u1HxUw== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · digdeeper.sysdig.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-15af-40ea-8354-ac773d32b34b-t1766388026948 set-cookie: _csrf-prod=YVc84x0wIGikHI5q3rA0d9BjgNkN2pfqIWPdlllN9lQ2zE%2BRm5CCEKYFXZJvUzzzXBocfDz0qBDpyl98Y2dBXZjz8aQ4ItBbEDKfA9Vvg6iquzTU70RGVgEApcVSD0AyksI5nA%3D%3D; Max-Age=2592000; Domain=digdeeper.sysdig.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Af_iZYXxfFEbz9Ntqozt5js1o_wcVJjh0.gqsCN5YYDMsDTdDOkSLP4Ptw%2FVjgK%2BJQibE4UW6blbk; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: aj8tjg83cx8Uwrkf-5uBxg54KPKALf7VbniNEwpg8rOxBb7IgCG2KA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=26,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="aj8tjg83cx8Uwrkf-5uBxg54KPKALf7VbniNEwpg8rOxBb7IgCG2KA==",cdn-downstream-fbl;dur=198 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · doc-center.o2business.de
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT x-request-id: CUSTOMER-AGK-c5a4-45c2-a4be-268552ecc323-t1766388027768 set-cookie: _csrf-prod=jXqjEyHNkVASeg6BqCNCtPNHd8%2FeUTAQIRa5VS20e7aXUdGwb8gF%2BzuttsF80sMuNOuDg5Sfi7j9mSzDPU3BU0TuclcuyZA%2Ff9jjk11LPzW5oWjiv%2B%2FLkf2W5Ux68StUPhryZA%3D%3D; Max-Age=2592000; Domain=doc-center.o2business.de; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AuElFYyVF2XQz6HYH37lc_sE8v_RHJQ-U.zRmFraeGChzvg20cI8hnime373MIU9QCu7bzNgYa7FI; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 21 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.022; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 8TGeKdTZzQHyC81YxplyzrMRB2mVmz1f0jAwrzK0QUDkOqfWCvMj7w== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=31,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="8TGeKdTZzQHyC81YxplyzrMRB2mVmz1f0jAwrzK0QUDkOqfWCvMj7w==",cdn-downstream-fbl;dur=210 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · servicepartnercertification.greenhouse.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:28 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://servicepartnercertification.greenhouse.com/ X-Cache: Redirect from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: gGDcnkM60S-kANIZWWmMN0Y6mn3ifDc8NyISQMre2er-j6zfGv2PsQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · pathshala.theiquest.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-4582-4fa7-b177-58cf204c7e34-t1766388026972 set-cookie: _csrf-prod=eptLSdmhUaYyI%2BTRAojNcGDLfWfi%2FA2u6aMuf5NVf04%2FEY%2BJsc7tHgsLkOaHXGedMHAvvJi0fSX8NptsS86OrAsG6q%2F5t6NpLNiZs4Gadzq4igiH3vJo%2Fl1AGzk37jMYHEtfVQ%3D%3D; Max-Age=2592000; Domain=pathshala.theiquest.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3APYYtBTkKAGeey2c_hZm8HWloAyzVcncM.8G0ZNDT1OEwiJFtKYgxvn3l7KX%2Fppv3%2FHETOrUja1aY; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 24 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.026; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NhUgiQXJGovEGlwQDs3KjeDhYNfVqDyDnobkJBBk4rvMa_vrbwhl-A== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=33,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="NhUgiQXJGovEGlwQDs3KjeDhYNfVqDyDnobkJBBk4rvMa_vrbwhl-A==",cdn-downstream-fbl;dur=216 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · amplify.wwt.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT x-request-id: CUSTOMER-AGK-a95f-4ca2-a328-ad4a67b39d4f-t1766388027037 set-cookie: _csrf-prod=p1K24if%2BZ8A%2FjOpYfRAvDpTvAPo10IH4AOIHUARLuKqezltQ4Dp052rnTYYwAiZ2pJT4HpFRq%2BHVkCh%2Ft9UJTqrjXjDP%2B1wUraZi1k2OWX8Zg8ikXt8pIbezTBkoAY1QR7gR3Q%3D%3D; Max-Age=2592000; Domain=amplify.wwt.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AMXesxDVQuf1KMcuWswz5TqytH4dS19gM.8vk3p7%2BcAvXvHyuoaBP4CnPeFnXAgxTyHop6zpXV6hw; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.019; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: rfI3tQ68x4wVxDgFIP5dxGLk4yUXqC3b-SANgChlRrt0ZWmC2pRX3g== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=25,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="rfI3tQ68x4wVxDgFIP5dxGLk4yUXqC3b-SANgChlRrt0ZWmC2pRX3g==",cdn-downstream-fbl;dur=195 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · skilled.aeratechnology.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-83c0-4676-8d0d-4cbec96abc1b-t1766388026655 set-cookie: _csrf-prod=mYWRNTrc1f9XaT%2FXvEp0qWdVy7OsdKQdL0BIn70jTKuqi2zT%2Bu7uzwhbUoMAfdMamPQEnugh4uYmknxxMarZQENYibgIWhLPzSv5SJqm1R4ZJdjg8kyCZsAm%2FElcu7UuNX19zw%3D%3D; Max-Age=2592000; Domain=skilled.aeratechnology.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AlhYBvZRFM7vhzhUH4R6NygNB-7ufjqBV.Sc6vm11bL%2Bjf5wTRvxLKrrZbwnWMf%2Fe6pFxpwqX0%2FpU; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 14 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: YxqdFV4c7dkiHGMb4mYueYYZ40EY-xMVhgknmsycwA4EHST7QMC8LA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=21,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="YxqdFV4c7dkiHGMb4mYueYYZ40EY-xMVhgknmsycwA4EHST7QMC8LA==",cdn-downstream-fbl;dur=191 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · servicepartnercertification.greenhouse.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-b8db-427b-a405-94454b531ce2-t1766388026492 set-cookie: _csrf-prod=hty7%2B88tdj61mxNwwJkx2W6r1GzlpoGpYKik8B5%2BWWUkiGxqYc4aq1CwMP1ieydO03HWfxqixc1eGF37Mj2bMdylStYvVwzNS91LKx57HpECzHNii5hk2aNjX6rE%2BI24cwLtPg%3D%3D; Max-Age=2592000; Domain=servicepartnercertification.greenhouse.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Ay2U-Kh-si4eU1-XIqha0rZREcnl10y-G.c8Wwht6ynJ5uuK1YH6rCOibO7poOXVHTX44lTGuOo7M; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OhcwYt1vpBzelYrayn4Rtj39hwsB_cHBUDKi8FSW_N9kyMfqvdNOYA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=25,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="OhcwYt1vpBzelYrayn4Rtj39hwsB_cHBUDKi8FSW_N9kyMfqvdNOYA==",cdn-downstream-fbl;dur=203 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.splunkcoach.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.splunkcoach.com/ X-Cache: Redirect from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qws858RtHnX7-B5gjVz030p43_93GLDOA0NlmYnYQwPos2adtBuGEg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · enableu.venafi.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://enableu.venafi.com/ X-Cache: Redirect from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: aPbjsZDKvk8KlfUpEht3Ga9S1-8x2iJf13U_W7xd-b0gojYXLE567Q== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · learning.presalesacademy.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-2512-44da-963b-57aa183dde5b-t1766388026396 set-cookie: _csrf-prod=IhKgHsDYUKuujEUlImLjz8Q7kHHyytKLm6UcJTKRNVG%2FNiridJUNBUrIO0bQ8JiBKaenQ4F%2FdR%2BOeqElTRLpPocfkZxIqZNqThadMA31KmRfACik4%2FtEkOD4Hov2ffK267zbKg%3D%3D; Max-Age=2592000; Domain=learning.presalesacademy.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Al3xiPumifXUqBjQv7QeYl0zbTQD97BfK.wJoll3%2BuB2aKYaUKNGv9GG4u4RCpXCWmLQJZtmVO%2FBA; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 38f2daae6c849ed5f695333a9d4104ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pi8F2d4-3pmT6ae5T6aYwhRf1sNDO1jugsjawDPh8nKUUc1AgB-TwQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=25,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="pi8F2d4-3pmT6ae5T6aYwhRf1sNDO1jugsjawDPh8nKUUc1AgB-TwQ==",cdn-downstream-fbl;dur=356 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.forduniversity.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.forduniversity.com/ X-Cache: Redirect from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 4CZaQuxZlZouRKmUm2Y6Ha_LAcwkL4_Qw3iJBIqME2IrSPgPDWoE6w== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.splunkcoach.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-cd3f-4945-b4ea-dc28be901efe-t1766388026554 set-cookie: _csrf-prod=48yF3NPWpt65eqtINSQQZcFkK8k04oa%2F5y%2BYBjLo%2BG5y%2FvYHaq3o%2B%2Bl%2Br0CZE%2FVVLD2P5juuLLVO%2FZIQ%2FA9q9TewtuuiYmHLyhSgA5tEZyyOsDW6XKYPGggj0Rjsl9VESFdRRg%3D%3D; Max-Age=2592000; Domain=www.splunkcoach.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AEr87mz9U8VBYaih0RwrKgw2-yrx3smJg.FrNVRfxkDp7HXABIp9uUCDOSHDZNpUG3m7NIPpgTfv0; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 12 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.013; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1ioPNnL2-xzsZp0gv5oLWkbxkS4zh2H0vfS6621SkagQY8G1AM9VZw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=17,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="1ioPNnL2-xzsZp0gv5oLWkbxkS4zh2H0vfS6621SkagQY8G1AM9VZw==",cdn-downstream-fbl;dur=348 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · university.dataiku.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://university.dataiku.com/ X-Cache: Redirect from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3Zngdh7yon_ySmcX_4mXYIr54JnsJZOQazMU0ZzFd4JSCoJh62p0kw== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · learn.unraveldata.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://learn.unraveldata.com/ X-Cache: Redirect from cloudfront Via: 1.1 38f2daae6c849ed5f695333a9d4104ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: s8k3gy__Y6qy824-rgUGoIor336w8LZLbJ-S6TTwHNCDCjWB3AvEBg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · skilled.aeratechnology.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://skilled.aeratechnology.com/ X-Cache: Redirect from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OGzdEOtBrr7w02DGpyroJoQF9dDwZazIByAbyVV_qOSDYRfKpARB8Q== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · toolkit.amagi.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:28 GMT x-request-id: CUSTOMER-AGK-4f3f-48d8-87d3-b026c3227147-t1766388028554 set-cookie: _csrf-prod=8K9LM5UmZkciMLZweNK5%2BxRCjepcljW6qfuCOO%2BnLXUWSvfKNy%2Fl5v5ne1aKZhMBJNTV6F89t9R5SFG%2FYkww54nXVsKI8gqfb%2BLiridYqi%2BIrLGtjVX6InNpiIth0gaAvmtaVg%3D%3D; Max-Age=2592000; Domain=toolkit.amagi.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:28 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 12 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.014; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 ebf31a208b1563522327c20ddd946a5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: fe8XmA0YXOJ3drvQYafgP_J3i-Z2ms-IgCAPwQnA0P6Wgd_zmmctOw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=20,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="fe8XmA0YXOJ3drvQYafgP_J3i-Z2ms-IgCAPwQnA0P6Wgd_zmmctOw==",cdn-downstream-fbl;dur=189 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.firstsource.mindtickle.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Content-Type: text/html Content-Length: 134 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT Location: https://firstsource.mindtickle.com:443/ X-Cache: Miss from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: k0DKZ_yvKHFtXd3I4oqwNwgN_rABbzznyqCFNCJUI7gO8cU3J0X-PQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=5,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="k0DKZ_yvKHFtXd3I4oqwNwgN_rABbzznyqCFNCJUI7gO8cU3J0X-PQ==",cdn-downstream-fbl;dur=177 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · salestraining.wework.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://salestraining.wework.com/ X-Cache: Redirect from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: HyChbAkvgpQuSg5ZrUwDqF-2cRAzYrPFiZYC1I2BG4GBcg1x27bt2A== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · ncsinexus.nuvasive.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:27 GMT x-request-id: CUSTOMER-AGK-633f-487b-afa1-44ff293a7248-t1766388027366 set-cookie: _csrf-prod=hDDi7vZfHK7W9OaCybgcc%2BdyXTNJpD6aJi%2BcFr%2Bgg4Cas%2Fz76LGbucys6D%2F1Au%2FeB6xq4Juyah%2FUDdB%2FCFFVb8MFZvk19P6dhPux%2FqhsIixdQ8Vmv2%2B0%2F8xqr8v%2Fq9OGw7uXXA%3D%3D; Max-Age=2592000; Domain=ncsinexus.nuvasive.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 14 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.015; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: lyxWNyB7P1wOIvzYoklunVAT2EHYD8xtR38_a36fbNzP-Ym_VDIxow== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="lyxWNyB7P1wOIvzYoklunVAT2EHYD8xtR38_a36fbNzP-Ym_VDIxow==",cdn-downstream-fbl;dur=195 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · enablementcenter.schoolstatus.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://enablementcenter.schoolstatus.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: YqIBK_OoJka7jxATPB-a1mfOLQ4Z9PiTVdkVD7svT_EWV_O5zHKI9A== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · amplify.wwt.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://amplify.wwt.com/ X-Cache: Redirect from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Mat9476dnvedpRg19azFUsz2Hxi8FlrASCli951-ffKWJW-EcTJn3w== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · pathshala.theiquest.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://pathshala.theiquest.com/ X-Cache: Redirect from cloudfront Via: 1.1 ebf31a208b1563522327c20ddd946a5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: CnRVrtfrY36DFSofqklupg8pineE-1c6_I5kNEcxkbQVJTeJl067Gg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · doc-center.o2business.de
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://doc-center.o2business.de/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: XUgMn6ZzY-faYPFMlHz2LkIT6RkggQqscVUwTSEtDd4fHz9svJooyg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · inexuslearning.nuvasive.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-edb4-4a05-8a3b-6940c14d304e-t1766388026509 set-cookie: _csrf-prod=YCW7XCejh5Ur4P5nGVPAEq70YKvsCAHYQii2dENWQe3tmP%2FM6yq39qB54QGpV5JBGciOhyuD%2BaR5vZtplROeEGaDGy4eeMhk4vxgOH6lUoqV6st%2BMgMiCDX2RtHQ43iE8gbMJg%3D%3D; Max-Age=2592000; Domain=inexuslearning.nuvasive.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 15 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 45v5H1R9MojdByxywuUe3hZK3P6roUYh9Wp8PaUuyzs9n_EIq-ns1g== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=23,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="45v5H1R9MojdByxywuUe3hZK3P6roUYh9Wp8PaUuyzs9n_EIq-ns1g==",cdn-downstream-fbl;dur=195 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · academy.darktrace.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://academy.darktrace.com/ X-Cache: Redirect from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: AckiJlrz59sZyC-7sbBB_3abO4A3Z59NECxhrQrWWFGnpXuAt5C-QA== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · enablement.sysdig.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-2ffe-4877-8e4e-8fc9f8e79d40-t1766388026643 set-cookie: _csrf-prod=Wevh4tyWjWj7CpFhsgHeMoFOwspXjCJJ%2Bsz2gWIq8Z0OcJHH6XLrgPSt%2BTFqEOZ3Gwwsr05wRnhNZWSC2Arc1BDkwBN1hvZSZ3lOpP65UdBaOyYRZSQTAhD7LtffkvEKo9HZJA%3D%3D; Max-Age=2592000; Domain=enablement.sysdig.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AgF1he603AL62WNdf_qVH-fdPp7LJJ67H.BKue5Nfptvc0%2BO8X4ksdhxyBHb%2FM5cXxy6VKHj8ULl0; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.019; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LmEy4OOhjwJEZXrOw1BRzfZsACuJrsF33TAdsM0EiZGQ0aKK8a2xRg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="LmEy4OOhjwJEZXrOw1BRzfZsACuJrsF33TAdsM0EiZGQ0aKK8a2xRg==",cdn-downstream-fbl;dur=201 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · enableu.venafi.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-9a4e-4490-a4cb-76b9380f005e-t1766388026647 set-cookie: _csrf-prod=tLf%2FoLYDzIFm7b5U81rjgqGz%2FAzo812%2Fs%2B5AubTxX4Wf%2FNN0IJ%2BwZC6LAixiLsp4ESVn%2BKV80UV4VEueyO42IXSdFgExgeOgSQPbg0xySd92C2OcyhtG%2FUdLl%2FJuw5eqlyyNsw%3D%3D; Max-Age=2592000; Domain=enableu.venafi.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 11 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.012; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: lW4u33mJ9dZUs_6eznv4DEyMK76-iC76Ge13DUxUV0BRLA4I2GHZKg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=20,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="lW4u33mJ9dZUs_6eznv4DEyMK76-iC76Ge13DUxUV0BRLA4I2GHZKg==",cdn-downstream-fbl;dur=191 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · ivyleague.greenhouse.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://ivyleague.greenhouse.com/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: q6OM9cLpi3-tWqzHereC7rc5jcM2H66aIl5KIJi07Myq7OUB6S8pvg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · salescompass.goto.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-3232-455a-af9b-e3528214c4e8-t1766388026782 set-cookie: _csrf-prod=YqpF3blS3X09xrHSe5GCM4SuD4U0iGPEK1vOW6%2F%2BwHu5gjeQUFMI4RSgT8XfABKrkEKzAvydfAeAq1Cjo22QnnAVBnpRC%2B%2B8mqF52y2N1lxCZZSkFR3WX5g%2BpEq0fGuF%2FBMdhA%3D%3D; Max-Age=2592000; Domain=salescompass.goto.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AKm1qQAgkknLKTcN2xpqVE6JGxA4xDhB_.afqzan2chBylab7nN6E6vsT5gFziC%2F%2FWYECragDqtH8; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: kMnfqmG6unBynI46r2erKmcZLgIKj3y1CiGasZZHDzfy89rBfRwE3A== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="kMnfqmG6unBynI46r2erKmcZLgIKj3y1CiGasZZHDzfy89rBfRwE3A==",cdn-downstream-fbl;dur=195 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · learning.presalesacademy.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://learning.presalesacademy.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 6b-ncmN1XYKEDJLofJh01oIM4a9xrnpbVvHFbV9T4texY5OztiyH-g== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · learning.cynet.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-8fbc-48b1-87d4-868f4c2b0ed3-t1766388026797 set-cookie: _csrf-prod=SPfxNpOdoj4JZ9zaZDPno207ZlaqtFE7GuLuKy7ZLxDo9Q7JuKeOTP2fSz8dsWJbugdHkNQYvWWbMCD5XkKH%2Fxtgmkxv9SzCLwbxNIl%2FgN5%2F8Jd9TyElGDYZQr5mqXgn7rBzsg%3D%3D; Max-Age=2592000; Domain=learning.cynet.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AhrS2V-KelkhlgJuyoNR6T6bzyjKrqGC9.%2FpQvwB3nrXjlLIupI5tNm0P7D2akf90XKMvQ%2BLEtiEc; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 16 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.017; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 9VPjQhg5L85fDLuNhMbOXd0hVEjeOdwO0m-NYOGlK3ZMkAzGIQ1QDg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="9VPjQhg5L85fDLuNhMbOXd0hVEjeOdwO0m-NYOGlK3ZMkAzGIQ1QDg==",cdn-downstream-fbl;dur=195 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · nucleusplus.energizer.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-d4c3-4832-bbb2-b7813cc8e14f-t1766388026387 set-cookie: _csrf-prod=t8%2FALUnMi%2BMKhVUX%2F282XU2XeXLZaVQpDGEnsXEV3B2LxElrwe6ZkmXCLlAcieZI5LzIfdCroHZj8lvp4j8hFdEGk%2FnYnLs4LjTiftmE3GUVnWzIR7X5afQqGwXgs%2F5OFgqGqw%3D%3D; Max-Age=2592000; Domain=nucleusplus.energizer.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A0IVeh1r1kv8CaaTNmHEn1ld0lvTwPDHz.Yo7H5eyqiZAuVcmMl9IMVneruaFEOY25C1BONDKcdSA; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 20 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.021; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: tYKAJ9CD4VU9R5wL5ENikIenL5sMvkmdGy1u88n2PAiWzKa6eK2_nA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=30,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="tYKAJ9CD4VU9R5wL5ENikIenL5sMvkmdGy1u88n2PAiWzKa6eK2_nA==",cdn-downstream-fbl;dur=202 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · inexuslearning.nuvasive.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://inexuslearning.nuvasive.com/ X-Cache: Redirect from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: jcyniazvmuf3NRk1fBO6pb_F1BpjhG246OEIIdNqU9oCkIAzMC9JWA== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · lms.amplitude.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://lms.amplitude.com/ X-Cache: Redirect from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Yzdck0zfflpKWn4drP6mPX0sRn8oXLHOboXI5AcyustdiiydqEIU_A== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · training.flashbay.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://training.flashbay.com/ X-Cache: Redirect from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 8VTAwM4jVvfUEfhhumymglNaps_gWFMceaSE76lodcJZhsboITY5PQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · harley-davidsonuniversity.h-dnet.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://harley-davidsonuniversity.h-dnet.com/ X-Cache: Redirect from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: GWu7gp-JPGgGBz5AJPc3L2E5IEx1zdSqpWS6_qaWkLXVdT3kcvebSA== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · harley-davidsonuniversity.h-dnet.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-e35e-459a-a314-39694b38353f-t1766388026267 set-cookie: _csrf-prod=XWgEaEPJh1cx37bjsh1poUFe%2FEtVL%2FaukZBrDbbdZgOReZB3X5JLsfZztHCTZMfucFI1SYZtHbmhxjgIhC7yoybgtBCvW%2BJKpWJN%2F8adx0hcfv1C8Izg0VgaTed%2FHavEC%2BakXA%3D%3D; Max-Age=2592000; Domain=harley-davidsonuniversity.h-dnet.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3ADEb4EKar0DMLd1ADscOUZHkJXJnZB8Xi.mh73Sdum%2BJ8uzOoLMh9pAA7XU3zhaR97QumXWt8%2BHto; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 13 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.015; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zx3kPAMd-3PpicQPsBysYV3RY_qKJii-wR-Ixms75PHSDT28XrMZNw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=23,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="zx3kPAMd-3PpicQPsBysYV3RY_qKJii-wR-Ixms75PHSDT28XrMZNw==",cdn-downstream-fbl;dur=536 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · enablementhub.kroll.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://enablementhub.kroll.com/ X-Cache: Redirect from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 0YryqUcnVxrueDpcPCvfKxeT6pVbWRz-i-Pf-iext-6CH4nOnw5l0g== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.pricelabsacademy.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-36cc-4f50-b524-e635db0d7db8-t1766388026761 set-cookie: _csrf-prod=BqXvanWAud97JWzEZrX6NViLj0ukN6DnMuWPDGigQgI8OU8u6BztinzlnX6lNXex9SBxByr4ZBUBQz9OKHKsAbByBALcH46ooY9ITqpG5HfTD8suBMaQHgaPgcE%2B9c1XhRJrrw%3D%3D; Max-Age=2592000; Domain=www.pricelabsacademy.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AZ3Lioj-KZWljjSlrZt8LhZ4VEQNONhzz.%2BiLFtPLUWzlU%2FsCQOAIc3WKMGTRvmf6R%2BvcrhcUjAU0; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 16 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ceB5hcttBGV0Gk5kOIj0v49lvM1ZvfG3FoFGKFg5q8AAd37xyjVcWA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="ceB5hcttBGV0Gk5kOIj0v49lvM1ZvfG3FoFGKFg5q8AAd37xyjVcWA==",cdn-downstream-fbl;dur=203 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.firstsource.mindtickle.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.firstsource.mindtickle.com/ X-Cache: Redirect from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: jXmYk3pYTNXVykZ34SByMn9UQGB7SJqcxBiQEGxQaIlxRbcI5sYfiQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · enablementhub.kroll.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-58be-4ca2-be32-95d718b314da-t1766388026730 set-cookie: _csrf-prod=K1PZcpSdvRQabuKkOSnqoiWiVAAcr3f8xfibi%2BhJj9g4OETLe7nyVNY3dsGWJuCdKXVGE0NeQ0jBoNS1b1Z0uzOvnvU0WSi2be5nJxOR%2B%2FYzKL0%2F%2F0nVv1TZxgQiix8zC2UOMQ%3D%3D; Max-Age=2592000; Domain=enablementhub.kroll.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A8jn60k-fxrbROpoWp-49AmIpnv28SCx3.eI%2BxVIlkqLm%2BfJ8CLmtFJHog%2FlzCl8shDO6tFFfodvg; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 15 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.017; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: sCotDx2dTvL6ykd_ghDrXhhXykhq1qbD6AwgbRQUDOeFTCUHmkMf-Q== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=25,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="sCotDx2dTvL6ykd_ghDrXhhXykhq1qbD6AwgbRQUDOeFTCUHmkMf-Q==",cdn-downstream-fbl;dur=197 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · training.flashbay.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-18a4-40d2-a12c-ae9d2f808338-t1766388026716 set-cookie: _csrf-prod=SUQCfeQopYsitKmbHJWp%2Bd%2FRIAn4Wdm8McI%2F3gwkToQRQIAUnr4oI4GqW0YdCTm%2FfQ9lolBfMP%2FEIOwXZtvb8pwH8XMvkkw28Z3eeTW%2FRe%2BzPX2SJexLafzCM7T9Or1aFEGIYw%3D%3D; Max-Age=2592000; Domain=training.flashbay.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 13 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.014; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: _1rRlWvSihgRNSnHsbrg5nSjw9GCkFOjaYx0xSNu_KGGyIq9COxybQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=22,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="_1rRlWvSihgRNSnHsbrg5nSjw9GCkFOjaYx0xSNu_KGGyIq9COxybQ==",cdn-downstream-fbl;dur=200 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · salescompass.goto.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://salescompass.goto.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 6WSdwFn9LD9axh9rCghOMnKyDjKqNY9qjBLCfyB5KCYJ1xEI3JWRQA== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · learning.cynet.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://learning.cynet.com/ X-Cache: Redirect from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 9THY_bsDnwbBt_Fz_PMgzJEo7UwmBf87dAdkfRbB9kDh4v5EjuTtoA== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · university.engagesmart.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://university.engagesmart.com/ X-Cache: Redirect from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SxsOAtarzsmTQuXuaH_yYOOHu8TffQOdwAHCRdz5Y63UydhwrGnx0w== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · resources.apspayroll.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://resources.apspayroll.com/ X-Cache: Redirect from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: cIYrDTtvQuYrzu0auWfjgg13xb9dOa854zIbL1QKQKrueuimo8EBPQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · learn.bottomline.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://learn.bottomline.com/ X-Cache: Redirect from cloudfront Via: 1.1 425709fb5486bea91d36ef6c75d4ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: CqKigoL514ByxJRr9sWlPrW4EorQCk3dlYcmbSblYDd60234So3jDQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · partnerlearning.cisco.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-b3ae-4835-be28-b980fe6e8dd7-t1766388026470 set-cookie: _csrf-prod=kHlSiU8jXTZ%2BlIx4gQJdyydjqgy3sh8wcNxBxjLjRxkMwhwWu%2FiUju6yVmLvpoc6bSiBJ76hXvsGTzbLdu7P31SI0EAP%2Ftk4DOGQ7SzevEW8DpxfkIgzxDRpwPTnTHdxyo%2BUmQ%3D%3D; Max-Age=2592000; Domain=partnerlearning.cisco.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AnS5OCqozdF71JjfPUPkxwIwZDs4ik44_.fQgS43YPhuXy1UiyYoDABQfX1FOf3MmdRThxhSVJ%2Bm0; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 45 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.047; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 58ZCWwJP9wmkvCZO71yXOPEovJyHxTstTYqCJ7F7G0Ulu4mjdYMPtA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=53,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="58ZCWwJP9wmkvCZO71yXOPEovJyHxTstTYqCJ7F7G0Ulu4mjdYMPtA==",cdn-downstream-fbl;dur=235 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.pricelabsacademy.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.pricelabsacademy.com/ X-Cache: Redirect from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: vghNySpZA-A5GLmALbWHngKxm18bGpevXYA0TZJV__ejM_wXqGN-0w== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · venableu.venafi.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://venableu.venafi.com/ X-Cache: Redirect from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 7vlwv28MNtczxtz7eHfQV_IEo6_bxEK5kel5X0fZ6Y1dfIOxnZ4XHQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · salestraining.wework.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-494c-411c-bf22-994a03032d39-t1766388026541 set-cookie: _csrf-prod=xA9TmHk9%2FRQeYzM7DkX%2FYAjpDPK4JuEE2qsd9sOX5G809V82j%2BUaUC%2BTaaWA3aBrmsCcmy9NzuWYlBjEcAiaxb64xSaZRzhgh6IGwRj1TsdBG1qcqHlS6VWKABkX6jLaNMhWxg%3D%3D; Max-Age=2592000; Domain=salestraining.wework.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A0pu8S6N5w0bHIZeO-Y-s6PuIWBv40j7q.kn1U2zuAga5lF9Rqqa%2ByKI5dV5dgl44KuiEhMaBryLo; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 14 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.015; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1cbX-0qTkp56rANQ63OOiX2x-YwQwBM1yec3lMUkc8J5K2-BmDcOXQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=22,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="1cbX-0qTkp56rANQ63OOiX2x-YwQwBM1yec3lMUkc8J5K2-BmDcOXQ==",cdn-downstream-fbl;dur=204 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · nucleusplus.energizer.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://nucleusplus.energizer.com/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Df5604P2W9AFQR0RzwOuORZ7GibQJN4-8YDzKELCuQf7fHItvdQElg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · enablementcenter.schoolstatus.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-34f3-4cdf-a13b-565bb9b0273f-t1766388026650 set-cookie: _csrf-prod=oe8hbvE%2FwVrz4C3s4S7%2BB%2FGe6a%2Ffff%2BNq2Nlo%2BiQp8ijNTiYwBdEua9AJHFkhgzlh7f9fQieF0PPWanbUTsXpjUxli9otw%2FJxxBmVsN%2F4JOL6OJKcoEdoSXQXiSAlpqbCj3oAQ%3D%3D; Max-Age=2592000; Domain=enablementcenter.schoolstatus.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AVL4erdMul1mn5PqMYskMaLrbYzhDS0Y9.zyV5MwVyCAW821SAuaksdH%2F37laNVQK6BTW8c4dGRVc; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 14 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 fe1df26b55e8c12763613686df86f7f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ZRQquxEtCcPP32QK9999Xti9UFf7w3Sdkvq3HmSe2ufItwbNOgzR5Q== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=21,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="ZRQquxEtCcPP32QK9999Xti9UFf7w3Sdkvq3HmSe2ufItwbNOgzR5Q==",cdn-downstream-fbl;dur=194 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · university.dataiku.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-9996-490a-a487-7570c5795e91-t1766388025909 set-cookie: _csrf-prod=hfLQ1XLq2f5HwePjg773HIfOAIBNFxelApHGyKnsUn1z7fgqvQk1aF4zzaru4Qp1baRCkeffJnpAYZ%2FPONqFS%2BGKL%2B7SABD8xpJHeEJYIsgWtG1CdPZSIupHxiT5hqjWfnO9JA%3D%3D; Max-Age=2592000; Domain=university.dataiku.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3APC1Hgch9lRuwoJD868TrFmaGLjSTflTP.zUTLhltJpobzn7Fz1Aee4z%2F0QO%2FjX8NTO1l23JA6lq8; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 15 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.016; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Zm9YG5hFJCn1IENnQEMVcuwHf-r9w_gKwKc2Hv6fob1h_xxecuS0Dg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=23,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="Zm9YG5hFJCn1IENnQEMVcuwHf-r9w_gKwKc2Hv6fob1h_xxecuS0Dg==",cdn-downstream-fbl;dur=194 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · partnerlearning.cisco.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://partnerlearning.cisco.com/ X-Cache: Redirect from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: b7PpeREukkax2i9LKGnXoEd5V_SfUd2KVnz12rVSBwv9OzyPKJ7_VQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · lms.amplitude.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-0911-4b7a-90a9-ee8e65fdc8cf-t1766388026773 set-cookie: _csrf-prod=Buw2yZgKF%2Bd%2FUxr5%2BGUQHFEIAPRn8ELSuJBO79de%2BXapMjNm%2BxA8Kt9OKk0RYDh2gD%2B7WsqBCIdawB6c0MQNpN9PT89Blfv28Xef7J0d%2B3jVxHcS9atmJZxCsbgDYuxWWQN16g%3D%3D; Max-Age=2592000; Domain=lms.amplitude.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AC12CPRGmTYzmr-vrFQdwN-L8gxPKmbYO.NW7XWXRhdv9h7utHzAXQ9Hb3W1XT%2F86VMbyeFiRmX%2Fo; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 24 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.025; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: _CIeB9z1K5eJ-McvpTLMMzucjRAUfyHyCmTspwGJ8UgMn07XhaR8GA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=30,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="_CIeB9z1K5eJ-McvpTLMMzucjRAUfyHyCmTspwGJ8UgMn07XhaR8GA==",cdn-downstream-fbl;dur=200 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · ncsinexus.nuvasive.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:26 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://ncsinexus.nuvasive.com/ X-Cache: Redirect from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: aYCz5XKPUusUdYEwYdY0tqFmboEBwcdG67yu6MtoKuX1pu1qfYUhCg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · ivyleague.greenhouse.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-529e-4c68-9f0c-89dedb4c6c85-t1766388026107 set-cookie: _csrf-prod=94Z9elrNlG%2FZ%2BGAXiFy4dPn631nhOWbeOUXJG5DNmHUzZiVI5Uf0NHMXoAAu1%2BJKFQ9odMVJgn2iSPglI5HfxJ3HnmGCZCJFdyGaRe1mN8cNok4F8xgAH17dLz8i0f9udFDV%2BA%3D%3D; Max-Age=2592000; Domain=ivyleague.greenhouse.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A1rqbUxHhYlZWpuPjS15ZuveigBD_PczN.ag%2B84EfcKIfZPDcrUkImPtdKS1Hbv7eVPKKlMm4VCss; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 18 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 343f10c14a24beceec4fd2e9df6f9a50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: gGdhopUVceglaftd0Bd0lYXTmJcMqSuLlb_ttjiOf6WzzQJE_S4KGw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=26,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="gGdhopUVceglaftd0Bd0lYXTmJcMqSuLlb_ttjiOf6WzzQJE_S4KGw==",cdn-downstream-fbl;dur=197 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · enablement.sysdig.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://enablement.sysdig.com/ X-Cache: Redirect from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: PPfdApnZab0Y04IO5o0dNxAdWTdRaafy9-oY4FXD2Vg-8_rtIjexsg== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · toolkit.amagi.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://toolkit.amagi.com/ X-Cache: Redirect from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1jOVU13ShAA2n-MQ0YYWjzvakr_Cac8r3E6anf2hgkGhHzc5Zf2Wsw== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · venableu.venafi.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1863 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-2d7e-4988-96a5-fcebc1129c4c-t1766388026397 set-cookie: _csrf-prod=gGEsV0iZhHZgkvVVrNbX%2FMAnTU2HYLLWxcBQsCIo8BhlMPxe%2FlZHSQLulM1MbqUh7av3Xd2AsgvliyBBBu%2F%2Fan90TQ7vJuY4Sj1Rl6HqgojoL3T3n3w3ZLM8hJcij5Pc%2B56K9g%3D%3D; Max-Age=2592000; Domain=venableu.venafi.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax mtr: ap-southeast-1 etag: W/"747-sMEjtdBzihzkp3wocP1kS7uaWYE" x-envoy-upstream-service-time: 20 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.022; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NNo7_Zxjiq2hL8g5YSJKAc_GtYt3-ZJucCtZ9E2NR69_6RCRT9sSGQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=31,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="NNo7_Zxjiq2hL8g5YSJKAc_GtYt3-ZJucCtZ9E2NR69_6RCRT9sSGQ==",cdn-downstream-fbl;dur=382 Page title: Inactive Learning Site <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <title>Inactive Learning Site</title> <meta http-equiv="X-UA-Compatible" content="IE=Edge" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1,user-scalable=yes"> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="translucent black" /> <link rel="icon" type="image/x-icon" href="https://assets.mindtickle.com/allaboard/prod/images/favicon.ico"/> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-72.png"/> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="https://assets.mindtickle.com/allaboard/prod/images/touch-icon-ipad-144.png"/> </head> <body style='margin: 0;font-family: "Open Sans", Arial, sans-serif;font-weight: normal;'> <div> <div style="padding:20px"> <div style="background: url('https://assets.mindtickle.com/allaboard/prod/images/pagenotfoundlogo.png') no-repeat 0px 0px transparent;width: 186px;height: 34px;"></div> </div> <div style="border-top:80px solid transparent;text-align: center;"> <div style="line-height: 60px;color:#000;font-size:36px">Learning site is currently inactive.</div> <div style="line-height: 30px;padding-bottom: 30px;color:#000;font-size:18px">Please contact <a href="mailto:support@@mindtickle.com" style="color:#0072bc;font-size:14px;text-decoration: none;">support@mindtickle.com in case of any issues.</a></div> <div style="margin:0 auto 35px;background: url('https://assets.mindtickle.com/allaboard/prod/images/error_page_logo.png') no-repeat 0px 0px transparent;width: 144px;height: 162px;text-align: center;"></div> </div> </div> </body>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · university.engagesmart.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-182b-40fa-af1c-938bacd6e9de-t1766388026114 set-cookie: _csrf-prod=01LRaIb%2F4%2BDikjWmzcAkrBBRw%2BExX0cLieioYINY1tABLVQo2mwkSpwbAFw1Z12Ywh67%2FMY3662zx9LwZlHxLpft1ia9F956z3Hr%2FIImkPksvMSyqUnGAEJENFKntY8TT9GSeQ%3D%3D; Max-Age=2592000; Domain=university.engagesmart.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Avkc_ElPP98NQ6KOBU9V8DQYD2scG7IWn.UO5oPNOHlkP3Y%2F29WUoYTSTo9wnffds8ViGuHVbOjbQ; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 16 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.017; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: TUztSF21AiMCV-GrJF9TtG_tgkZOLV6UNyZRQMCTABdBFAfTdoMAMw== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=21,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="TUztSF21AiMCV-GrJF9TtG_tgkZOLV6UNyZRQMCTABdBFAfTdoMAMw==",cdn-downstream-fbl;dur=348 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · learn.unraveldata.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-483a-4fd8-8c67-9a54f3be34cc-t1766388026252 set-cookie: _csrf-prod=eZ14Y%2FYtWlpen83B7XZjeyWimTvlVgT3t1yOo7nx4Q5yozZNQwoa7Wa%2BZdxvc24QbKjFBHjWoG9aRS%2Bdiq8z7umiJklrhOrvwQD1c1gilfc7jPincbp7AHVN3y2fhxhBcJA%2B9w%3D%3D; Max-Age=2592000; Domain=learn.unraveldata.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Ae7ecnS8jS0JwswONmmDh2CLmmWSgliJ0.d7GLuNuixJXvEO%2Fv%2FdXEsIbT9xyL9p3Un3QbsDLGAkU; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 19 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.021; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 0lZo6OTE9DvYaeZdHNAkklK0kwCN-Fb92xgdOJo5kqORWdd-Up4nBg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=31,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="0lZo6OTE9DvYaeZdHNAkklK0kwCN-Fb92xgdOJo5kqORWdd-Up4nBg==",cdn-downstream-fbl;dur=518 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.forduniversity.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-3748-4c7f-a1a0-235b7fd9f845-t1766388025947 set-cookie: _csrf-prod=nClypL3XqC6QWZmbICKkY21KMT9FFAxyeZai%2FHG0RvP0w7%2BZQi8qJ5HcxmnCmCYLzZV%2BgytPzZmQrMCp34m2PJUwMpgGETszAXLS1vDhTQ4JmMiqarJfV7Y942czw0d%2F31Bs%2FQ%3D%3D; Max-Age=2592000; Domain=www.forduniversity.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3AD3izKw0-x93AgbCb1qjbWmbjPuhX_9fE.DwSSHiBA2Jp6AcSyCn95S%2Fufk7XNj3IH2fkFiaviAnI; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 16 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: -EsBJ0kQBZwzEg-txIh3KY4w6uobzrqwae4cyqZEcL0gnB0XadpMwg== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=24,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="-EsBJ0kQBZwzEg-txIh3KY4w6uobzrqwae4cyqZEcL0gnB0XadpMwg==",cdn-downstream-fbl;dur=195 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · academy.darktrace.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-11fe-4266-93bc-671b6aa9f885-t1766388025939 set-cookie: _csrf-prod=Do7aPcJJu%2Fak1fzt7uwasqLz7hnYo3B7Mlmq7MVTwTFWJIo4%2BpXZoLh6ALxc16yX9TYXlzPwkIrdz3dX2jGY3qWZaOnQzr9YD39htnhap%2BHBXOdcnoeqaL8vyE8idoDdOwWEtg%3D%3D; Max-Age=2592000; Domain=academy.darktrace.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A8R46ugd4qGGP0RENl8AofePjDNXjLA2z.gXB0NSOLDmreIFwVtgkwtYqtwQFfJcDRkCICFOGe5uA; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 22 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.023; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 2kBJOiG8FO64z_vzycPus7I8RG6nrlYcF6ZdfmeQAbPPMA9Gb7ezYQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=27,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="2kBJOiG8FO64z_vzycPus7I8RG6nrlYcF6ZdfmeQAbPPMA9Gb7ezYQ==",cdn-downstream-fbl;dur=205 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · resources.apspayroll.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-3cb6-43ab-8035-77de76250d69-t1766388025906 set-cookie: _csrf-prod=8gp9EC4D9vc%2BascX%2BeGAuob%2BBaxTejp5l%2B7MDzVBmvIbOK0EW7ba4xX5CGVUYKoSbnoWLcoZoHw4C7sdBP2SLVLHBrW1XWyei%2BDtGuP4RasoDD%2B2r75Km3fc5shrjkUf37GBqQ%3D%3D; Max-Age=2592000; Domain=resources.apspayroll.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3ArbFOhz9BrcwjQ_hiMvaje6YhSiMulo16.0pR%2Fh8vIxLkac5cW%2F6OEWcLQS6yYIgr5AtizcRmJkco; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 0PtsM0p8QA7sw1wDvD4JDSxzYCDxzDsXPVvJs5kBtVJJNsvdzBN-eA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=27,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="0PtsM0p8QA7sw1wDvD4JDSxzYCDxzDsXPVvJs5kBtVJJNsvdzBN-eA==",cdn-downstream-fbl;dur=201 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · learn.bottomline.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-c840-4af3-aac6-994d35af793a-t1766388025844 set-cookie: _csrf-prod=S9Og%2FYWaj7ulSdiucW5jsVGygrCU0HP71W%2FpGBS%2B3NQW3jXm57tRSpdnyBjfipsP7%2BufUu2h08nK0O%2F%2BgEGG6x1inHSF2raNSIZo6FuPBSs5B4UuCCuXT6FkkIMP2lq33zuPLA%3D%3D; Max-Age=2592000; Domain=learn.bottomline.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3APOLrg9DJENMgxk88KlFPKtyYEt5hoalR.aXUGJ1ODB1HuWPQ0jUuUbivNPchEZAkp30zxGh9uZvA; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 6I7l0Cg-HQchyBLM4Jrou5fur7DwaB3JrQjQHl5sd0GDCTZbC7TVKA== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=26,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="6I7l0Cg-HQchyBLM4Jrou5fur7DwaB3JrQjQHl5sd0GDCTZbC7TVKA==",cdn-downstream-fbl;dur=206 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · partnertraining.bluebeam.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:26 GMT x-request-id: CUSTOMER-AGK-06b2-4c63-b640-333c63551421-t1766388026230 set-cookie: _csrf-prod=ODxx44YndlqPCDygcjigZ6LsmamEzEvaxhuQnw%2FW1a1pPoyhcf8JD1%2FV%2Bdjuw5P5V2IS%2B204Bwo%2FCBy%2BO31NbxduZX4uLc8VUSSJvd3%2BrgjjDH0Jg9pUa6WM3TfCv%2B9dlQlMOg%3D%3D; Max-Age=2592000; Domain=partnertraining.bluebeam.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3Ay4i3ynkX1UOUv6vtEhLji1X238hJRRsf.ODNhAzlC45a19H36TcFmAr6nNytqhXza3UzKMUDizq4; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 26 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.027; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: TC3LVhWSlVirTGwpJbSors3nDWz2ZliQx0FJSNKpQqkjop8ZJTImBQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=33,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="TC3LVhWSlVirTGwpJbSors3nDWz2ZliQx0FJSNKpQqkjop8ZJTImBQ==",cdn-downstream-fbl;dur=524 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · partnertraining.bluebeam.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://partnertraining.bluebeam.com/ X-Cache: Redirect from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ou80kLzF2Dh9q6LXubr4P9UBbOwRCZ7XoJ160RrBWLn3TX-yqG0FdQ== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · learning.twiliopartners.com
2025-12-22 07:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 07:20:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://learning.twiliopartners.com/ X-Cache: Redirect from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: UVcen7HBvEQ3OJKBgE6IwKR-R4Q_WMRMLCgvHcPxgeUENE4oIX1t-Q== X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · learning.twiliopartners.com
2025-12-22 07:20
HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=utf-8 Content-Length: 1769 Connection: close Date: Mon, 22 Dec 2025 07:20:25 GMT x-request-id: CUSTOMER-AGK-febf-4db2-aefd-009160403146-t1766388025871 set-cookie: _csrf-prod=nOc%2BWHF0%2Bo4f1%2BxDGwGfH6KDmJqCCOqDeMrlPabwOziD%2BwLlvIIAG2lRexeWfW8ij1g7KtJjDqkisV%2B%2BMLV%2FRPJbbpdxY4OxEHRMj8JZqOnuJkWz6FZxIvNO2Ji967KshzFcZg%3D%3D; Max-Age=2592000; Domain=learning.twiliopartners.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax set-cookie: mts=s%3A20Z4u52LclwF9jhiuh73p-bEwvWanZNQ.Hy5HTw2BZeC25Vjqvw%2B3jCWIKnq2SE%2BLSmQb9ktkSKI; Path=/; HttpOnly; Secure; SameSite=None mtr: ap-southeast-1 etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak" x-envoy-upstream-service-time: 17 Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing X-Content-Type-Options: nosniff X-Request-Time: 0.018; content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com *.cloud.scorm.com *.scorm.com *.riskified.com X-Cache: Miss from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: fGF92uYqUtWJSqbSO-ymQm0qB4V_4IjBN9Rymtf1o0e0OOA0tOGXRQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=26,cdn-cache-miss,cdn-pop;desc="FRA60-P10",cdn-rid;desc="fGF92uYqUtWJSqbSO-ymQm0qB4V_4IjBN9Rymtf1o0e0OOA0tOGXRQ==",cdn-downstream-fbl;dur=206 <!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"> <head> <script type="text/javascript" nonce="5e0d52a8"> var sameSiteNoneCompatible = "true" === "true"; var query = ''; var redirectUrl = '/' ; if (redirectUrl) { query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}` } function getCookieValue (key, value, expires) { /* Note: We cannot set 'httpOnly' attribute in this cookie due to below two reasons: 1. 'httpOnly' cookie can only be set by the server and not by any client side code. https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript 2. We do not have access to location.hash in app-gatekeeper https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710 */ var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure'; if(sameSiteNoneCompatible) { cookie += '; SameSite=None' } return cookie; } function setCookie (key, value, days) { var date = new Date(); days = days || 1; // Get unix milliseconds at current time plus number of days date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000 window.document.cookie = getCookieValue(key, value, date.toGMTString()); return value; } var delete_cookie = function(key) { document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT'); }; if (window.location.hash) { setCookie('hashRedirectURL', window.location.hash, 1); } else { delete_cookie('hashRedirectURL'); } window.location.href = '/login' + query; </script> </head> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.kouromultimarcas.com.br
2025-12-22 05:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 05:20:33 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.kouromultimarcas.com.br/ X-Cache: Redirect from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: iGsF3ddLFW8F8n6urIOH5n7meSSxnoop5I9EJ0I8KlNo5xg3h01-4A== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.kouromultimarcas.com.br
2025-12-22 05:20
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 22 Dec 2025 05:20:33 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: q7lc3QO--C5Ec8rSnxIxacHrLabxMKp52dYDcK5E5mCFcmMDSiwdDA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: q7lc3QO--C5Ec8rSnxIxacHrLabxMKp52dYDcK5E5mCFcmMDSiwdDA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d16xmf3v8onis1.amplifyapp.com
2025-12-22 05:04
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 05:04:51 GMT X-Cache: Error from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vGIJx9J-vjwChzJjOMjpMgAXyGX4shApBE0wq97NSy0zibXBBMbW5Q==
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · i.tracxn.com
2025-12-22 05:00
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 05:00:37 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://i.tracxn.com/ X-Cache: Redirect from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: nnZJcAJ6dcNfbTFjKsuC4bQVZJPm4FS-lldtRN9VtJTGQFpCBymjFw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · i.tracxn.com
2025-12-22 05:00
HTTP/1.1 400 Bad Request Content-Type: text/plain Content-Length: 30 Connection: close Server: CloudFront Date: Mon, 22 Dec 2025 05:00:37 GMT X-Cache: Miss from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 4COntPw_uMVMu2SscL9jBYI-cOFMpIe5tjn755vSGK2IuZB4wdZBtw== Invalid request url: No Prefix
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · thecentennialcampaign.com
2025-12-22 04:59
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 261 Connection: close Last-Modified: Fri, 11 Aug 2023 14:13:32 GMT Server: AmazonS3 Date: Mon, 22 Dec 2025 04:59:25 GMT Cache-Control: max-age=0, no-cache ETag: "1f139705742480c86c0d6c6d1f66d011" X-Cache: Hit from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LgZAIYTf-g0E_Cnxf9vQGhBep_BE7MhO-XonDjP0kuI6YC7WLfhY0A== Page title: 12th Man Foundation <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>12th Man Foundation</title> <meta http-equiv="REFRESH" content="0;url=https://www.12thmanfoundation.com/membership-giving/major-gifts/index.html"> </head> <body> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · thecentennialcampaign.com
2025-12-22 04:59
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 04:59:23 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://thecentennialcampaign.com/ X-Cache: Redirect from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: v1Odeu1hePMUHHd3twWLs-dAIMsNW0K7bQqeLkebi13EBdwgh_x90g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d21yc65dj0ji5h.amplifyapp.com
2025-12-22 04:17
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 04:17:52 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d21yc65dj0ji5h.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: T7C9BV7ChKUbn-U3J1Ra8LXHSk8s9nUF3kcnyiR_NOSFmfX1PnxkzQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d21yc65dj0ji5h.amplifyapp.com
2025-12-22 04:17
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 04:17:53 GMT X-Cache: Error from cloudfront Via: 1.1 ebf31a208b1563522327c20ddd946a5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PazfoMD44SuZHDpQnV9CjNKnmopOZ6zl4hplCPbY5Gl1-FtvHiNKww==
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · onb-mfe-personal-address.webt.vanguard.com
2025-12-22 04:10
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 04:10:17 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://onb-mfe-personal-address.webt.vanguard.com/ X-Cache: Redirect from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rCcdxHl1yVOUIZpv7hqelhZk23UqyCr-9Eu_DCio8e_O05jJDgTetA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · onb-mfe-personal-address.webt.vanguard.com
2025-12-22 04:10
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 22 Dec 2025 04:10:17 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d3WDZJAajx0aPm3qnF5seE17RAkhbCr4EAUCivLa_qA7JJ-CBlzAYw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: d3WDZJAajx0aPm3qnF5seE17RAkhbCr4EAUCivLa_qA7JJ-CBlzAYw== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d3bcv1gmon7n4m.amplifyapp.com
2025-12-22 04:06
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 04:06:49 GMT X-Cache: Error from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XzJ-vWcoM0FCNJdgwokRh-dhjL_4Pg5mLEJgY_Pu9k6a_CgTLdTVKw==
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d3bcv1gmon7n4m.amplifyapp.com
2025-12-22 04:06
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 04:06:48 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d3bcv1gmon7n4m.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: s8tpHsBVR6EXxl2HnxlpjgdhAcL4wtz8yscwIMJKG95Bk2ZLGQ4uwQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d14gaxb6mrlhni.amplifyapp.com
2025-12-22 03:53
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 03:53:07 GMT X-Cache: Error from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: aYqHZgEYfTxmj6x9nwAHSLK3s-2Uw9jJ7mEwOIV3AaKIlRo2W398zQ==
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d14gaxb6mrlhni.amplifyapp.com
2025-12-22 03:53
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 03:53:06 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d14gaxb6mrlhni.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qRqzochdjEvhJQyLRpON7-LYKpQmnI8xPwvvGfzFn6gzyAPoo0aIqg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · app.collections.stucred.com
2025-12-22 03:51
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 03:51:54 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://app.collections.stucred.com/ X-Cache: Redirect from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: oTcGTZf9YsI-gRPbC-29bhBU-mo36PEDC4YBmmIz772_RScjIhAaYw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · app.collections.stucred.com
2025-12-22 03:51
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2127 Connection: close Last-Modified: Thu, 18 Dec 2025 07:04:43 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 22 Dec 2025 03:51:55 GMT ETag: "22c8a919161d487ac7c85dc5541525e2" X-Cache: Hit from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: L5bGH3XuC4wagCYgh2lAbOK-NviPho4bgLmTcF7J9JS-MaYvKGr7JQ== Page title: Stucred collection <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/stpng.png"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link rel="stylesheet" href="assets/css/remixicon.css"><link rel="stylesheet" href="assets/css/lib/bootstrap.min.css"><link rel="stylesheet" href="assets/css/lib/apexcharts.css"><link rel="stylesheet" href="assets/css/lib/dataTables.min.css"><link rel="stylesheet" href="assets/css/lib/editor-katex.min.css"><link rel="stylesheet" href="assets/css/lib/editor.atom-one-dark.min.css"><link rel="stylesheet" href="assets/css/lib/editor.quill.snow.css"><link rel="stylesheet" href="assets/css/lib/flatpickr.min.css"><link rel="stylesheet" href="assets/css/lib/full-calendar.css"><link rel="stylesheet" href="assets/css/lib/jquery-jvectormap-2.0.5.css"><link rel="stylesheet" href="assets/css/lib/magnific-popup.css"><link rel="stylesheet" href="assets/css/lib/slick.css"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css"/><link rel="stylesheet" href="assets/css/lib/prism.css"><link rel="stylesheet" href="assets/css/lib/file-upload.css"><link rel="stylesheet" href="assets/css/lib/audioplayer.css"><link rel="stylesheet" href="assets/css/lib/animate.min.css"><link rel="stylesheet" href="assets/css/style.css"><link rel="stylesheet" href="assets/css/extra.css"><script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/js/bootstrap.bundle.min.js"></script><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/flatpickr/dist/flatpickr.min.css"><script src="https://cdn.jsdelivr.net/npm/flatpickr"></script><title>Stucred collection</title><script defer="defer" src="/static/js/main.a0e3cc8d.js"></script><link href="/static/css/main.71d1a7c1.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.realvestglobal.com
2025-12-22 03:16
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2035 Connection: close Last-Modified: Fri, 07 Feb 2025 08:40:20 GMT Server: AmazonS3 Date: Mon, 22 Dec 2025 03:16:13 GMT ETag: "88244b4ce6d86d6ebed264d7eac73fa7" X-Cache: RefreshHit from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zaMyVYQ9178S5-TWsUQmRtHnH5NySeSgQQAUsNg2GkaBLD9KD0P2aA== Page title: RealVest Global <!DOCTYPE html> <html lang=""> <head> <meta charset="UTF-8"> <link rel="icon" href="/favicon.ico"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>RealVest Global</title> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet"> <link href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800&display=swap" rel="stylesheet"> <script type="module" crossorigin src="/assets/index-1UDGyfZx.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-DDQtzp0c.css"> </head> <body> <!-- Meta Pixel Code --> <script> !function(f,b,e,v,n,t,s) {if(f.fbq)return;n=f.fbq=function(){n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)}; if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0'; n.queue=[];t=b.createElement(e);t.async=!0; t.src=v;s=b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t,s)}(window, document,'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('init', '1506698416690665'); fbq('track', 'PageView'); </script> <noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1506698416690665&ev=PageView&noscript=1" /> </noscript> <!-- End Meta Pixel Code --> <!-- Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=G-J79X0B6316"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-J79X0B6316'); </script> <div id="app"></div> </body> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · realvestglobal.com
2025-12-22 03:16
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2035 Connection: close Last-Modified: Fri, 07 Feb 2025 08:40:20 GMT Server: AmazonS3 Date: Mon, 22 Dec 2025 03:16:13 GMT ETag: "88244b4ce6d86d6ebed264d7eac73fa7" X-Cache: RefreshHit from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: sw5oUZhSkToAGN3-cTGTXgYlh5AJAy6Dm2reXB0hr-c0mvgCxd1eqA== Page title: RealVest Global <!DOCTYPE html> <html lang=""> <head> <meta charset="UTF-8"> <link rel="icon" href="/favicon.ico"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>RealVest Global</title> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet"> <link href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800&display=swap" rel="stylesheet"> <script type="module" crossorigin src="/assets/index-1UDGyfZx.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-DDQtzp0c.css"> </head> <body> <!-- Meta Pixel Code --> <script> !function(f,b,e,v,n,t,s) {if(f.fbq)return;n=f.fbq=function(){n.callMethod? n.callMethod.apply(n,arguments):n.queue.push(arguments)}; if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0'; n.queue=[];t=b.createElement(e);t.async=!0; t.src=v;s=b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t,s)}(window, document,'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('init', '1506698416690665'); fbq('track', 'PageView'); </script> <noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1506698416690665&ev=PageView&noscript=1" /> </noscript> <!-- End Meta Pixel Code --> <!-- Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=G-J79X0B6316"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-J79X0B6316'); </script> <div id="app"></div> </body> </html>Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · realvestglobal.com
2025-12-22 03:16
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 03:16:11 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://realvestglobal.com/ X-Cache: Redirect from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 0RrjBX_0DA5mSIB0iSHp7ZUbu0KsD245M8GixMKSQRP6fxnIgA9SiQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.realvestglobal.com
2025-12-22 03:16
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 03:16:11 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.realvestglobal.com/ X-Cache: Redirect from cloudfront Via: 1.1 fe1df26b55e8c12763613686df86f7f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: KEvPN9CsjEBBQbSDDYwh5Xqddm8E5yaW8bezyCYPkA0Ni2BgogvVoQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.winegardford.com
2025-12-22 00:30
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 22 Dec 2025 00:30:22 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.winegardford.com/ X-Cache: Redirect from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: lOr4bhd6jqBjpQuOqr-J-I0Wd9nkLashQv-IPkth5_KJiekN8F7gKw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.winegardford.com
2025-12-22 00:30
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 22 Dec 2025 00:30:22 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 38f2daae6c849ed5f695333a9d4104ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: qKYD4jJaqUCnw56Mh1N9u7CmRubAXWyvMr9foFlRxVuA01J3s6ADkw== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: qKYD4jJaqUCnw56Mh1N9u7CmRubAXWyvMr9foFlRxVuA01J3s6ADkw== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.premiumpetservicehk.com
2025-12-21 21:04
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 21 Dec 2025 21:04:36 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.premiumpetservicehk.com/ X-Cache: Redirect from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1e6K3ckIoZ7Uu01hpTBLwnC5Whrm_o3sbO2I2CZoLppj7En_VQV0Gg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.premiumpetservicehk.com
2025-12-21 21:04
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Date: Sun, 21 Dec 2025 21:04:37 GMT X-Runtime: 0.607092 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: AWSALBTG=rlWKNUJgAbM6C0rVgcRF0zVMJxCNfR8cW/gKN1hdYs0qajuSQhQY0ukVbXEsldwrjNxY5G6leoe+KyMr9uhu7z08xWpNI5uFALfP/rFdHfWLsJ0AHoOIjD3lYNtTeFj+ihbyxcVyFc/PCrUGYMc1W748NdWKLaUYctYsrSW+vkDe; Expires=Sun, 28 Dec 2025 21:04:36 GMT; Path=/ Set-Cookie: AWSALBTGCORS=rlWKNUJgAbM6C0rVgcRF0zVMJxCNfR8cW/gKN1hdYs0qajuSQhQY0ukVbXEsldwrjNxY5G6leoe+KyMr9uhu7z08xWpNI5uFALfP/rFdHfWLsJ0AHoOIjD3lYNtTeFj+ihbyxcVyFc/PCrUGYMc1W748NdWKLaUYctYsrSW+vkDe; Expires=Sun, 28 Dec 2025 21:04:36 GMT; Path=/; SameSite=None Set-Cookie: _spt=d8ed24edfd6447c38898940ead2fea58; path=/; expires=Mon, 25 Jan 2027 21:04:36 GMT; secure Set-Cookie: _csrf_token=MkRYWXpSLzFIc2lHNTlkZjNXVHBqdFplTlA0dFpIT2pnVGIyMTltVzRyTk5jZjhvaWtyVFNBUldSaDJZUjh4cy0tREc5TkU3ZUxvdFZCSlpWUmRUSHlxZz09--5db411db38bcde0b82511329ebb12b43931ceaac; domain=www.premiumpetservicehk.com; path=/; expires=Thu, 22 Jan 2026 21:04:37 GMT; secure; HttpOnly Set-Cookie: XSRF-TOKEN=HhO5cdBkzH0gTsH5RDACwWyQacJ7JtYnefgtIiCH4vys2lE%2FuxFQLFzGh7XlS%2Bh%2FQXCLP3om0csdDn%2BJ9MFHYQ%3D%3D; path=/; secure; HttpOnly Set-Cookie: _shop_shopline_session_id_v3=1c264e6ee3cfd666945d595fa5bb1c3e; domain=www.premiumpetservicehk.com; path=/; expires=Thu, 22 Jan 2026 21:04:37 GMT; secure; HttpOnly X-Frame-Options: ALLOWALL X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Public-Session-Id: X-Trace-Id: 1be63d09d898b165f319496ea93764fd ETag: W/"674e1dccac6e0aca63ccb6377c338267" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 070dec8c-d887-4a66-9bbf-557c952064d5 X-Cache: Miss from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 9jrc95ugYcpb8cgTFfqDYk9tIKbjqQUHisqd9Q9SxDPhTRlHOeThhw==
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · kadenkelsey.com
2025-12-21 15:12
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 21 Dec 2025 15:12:02 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://kadenkelsey.com/ X-Cache: Redirect from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mWbMHWa_wjV-XLTC5NcUH-3nPfiDOoNFzNzBV1kQHoh2MOXW7J7T2g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · kadenkelsey.com
2025-12-21 15:12
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 77330 Connection: close Last-Modified: Tue, 01 Dec 2020 09:04:03 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 20 Dec 2025 18:49:07 GMT ETag: "1b4bc9c724eec5a02e374bbc2fc481e0" X-Cache: Hit from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Oy25OsNjenvm6L1x42qRu9tD7-riUJos1e7RY6dtLVyJeZJw9dyA4w== Age: 73376 Page title: Kaden Kelsey's CV & Portfolio <!DOCTYPE html> <html class="js flexbox flexboxlegacy canvas canvastext webgl no-touch geolocation postmessage no-websqldatabase indexeddb hashchange history draganddrop websockets rgba hsla multiplebgs backgroundsize borderimage borderradius boxshadow textshadow opacity cssanimations csscolumns cssgradients no-cssreflections csstransforms csstransforms3d csstransitions fontface generatedcontent video audio localstorage sessionstorage webworkers applicationcache svg inlinesvg smil svgclippaths"> <head> <style>.gm-style .gm-style-mtc label,.gm-style .gm-style-mtc div{font-weight:400}</style> <style>.gm-control-active>img{box-sizing:content-box;display:none;left:50%;pointer-events:none;position:absolute;top:50%;transform:translate(-50%,-50%)}.gm-control-active>img:nth-child(1){display:block}.gm-control-active:hover>img:nth-child(1),.gm-control-active:active>img:nth-child(1){display:none}.gm-control-active:hover>img:nth-child(2),.gm-control-active:active>img:nth-child(3){display:block} </style><link type="text/css" rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans"><style>.gm-ui-hover-effect{opacity:.6}.gm-ui-hover-effect:hover{opacity:1} </style><style>.gm-style .gm-style-cc span,.gm-style .gm-style-cc a,.gm-style .gm-style-mtc div{font-size:10px;box-sizing:border-box} </style><style>@media print { .gm-style .gmnoprint, .gmnoprint { display:none }}@media screen { .gm-style .gmnoscreen, .gmnoscreen { display:none }}</style><style>.gm-style-pbc{transition:opacity ease-in-out;background-color:rgba(0,0,0,0.45);text-align:center}.gm-style-pbt{font-size:22px;color:white;font-family:Roboto,Arial,sans-serif;position:relative;margin:0;top:50%;-webkit-transform:translateY(-50%);-ms-transform:translateY(-50%);transform:translateY(-50%)} </style><style>.gm-style img{max-width: none;}.gm-style {font: 400 11px Roboto, Arial, sans-serif; text-decoration: none;}</style> <meta http-equiv="content-language" content="en-gb"> <meta name="keywords" content="kadenkelsey.com,kaden kelsey, portfolio, cv, resume, projects"> <meta property="og:type" content="website"> <meta property="og:title" content="Kaden Kelsey CV/Resume & Portfolio"> <meta property="og:description" content="KadenKelsey.com is a website showing the CV/Resume of Mr. Kelsey's career. The site also shows a portfolio for many projects and his position within each role."> <meta property="og:url" content="https://www.kadenkelsey.com"> <meta property="og:image" content="https://www.kadenkelsey.com/images/kadenkelsey-share.jpg"> <meta name="twitter:card" content="summary_large_image"> <meta property="twitter:title" content="Kaden Kelsey CV/Resume & Portfolio"> <meta property="twitter:description" content="KadenKelsey.com is a website showing the CV/Resume of Mr. Kelsey's career. The site also shows a portfolio for many of his projects."> <meta property="twitter:image" content="/images/kadenkelsey-share.jpg "> <meta property="twitter:url" content="https://www.kadenkelsey.com"> <base href="/"> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="keywords" content="kaden,kelsey,kaden kelsey, cv, resume, portfolio"> <meta name="rights" content="Kaden Kelsey, All Rights Reserved"> <meta name="robots" content="index, follow"> <meta name="description" content="KadenKelsey.com is a website showing the CV/Resume of Mr. Kelsey's career. The site also shows a portfolio for many projects and his position within each role."> <meta name="generator" content="Kaden Kelsey - Copyright © 2020"> <title>Kaden Kelsey's CV & Portfolio</title> <link href="/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon"> <link href="/css/jquery.fancybox.css" rel="stylesheet" type="text/css"> <link href="/css/jquery.fancybox-buttons.css" rel="stylesheet" type="text/css"> <link href="/css/jquery.fancybox-thumbs.css" rel="stylesheet" type="text/css"> <link href="//fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,8Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · rubykaigi.org
2025-12-21 07:46
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Sat, 20 Dec 2025 18:03:57 GMT X-Amzn-Trace-Id: Root=1-6946e50d-00abc7f0614a777729ab3c0e;Parent=197927ba857df21a;Sampled=0;Lineage=1:6ecd0362:0 x-amzn-RequestId: cce1f1e7-8d23-4a01-8c5e-779f9cb8ad3a strict-transport-security: max-age=31536000 x-content-type-options: nosniff Location: https://rubykaigi.org/2026/ X-Cache: Hit from cloudfront Via: 1.1 a7089858ca46e4593c8301dd0b1a2cd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TJyZCJecQheqTly0eD4MrSSwPuVmeNy37bGbiYrPUCH3fU40EXSyAw== Age: 49352 Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="TJyZCJecQheqTly0eD4MrSSwPuVmeNy37bGbiYrPUCH3fU40EXSyAw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1 <!DOCTYPE html><html><head><meta content='0; url=/2026/' http-equiv='refresh'><link rel='me' href='https://ruby.social/@rubykaigi'><body><a href='/2026/'>RubyKaigi 2026</a>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · rubykaigi.org
2025-12-21 07:46
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Sat, 20 Dec 2025 22:55:20 GMT X-Amzn-Trace-Id: Root=1-69472958-760fcfe31f17f9f444fe2ee3;Parent=30f361af4faccf41;Sampled=0;Lineage=1:6ecd0362:0 x-amzn-RequestId: e5f55312-1f11-442d-b206-01b9083e1d57 content-security-policy-report-only: default-src https:; script-src https: 'unsafe-inline'; report-uri https://rko-router.rubykaigi.org/_csp strict-transport-security: max-age=31536000 content-security-policy: frame-ancestors 'none'; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; default-src https: x-content-type-options: nosniff Location: https://rubykaigi.org/2026/ X-Cache: Hit from cloudfront Via: 1.1 ebf31a208b1563522327c20ddd946a5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dpwVws7N9Q-ZzQI_wujgqNbJuCzpdDp2PdIYeT4Sq5pUNz8adCRTRg== Age: 31869 Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="dpwVws7N9Q-ZzQI_wujgqNbJuCzpdDp2PdIYeT4Sq5pUNz8adCRTRg==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1 <!DOCTYPE html><html><head><meta content='0; url=/2026/' http-equiv='refresh'><link rel='me' href='https://ruby.social/@rubykaigi'><body><a href='/2026/'>RubyKaigi 2026</a>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2025-12-21 04:39
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Date: Sat, 20 Dec 2025 23:47:15 GMT Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: vVkdUWZlqJa5VIanbXae4wuHTfcaCMrsp05RhS-qtWHd9a0_1MUasA== Age: 17523 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2025-12-21 04:39
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Date: Sat, 20 Dec 2025 23:47:15 GMT Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: rOcXWzGeAU0jt9rmD2CxsgTXsaEhiLG0TbAe0pXAFDN23Pk9kyIx8A== Age: 17520 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · slenderwai.info
2025-12-21 03:46
HTTP/1.1 204 No Content Content-Type: text/plain Connection: close Date: Sun, 21 Dec 2025 03:46:06 GMT Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List Server: openresty/1.17.8.2 cache-control: no-store, no-cache, must-revalidate, no-transform Pragma: no-cache P3P: CP="NID DSP ALL COR" set-cookie: csu=9e840e54-515f-4c8d-9992-650ccfb24fc2 X-Cache: Miss from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: g3kk7r0T0VSajIMeivNig1I_YeNfh3yHd5dHnh-u-AelI57MT51azw==
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · slenderwai.info
2025-12-21 03:46
HTTP/1.1 204 No Content Content-Type: text/plain Connection: close Date: Sun, 21 Dec 2025 03:46:05 GMT Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List Server: openresty/1.17.8.2 cache-control: no-store, no-cache, must-revalidate, no-transform Pragma: no-cache P3P: CP="NID DSP ALL COR" set-cookie: csu=983909d9-21ad-4077-bce5-6cfdbf9b6f06 X-Cache: Miss from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: uYVghOaumyAVG7xokhfQFtYZlMsjXsUuc4TWnxk1mEUPcSkycxgt_Q==
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · blockinfinity.fund
2025-12-21 02:41
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 124338 Connection: close Date: Sun, 21 Dec 2025 02:41:08 GMT x-powered-by: Next.js ETag: "mczeohc4m32nxt" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: By-RJlrrytjIqlVpqMkOJsZ2mgZIi-TKII_WOuDljHA3Pp8REf2Cdw== Page title: Block Infinity <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><title>Block Infinity</title><link rel="preload" href="/_next/static/css/eabb19ff2a16a983.css" as="style"/><link rel="stylesheet" href="/_next/static/css/eabb19ff2a16a983.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-9b0e45c24ba97727.js" defer=""></script><script src="/_next/static/chunks/framework-4556c45dd113b893.js" defer=""></script><script src="/_next/static/chunks/main-18053c3f67c4d467.js" defer=""></script><script src="/_next/static/chunks/pages/_app-7e0adb9290827b59.js" defer=""></script><script src="/_next/static/chunks/1bfc9850-b99101d28f833fa9.js" defer=""></script><script src="/_next/static/chunks/72-ad77a4a8ef1e2ac2.js" defer=""></script><script src="/_next/static/chunks/pages/index-5bd1e844953dcf0f.js" defer=""></script><script src="/_next/static/Uf-pSgEw5at29ck7bBQ3C/_buildManifest.js" defer=""></script><script src="/_next/static/Uf-pSgEw5at29ck7bBQ3C/_ssgManifest.js" defer=""></script></head><body><script id="chakra-script">!(function(){try{var a=function(c){var v="(prefers-color-scheme: dark)",h=window.matchMedia(v).matches?"dark":"light",r=c==="system"?h:c,o=document.documentElement,s=document.body,l="chakra-ui-light",d="chakra-ui-dark",i=r==="dark";return s.classList.add(i?d:l),s.classList.remove(i?l:d),o.style.colorScheme=r,o.dataset.theme=r,r},n=a,m="light",e="chakra-ui-color-mode",t=localStorage.getItem(e);t?a(t):localStorage.setItem(e,a(m))}catch(a){}})();</script><div id="__next"><style data-emotion="css-global 1ic98w6">:host,:root,[data-theme]{--chakra-ring-inset:var(--chakra-empty,/*!*/ /*!*/);--chakra-ring-offset-width:0px;--chakra-ring-offset-color:#fff;--chakra-ring-color:rgba(66, 153, 225, 0.6);--chakra-ring-offset-shadow:0 0 #0000;--chakra-ring-shadow:0 0 #0000;--chakra-space-x-reverse:0;--chakra-space-y-reverse:0;--chakra-colors-transparent:transparent;--chakra-colors-current:currentColor;--chakra-colors-black:#000000;--chakra-colors-white:#FFFFFF;--chakra-colors-whiteAlpha-50:rgba(255, 255, 255, 0.04);--chakra-colors-whiteAlpha-100:rgba(255, 255, 255, 0.06);--chakra-colors-whiteAlpha-200:rgba(255, 255, 255, 0.08);--chakra-colors-whiteAlpha-300:rgba(255, 255, 255, 0.16);--chakra-colors-whiteAlpha-400:rgba(255, 255, 255, 0.24);--chakra-colors-whiteAlpha-500:rgba(255, 255, 255, 0.36);--chakra-colors-whiteAlpha-600:rgba(255, 255, 255, 0.48);--chakra-colors-whiteAlpha-700:rgba(255, 255, 255, 0.64);--chakra-colors-whiteAlpha-800:rgba(255, 255, 255, 0.80);--chakra-colors-whiteAlpha-900:rgba(255, 255, 255, 0.92);--chakra-colors-blackAlpha-50:rgba(0, 0, 0, 0.04);--chakra-colors-blackAlpha-100:rgba(0, 0, 0, 0.06);--chakra-colors-blackAlpha-200:rgba(0, 0, 0, 0.08);--chakra-colors-blackAlpha-300:rgba(0, 0, 0, 0.16);--chakra-colors-blackAlpha-400:rgba(0, 0, 0, 0.24);--chakra-colors-blackAlpha-500:rgba(0, 0, 0, 0.36);--chakra-colors-blackAlpha-600:rgba(0, 0, 0, 0.48);--chakra-colors-blackAlpha-700:rgba(0, 0, 0, 0.64);--chakra-colors-blackAlpha-800:rgba(0, 0, 0, 0.80);--chakra-colors-blackAlpha-900:rgba(0, 0, 0, 0.92);--chakra-colors-gray-50:#F7FAFC;--chakra-colors-gray-100:#EDF2F7;--chakra-colors-gray-200:#E2E8F0;--chakra-colors-gray-300:#CBD5E0;--chakra-colors-gray-400:#A0AEC0;--chakra-colors-gray-500:#718096;--chakra-colors-gray-600:#4A5568;--chakra-colors-gray-700:#2D3748;--chakra-colors-gray-800:#1A202C;--chakra-colors-gray-900:#171923;--chakra-colors-red-50:#FFF5F5;--chakra-colors-red-100:#FED7D7;--chakra-colors-red-200:#FEB2B2;--chakra-colors-red-300:#FC8181;--chakra-colors-red-400:#F56565;--chakra-colors-red-500:#E53E3E;--chakra-colors-red-600:#C53030;--chakra-colors-red-700:#9B2C2C;--chakra-colors-red-800:#822727;--chakra-colors-red-900:#63171B;--chakra-colors-orange-50:#FFFAF0;--chakra-colors-orange-100:#FEEBC8;--chakra-colors-orange-200:#FBD38D;--chakra-colors-orange-300:#F6AD55;--chakra-colors-orange-400:#ED8Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · blockinfinity.fund
2025-12-21 02:41
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 21 Dec 2025 02:41:06 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://blockinfinity.fund/ X-Cache: Redirect from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -61T5hM62BKYXLCIrpBJy6sLp60gcYgjyRfGTZ2mW6hyKUTROaKpXA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.experience-muse.com
2025-12-21 01:06
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 17445 Connection: close Date: Sat, 20 Dec 2025 04:25:36 GMT Last-Modified: Fri, 14 Mar 2025 04:07:01 GMT ETag: "576946448809ac113fb5ef6093e0e51a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Dk0By6VvMCU4gakZVJFUg-KIS-NVSBIzyUwaQV0iTwOLu1cjEli0Uw== Age: 74433 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Permissions-Policy: autoplay=(), camera=(), fullscreen=*, geolocation=(self "https://maps.gstatic.com" "https://maps.googleapis.com" "https://maps.google.com"), microphone=(), payment=() Page title: MUSE: Loyalty Programme <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <!-- <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src * 'strict-dynamic' 'nonce-e0s24PSyT7fufuffLGYMEczWe7AECGQU' 'unsafe-eval'; script-src-elem * 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://www.googletagmanager.com https://connect.facebook.net/ https://8e060f8a10af.e5215599.ap-south-2.token.awswaf.com https://code.jquery.com https://8e060f8a10af.edge.sdk.awswaf.com https://cdn.jsdelivr.net https://api.gravty.me/v2/members/ https://api.eui13.gravty.io/ https://cdn.document360.io https://unpkg.com https://cdnjs.cloudflare.com https://cdn.ravenjs.com https://maps.google.com https://maps.googleapis.com https://www.gstatic.com/ https://bam.nr-data.net/jserrors/1/7a5b0de38e https://tr.snapchat.com/ https://apps.mypurecloud.de/ https://api.zerobounce.net/v2/validate https://apps.mypurecloud.de/journey/messenger-plugins/offersHelper.min.js https://sc-static.net/scevent.min.js https://cdn.branch.io/ https://www.google-analytics.com/ https://www.datadoghq-browser-agent.com/ ; object-src * blob:; style-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval'https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src * data:; media-src 'self' https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com https://*.s3.amazonaws.com data:; form-action *; frame-src * 'self' blob: https://feed.mikle.com https://api.document360.io https://apihub.document360.io; font-src 'self' https://fonts.gstatic.com https://cdn.document360.info https://pro.fontawesome.com data:; base-uri 'self'; connect-src *"> --> <title>MUSE: Loyalty Programme</title> <base href="/"> <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, user-scalable = no"> <meta name="description" content="Your Permission to Indulge"> <meta name="keywords" content="muse loyalty program, muse loyalty, muse app, muse points, Chalhoub, shopping, luxury, brands, fashion, beauty, points, membership, benefits, card, offers, tiers, bonus, shop, inspiration, SWAROVSKI, MICHAEL KORS, LEVEL SHOES, LACOSTE, TORY BURCH, TRYANO, LOCCITANE, KENZO, TANAGRA,تطبيق ميوز, تطبيق ميوز لجمع النقاط, برنامج ميوز, برنامج الولاء ميوز, موقع برنامج ميوز, موقع تطبيق ميوز, برنامج ميوز لجمع النقاط"> <meta property="og:url" content="https://www.muse.loyaltycloud1.com/"/> <meta property="og:type" content="website"/> <meta property="og:title" content="Loyalty that rewards you across the region"/> <meta property="og:description" content="Designed to enhance your shopping experience, MUSE gives you exclusive access to a world of aspirational brands like L'Occitane, Swarovski, Level Shoes, Faces and more, at your fingertips."/> <meta property="og:image" content="https://images.ctfassets.net/v0a9igg04qv1/3TQEcvGwmmEVUlCAvSI1RM/dab670dd9f87f0d283163bc712e1bc4f/og_image_muse.jpg"/> <link rel="preload" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"> <style type="text/css">@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e4.woff) format('woff');}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff) format('woff');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Muli';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff) format('woff');unFound 2025-12-21 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · awjd.tv
2025-12-20 16:18
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 16:18:15 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: z2bOyjae_PwarGexqHz33XBTSM7kcWkbvOqdyLxTSS6eqY5-9SpLQw== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · awjd.tv
2025-12-20 16:18
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 16:18:15 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: kQFqmY_NCtaeGYvYg2_Cy7vPvlEdqLSuCREiiQRYAdc0p3fHWHkWZA== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · web.nalcam-bo-bo.ovg-dev.com
2025-12-20 15:43
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Sat, 20 Dec 2025 15:43:34 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 028EMUVTuJv7ZtazsU-wIgVC1DL9TKKTSgGGP_FbBo7rfww-GnER9w== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · awjd8.tv
2025-12-20 15:08
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 15:08:32 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 e53a38d449135904e00f29f17c559950.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pA28mvGwBZVyZVNbb1b7zJXW31RlW9wORxiYqGevW1CYochwrBAiiw== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · awjd8.tv
2025-12-20 15:08
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 15:08:31 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 80b00aa2dcc58ca61b2465a37c89fc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: N5l3zBcgJn1btUKSC39fgxqR1oS4HnskvN0TIjv8CaR8FKpwuqCRvg== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · newbooksmag.com
2025-12-20 15:06
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Sat, 20 Dec 2025 15:06:52 GMT Server: Apache/2 Link: <https://newbooksmag.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 9OxsZa6lvXw1RgHim-NqjoJFXR92lVrEgUItSZ-A8iE1jEd3tPz_2g==
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · awjd4.tv
2025-12-20 14:11
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 14:11:20 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mKE5RpdkGhrbZGzJwpF8UfRN1a6vTunsyrvd9dOScmDpb_fgnAxzkw== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · awjd4.tv
2025-12-20 14:11
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 454 Connection: close Server: nginx/1.18.0 (Ubuntu) Date: Sat, 20 Dec 2025 14:11:19 GMT Last-Modified: Thu, 04 Sep 2025 11:54:45 GMT Accept-Ranges: bytes ETag: "68b97e05-1c6" X-Cache: Miss from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hS7-FQy_XsZHq_9V-owPU_6eMqmN9zFHarJDofss4hG_0ORPyMIguA== Page title: XV暗网 <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/logo.png" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>XV暗网</title> <script type="module" crossorigin src="/assets/index-D90_28ND.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-COTtN9kX.css"> </head> <body> <div id="app"></div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · hidenseek3d.com
2025-12-20 14:03
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1362 Connection: close Date: Sat, 20 Dec 2025 14:03:44 GMT Last-Modified: Thu, 20 Apr 2023 10:00:08 GMT x-amz-version-id: null ETag: "684b45aa188a24dc25a98a1ca74f609c" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pD5vzkix2ii-usbdvFsC738Id417i1j8wH1WP6Btm_KXhJ1rHHraWg== Page title: Hide N Seek 3D <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Hide N Seek 3D</title> <meta name="description" content="Hide N Seek 3D"> <meta name="keywords" content="Hide N Seek 3D"> <link rel="stylesheet" href="assets/css/index.css"> <link rel="shortcut icon" href="favicon.ico"> </head> <body> <div class="container"> <div class="header"> <!-- <img src="assets/img/icon.png" alt=""> --> <span>Hide N Seek 3D</span> </div> <div class="center"> <div class="center-left"> <img src="assets/img/image_018_0520.jpg" alt=""> <img src="assets/img/image_018_1238.jpg" alt=""> <img src="assets/img/image_020_0887.jpg" alt=""> </div> <div class="center-right"> <h2>Looking for an exciting and thrilling game to play? Look no further than Hide N Seek 3D: Escape!</h2> <a href="https://play.google.com/store/apps/details?id=com.hicat.hicat" target="_blank"> <img src="assets/img/gp.webp" alt=""> </a> </div> </div> <div class="bottom"> <a href="/privacy/">Privacy Policy</a> </div> </div> </body> </html>Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · takecare-stage.com
2025-12-20 13:50
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 19313 Connection: close Date: Sat, 20 Dec 2025 13:50:36 GMT X-Amzn-Trace-Id: Root=1-6946a9a8-059cc7566eceaac56bb446ca;Parent=57840f494bf35fd5;Sampled=0;Lineage=1:ceb8270e:0 x-amzn-RequestId: bdb4f56c-42b8-413b-a0f6-49515fdb9c55 content-security-policy-report-only: default-src 'self' analytics.google.com js.stripe.com cognito-idp.ca-central-1.amazonaws.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com api.i18nexus.com cdn.acsbapp.com restcountries.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.stripe.com takecare-stage.auth.ca-central-1.amazoncognito.com takecare.auth.ca-central-1.amazoncognito.com maps.googleapis.com www.googletagmanager.com acsbapp.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://images-na.ssl-images-amazon.com https://m.media-amazon.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js Link: </_next/static/media/e11418ac562b8ac1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/a90f0e9989770fae.css>; rel=preload; as="style", </_next/static/css/57d206580087c88c.css>; rel=preload; as="style", </_next/static/css/1687924bd6d0f2f2.css>; rel=preload; as="style", </_next/static/css/301ea550c1275951.css>; rel=preload; as="style" X-Cache: Miss from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Pl_s6G7YIfhEYpHBT3LOmLCIloZhdQg8tPcHwkveyQ1bmGEMhHgaMw== Page title: Take Care™ <!DOCTYPE html><html lang="en" class="__variable_3a0388"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/><link rel="stylesheet" href="/_next/static/css/a90f0e9989770fae.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/57d206580087c88c.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/1687924bd6d0f2f2.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/301ea550c1275951.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-58724b9b0ce00004.js"/><script src="/_next/static/chunks/87c73c54-36cc00912ddd59c5.js" async=""></script><script src="/_next/static/chunks/8315-1efee7e5e51d9d50.js" async=""></script><script src="/_next/static/chunks/main-app-0881fd3fa41b4687.js" async=""></script><script src="/_next/static/chunks/5329-3c934d3845ba2b31.js" async=""></script><script src="/_next/static/chunks/3906-a709467e3ed5b4c6.js" async=""></script><script src="/_next/static/chunks/3471-50ce9e26841455ee.js" async=""></script><script src="/_next/static/chunks/959-4c396fc805a5bba7.js" async=""></script><script src="/_next/static/chunks/3547-8e8a78aed4800ba6.js" async=""></script><script src="/_next/static/chunks/5229-9a10d06ead7c9010.js" async=""></script><script src="/_next/static/chunks/6069-f8210d3c304ad016.js" async=""></script><script src="/_next/static/chunks/552-d11e6e94880485d4.js" async=""></script><script src="/_next/static/chunks/60-3fc22ab3cbeed967.js" async=""></script><script src="/_next/static/chunks/887-0f1c36f85c21d8fc.js" async=""></script><script src="/_next/static/chunks/7137-d60542ba9a87ad0f.js" async=""></script><script src="/_next/static/chunks/8196-4fdc866318d2d833.js" async=""></script><script src="/_next/static/chunks/8660-afa9bb1d1d7cf502.js" async=""></script><script src="/_next/static/chunks/324-5ffe3f9b425b0726.js" async=""></script><script src="/_next/static/chunks/7227-b2411d87c0387011.js" async=""></script><script src="/_next/static/chunks/app/layout-e0df86b381d8e038.js" async=""></script><script src="/_next/static/chunks/7261-977068db27712857.js" async=""></script><script src="/_next/static/chunks/3970-4d46eab3e288a209.js" async=""></script><script src="/_next/static/chunks/app/page-7bed62d54908ab91.js" async=""></script><link rel="preload" href="https://acsbapp.com/apps/app/dist/js/app.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GTM-KSDN5SQW&gtm_auth=fauH3HRlRSmN0I9Bq6vovw&gtm_preview=env-3&gtm_cookies_win=x" as="script"/><meta name="next-size-adjust" content=""/><title>Take Care™</title><link rel="icon" href="/favicon.ico"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KSDN5SQW>m_auth=fauH3HRlRSmN0I9Bq6vovw>m_preview=env-3>m_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><div class="flex flex-col min-h-screen"><main class="flex-grow"><div class="Toastify"></div><div class="bg-gradient-to-r from-tc-tertiary-50 to-white"><div class="flex w-full flex-col justify-between text-tc-gray-700" style="background-image:url(/_next/static/media/HeartPattern.1d01c6cc.png);background-position:bottom;background-size:contain;background-repeat:repeat-x"><div class="flex flex-col justify-between md:h-screen"><div><div class="w-full border-b bg-white py-6"><div class="mx-auto max-w-7xl px-4 7xl:px-0"><a href="/home"><img alt="TakeCare Logo" loading="lazy" width="926" height="194" decoding="async" data-nimg="1" class="h-8 w-auto" style="color:transparent" srcSet="/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=1080&q=75 1x, /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FtcLogo.9b6a76a4.png&w=Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · web.nalcam-bo-bo.ovg-dev.com
2025-12-20 09:09
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 672 Connection: close Date: Fri, 19 Dec 2025 09:54:37 GMT Last-Modified: Wed, 18 Dec 2024 05:08:48 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QadSGVFwh2sTXRtpTUQEkp1a1IGAk8ly Accept-Ranges: bytes Server: AmazonS3 ETag: "306796a7427c6fff4d12db54b7d4a8a5" X-Cache: Error from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: rYPTwNsdmF_4dnLe-MWEH3kzPdeHwbskEU28Hyvwnr8Jd1Z2o2ZDxg== Age: 83669 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff Page title: NALCAM Backoffice <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="NALCAM Backoffice"/><link rel="apple-touch-icon" href="/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><title>NALCAM Backoffice</title><script defer="defer" src="/static/js/main.fc14927d.js"></script><link href="/static/css/main.d71de1e2.css" rel="stylesheet"></head><body style="background-color:#f4f4f9"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · tremblingsun.com
2025-12-20 08:27
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 20 Dec 2025 08:27:13 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://tremblingsun.com/ X-Cache: Redirect from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OeCShADtyAL3nM_yUpjsjE8K5-4Be_E7-IxbHKxIS_TJg3RyksaPRw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · tremblingsun.com
2025-12-20 08:27
HTTP/1.1 404 Not Found Server: CloudFront Date: Sat, 20 Dec 2025 08:27:13 GMT Content-Length: 0 Connection: close x-block-rule: not-jp X-Cache: Error from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: QxZ0VNF7tyBJcwM9bHRVN-eCpMaDxF18z_5TL-PovJltR1oPsXmr9A==
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · teenpattistar.vip
2025-12-20 07:02
HTTP/1.1 403 Forbidden Server: CloudFront Date: Sat, 20 Dec 2025 07:02:03 GMT Content-Type: text/html Content-Length: 915 Connection: close X-Cache: Error from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: pal17iaVAE3IsluNDRHRDox15r-CmvvuNymbvYlzpDkpCtWox2BLAg== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Bad request. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: pal17iaVAE3IsluNDRHRDox15r-CmvvuNymbvYlzpDkpCtWox2BLAg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · teenpattistar.vip
2025-12-20 07:02
HTTP/1.1 400 Bad Request Server: CloudFront Date: Sat, 20 Dec 2025 07:02:03 GMT Content-Type: text/html Content-Length: 915 Connection: close X-Cache: Error from cloudfront Via: 1.1 50d1552804e5c5074606d2b5a0eb8ef8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: d_MU2p8Wta_IN2HoNTkextJUqoHyMflm7uEr7sDzyzQwVBZdRwPU9Q== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>400 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Bad request. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: d_MU2p8Wta_IN2HoNTkextJUqoHyMflm7uEr7sDzyzQwVBZdRwPU9Q== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · agadongardenliving.co.uk
2025-12-20 06:40
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 20 Dec 2025 06:40:57 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://agadongardenliving.co.uk/ X-Cache: Redirect from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: U2VF20OQQEDExJZb58Rcx4I3vhSlndsUVmvM5OZAOZMp7_rQVbbT6g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · agadongardenliving.co.uk
2025-12-20 06:40
HTTP/1.1 403 Forbidden Server: CloudFront Date: Sat, 20 Dec 2025 06:40:58 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: xiTiKujwAnk2dxoahs2ejEO2MwK9i9XeBsezFR9DNYur2kSF8SqbZg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: xiTiKujwAnk2dxoahs2ejEO2MwK9i9XeBsezFR9DNYur2kSF8SqbZg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · heromamapet.com
2025-12-20 02:31
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Sat, 20 Dec 2025 02:31:34 GMT Link: <https://heromamapet.com/wp-json/>; rel="https://api.w.org/" Link: <https://heromamapet.com/wp-json/wp/v2/pages/79>; rel="alternate"; type="application/json" Link: <https://heromamapet.com/>; rel=shortlink Last-Modified: Sat, 20 Dec 2025 02:31:33 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Powered-By: Server: Strict-Transport-Security: max-age=31536000 X-Cache: Miss from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: R7RRiVr7G2b01qJ8q6srwoeS4iK317OdyDND02FzUxhk1WJSUUHI1w== Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Found 2025-12-20 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · orix.trusquetta.com
2025-12-19 16:55
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 16:55:21 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://orix.trusquetta.com/ X-Cache: Redirect from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hayE9p1xZz3pj9Aee25ftwDaxlYzhiUFXydTnYImNa-jU84dZOxIdA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · orix.trusquetta.com
2025-12-19 16:55
HTTP/1.1 403 Forbidden Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private date: Fri, 19 Dec 2025 16:55:21 GMT Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mUUkBFGru_EbkdA9Np0iPlTObRf1rQlVvoLFAAE_v0JUsMoDkVr8YQ== Page title: Forbidden <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Forbidden</title> <!-- Fonts --> <link rel="preconnect" href="https://fonts.gstatic.com"> <link href="https://fonts.googleapis.com/css2?family=Nunito&display=swap" rel="stylesheet"> <style> /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}a{background-color:transparent}code{font-family:monospace,monospace;font-size:1em}[hidden]{display:none}html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5}*,:after,:before{box-sizing:border-box;border:0 solid #e2e8f0}a{color:inherit;text-decoration:inherit}code{font-family:Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}svg,video{display:block;vertical-align:middle}video{max-width:100%;height:auto}.bg-white{--bg-opacity:1;background-color:#fff;background-color:rgba(255,255,255,var(--bg-opacity))}.bg-gray-100{--bg-opacity:1;background-color:#f7fafc;background-color:rgba(247,250,252,var(--bg-opacity))}.border-gray-200{--border-opacity:1;border-color:#edf2f7;border-color:rgba(237,242,247,var(--border-opacity))}.border-gray-400{--border-opacity:1;border-color:#cbd5e0;border-color:rgba(203,213,224,var(--border-opacity))}.border-t{border-top-width:1px}.border-r{border-right-width:1px}.flex{display:flex}.grid{display:grid}.hidden{display:none}.items-center{align-items:center}.justify-center{justify-content:center}.font-semibold{font-weight:600}.h-5{height:1.25rem}.h-8{height:2rem}.h-16{height:4rem}.text-sm{font-size:.875rem}.text-lg{font-size:1.125rem}.leading-7{line-height:1.75rem}.mx-auto{margin-left:auto;margin-right:auto}.ml-1{margin-left:.25rem}.mt-2{margin-top:.5rem}.mr-2{margin-right:.5rem}.ml-2{margin-left:.5rem}.mt-4{margin-top:1rem}.ml-4{margin-left:1rem}.mt-8{margin-top:2rem}.ml-12{margin-left:3rem}.-mt-px{margin-top:-1px}.max-w-xl{max-width:36rem}.max-w-6xl{max-width:72rem}.min-h-screen{min-height:100vh}.overflow-hidden{overflow:hidden}.p-6{padding:1.5rem}.py-4{padding-top:1rem;padding-bottom:1rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.pt-8{padding-top:2rem}.fixed{position:fixed}.relative{position:relative}.top-0{top:0}.right-0{right:0}.shadow{box-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px 0 rgba(0,0,0,.06)}.text-center{text-align:center}.text-gray-200{--text-opacity:1;color:#edf2f7;color:rgba(237,242,247,var(--text-opacity))}.text-gray-300{--text-opacity:1;color:#e2e8f0;color:rgba(226,232,240,var(--text-opacity))}.text-gray-400{--text-opacity:1;color:#cbd5e0;color:rgba(203,213,224,var(--text-opacity))}.text-gray-500{--text-opacity:1;color:#a0aec0;color:rgba(160,174,192,var(--text-opacity))}.text-gray-600{--text-opacity:1;color:#718096;color:rgba(113,128,150,var(--text-opacity))}.text-gray-700{--text-opacity:1;color:#4a5568;color:rgba(74,85,104,var(--text-opacity))}.text-gray-900{--text-opacity:1;color:#1a202c;color:rgba(26,32,44,var(--text-opacity))}.uppercase{text-transform:uppercase}.underline{text-decoration:underline}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tracking-wider{letter-spacing:.05em}.w-5{width:1.25rem}.w-8{width:2rem}.w-auto{width:auto}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}@-webkit-keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}@keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}@-webkit-keyframes ping{0%{transform:scale(1);opacity:1}75%,to{transform:scale(2);opacity:0}}@keyframes ping{0%{transform:scale(1);opacity:1}75%,to{transform:scale(2);opacity:0}}@-webkit-keyframes pulse{0%,to{opacity:1}50%{opacity:.5}}@keyframes pulse{0%,to{opacity:1}50%{opacity:.5}}@-webkit-keyframes bounce{0%,to{transform:translateY(-25%);-webkit-animation-timing-function:cubFound 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.harbourtowngoldcoast.com.au
2025-12-19 16:42
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 16:42:52 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SfJ3d_tIdlQAHrwjOR300ueuJSC6ubaXMPHudHPtZfUFD2r1FTz3VA== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: SfJ3d_tIdlQAHrwjOR300ueuJSC6ubaXMPHudHPtZfUFD2r1FTz3VA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.harbourtowngoldcoast.com.au
2025-12-19 16:42
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 16:42:51 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.harbourtowngoldcoast.com.au/ X-Cache: Redirect from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SlYHamt7mj65Q5-Ea2U5Tof6nxXZUBnswz5bus06bbEDEPDrckgbVQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.harbourtown.com.au
2025-12-19 16:42
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 16:42:51 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: MiVbhuyBNiLxfbrgbJV62Vm21981NODKwWn6WE_1XMSOp_W28ETn2g== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: MiVbhuyBNiLxfbrgbJV62Vm21981NODKwWn6WE_1XMSOp_W28ETn2g== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.harbourtown.com.au
2025-12-19 16:42
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 16:42:51 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.harbourtown.com.au/ X-Cache: Redirect from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: PDZR8o8Gp82GkaDD-OuMrtUPjE8efFkcpI6_jVMuqOd1rVD-1FrkIA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.harbourtownadelaide.com.au
2025-12-19 16:42
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 16:42:51 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: AVS9N85cNzbM3qvWd60S9UQUzuPH2lmxjAOhjxTA9P0QwNltRVaBFQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: AVS9N85cNzbM3qvWd60S9UQUzuPH2lmxjAOhjxTA9P0QwNltRVaBFQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.harbourtownadelaide.com.au
2025-12-19 16:42
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 16:42:51 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.harbourtownadelaide.com.au/ X-Cache: Redirect from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: vL1ewNgVJxo89r8xu6FnzX5zCSl2HKKO24xThekD9GRxOetn5d10bw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.sony.uy
2025-12-19 16:20
HTTP/1.1 400 Bad Request Content-Type: text/html; charset=utf-8 Content-Length: 1771 Connection: close Date: Fri, 19 Dec 2025 16:20:57 GMT X-VTEX-Cache-Server: ip-172-16-23-174.ec2.internal X-VTEX-Janus-Router-Backend-App: portal-v1.7.8-k8s X-vtex-error-page: 1 x-vtex-operation-id: 81c1cbcd-465f-4b4d-a3e7-91359d7524f1 X-VTEX-ApiCache-Time: 0 X-VTEX-Cache-Status-Janus-ApiCache: MISS X-Cache: Error from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 87WZHUshgHL0nBGxcdmuDhGUE7SEQtgAHjEgG9GX1VW0BAi8pOVRqA== Page title: Error - VTEX <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"/> <link rel="icon" type="image/png" href="https://custom-error-page.vtex.com/favicon.png" /> <meta name="viewport" content="width=device-width" /> <title>Error - VTEX</title> <link rel="stylesheet" type="text/css" href="https://custom-error-page.vtex.com/assets/stylesheet.css" /> <link rel="stylesheet" type="text/css" href="https://custom-error-page.vtex.com/assets/tachyons.css" /> </head> <body> <div class="render-container" id="error"> <div class="h-100 flex flex-column mh6 mh0-ns error-height pt6 pt10-ns"> <div> <div> <div id="error-container" class="flex justify-center-ns flex-row-ns flex-column-reverse h-auto-ns pt6 pt0-ns pb6"> <div class="mr9-ns mr0"> <div class="f2 c-on-base">Something went wrong</div> <div class="f5 pt5 c-on-base lh-copy"> <div>Error connecting to the backend server.</div> <div>Please return to our store in a few moments.</div> </div> <div class="f6 pt5 c-muted-2" style="font-family: courier, code;"> <div></div> <div id="currentDate" class="f6 c-muted-2 lh-copy fw7"></div> </div> </div> <div><img id="error-img" alt="erro" src="https://custom-error-page.vtex.com/assets/error-page.png" class="img-height pb6 pb0-ns" /></div> </div> </div> </div> </div> </div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.sony.uy
2025-12-19 16:20
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 16:20:52 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.sony.uy/ X-Cache: Redirect from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: b4vzvo5m6qmyE7UZaAmG2MljXOSFO6KLFDwtP_BzltGn9-t8E5H3rw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 826345.cc
2025-12-19 12:06
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6880 Connection: close Server: nginx Date: Fri, 19 Dec 2025 12:06:12 GMT Last-Modified: Mon, 05 May 2025 14:52:32 GMT Accept-Ranges: bytes ETag: "6818d0b0-1ae0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: xeHBSmINOn5jS1fTBnEnXoiHa_qbLfsIIDT5WMCeY2ZOLwk__DVEZw== Age: 1 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['6949.men', '6949.men', '6949.men']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } for (vaFound 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 826345.cc
2025-12-19 12:06
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 12:06:12 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://826345.cc/ X-Cache: Redirect from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: oK_3oOZ7Ra3uzHus79OSVwjSdAVogPW4Nb5Clntdo-Wz7hBOCRr0dg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.cnsimate.com
2025-12-19 10:16
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 82141 Connection: close Date: Fri, 19 Dec 2025 10:16:44 GMT Accept-Ranges: bytes CE-Version: 1757896006 Last-Modified: Thu, 22 Sep 2022 08:34:56 GMT ETag: "632c1e30-140dd" X-Frame-Options: ALLOWALL Cache-Control: public,max-age=7200 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: camera=() Content-Security-Policy: block-all-mixed-content X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=31536000 CE-Cache: HIT Vary: Accept-Encoding,Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 01V3dZFr8tEhP_GAymieQ-LDngH6pFFszpZqZ5AHIN2r4Fjm7DzHxw== Page title: Electric Hoverboards_Drift Scooter-Simate Scooter_Jinhua Smart Electric Technology Co.,Ltd <!DOCTYPE html> <html> <!--Designed and produced by the technical department of Jinhua Smart Electric Technology Co.,Ltd., please email if you have any comments or suggestions dm-jiaxing@300.cn--> <head> <meta charset="UTF-8" /> <title>Electric Hoverboards_Drift Scooter-Simate Scooter_Jinhua Smart Electric Technology Co.,Ltd</title> <meta name="keywords" content="hoverboard,electric scooter,drift scooter,drift trike"> <meta name="description" content="-Simate Scooters is a leading manufacturer of hoverboards and electric drift trike scooter etc.We are the branch factory of Chic,own lots of technology patent. "> <meta name='viewport' content='width=1440' /> <link href="//static202.yun300.cn/public/css/cecc/animate.css,iconfont.css,bootstrap.min.css,response.min.css?v=1663835184000&tenantId=246171&viewType=1" rel="stylesheet" type="text/css" /> <link href="//static202.yun300.cn/css/site_impt_r.css?v=1663835184000&tenantId=246171&viewType=1" rel="stylesheet" type="text/css" /> <link href="//static202.yun300.cn/css/ftmpl_impt_db61ef33-c2d5-4ea0-b003-791ec01c68fc.css?v=1663835184000&tenantId=246171&viewType=1" rel="stylesheet" type="text/css" /> <link href="//static202.yun300.cn/css/page_impt_HOME21.css?v=1663835184000&tenantId=246171&viewType=1" rel="stylesheet" type="text/css" /> <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" /> <meta http-equiv="Cache-Control" content="no-transform" /> <meta http-equiv="Cache-Control" content="no-siteapp" /> <meta name="applicable-device" content="pc,mobile" /> <link type="text/css" href="/upload/css/L_pc.css?t=1663836217907" rel="stylesheet" /> <link type="text/css" href="/upload/css/L_phone.css?t=1663836217907" rel="stylesheet" /> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" /> <!--[if lt IE 9]> <script src="https://cdn.bootcss.com/html5shiv/3.7.2/html5shiv.min.js"></script> <script src="https://cdn.bootcss.com/respond.js/1.4.2/respond.js"></script> <![endif]--> <!-- Global site tag (gtag.js) - Google Analytics --> <script async="" src="https://www.googletagmanager.com/gtag/js?id=UA-204177838-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-204177838-1'); </script> <script type="text/javascript"> var _gas = _gas || []; _gas.push(['_setAccount', 'UA-204177838-1']); _gas.push(['_trackPageview']); _gas.push(['_gasTrackForms']); _gas.push(['_gasTrackOutboundLinks']); _gas.push(['_gasTrackMaxScroll']); _gas.push(['_gasTrackDownloads']); _gas.push(['_gasTrackMailto']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = 'http://gw.zbde.net/gas-1.10.1.min.js'; var s = document.getElementsByTagName('script')[0]; //s.parentNode.insertBefore(ga, s); })(); </script> </head> <body data-pageid="70ee62b5-9330-4057-b730-47fa0361f7a2" data-layout="flow" data-tmplid="db61ef33-c2d5-4ea0-b003-791ec01c68fc"> <input type="hidden" id="h_foreignList" value='[]' /> <input type="hidden" id="h_tenant" value='{"cdnFlag":"2","createTime":null,"domain":"www.cnsimate.com","domainInfo":null,"foreign":true,"id":246171,"language":"en","mobileDomain":"","mobileStatus":8,"status":6,"templateCode":"global_site_advanced","tenantCode":"100001_2106295082","unittype":"100001","verify":"39905e0e79ad0bbc0f14586aa3a84cf6","mverify":""}' /> <input type="hidden" id="h_qrcodeDomain" value='http://www.ceurl.cn' /> <input type="hidden" id="h_upgradeVersion" value='63519b42dff2a71c6c7389ec27f1c1b1' /> <input type="hidden" id="h_isxinnet" value='false' /> <input type="hidden" id="h_visittrack_siteId" value='100001_2106295082' /> <input type="hidden" id="h_isOpenSSL" value='false' /> <input type="hidden" id="h_intelligetJump" value='{"identification":"false"}' /> <input type="hidden" id="h_getMultilingualFound 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · berrua.sitepriv.prod.yellohvillage.fr
2025-12-19 09:52
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 09:52:23 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://berrua.sitepriv.prod.yellohvillage.fr/ X-Cache: Redirect from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XsFLqw_k0WqccZVq5sXYOquUzD2t_Ab9bspXn_WcaahpLy5u09nV-Q== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: frame-src 'self' blob: https://yellohvillage.demdex.net https://*.youtube-nocookie.com https://*.google.com https://*.facebook.com https://*.fls.doubleclick.net https://*.iadvize.com https://*.web-visite.com https://atlanticdigital.fr https://*.zenchef.com https://*.apidae-tourisme.com https://*.yellohvillage.fr https://*.adoberesources.net https://*.adobedc.net;script-src-elem 'self' 'unsafe-inline' https://assets.adobedtm.com https://js-agent.newrelic.com https://*.gstatic.com https://*.google.com https://*.facebook.net https://*.bing.com https://*.google-analytics.com https://cdn.mouseflow.com https://sdk.privacy-center.org https://*.googletagmanager.com https://yellohvillage.script.admo.tv https://*.adoberesources.net https://*.adobedc.net blob: https://*.iadvize.com https://elfsightcdn.com https://universe-static.elfsightcdn.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.privacy-center.org https://*.adoberesources.net https://*.adobedc.net;img-src 'self' https: data: 'unsafe-inline';default-src 'self' https://yellohvillage.admo.tv https://*.apidae-tourisme.com https://*.adoberesources.net https://*.adobedc.net;object-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' blob: https://*.yellohvillage.es https://*.yellohvillage.co.uk https://*.yellohvillage.de https://*.yellohvillage.it https://*.yellohvillage.fr https://*.yellohvillage.nl https://yellohvillage.tt.omtrdc.net https://dpm.demdex.net https://bam.nr-data.net https://*.privacy-center.org https://*.g.doubleclick.net https://*.bing.com https://yellohvillage.admo.tv https://stats.g.doubleclick.net https://*.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.iadvize.com https://*.sitepriv.prod.yellohvillage.fr https://*.omtrdc.net https://*.adoberesources.net https://*.adobedc.net https://core.service.elfsight.com https://static.elfsight.com;media-src 'self' blob: https://*.sitepriv.prod.yellohvillage.fr https://*.s3.eu-west-1.amazonaws.com https://medias.yellohvillage.fr X-Content-Type-Options: nosniff Permissions-Policy: accelerometer=(), geolocation=(self), fullscreen=(), autoplay=(), camera=(), display-capture=(self) Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · berrua.sitepriv.prod.yellohvillage.fr
2025-12-19 09:52
HTTP/1.1 401 Unauthorized Content-Type: text/plain Content-Length: 17 Connection: close WWW-Authenticate: Basic realm="traefik" Date: Fri, 19 Dec 2025 09:52:23 GMT X-Cache: Error from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8x0f5S4uJlde7ZwWi6qgjlasyE_gavzwhgz3Tem13Ivp_Xar7O7aUw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: frame-src 'self' blob: https://yellohvillage.demdex.net https://*.youtube-nocookie.com https://*.google.com https://*.facebook.com https://*.fls.doubleclick.net https://*.iadvize.com https://*.web-visite.com https://atlanticdigital.fr https://*.zenchef.com https://*.apidae-tourisme.com https://*.yellohvillage.fr https://*.adoberesources.net https://*.adobedc.net;script-src-elem 'self' 'unsafe-inline' https://assets.adobedtm.com https://js-agent.newrelic.com https://*.gstatic.com https://*.google.com https://*.facebook.net https://*.bing.com https://*.google-analytics.com https://cdn.mouseflow.com https://sdk.privacy-center.org https://*.googletagmanager.com https://yellohvillage.script.admo.tv https://*.adoberesources.net https://*.adobedc.net blob: https://*.iadvize.com https://elfsightcdn.com https://universe-static.elfsightcdn.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.privacy-center.org https://*.adoberesources.net https://*.adobedc.net;img-src 'self' https: data: 'unsafe-inline';default-src 'self' https://yellohvillage.admo.tv https://*.apidae-tourisme.com https://*.adoberesources.net https://*.adobedc.net;object-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' blob: https://*.yellohvillage.es https://*.yellohvillage.co.uk https://*.yellohvillage.de https://*.yellohvillage.it https://*.yellohvillage.fr https://*.yellohvillage.nl https://yellohvillage.tt.omtrdc.net https://dpm.demdex.net https://bam.nr-data.net https://*.privacy-center.org https://*.g.doubleclick.net https://*.bing.com https://yellohvillage.admo.tv https://stats.g.doubleclick.net https://*.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.iadvize.com https://*.sitepriv.prod.yellohvillage.fr https://*.omtrdc.net https://*.adoberesources.net https://*.adobedc.net https://core.service.elfsight.com https://static.elfsight.com;media-src 'self' blob: https://*.sitepriv.prod.yellohvillage.fr https://*.s3.eu-west-1.amazonaws.com https://medias.yellohvillage.fr X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: accelerometer=(), geolocation=(self), fullscreen=(), autoplay=(), camera=(), display-capture=(self) Vary: Origin 401 Unauthorized
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.pavanaputrapowersolutions.in
2025-12-19 09:09
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 09:09:13 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.pavanaputrapowersolutions.in/ X-Cache: Redirect from cloudfront Via: 1.1 9b253b6508bd634345864697c48abb50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: AZtKK_3SSjW5vRkqALyCcc5vyCBuAz5MTGJtfkxnfWvdI-wpcMI4qQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.pavanaputrapowersolutions.in
2025-12-19 09:09
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 09:09:12 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: fkc6GtBNbCrJWSzdCcSCMeAW3BtQryAcfCOE3EIAM5Q9voU_NzOzZg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: fkc6GtBNbCrJWSzdCcSCMeAW3BtQryAcfCOE3EIAM5Q9voU_NzOzZg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.lambdainvestor.com
2025-12-19 08:56
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3300 Connection: close Last-Modified: Sun, 07 Dec 2025 21:48:26 GMT Server: AmazonS3 Date: Fri, 19 Dec 2025 05:08:13 GMT ETag: "a4b2fbbc9afe239c279c4709b7627919" X-Cache: Hit from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: l9nEnrOAESeIVSS-BRA-x4tIp4KqfnQKnpWUPJuNbMt6XXL6ioLCpw== Age: 13711 Page title: λInvestor - AI-Powered Options Trading Simulator <!doctype html> <html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/lambda.svg" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <!-- Primary Meta Tags --> <title>λInvestor - AI-Powered Options Trading Simulator</title> <meta name="title" content="λInvestor - AI-Powered Options Trading Simulator"> <meta name="description" content="Practice options trading strategies with AI-powered recommendations, real-time market analysis, and risk-free portfolio simulation. Build, test, and learn options strategies."> <meta name="keywords" content="options trading, options simulator, AI trading, options strategies, stock options, trading education, options analysis, portfolio simulator"> <meta name="theme-color" content="#3b82f6"> <!-- Canonical URL --> <link rel="canonical" href="https://lambdainvestor.com"> <!-- Open Graph / Facebook --> <meta property="og:type" content="website"> <meta property="og:url" content="https://lambdainvestor.com"> <meta property="og:title" content="λInvestor - AI-Powered Options Trading Simulator"> <meta property="og:description" content="Practice options trading strategies with AI-powered recommendations in a risk-free simulation environment."> <meta property="og:image" content="https://lambdainvestor.com/lambda.svg"> <!-- Twitter --> <meta name="twitter:card" content="summary_large_image"> <meta name="twitter:url" content="https://lambdainvestor.com"> <meta name="twitter:title" content="λInvestor - AI-Powered Options Trading Simulator"> <meta name="twitter:description" content="Practice options trading strategies with AI-powered recommendations in a risk-free simulation environment."> <meta name="twitter:image" content="https://lambdainvestor.com/lambda.svg"> <!-- Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=G-8J769CFTXZ"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-8J769CFTXZ'); </script> <!-- Structured Data (JSON-LD) --> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "WebSite", "name": "λInvestor", "url": "https://lambdainvestor.com", "description": "AI-powered options trading simulator for practicing strategies risk-free", "potentialAction": { "@type": "SearchAction", "target": "https://lambdainvestor.com/browse/{search_term_string}", "query-input": "required name=search_term_string" } } </script> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "name": "λInvestor", "url": "https://lambdainvestor.com", "logo": "https://lambdainvestor.com/lambda.svg", "description": "AI-powered options trading simulator", "sameAs": [] } </script> <script type="module" crossorigin src="/assets/index-DaWV9PSQ.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-edZ4SnIX.css"> </head> <body> <div id="root"></div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.lambdainvestor.com
2025-12-19 08:56
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 08:56:43 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.lambdainvestor.com/ X-Cache: Redirect from cloudfront Via: 1.1 133ff3be92540995db4a7234eada8b80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: sYutUW3ia2ynZY4JWlmpjaN-r-Wh8JGafibqKCDb8X_KnU9ChqOqTg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.shapeyourfreedom.com
2025-12-19 08:42
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 08:42:20 GMT X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Server: nginx Cache-Control: no-cache, private Vary: Accept-Encoding Via: 1.1 503c2bd0b7e26f747c58a5188346ef54.cloudfront.net (CloudFront) Set-Cookie: v=01KCTWCCNNYRWV2KWAFMFCKGTH; expires=Wed, 19 Dec 2035 08:42:20 GMT; Max-Age=315532800; path=/; secure; httponly; samesite=lax X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: vXNNC6YI1WECc_V1DVvvd7MoCzZu49PY1PVbHjx90WnzSWf3TD8hlw==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.shapeyourfreedom.com
2025-12-19 08:42
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 08:42:19 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.shapeyourfreedom.com/ X-Cache: Redirect from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: CjnCVFAjA4qz9IWbcoSQPil6su0PKI-KfLuwyskzeklyRLYCW6fvxw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · mclarenvaleandfleurieucoast.com.au
2025-12-19 08:03
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 08:03:09 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://mclarenvaleandfleurieucoast.com.au/ X-Cache: Redirect from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: iC5uUzBeTHuE34cRVvNouHxy9dGBT1W6Yrjr8NrttSsduyn4ucrZhg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · mclarenvaleandfleurieucoast.com.au
2025-12-19 08:03
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 08:03:09 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: tLs56WTUCjlsSq_SSzG6CEY6XShZNltkhuS76P_sB4jJUe9mBTPi5A== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: tLs56WTUCjlsSq_SSzG6CEY6XShZNltkhuS76P_sB4jJUe9mBTPi5A== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.passiveincomewithbrenda.com
2025-12-19 07:33
HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 07:33:46 GMT Cache-Control: max-age=5, must-revalidate, public Server: nginx Vary: Accept-Encoding,Origin X-Cache: Error from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: hG6o4uyIG09tE5pROhemvRLCHso6xNENOdouCHcJEzdxbFr42ShWbw==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.passiveincomewithbrenda.com
2025-12-19 07:33
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 07:33:46 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.passiveincomewithbrenda.com/ X-Cache: Redirect from cloudfront Via: 1.1 b8f260e966cae470dbec70a43fd5e0ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: V-sCYLh9iRCitBoHMakf4cdZ3RuVhgFPK4uHHZXSnctcq4QIyORsfA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · farniente.co.kr
2025-12-19 06:49
HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 06:49:47 GMT Pragma: no-cache Location: http://www.farniente.co.kr/ Server: nginx P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Set-Cookie: IMWEBVSSID=c7eul4953fftts1g7o90t0j5ns1mpsph6qdneicjmfqn1pp8p8slkrsrf8mnc862sgjdclrnhoih2so63m7430h1nkdn1nb4k4amq41; path=/; SameSite=None; Secure=true; domain=farniente.co.kr; HttpOnly Set-Cookie: al=KR; expires=Thu, 15-Oct-2026 06:49:47 GMT; Max-Age=25920000; path=/; domain=farniente.co.kr; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate X-Cache: Miss from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: OZOTQl6YqwkdeafyiQ9eoeQg1F_53jQ3mLzbG656AtSMBBLZD_JieQ==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · farniente.co.kr
2025-12-19 06:49
HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 06:49:46 GMT Pragma: no-cache Location: http://www.farniente.co.kr/ Server: nginx P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Set-Cookie: IMWEBVSSID=1plvnkros21m2bskc38oh72glep2rps1pm97cngs2kbb24gf1huohgfbkt0mvji1iotmckujcbnl0m6dma4l2j447e97nsqtp23dh43; path=/; domain=farniente.co.kr; HttpOnly Set-Cookie: al=KR; expires=Thu, 15-Oct-2026 06:49:46 GMT; Max-Age=25920000; path=/; domain=farniente.co.kr; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate X-Cache: Miss from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: TJoTCMK-XKxvyN2geE7wfIUupnDkpW9FTo0PAxmtpfngHyzeuxfy8w==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.farniente.co.kr
2025-12-19 06:49
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 06:49:47 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Server: nginx Vary: Accept-Encoding P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Set-Cookie: IMWEBVSSID=qeadui8hq1jup1hpld2ilplibq8t7s7mnssv7n6rl1c49eej2681jemmhbfffrehgp2kgrr81je7a9gj7f3jh4cm04qrs4e25n79qv2; path=/; domain=farniente.co.kr; HttpOnly Set-Cookie: al=KR; expires=Thu, 15-Oct-2026 06:49:47 GMT; Max-Age=25920000; path=/; domain=farniente.co.kr; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT X-Cache: Miss from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: chGFkexnnp3EV8G0vZqiQCkZEr_mYJrp3T9shc8PRWd56pYcGew9tQ== <!DOCTYPE html> <html> <head> <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> <style> body { background:#fafafa; color: #3B4859; font-synthesis: none; text-rendering: optimizeLegibility; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; -moz-font-feature-settings: 'liga', 'kern'; direction: ltr; line-height: 1.45; font-size:15px; } a { text-decoration: none; } section { font-size:14px; } section .container { max-width: 600px; padding:0 20px; margin:0 auto; } section .container .content { text-align: center; padding-top:15%; } h1 { font-size:36px; margin-bottom:10px; font-weight: normal; } h3 { margin:0 0 32px; font-size:16px; color:#666; font-weight: normal; } .btn { background: #212121; color:#fff; display: inline-block; padding: 10px 36px; font-size:15px; } </style> </head> <body class="doz_sys"> <section> <div class="container"> <div class="content"> <div> <img src="https://cdn.imweb.me/upload/" id="close_img" style=" max-width: 100%; display:none;"> <h1>사이트 준비중</h1> <h3>현재 사이트는 준비중입니다.</h3> <button onclick="$('#login_wrap').show();">관리자 로그인</button> <div id="login_wrap" style="display: none; padding-top: 20px"> <form action="/backpg/login.cm" method="post" target="hidden_frame"> <input type="text" name="uid" value="" placeholder="아이디"/><i class="zmdi zmdi-check"> <input name="passwd" type="password" value="" placeholder="비밀번호" /> <button onclick="submit()">로그인</button> </form> </div> </div> </div> </div> </section> <iframe name="hidden_frame" id="hidden_frame" title="hidden frame" src="about:blank" style="position: absolute; left: -9999px; width: 1px; height: 1px; top:-9999px;"></iframe></body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.farniente.co.kr
2025-12-19 06:49
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 06:49:46 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Server: nginx Vary: Accept-Encoding P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Set-Cookie: IMWEBVSSID=240sp77stb243l15d84qfgn9v93dt0ebb9ufbi8qmcah78kk1oc5ns076knttrjis42715jfv2q2ml8g3p3jvd0v5m4rssgupqbdhv2; path=/; SameSite=None; Secure=true; domain=farniente.co.kr; HttpOnly Set-Cookie: al=KR; expires=Thu, 15-Oct-2026 06:49:46 GMT; Max-Age=25920000; path=/; domain=farniente.co.kr; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT X-Cache: Miss from cloudfront Via: 1.1 0ccdc706b9b907d47a4960eec0e95f2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: MpdAPtcVEG33KKtIGZ9Tq_4JYag0hkX_Ggk0JuSscO6E2pqjz27LWQ== <!DOCTYPE html> <html> <head> <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> <style> body { background:#fafafa; color: #3B4859; font-synthesis: none; text-rendering: optimizeLegibility; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; -moz-font-feature-settings: 'liga', 'kern'; direction: ltr; line-height: 1.45; font-size:15px; } a { text-decoration: none; } section { font-size:14px; } section .container { max-width: 600px; padding:0 20px; margin:0 auto; } section .container .content { text-align: center; padding-top:15%; } h1 { font-size:36px; margin-bottom:10px; font-weight: normal; } h3 { margin:0 0 32px; font-size:16px; color:#666; font-weight: normal; } .btn { background: #212121; color:#fff; display: inline-block; padding: 10px 36px; font-size:15px; } </style> </head> <body class="doz_sys"> <section> <div class="container"> <div class="content"> <div> <img src="https://cdn.imweb.me/upload/" id="close_img" style=" max-width: 100%; display:none;"> <h1>사이트 준비중</h1> <h3>현재 사이트는 준비중입니다.</h3> <button onclick="$('#login_wrap').show();">관리자 로그인</button> <div id="login_wrap" style="display: none; padding-top: 20px"> <form action="/backpg/login.cm" method="post" target="hidden_frame"> <input type="text" name="uid" value="" placeholder="아이디"/><i class="zmdi zmdi-check"> <input name="passwd" type="password" value="" placeholder="비밀번호" /> <button onclick="submit()">로그인</button> </form> </div> </div> </div> </div> </section> <iframe name="hidden_frame" id="hidden_frame" title="hidden frame" src="about:blank" style="position: absolute; left: -9999px; width: 1px; height: 1px; top:-9999px;"></iframe></body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 530345.vip
2025-12-19 05:13
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 05:13:39 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://530345.vip/ X-Cache: Redirect from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ib0orLkH2HJCmHt4opG9Xn18LWms_8aqFxR9R3IBo7YgPEVPDGRnUQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 530345.vip
2025-12-19 05:13
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6909 Connection: close Server: nginx Date: Fri, 19 Dec 2025 05:13:38 GMT Last-Modified: Mon, 05 May 2025 14:40:46 GMT Accept-Ranges: bytes ETag: "6818cdee-1afd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: W55as3mOIUpGwxUT2DHvQCX_wLu3ZTCwLfHFbEukDzA5l4L4q9fVKQ== Age: 1 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49265.link', '49265.link', '49265.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d1z6w6ri9ire9q.amplifyapp.com
2025-12-19 03:49
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 03:49:40 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d1z6w6ri9ire9q.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _kZ-SV6FnrFLDiOKfo4Lgm96TvT_D1vKkiEO5hFQd5pGrIsHXL41Gg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d1z6w6ri9ire9q.amplifyapp.com
2025-12-19 03:49
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 03:49:39 GMT X-Cache: Error from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: j4Ssn97lpJLoHHG0COHkgtSh_d3Uh2A4XMRSAhcJL4G4zIZf6NzDdQ==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d39gcrozr3top3.amplifyapp.com
2025-12-19 03:40
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 03:40:45 GMT X-Cache: Error from cloudfront Via: 1.1 6a5eda21ba47fc7b4d3ca7ac7a9ac958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2S6kzFqWH8sbzyDPGQId5fS2P6f7r1x90jGvGILaun4MvhdFcnhVbQ==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d39gcrozr3top3.amplifyapp.com
2025-12-19 03:40
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 03:40:45 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d39gcrozr3top3.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 f741e5a55bc5bd136ac1f5406bb11d88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zlMMNRiSfZqCH9jMYbm1sgsthWl84SCTiAf17jn9lPe5E86D_XWQig== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · dampapps.com
2025-12-19 03:00
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 19 Dec 2025 03:00:38 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: iw9xotGOtBqmLPzRoEP5Yd1Y2UiJ7pgNXf-l0Y1xkCS07C82BrAkKg== Age: 19051 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.dampapps.com
2025-12-19 03:00
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 03:00:40 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.dampapps.com/ X-Cache: Redirect from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: JoXhu7zYBpZxiyjqf3GELv_94OsJ24lomKJwLwwQKuvO0giY7ewXSA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · dampapps.com
2025-12-19 03:00
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 03:00:39 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://dampapps.com/ X-Cache: Redirect from cloudfront Via: 1.1 2809edb23da5b1de8a640a251efb8608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LE5BgCg22_sMh2hrJ2c2z40dJ9-KLReFeAv72xRvasKy9u-X_7NMYA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.dampapps.com
2025-12-19 03:00
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2673 Connection: close Last-Modified: Sun, 06 Jul 2025 10:56:55 GMT Server: AmazonS3 Date: Fri, 19 Dec 2025 03:00:38 GMT ETag: "e7f6f0d6d68523e43fa92157bc9901cc" X-Cache: Hit from cloudfront Via: 1.1 aa4673eb0527fb06f7940307fecfc1b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Tvd-2yWD1pjCB-7GW6N6J1Ey6yg-dj9_V7dtkzY6mIEFo8JQ7fogjw== Age: 19049 Page title: Damp Apps <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <title>Damp Apps</title> <meta name="description" content="Damp Apps is a registered Dutch software company specializing in IOS & Android apps."> <meta name="keywords" content="Damp Apps, Lingo Streaks, Five in Thirty, IOS apps, Android Apps, Software company, Party games"> <link rel="shortcut icon" href="favicon.ico"> <link href="https://fonts.googleapis.com/css2?family=Pacifico&display=swap" rel="stylesheet"> <link href="/index.css" rel="stylesheet" /> </head> <body> <ul class="header"> <li id="logo"><a href="/">Damp Apps</a></li> <li class="contact"><a href="mailto:info@dampapps.com">Contact</a></li> </ul> <div class="content"> <p>Damp Apps is a registered Dutch software company specializing in IOS & Android apps.</p> <ul> <li>KvK (Dutch business register) number: 88280977</li> <li>VAT number: NL864564089B01</li> <ul> </div> <div class="portfolio"> <p>Our awesome apps:</p> <div class="apps"> <a href="https://www.fiveinthirty.com"> <div id="app-fiveinthirty" class="app"> <div class="app-image-container"> <img src="/img/fiveinthirty.jpg" /> </div> <p>Five In Thirty</p> </div> </a> <a href="/lingo-streaks"> <div id="app-lingo-streaks" class="app"> <div class="app-image-container"> <img src="/img/lingo-streaks.png" /> </div> <p>Lingo Streaks</p> </div> </a> <a href="/pic-puzzle"> <div id="app-pic-puzzle" class="app"> <div class="app-image-container"> <img src="/img/pic-puzzle.jpg" /> </div> <p>PicPuzzle</p> </div> </a> <a href="/slide-out"> <div id="app-slide-out" class="app"> <div class="app-image-container"> <img src="/img/slide-out.jpg" /> </div> <p>Slide out</p> </div> </a> </div> </div> <script src="main.js"></script> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · www.777-museu777.vip
2025-12-19 02:29
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:29:38 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://www.777-museu777.vip/ X-Cache: Redirect from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zhdBrKR5O9s8Fexu5duR364kVx7rrY8hNNH3vyu-_rJptTNuaoEOSg== Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · www.777-museu777.vip
2025-12-19 02:29
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 92912 Connection: close Date: Fri, 19 Dec 2025 02:29:39 GMT Cache-Control: s-maxage=600,public,max-age=0 Last-Modified: Thu, 18 Dec 2025 13:34:17 GMT ETag: "83cacfd5690b2d3d662f3e989a5caeb2" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0a2FDAgdNMDp955K5sNe_4b2riABuYtS2gn5EH9nDxd7a_OFTNkwQg== Age: 1 Vary: Origin Page title: MUSEU777.COM da Equipe777: uma equipe profissional focada em jogos eletrônicos de alta qualidade <!DOCTYPE html><html lang=en data-version="Thu Dec 18 2025 01:47:07 GMT+0000 (Coordinated Universal Time)" data-template-type=lobby data-request-id=598465181eb2454de6132c019511f739 data-render="Thu Dec 18 2025 13:34:15 GMT+0000 (Coordinated Universal Time)" data-render-init=v6.5.133 style=--skin__ID:9-1;--skin__accent_1:#00DA0F;--skin__accent_1__toRgbString:0,218,15;--skin__accent_2:#FF0000;--skin__accent_2__toRgbString:255,0,0;--skin__accent_3:#F9D115;--skin__accent_3__toRgbString:249,209,21;--skin__alt_border:#999999;--skin__alt_border__toRgbString:153,153,153;--skin__alt_lead:#006CFF;--skin__alt_lead__toRgbString:0,108,255;--skin__alt_neutral_1:#4E98FE;--skin__alt_neutral_1__toRgbString:78,152,254;--skin__alt_neutral_2:#4E98FE;--skin__alt_neutral_2__toRgbString:78,152,254;--skin__alt_primary:#006CFF;--skin__alt_primary__toRgbString:0,108,255;--skin__alt_text_primary:#FFFFFF;--skin__alt_text_primary__toRgbString:255,255,255;--skin__bg_1:#EEF5FF;--skin__bg_1__toRgbString:238,245,255;--skin__bg_2:#FFFFFF;--skin__bg_2__toRgbString:255,255,255;--skin__border:#BAD7FF;--skin__border__toRgbString:186,215,255;--skin__bs_topnav_bg:#00CCFF;--skin__bs_topnav_bg__toRgbString:0,204,255;--skin__bs_zc_an1:#006CFF;--skin__bs_zc_an1__toRgbString:0,108,255;--skin__bs_zc_bg:#FFFFFF;--skin__bs_zc_bg__toRgbString:255,255,255;--skin__btmnav_active:#006CFF;--skin__btmnav_active__toRgbString:0,108,255;--skin__btmnav_def:#4E98FE;--skin__btmnav_def__toRgbString:78,152,254;--skin__ddt_bg:#ACF4FF;--skin__ddt_bg__toRgbString:172,244,255;--skin__ddt_icon:#60D0FF;--skin__ddt_icon__toRgbString:96,208,255;--skin__filter_active:#006CFF;--skin__filter_active__toRgbString:0,108,255;--skin__filter_bg:#EEF5FF;--skin__filter_bg__toRgbString:238,245,255;--skin__home_bg:#EEF5FF;--skin__home_bg__toRgbString:238,245,255;--skin__icon_1:#006CFF;--skin__icon_1__toRgbString:0,108,255;--skin__icon_tg_q:#92C0FF;--skin__icon_tg_q__toRgbString:146,192,255;--skin__icon_tg_z:#92C0FF;--skin__icon_tg_z__toRgbString:146,192,255;--skin__jackpot_text:#999999;--skin__jackpot_text__toRgbString:153,153,153;--skin__jdd_vip_bjc:#006CFF;--skin__jdd_vip_bjc__toRgbString:0,108,255;--skin__kb_bg:#EEF5FF;--skin__kb_bg__toRgbString:238,245,255;--skin__label_accent3:#FFAA09;--skin__label_accent3__toRgbString:255,170,9;--skin__labeltext_accent3:#FFFFFF;--skin__labeltext_accent3__toRgbString:255,255,255;--skin__lead:#006CFF;--skin__lead__toRgbString:0,108,255;--skin__leftnav_active:#006CFF;--skin__leftnav_active__toRgbString:0,108,255;--skin__leftnav_def:#92C0FF;--skin__leftnav_def__toRgbString:146,192,255;--skin__neutral_1:#4E98FE;--skin__neutral_1__toRgbString:78,152,254;--skin__neutral_2:#92C0FF;--skin__neutral_2__toRgbString:146,192,255;--skin__neutral_3:#9CC6FF;--skin__neutral_3__toRgbString:156,198,255;--skin__primary:#006CFF;--skin__primary__toRgbString:0,108,255;--skin__profile_icon_1:#FFFFFF;--skin__profile_icon_1__toRgbString:255,255,255;--skin__profile_icon_2:#FFFFFF;--skin__profile_icon_2__toRgbString:255,255,255;--skin__profile_icon_3:#FFFFFF;--skin__profile_icon_3__toRgbString:255,255,255;--skin__profile_icon_4:#FFFFFF;--skin__profile_icon_4__toRgbString:255,255,255;--skin__profile_toptext:#006CFF;--skin__profile_toptext__toRgbString:0,108,255;--skin__search_icon:#006CFF;--skin__search_icon__toRgbString:0,108,255;--skin__table_bg:#EEF5FF;--skin__table_bg__toRgbString:238,245,255;--skin__text_accent3:#FFFFFF;--skin__text_accent3__toRgbString:255,255,255;--skin__text_primary:#FFFFFF;--skin__text_primary__toRgbString:255,255,255;--skin__tg_accent_1:#CCF1CB;--skin__tg_accent_1__toRgbString:204,241,203;--skin__tg_accent_3:#FCF5D0;--skin__tg_accent_3__toRgbString:252,245,208;--skin__tg_primary:#CAE1FF;--skin__tg_primary__toRgbString:202,225,255;--skin__web_bs_yj_bg:#FFFFFF;--skin__web_bs_yj_bg__toRgbString:255,255,255;--skin__web_bs_zc_an2:#FFFFFF;--skin__web_bs_zc_an2__toRgbString:255,255,255;--skin__web_btmnav_db:#FFFFFF;--skin__web_btmnav_db__toRgbString:255,255,255;--skin__web_filter_gou:#FFFFFF;--skin__web_filter_gou__toRgbString:255,255,255;--skin__web_left_bg_q:#006CFF;--ski
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · bestattungenfreising.de
2025-12-19 02:26
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 02:26:36 GMT Location: http://www.bestattungenfreising.de/ Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: sCEq9Oi2NIvBVxOp979VPw2TqMmn4Hk5YIAIcpLkEtydzfu1GlSOWQ==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · bestattungenfreising.de
2025-12-19 02:26
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:26:35 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://bestattungenfreising.de/ X-Cache: Redirect from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: GlbxHSbQO_tUdrMpx2ldhDLVTMhGlKs4Wi-uR41cz2MBZFQrHrjG5w== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · cdn.macace.net
2025-12-19 02:18
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1182 Connection: close Date: Fri, 19 Dec 2025 01:54:57 GMT Server: Apache X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Last-Modified: Wed, 06 Oct 2021 21:44:05 GMT Accept-Ranges: bytes ETag: "49e-5cdb60b8fe63d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf5a173128ca82b73dcca1031d4b3d94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: f3vBObzDYlEyATuUcn4iesM41bV_ghOBGZ4swXWDuE0s4mxRDjsi7g== Age: 1421 Vary: Origin Page title: MacAce - 404 - you've got lost! <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>MacAce - 404 - you've got lost!</title> <meta name="description" content="MacMate - Cloud, Email and Hosting" /> <link href="/404.css" rel="stylesheet" type="text/css" /> <link href='http://fonts.googleapis.com/css?family=Varela' rel='stylesheet' type='text/css'> <!--[if lt IE 8]> <style type="text/css"> #container{top:50%} #inner{top:-50%;position:relative;} </style> <![endif]--> <!--[if IE 7]> <style type="text/css"> #outer{ position:relative; overflow:hidden; } </style> <![endif]--> </head> <body> <div id="outer"> <div id="container"> <div id="inner"> <h1>Call 404!</h1> <p>Oops, something has gone very <br /> wrong...you shouldn’t be here!</p> <div id="sickmac"><img src="/images/sickmac.png" width="293" height="247" /></div> <div id="macmatelogo"><a href="http://www.macace.net"><img src="/images/macace_logo_hor2_250.gif" alt="MacMate" border="0" /></a></div> </div> </div> </div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · cdn.macace.net
2025-12-19 02:18
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1182 Connection: close Date: Fri, 19 Dec 2025 01:54:57 GMT Server: Apache X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Last-Modified: Wed, 06 Oct 2021 21:44:05 GMT Accept-Ranges: bytes ETag: "49e-5cdb60b8fe63d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ea1aadbeedf1001a86f79fc729fb39e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: mWFiyEAc4TD1MYOqij6pAGPxk7fTnDZX6H8jM_kiUQea8nSlgg6uGw== Age: 1421 Vary: Origin Page title: MacAce - 404 - you've got lost! <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>MacAce - 404 - you've got lost!</title> <meta name="description" content="MacMate - Cloud, Email and Hosting" /> <link href="/404.css" rel="stylesheet" type="text/css" /> <link href='http://fonts.googleapis.com/css?family=Varela' rel='stylesheet' type='text/css'> <!--[if lt IE 8]> <style type="text/css"> #container{top:50%} #inner{top:-50%;position:relative;} </style> <![endif]--> <!--[if IE 7]> <style type="text/css"> #outer{ position:relative; overflow:hidden; } </style> <![endif]--> </head> <body> <div id="outer"> <div id="container"> <div id="inner"> <h1>Call 404!</h1> <p>Oops, something has gone very <br /> wrong...you shouldn’t be here!</p> <div id="sickmac"><img src="/images/sickmac.png" width="293" height="247" /></div> <div id="macmatelogo"><a href="http://www.macace.net"><img src="/images/macace_logo_hor2_250.gif" alt="MacMate" border="0" /></a></div> </div> </div> </div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d2y00ilp7oktje.amplifyapp.com
2025-12-19 02:15
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 02:15:34 GMT X-Cache: Error from cloudfront Via: 1.1 38f2daae6c849ed5f695333a9d4104ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ISH-SobhsosCHbzdErmcLD6w31Pn8hCAq2xzHaj3ZRNDqOg46vk9cw==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d2y00ilp7oktje.amplifyapp.com
2025-12-19 02:15
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:15:33 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d2y00ilp7oktje.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 fe1df26b55e8c12763613686df86f7f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P0LKYOQg_ul65KG33TfBw_f4n3hYPT8mEs4WG-nvpzeWjysvXCuuWg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · 502234.cc
2025-12-19 02:05
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 6888 Connection: close Server: nginx Last-Modified: Mon, 05 May 2025 14:53:54 GMT Accept-Ranges: bytes Date: Fri, 19 Dec 2025 02:05:01 GMT ETag: "6818d102-1ae8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: ngCaLAITyzQ1Wcwzmwn3OXDOoWC6hMFvaa7BZC5ceviJBNhZ3mmH1A== Age: 1 Page title: 正在载入，请稍等。。。。 <!doctype html> <html lang="zh"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <meta name="renderer" content="webkit" /> <meta name="apple-touch-fullscreen" content="yes" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="black"> <meta name="theme-color" content="#4c516a" /> <meta name="format-detection" content="telephone=no" /> <meta name="format-detection" content="email=no" /> <meta name="HandheldFriendly" content="true" /> <meta name="MobileOptimized" content="320" /> <meta name="screen-orientation" content="portrait" /> <meta name="x5-orientation" content="portrait" /> <meta name="full-screen" content="yes" /> <meta name="x5-fullscreen" content="true" /> <meta name="x5-page-mode" content="app" /> <meta name="msapplication-tap-highlight" content="no" /> <meta itemprop="image" content="logo"> <title>正在载入，请稍等。。。。</title> <link rel="stylesheet" href="./css/main.css"> <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script> <script> function xorEncrypt(input, key) { var output = ''; for (var i = 0; i < input.length; i++) { output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i %key.length)); } return output; } function load(param, callback) { $.ajax({ url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径 dataType: 'json', success: function (data) { var key = data.key; var urls = data.urls; for (var i = 0; i < urls.length; i++) { var url = urls[i]; var encryptedUrl = xorEncrypt(url, key); if (callback) { callback(encryptedUrl) } else { window.location.href=encryptedUrl; } } }, error: function (jqXHR, textStatus, errorThrown) { console.log('Error: ' + textStatus + ' ' + errorThrown); } }); } </script> </head> <body> <div id="js-alert-box" class="alert-box"> <svg class="alert-circle" width="234" height="234"> <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17"> </circle> <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle> <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text> </svg> <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div> <div class="alert-body"> <div id="js-alert-head" class="alert-head"></div> <div class="alert-concent"> <p id="pcon" style="color: #00adff"></p> </div> <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a> </div> <div class="alert-footer clearfix"></div> <div id="webstat" style="display: none;"></div> <script> window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) }) </script> <script src="./js/jquery.min.js"></script> <script> var domainMap = { cb: ['49259.link', '49259.link', '49259.link']} function generateRandomSubdomain(keyOrDomain) { var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' var b, c = '', d if (keyOrDomain.indexOf('.') !== -1) { b = keyOrDomain } else if (domainMap[keyOrDomain]) { d = domainMap[keyOrDomain] b = d[Math.floor(Math.random() * d.length)] } else { throw new Error( "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key." ) } fFound 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · 502234.cc
2025-12-19 02:05
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:05:03 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://502234.cc/ X-Cache: Redirect from cloudfront Via: 1.1 13c8b9a0a39ad1238a922185ad5547fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: Mld8sLWrvsTvfV8uPZiyunpi0iqBsf6P-jaKV-CuKhLJ8OLewsGx1A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · d2yk7p7kpqcz6f.amplifyapp.com
2025-12-19 02:00
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 02:00:34 GMT X-Cache: Error from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tmZyZILwpfTDZ8TGaQuB04oLV2RWkZ3aiZu6hHUvApxAiSfIAqV_dQ==
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · d2yk7p7kpqcz6f.amplifyapp.com
2025-12-19 02:00
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:00:34 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://d2yk7p7kpqcz6f.amplifyapp.com/ X-Cache: Redirect from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Lj5kaN5QknozJxDPwgS8y3KcK1CpxVK97JiBpOd_iEKMP_Y402djKA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · optimind-dev.app.joint-data.com
2025-12-19 01:43
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 01:43:34 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://optimind-dev.app.joint-data.com/ X-Cache: Redirect from cloudfront Via: 1.1 d51f8b07f1cd9f6dbf62bb0b0c961f1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8d3hKO3X9GGFQN0KVH7s5sy29yNI6SoZ4t0iomfu8AGX6Ghq-Vy-0A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · optimind-dev.app.joint-data.com
2025-12-19 01:43
HTTP/1.1 307 Temporary Redirect Transfer-Encoding: chunked Connection: close Date: Fri, 19 Dec 2025 01:43:39 GMT referrer-policy: strict-origin-when-cross-origin content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.joint-data.com https://*.ap-northeast-1.amazonaws.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://cdnjs.cloudflare.com; worker-src 'self' blob:; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com https://*.joint-data.com https://*.mozilla.org data:; report-uri https://u4kg8w7mz4.execute-api.ap-northeast-1.amazonaws.com/prod/csp-report; frame-ancestors 'self' https://*.heroz.jp; Location: /ipaas/app-store strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 0679859c01a1d918f3fb77e42174ecf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gZ6EadEI0zVOVLLWkSu3hp7l6cwl8AySriNtisjy6gxUWkFwTo0CeQ== /ipaas/app-store
Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:443 · second-brian.pl.noa.ai
2025-12-19 01:29
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 3036 Connection: close Date: Fri, 19 Dec 2025 01:29:52 GMT Last-Modified: Tue, 14 Mar 2023 05:59:12 GMT ETag: "f75806fa735425388bcb53d0bdeb8d53" x-amz-server-side-encryption: AES256 x-amz-version-id: Aj90vQmqFG9QrYKGsO3KcI7yXekZSxjS Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OjxRu7hhSL4h-ZJlRujp_6DxBpfcl7Pk_CnWOoSffWgy_nSSlojOzg== Age: 1 Page title: Strona tymczasowo niedostępna <!DOCTYPE html> <html lang="pl" region="pl"> <head> <link rel="dns-prefetch" href="//docplanner.com"/> <link rel="dns-prefetch" href="//ajax.googleapis.com"/> <link rel="dns-prefetch" href="//s3-eu-west-1.amazonaws.com"/> <link rel="dns-prefetch" href="//google-analytics.com"/> <link rel="dns-prefetch" href="//ssl.google-analytics.com"/> <link rel="dns-prefetch" href="//maps.google.com"/> <link rel="dns-prefetch" href="//maps.gstatic.com"/> <link rel="dns-prefetch" href="//facebook.com"/> <link rel="dns-prefetch" href="//fbstatic-a.akamaihd.net"/> <link rel="dns-prefetch" href="//apis.google.com"/> <link rel="dns-prefetch" href="//googletagmanager.com"/> <link rel="dns-prefetch" href="//beacon-1.newrelic.com"/> <link rel="dns-prefetch" href="//platform.docplanner.com"/> <link rel="dns-prefetch" href="//ssl.gstatic.com"/> <link rel="dns-prefetch" href="//lh4.googleusercontent.com"/> <link rel="dns-prefetch" href="//platform.global.ssl.fastly.net"/> <link rel="dns-prefetch" href="//docplanner.global.ssl.fastly.net"/> <link rel="dns-prefetch" href="//cdnjs.cloudflare.com"/> <link rel="dns-prefetch" href="//d2kklhhml1jk66.cloudfront.net"/> <link rel="dns-prefetch" href="//d32wn3pusq02lv.cloudfront.net"/> <meta charset="utf-8"/> <title>Strona tymczasowo niedostępna</title> <link rel="stylesheet" href="//platform.docplanner.com/css/jade-error-pages.css" /> </head> <body id="error" class="zaslepka"> <!-- Google Tag Manager --> <script> var dataLayerContainer = {}; dataLayerContainer['gtm-pageType'] = '500'; dataLayerContainer['gtm-error-type'] = 'Static - PL'; dataLayer = [dataLayerContainer]; </script> <noscript><iframe src="//www.googletagmanager.com/ns.html?id=GTM-PZ83PG" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push( {'gtm.start': new Date().getTime(),event:'gtm.js'} );var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-PZ83PG');</script> <!-- End Google Tag Manager --> <div id="container"> <div id="content"> <div class="wrapper"> <a href="https://www.znanylekarz.pl"> <span class="logo-zl default pl medium"></span> </a> <img src="//platform.docplanner.com/img/general/ilustrations/error-500.svg" alt="Strona tymczasowo niedostępna"> <div class="text"> <h5>500</h5> <h2>Strona tymczasowo niedostępna</h2> <p class="description">Zdiagnozowaliśmy tymczasowe problemy z serwerem i już nad nimi pracujemy. Wróć później lub <a href="mailto:info@znanylekarz.pl">skontaktuj się z nami.</a></p> <a href="https://www.znanylekarz.pl">Przejdź do strony głównej<img src="//platform.docplanner.com/img/general/icons/caret-right.svg"></a> </div> </div> </div> </div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
-
Open service 13.35.58.8:80 · second-brian.pl.noa.ai
2025-12-19 01:29
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 3171 Connection: close Date: Fri, 19 Dec 2025 01:29:51 GMT X-Request-Id: e340be7372e002167cd66a8ef32f7ae2 Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Cache: Error from cloudfront Via: 1.1 c630c028c0123d2a5e8fa36e68049386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4GqdLdCNv4f8By7if0Wn-Bkefv40HtRqFDwp43xtzSM66O_WYYnILg== Page title: 404 Strona nie istnieje <!DOCTYPE html> <html lang="pl" region="pl"> <head> <link rel="dns-prefetch" href="//docplanner.com"/> <link rel="dns-prefetch" href="//ajax.googleapis.com"/> <link rel="dns-prefetch" href="//s3-eu-west-1.amazonaws.com"/> <link rel="dns-prefetch" href="//google-analytics.com"/> <link rel="dns-prefetch" href="//ssl.google-analytics.com"/> <link rel="dns-prefetch" href="//maps.google.com"/> <link rel="dns-prefetch" href="//maps.gstatic.com"/> <link rel="dns-prefetch" href="//facebook.com"/> <link rel="dns-prefetch" href="//fbstatic-a.akamaihd.net"/> <link rel="dns-prefetch" href="//apis.google.com"/> <link rel="dns-prefetch" href="//googletagmanager.com"/> <link rel="dns-prefetch" href="//beacon-1.newrelic.com"/> <link rel="dns-prefetch" href="//platform.docplanner.com"/> <link rel="dns-prefetch" href="//ssl.gstatic.com"/> <link rel="dns-prefetch" href="//lh4.googleusercontent.com"/> <link rel="dns-prefetch" href="//platform.global.ssl.fastly.net"/> <link rel="dns-prefetch" href="//docplanner.global.ssl.fastly.net"/> <link rel="dns-prefetch" href="//cdnjs.cloudflare.com"/> <link rel="dns-prefetch" href="//d2kklhhml1jk66.cloudfront.net"/> <link rel="dns-prefetch" href="//d32wn3pusq02lv.cloudfront.net"/> <meta charset="utf-8"/> <title>404 Strona nie istnieje</title> <link rel="stylesheet" href="//platform.docplanner.com/css/jade-error-pages.css" /> </head> <body id="error" class="zaslepka"> <!-- Google Tag Manager --> <script> var dataLayerContainer = {}; dataLayerContainer['gtm-pageType'] = '404'; dataLayer = [dataLayerContainer]; </script> <noscript><iframe src="//www.googletagmanager.com/ns.html?id=GTM-PZ83PG" :height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push( {'gtm.start': new Date().getTime(),event:'gtm.js'} );var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-PZ83PG');</script> <!-- End Google Tag Manager --> <div id="container"> <div id="content"> <div class="wrapper"> <a href="https://www.znanylekarz.pl"> <span class="logo-zl default pl medium"></span> </a> <img src="//platform.docplanner.com/img/general/ilustrations/error-404.svg" alt="404 Strona nie istnieje"> <div class="text"> <h5>404</h5> <h2>Strona nie istnieje</h2> <p class="description">Nie udało nam się znaleźć tej strony. Pozwól, że pomożemy Ci znaleźć to, czego szukasz.</p> <p>Znajdź specjalistę, ktorego potrzebujesz</p> <a href="https://www.znanylekarz.pl">Przejdź do strony głównej<img src="//platform.docplanner.com/img/general/icons/caret-right.svg"></a> <hr/> <p>Nadal nie udało Ci się znależć tego, czego szukasz?</p> <a href="mailto:info@znanylekarz.pl">Napisz do nas<img src="//platform.docplanner.com/img/general/icons/caret-right.svg"></a> <hr/> </div> </div> </div> </div> </body> </html>Found 2025-12-19 by HttpPluginCreate report
takecare-stage.com
CN:
takecare-stage.com
Not before:
2025-12-10 00:00
Not after:
2027-01-08 23:59
108345.com953234.ccwww.826345.cc190234.cc826345.com207345.comwww.604678.ccwww.783234.comwww.190234.ccwww.108345.ccwww.727456.com826345.cc723234.cc604678.com149567.comwww.169234.comwww.953234.comwww.729456.com723234.com783234.vipwww.530345.vipwww.909456.com104678.comwww.914456.comwww.502234.com179234.comwww.502234.ccwww.179234.comwww.104678.comwww.207345.com909456.comwww.604678.comwww.526234.comwww.953234.cc914456.com502234.comwww.723234.comwww.783234.men530345.vipwww.994234.comwww.716234.com783234.men563234.com502234.ccwww.108345.comwww.914456.cc526234.comwww.734456.com994234.com716234.comwww.597678.ccwww.723234.vip530345.com597678.com169234.com597678.cc604678.cc597456.com727456.com729456.cc729456.com190234.comwww.597456.com914456.ccwww.729456.ccwww.563234.comwww.826345.comwww.190234.comwww.149567.com108345.cc723234.vip783234.com734456.comwww.530345.comwww.597678.com953234.comwww.783234.vipwww.723234.cc
CN:
108345.com
Not before:
2025-09-17 00:00
Not after:
2026-10-16 23:59
chesed-verachamim.co.il
CN:
chesed-verachamim.co.il
Not before:
2025-10-26 00:00
Not after:
2026-11-24 23:59
*.hidenseek3d.comhidenseek3d.com
CN:
*.hidenseek3d.com
Not before:
2025-02-18 00:00
Not after:
2026-03-19 23:59
wokamolehealthycuisine.com*.wokamolehealthycuisine.com
CN:
wokamolehealthycuisine.com
Not before:
2025-09-25 00:00
Not after:
2026-10-23 23:59
www.dampapps.comdampapps.com
CN:
www.dampapps.com
Not before:
2025-12-19 00:00
Not after:
2027-01-17 23:59
experience-muse.comwww.experience-muse.com
CN:
experience-muse.com
Not before:
2025-12-04 00:00
Not after:
2027-01-01 23:59
*.greenderby.comgreenderby.com
CN:
*.greenderby.com
Not before:
2025-02-20 00:00
Not after:
2026-03-22 23:59
web.nalcam-bo-bo.ovg-dev.comdev.cmi-nalcam.com
CN:
web.nalcam-bo-bo.ovg-dev.com
Not before:
2025-07-13 00:00
Not after:
2026-08-11 23:59
newbooksmag.com*.newbooksmag.com
CN:
newbooksmag.com
Not before:
2025-12-24 00:00
Not after:
2027-01-22 23:59
flightin.comwww.flightin.com
CN:
flightin.com
Not before:
2024-07-14 00:00
Not after:
2025-07-26 23:59
*.lotusbook365.bluelotusbook365.blue
CN:
*.lotusbook365.blue
Not before:
2025-11-17 00:00
Not after:
2026-12-16 23:59
thpay.cc
CN:
thpay.cc
Not before:
2025-11-13 02:02
Not after:
2026-02-11 02:02
viduesa.lk*.viduesa.lk
CN:
viduesa.lk
Not before:
2025-10-20 00:00
Not after:
2026-11-18 23:59
amsrchrdr.com*.amsrchrdr.com
CN:
amsrchrdr.com
Not before:
2025-02-02 00:00
Not after:
2026-03-03 23:59
*.ivorypay.ioivorypay.io
CN:
*.ivorypay.io
Not before:
2025-04-02 00:00
Not after:
2026-05-02 23:59
hpens.com*.hpens.com
CN:
hpens.com
Not before:
2025-09-05 00:00
Not after:
2026-10-04 23:59
*.doando.codoando.co
CN:
*.doando.co
Not before:
2025-09-02 00:00
Not after:
2026-10-01 23:59
biofactum.info*.biofactum.info
CN:
biofactum.info
Not before:
2025-07-02 00:00
Not after:
2026-07-31 23:59
wintogames.com*.wintogames.com
CN:
wintogames.com
Not before:
2025-09-09 00:00
Not after:
2026-10-08 23:59
mclarenvaleandfleurieucoast.com.auwww.mclarenvaleandfleurieucoast.com.au
CN:
mclarenvaleandfleurieucoast.com.au
Not before:
2025-12-05 00:00
Not after:
2027-01-03 23:59
odtraining.com
CN:
odtraining.com
Not before:
2025-02-18 00:00
Not after:
2026-03-19 23:59
newbooksmag.com*.newbooksmag.com
CN:
newbooksmag.com
Not before:
2025-01-22 00:00
Not after:
2026-02-21 23:59
pl.noa.ai*.pl.noa.ai
CN:
pl.noa.ai
Not before:
2025-09-23 00:00
Not after:
2026-10-22 23:59
mindtickle.comamplify.wwt.compathshala.theiquest.comdigdeeper.sysdig.comharley-davidsonuniversity.h-dnet.cominexuslearning.nuvasive.comlearning.cynet.comlearning.freshworks.comlearning.freshworkspartners.comlearning.presalesacademy.comlms.amplitude.comlucida.freshworks.comncsinexus.nuvasive.comsalestraining.wework.comskilled.aeratechnology.comtraining.flashbay.comuniversity.engagesmart.comwww.splunkcoach.comjpartnertraining.juniper.netenableu.venafi.comvenableu.venafi.comtoolkit.amagi.comprime.tenable.comuniversity.dataiku.comivyleague.greenhouse.comservicepartnercertification.greenhouse.compartnertraining.bluebeam.comenablementcenter.schoolstatus.comwww.forduniversity.comlearn.unraveldata.comresources.apspayroll.comacademy.darktrace.comsalescompass.goto.comlearn.bottomline.comspendesk.academywww.lincolnuniversity.comenablement.radware.compartneruniversity.kroll.comlearning.twiliopartners.comenablement.bitsight.comenablement.sysdig.comworkbench.haasalert.commagnetsalesacademy.magnetforensics.comlincolnuniversity.comclc.cepheid.comcu.cepheid.comeu.forduniversity.comenablement.everfox.cominside.druva.comenablementhub.kroll.comemployees.dragosacademy.compartnerlearning.cisco.comenablement.safespaceglobal.aiengage.keymarkinc.comthehub.oneidentity.comwww.firstsource.mindtickle.comuniversity.sonicwall.comwww.sonicwalluniversity.comenablement.graphisoft.comwww.pricelabsacademy.comassets.saludamedical.comcheckpoint.checkr.comnucleusplus.energizer.comcustomeruniversity.sonicwall.comdoc-center.o2business.de
CN:
mindtickle.com
Not before:
2025-12-17 00:00
Not after:
2026-09-21 23:59
www.kouromultimarcas.com.br
CN:
www.kouromultimarcas.com.br
Not before:
2025-10-23 05:19
Not after:
2026-01-21 05:19
*.d16xmf3v8onis1.amplifyapp.comd16xmf3v8onis1.amplifyapp.com
CN:
*.d16xmf3v8onis1.amplifyapp.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
i.tracxn.com
CN:
i.tracxn.com
Not before:
2025-10-13 04:01
Not after:
2026-01-11 04:01
*.thecentennialcampaign.comthecentennialcampaign.com
CN:
*.thecentennialcampaign.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
*.d21yc65dj0ji5h.amplifyapp.comd21yc65dj0ji5h.amplifyapp.com
CN:
*.d21yc65dj0ji5h.amplifyapp.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
onb-mfe-personal-address.webt.vanguard.com
CN:
onb-mfe-personal-address.webt.vanguard.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
*.d3bcv1gmon7n4m.amplifyapp.comd3bcv1gmon7n4m.amplifyapp.com
CN:
*.d3bcv1gmon7n4m.amplifyapp.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
*.d14gaxb6mrlhni.amplifyapp.comd14gaxb6mrlhni.amplifyapp.com
CN:
*.d14gaxb6mrlhni.amplifyapp.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
app.collections.stucred.comwww.app.collections.stucred.com
CN:
app.collections.stucred.com
Not before:
2025-01-20 00:00
Not after:
2026-02-19 23:59
realvestglobal.comwww.realvestglobal.com*.realvestglobal.com
CN:
realvestglobal.com
Not before:
2025-01-21 00:00
Not after:
2026-02-19 23:59
www.winegardford.comwinegardford.com
CN:
winegardford.com
Not before:
2025-08-10 00:00
Not after:
2026-09-06 23:59
www.premiumpetservicehk.com
CN:
www.premiumpetservicehk.com
Not before:
2025-11-27 20:19
Not after:
2026-02-25 20:19
www.kadenkelsey.comkadenkelsey.com
CN:
www.kadenkelsey.com
Not before:
2025-05-28 00:00
Not after:
2026-06-25 23:59
rubykaigi.org*.rubykaigi.org
CN:
rubykaigi.org
Not before:
2025-03-11 00:00
Not after:
2026-04-08 23:59
slenderwai.info*.slenderwai.info
CN:
slenderwai.info
Not before:
2025-01-20 00:00
Not after:
2026-02-18 23:59
*.blockinfinity.fundblockinfinity.fund
CN:
*.blockinfinity.fund
Not before:
2025-01-20 00:00
Not after:
2026-02-18 23:59
awjd.tvawjd5.tvawjd6.tvawjd8.tvawjd7.tvawjd1.tvawjd4.tvawjd2.tvawjd3.tv
CN:
awjd.tv
Not before:
2025-09-14 00:00
Not after:
2026-10-13 23:59
tremblingsun.comwww.tremblingsun.com
CN:
tremblingsun.com
Not before:
2025-08-19 00:00
Not after:
2026-09-17 23:59
www.agadongardenliving.co.ukagadongardenliving.co.uk
CN:
www.agadongardenliving.co.uk
Not before:
2025-04-08 00:00
Not after:
2026-05-07 23:59
heromamapet.com
CN:
heromamapet.com
Not before:
2025-09-14 00:00
Not after:
2026-10-13 23:59
orix.trusquetta.com
CN:
orix.trusquetta.com
Not before:
2025-12-08 00:00
Not after:
2027-01-06 23:59
www.harbourtown.com.auwww.harbourtowngoldcoast.com.auwww.harbourtownadelaide.com.au
CN:
www.harbourtown.com.au
Not before:
2025-10-22 00:00
Not after:
2026-11-20 23:59
www.sony.uy
CN:
www.sony.uy
Not before:
2025-12-12 12:02
Not after:
2026-03-12 12:02
www.cnsimate.com
CN:
www.cnsimate.com
Not before:
2021-07-26 00:00
Not after:
2022-07-26 23:59
*.yellohvillage-berrua.comyellohvillage-berrua.com*.sitepriv.prod.yellohvillage.fr
CN:
*.yellohvillage-berrua.com
Not before:
2025-05-12 00:00
Not after:
2026-06-10 23:59
pavanaputrapowersolutions.inowa.pavanaputrapowersolutions.inmail.pavanaputrapowersolutions.inautodiscover.pavanaputrapowersolutions.inwww.pavanaputrapowersolutions.in
CN:
pavanaputrapowersolutions.in
Not before:
2024-09-30 16:40
Not after:
2025-11-01 16:40
lambdainvestor.com*.lambdainvestor.com
CN:
lambdainvestor.com
Not before:
2025-08-23 00:00
Not after:
2026-09-21 23:59
shapeyourfreedom.com*.shapeyourfreedom.com
CN:
shapeyourfreedom.com
Not before:
2025-08-19 00:00
Not after:
2026-09-17 23:59
passiveincomewithbrenda.com*.passiveincomewithbrenda.com
CN:
passiveincomewithbrenda.com
Not before:
2025-02-25 00:00
Not after:
2026-03-26 23:59
farniente.co.kr*.farniente.co.kr
CN:
farniente.co.kr
Not before:
2025-12-18 00:00
Not after:
2027-01-16 23:59
*.d1z6w6ri9ire9q.amplifyapp.comd1z6w6ri9ire9q.amplifyapp.com
CN:
*.d1z6w6ri9ire9q.amplifyapp.com
Not before:
2025-01-17 00:00
Not after:
2026-02-16 23:59
*.d39gcrozr3top3.amplifyapp.comd39gcrozr3top3.amplifyapp.com
CN:
*.d39gcrozr3top3.amplifyapp.com
Not before:
2025-01-17 00:00
Not after:
2026-02-16 23:59
www.dampapps.comdampapps.com
CN:
www.dampapps.com
Not before:
2025-01-17 00:00
Not after:
2026-02-16 23:59
www.777-museu777.vip
CN:
www.777-museu777.vip
Not before:
2025-01-17 00:00
Not after:
2026-02-16 23:59
bestattungenfreising.de*.bestattungenfreising.de
CN:
bestattungenfreising.de
Not before:
2025-01-18 00:00
Not after:
2026-02-16 23:59
cdn.macace.net
CN:
cdn.macace.net
Not before:
2025-09-03 00:00
Not after:
2026-10-02 23:59
*.d2y00ilp7oktje.amplifyapp.comd2y00ilp7oktje.amplifyapp.com
CN:
*.d2y00ilp7oktje.amplifyapp.com
Not before:
2025-01-17 00:00
Not after:
2026-02-16 23:59
*.d2yk7p7kpqcz6f.amplifyapp.comd2yk7p7kpqcz6f.amplifyapp.com
CN:
*.d2yk7p7kpqcz6f.amplifyapp.com
Not before:
2025-01-18 00:00
Not after:
2026-02-16 23:59
*.optimind-dev.app.joint-data.comoptimind-dev.app.joint-data.com
CN:
*.optimind-dev.app.joint-data.com
Not before:
2025-12-19 00:00
Not after:
2027-01-17 23:59
Domain summary
stage3-login.cloudworkengine.net 50 calrossy-login.cloudworkengine.net 50 s3-login.cloudworkengine.net 50 www.experience-muse.com 12 dampapps.com 9 www.dampapps.com 8 web.nalcam-bo-bo.ovg-dev.com 9 awjd2.tv 1 awjd5.tv 1 dev.client.securovision.com 1 mdandco.au 1 hidenseek3d.com 3 awjd.tv 2 www.pricelabsacademy.com 1 wokamolehealthycuisine.com 1 www.flightin.com 0 lotusbook365.blue 1 914456.com 1 thpay.cc 1 viduesa.lk 1 783234.com 1 amsrchrdr.com 0 723234.com 1 597678.com 1 ivorypay.io 1 hpens.com 1 doando.co 1 biofactum.info 1 wintogames.com 1 mclarenvaleandfleurieucoast.com.au 3 909456.com 1 odtraining.com 1 patient-summary.pl.noa.ai 1 dashboard.weproov-recette.com 0 partneruniversity.kroll.com 1 digdeeper.sysdig.com 1 enablement.radware.com 1 doc-center.o2business.de 1 servicepartnercertification.greenhouse.com 1 pathshala.theiquest.com 1 amplify.wwt.com 1 skilled.aeratechnology.com 1 www.splunkcoach.com 1 enableu.venafi.com 1 learning.presalesacademy.com 1 www.forduniversity.com 1 university.dataiku.com 1 learn.unraveldata.com 1 toolkit.amagi.com 1 www.firstsource.mindtickle.com 1 salestraining.wework.com 1 ncsinexus.nuvasive.com 1 enablementcenter.schoolstatus.com 1 inexuslearning.nuvasive.com 1 academy.darktrace.com 1 enablement.sysdig.com 1 ivyleague.greenhouse.com 1 salescompass.goto.com 1 learning.cynet.com 1 nucleusplus.energizer.com 1 lms.amplitude.com 1 training.flashbay.com 1 harley-davidsonuniversity.h-dnet.com 1 enablementhub.kroll.com 1 greenderby.com 1 university.engagesmart.com 1 resources.apspayroll.com 1 learn.bottomline.com 1 partnerlearning.cisco.com 1 newbooksmag.com 4 venableu.venafi.com 1 d39gcrozr3top3.amplifyapp.com 1 www.kouromultimarcas.com.br 1 d16xmf3v8onis1.amplifyapp.com 0 i.tracxn.com 1 thecentennialcampaign.com 1 d21yc65dj0ji5h.amplifyapp.com 1 onb-mfe-personal-address.webt.vanguard.com 1 d3bcv1gmon7n4m.amplifyapp.com 1 d14gaxb6mrlhni.amplifyapp.com 1 app.collections.stucred.com 1 www.realvestglobal.com 1 realvestglobal.com 1 www.winegardford.com 1 www.premiumpetservicehk.com 1 kadenkelsey.com 1 rubykaigi.org 1 slenderwai.info 1 blockinfinity.fund 1 partnertraining.bluebeam.com 1 awjd8.tv 1 awjd4.tv 1 tremblingsun.com 1 teenpattistar.vip 1 agadongardenliving.co.uk 1 heromamapet.com 0 orix.trusquetta.com 1 www.harbourtowngoldcoast.com.au 1 www.harbourtown.com.au 1 www.harbourtownadelaide.com.au 1 www.sony.uy 1 826345.cc 1 www.cnsimate.com 0 berrua.sitepriv.prod.yellohvillage.fr 1 www.pavanaputrapowersolutions.in 1 www.lambdainvestor.com 1 www.shapeyourfreedom.com 1 www.passiveincomewithbrenda.com 1 farniente.co.kr 1 www.farniente.co.kr 1 530345.vip 1 d1z6w6ri9ire9q.amplifyapp.com 1 learning.twiliopartners.com 1 www.777-museu777.vip 1 bestattungenfreising.de 1 cdn.macace.net 1 d2y00ilp7oktje.amplifyapp.com 1 502234.cc 1 d2yk7p7kpqcz6f.amplifyapp.com 1 optimind-dev.app.joint-data.com 1 second-brian.pl.noa.ai 1 sparkmanmedicine.com 0 chesed-verachamim.co.il 3 597456.com 1 727456.com 1 530345.com 1 729456.com 1 takecare-stage.com 13