LeakIX - Host 223.252.6.6

Host 223.252.6.6

Australia

Wholesale Services Provider

Software information

Apache Apache

tcp/80

Apache-Coyote 1.1

tcp/8080

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 223.252.6.6
Port: 80
URL: http://223.252.6.6

First seen 2022-05-19 06:10
Last seen 2024-04-10 14:43
Open for 692 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165ee97f047

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 11-Apr-2024 00:43:15 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  771 days 11 hours 2 minutes 41 seconds
Total accesses: 3263623 - Total Traffic: 2.3 GB
CPU Usage: u67.38 s13.04 cu.07 cs0 - .000121% CPU load
.049 requests/sec - 37 B/second - 761 B/request
2 requests currently being processed, 8 idle workers
___.WC___.._.._.................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41185870/260/263272_
1.30400.00.19187.47
142.93.129.190defaultGET / HTTP/1.1

1-41222460/611/253207_
1.48100.00.57187.95
142.93.129.190defaultGET /server HTTP/1.1

2-41221570/599/250539_
2.05000.00.45178.94
142.93.129.190defaultGET /.vscode/sftp.json HTTP/1.1

3-41-0/0/254896.
0.012992600.00.00183.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41111710/143/244141W
0.63000.00.12181.08
142.93.129.190defaultGET /server-status HTTP/1.1

5-41111791/123/221078C
0.67000.30.07166.54
142.93.129.190defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-41201410/486/211683_
1.93000.00.40153.62
142.93.129.190defaultGET /v2/_catalog HTTP/1.1

7-41180540/263/211019_
0.87300.00.22155.52
142.93.129.190defaultGET / HTTP/1.1

8-41325480/1289/194847_
4.03000.00.90145.36
142.93.129.190defaultGET /about HTTP/1.1

9-41-0/0/173469.
13.043020300.00.00125.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/155045.
1.802996800.00.00111.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41105610/147/122802_
1.18100.00.1692.89
142.93.129.190defaultGET /debug/default/view?panel=config HTTP/1.1

12-41-0/0/94066.
0.013020600.00.0069.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/63791.
0.303020500.00.0047.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41105640/144/54562_
0.87300.00.1239.14
185.196.9.61default-223_252_6_6POST /?rest_route=/notificationx/v1/analytics HTTP/1.1

15-41-0/0/69004.
0.013020400.00.0048.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/49040.
0.003021800.00.0033.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/56340.
0.003020700.00.0038.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/37321.
3.2646055900.00.0025.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34978.
3.8945556100.00.0024.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/36602.
5.3632281800.00.0025.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28892.
0.0056220900.00.0020.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20772.
0.0056220800.00.0014.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/30240.
0.0056220700.00.0021.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12771.
0.0056220600.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11986.
0.0056220500.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8545.
0.0056220400.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11417.
0.0056220300.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2842.
0.0056219200.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3642.
0.0056220200.00.002.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2447.
0.0056220100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4813.
0.0156219100.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1920.
0.0156219000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6164.
0.0056220000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3400.
0.0056219900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3347.
0.0056219800.00.002.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2700.
0.0056219700.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6018.
0.0056219600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1748.
0.0056219500.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5103.
0.0056219400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9436.
0.0156219300.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2047.
0.01116689900.00.001.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1222.
0.01116696200.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/549.
0.01116689700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/578.
0.01116689600.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2550.
0.01116694200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1907.
0.01116689500.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/2613.
8.8389727600.00.001.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/2157.
11.7886638900.00.001.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/664.
0.01116696100.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2705.
0.01116696000.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/219.
0.01116695900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/219.
0.01116695800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/235.
0.01116695700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/236.
0.01116689800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1656.
0.01116695600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/301.
0.01116695500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/133.
0.01116693900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/118.
0.01116695400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/118.
0.01116695300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/118.
0.01116695200.00.000.03
127.0.0.1we

Found on 2024-04-10 14:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165025be07c

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 21-Mar-2024 20:32:14 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  751 days 6 hours 51 minutes 40 seconds
Total accesses: 3164721 - Total Traffic: 2.3 GB
CPU Usage: u32.15 s7.43 cu.08 cs0 - 6.11e-5% CPU load
.0488 requests/sec - 37 B/second - 763 B/request
5 requests currently being processed, 5 idle workers
C_C__C.C._.W...._...............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4138381/354/255228C
0.75000.30.19182.13
192.46.211.230defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-41158940/1333/245311_
3.62200.00.99182.35
192.46.211.230defaultGET / HTTP/1.1

2-41223611/861/243039C
1.56100.20.66174.06
192.46.211.230defaultGET /server HTTP/1.1

3-41202990/283/248374_
0.26200.00.24179.14
192.46.211.230defaultGET / HTTP/1.1

4-41198750/152/237496_
0.13000.00.08176.51
192.46.211.230defaultGET /v2/_catalog HTTP/1.1

5-4139861/578/213571C
1.36100.20.37161.79
192.46.211.230defaultGET /about HTTP/1.1

6-41-0/0/205940.
0.007244700.00.00149.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-4138401/374/207111C
0.73100.20.23152.99
192.46.211.230defaultGET /.vscode/sftp.json HTTP/1.1

8-41-0/0/189779.
0.017833200.00.00141.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41164120/1244/168231_
4.46000.01.27121.88
192.46.211.230defaultGET /debug/default/view?panel=config HTTP/1.1

10-41-0/0/152675.
0.017833100.00.00110.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-4141210/573/120639W
1.31000.00.4491.23
192.46.211.230defaultGET /server-status HTTP/1.1

12-41-0/0/90836.
0.007833000.00.0067.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/59509.
0.897244600.00.0044.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/53494.
0.842551700.00.0038.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/66957.
0.007832900.00.0047.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41152130/1342/42462_
4.14200.00.8329.37
209.38.208.202defaultGET /config.json HTTP/1.1

17-41-0/0/53440.
0.0323736500.00.0037.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36853.
0.0123737200.00.0025.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34273.
0.0123737300.00.0024.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35131.
0.0123737100.00.0024.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28879.
0.0023737800.00.0020.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20759.
0.0023737700.00.0014.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27797.
0.0023737600.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12759.
0.0023737500.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11975.
0.0154009200.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8534.
0.0154009300.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11405.
0.0054010600.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2831.
0.0054010500.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3631.
0.0054010400.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2436.
0.0054010300.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4802.
0.0054010200.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1908.
0.0054010100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6153.
0.0154010000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3389.
0.0054009900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3336.
0.0054009800.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2689.
2.2446762800.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6007.
0.0054009700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1737.
0.0054009600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5092.
0.0054009500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9425.
0.0054009400.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.00162094900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011871709100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001871709000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001871708900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001871708800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001871708700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011871708600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011892894500.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001892894400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011892894300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001892894200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001892894100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011892890200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001892894000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001892893900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012528522000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012528522100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012528521600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012528521700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012528521400.00.000.03
127.0.0.1web1

Found on 2024-03-21 10:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1650799c3bd

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 08-Mar-2024 14:59:11 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  738 days 1 hour 18 minutes 37 seconds
Total accesses: 3107450 - Total Traffic: 2.2 GB
CPU Usage: u66.36 s11.57 cu.21 cs0 - .000123% CPU load
.0487 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
____.._C__.W_...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4188320/409/250735_
1.41100.00.37178.90
164.92.244.132defaultGET /.vscode/sftp.json HTTP/1.1

1-41161150/86/240305_
0.14100.00.05178.55
164.92.244.132defaultGET /v2/_catalog HTTP/1.1

2-4194180/295/238763_
0.70200.00.30170.81
164.92.244.132defaultGET /server HTTP/1.1

3-41101320/286/244524_
0.76100.00.28176.14
164.92.244.132defaultGET /debug/default/view?panel=config HTTP/1.1

4-41-0/0/234172.
0.054008700.00.00174.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/209329.
0.064008600.00.00158.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4182040/504/202056_
1.44000.00.41147.10
164.92.244.132defaultGET /about HTTP/1.1

7-41152441/196/203187C
0.34000.30.18150.05
164.92.244.132defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-41186430/1537/186163_
10.74400.01.19139.01
164.92.244.132defaultGET / HTTP/1.1

9-41297070/1409/164107_
11.07000.01.12118.58
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

10-41-0/0/149659.
0.111651500.00.00108.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41327550/553/117116W
1.45000.00.3788.41
164.92.244.132defaultGET /server-status HTTP/1.1

12-41152470/177/88354_
0.57500.00.1465.89
164.92.244.132defaultGET / HTTP/1.1

13-41-0/0/58397.
9.1447775400.00.0043.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/52037.
12.9911662400.00.0037.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/64825.
0.0147776000.00.0046.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40502.
0.0147776100.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/53315.
6.1118393400.00.0037.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36748.
1.5342577800.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34186.
0.0147775700.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35017.
0.0147775800.00.0024.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28846.
0.0147775900.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20731.
0.0147778300.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27793.
0.0047778200.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12755.
0.0147775100.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11972.
0.0147775200.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8531.
0.0147774100.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11403.
1.4343756000.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2829.
0.0147774000.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3629.
0.0147773900.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2434.
0.0047778100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4800.
0.4843643500.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1906.
0.2745561600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6151.
0.0047776600.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3387.
0.0147775600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3334.
0.0147775300.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2371.
0.0047777300.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6005.
0.0047777200.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1735.
0.0047777100.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5090.
0.0047776900.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9423.
0.0147776800.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.0047776700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011757390800.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001757390700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001757390600.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001757390500.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001757390400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011757390300.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011778576300.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001778576200.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011778576100.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001778576000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001778575900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011778571900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001778575800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001778575700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012414203700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012414203800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012414203300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012414203400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012414203100.00.000.03
127.0.0.1web1.ambient-it.com.

Found on 2024-03-08 04:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1654071567e

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 08-Mar-2024 04:16:26 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  737 days 14 hours 35 minutes 52 seconds
Total accesses: 3105656 - Total Traffic: 2.2 GB
CPU Usage: u71.42 s11.37 cu.21 cs0 - .00013% CPU load
.0487 requests/sec - 37 B/second - 763 B/request
3 requests currently being processed, 7 idle workers
_.KW..C______...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4188320/224/250550_
0.88100.00.21178.75
46.101.103.192defaultGET /debug/default/view?panel=config HTTP/1.1

1-41-0/0/240219.
8.92152400.00.00178.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-4194181/101/238569K
0.09309.10.16170.68
146.19.24.28defaultGET / HTTP/1.1

3-41101320/104/244342W
0.31000.00.11175.97
46.101.103.192defaultGET /server-status HTTP/1.1

4-41-0/0/234172.
0.05152200.00.00174.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/209329.
0.06152100.00.00158.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4182041/335/201887C
1.24000.30.24146.93
46.101.103.192defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-41152440/12/203003_
0.09100.00.04149.91
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-41186430/1360/185986_
10.22000.01.05138.87
46.101.103.192defaultGET /about HTTP/1.1

9-41297070/1231/163929_
10.88100.01.00118.46
46.101.103.192defaultGET /.vscode/sftp.json HTTP/1.1

10-41152460/8/149566_
0.01100.00.00108.16
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

11-41327550/372/116935_
0.94000.00.2288.26
46.101.103.192defaultGET /v2/_catalog HTTP/1.1

12-41152470/12/88189_
0.01100.00.0165.76
46.101.103.192defaultGET /server HTTP/1.1

13-41-0/0/58397.
9.1443918900.00.0043.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/52037.
12.997805900.00.0037.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/64825.
0.0143919500.00.0046.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40502.
0.0143919600.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/53315.
6.1114536900.00.0037.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36748.
1.5338721300.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34186.
0.0143919200.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35017.
0.0143919300.00.0024.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28846.
0.0143919400.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20731.
0.0143921800.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27793.
0.0043921700.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12755.
0.0143918600.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11972.
0.0143918700.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8531.
0.0143917600.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11403.
1.4339899500.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2829.
0.0143917500.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3629.
0.0143917400.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2434.
0.0043921600.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4800.
0.4839787100.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1906.
0.2741705100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6151.
0.0043920100.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3387.
0.0143919100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3334.
0.0143918800.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2371.
0.0043920800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6005.
0.0043920700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1735.
0.0043920600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5090.
0.0043920400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9423.
0.0143920300.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.0043920200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011753534300.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001753534200.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001753534100.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001753534000.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001753533900.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011753533800.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011774719800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001774719700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011774719600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001774719500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001774719400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011774715500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001774719300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001774719200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012410347200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012410347300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012410346800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012410346900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012410346600.00.000.03
127.0.0.1

Found on 2024-03-07 18:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1653f72669b

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 07-Mar-2024 06:19:03 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  736 days 16 hours 38 minutes 29 seconds
Total accesses: 3102043 - Total Traffic: 2.2 GB
CPU Usage: u142.12 s20.43 cu.27 cs0 - .000256% CPU load
.0487 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
_C__W_.___...._.................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41164890/966/250317_
14.93200.00.72178.53
139.59.182.142defaultGET /server HTTP/1.1

1-41309271/304/239871C
7.63000.30.22178.27
139.59.182.142defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41313510/154/238345_
0.22500.00.12170.44
139.59.182.142defaultGET / HTTP/1.1

3-41174890/1404/243969_
12.23000.01.18175.65
139.59.182.142defaultGET /about HTTP/1.1

4-41207290/100/233856W
0.13000.00.06173.86
139.59.182.142defaultGET /server-status HTTP/1.1

5-41196860/1542/209255_
11.46100.01.18158.56
139.59.182.142defaultGET /.vscode/sftp.json HTTP/1.1

6-41-0/0/201552.
12.173393300.00.00146.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41198980/1424/202978_
10.86400.01.32149.87
139.59.182.142defaultGET / HTTP/1.1

8-41186430/987/185613_
8.66100.00.75138.57
139.59.182.142defaultGET /debug/default/view?panel=config HTTP/1.1

9-41297070/875/163573_
9.03100.00.73118.19
139.59.182.142defaultGET /v2/_catalog HTTP/1.1

10-41-0/0/149256.
9.522291400.00.00107.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/116563.
8.7236015500.00.0088.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/87921.
7.9736014200.00.0065.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/58397.
9.1436014600.00.0043.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41130180/1605/52031_
12.98600.01.5337.42
139.59.182.142default\x16\x03\x01

15-41-0/0/64825.
0.0136015200.00.0046.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40502.
0.0136015300.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/53315.
6.116632700.00.0037.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36748.
1.5330817000.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34186.
0.0136014900.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35017.
0.0136015000.00.0024.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28846.
0.0136015100.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20731.
0.0136017500.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27793.
0.0036017400.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12755.
0.0136014300.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11972.
0.0136014400.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8531.
0.0136013300.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11403.
1.4331995200.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2829.
0.0136013200.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3629.
0.0136013100.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2434.
0.0036017300.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4800.
0.4831882800.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1906.
0.2733800800.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6151.
0.0036015800.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3387.
0.0136014800.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3334.
0.0136014500.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2371.
0.0036016500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6005.
0.0036016400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1735.
0.0036016300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5090.
0.0036016100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9423.
0.0136016000.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.0036015900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011745630100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001745630000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001745629900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001745629800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001745629700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011745629600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011766815500.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001766815400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011766815300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001766815200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001766815100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011766811200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001766815000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001766814900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012402442900.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012402443000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012402442500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012402442600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012402442300.00.000.03
127.0.0.1web1.ambient-it.com.a

Found on 2024-03-06 20:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165cc8f58b1

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 02-Mar-2024 23:12:14 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  732 days 9 hours 31 minutes 40 seconds
Total accesses: 3085140 - Total Traffic: 2.2 GB
CPU Usage: u149.73 s23.19 cu.4 cs0 - .000274% CPU load
.0488 requests/sec - 37 B/second - 762 B/request
3 requests currently being processed, 7 idle workers
C__.__...C_W__..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41195051/1609/248889C
8.44000.31.28177.46
167.172.20.95defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-41195040/1683/239062_
9.21300.01.28177.68
167.172.20.95defaultGET / HTTP/1.1

2-41163670/521/237634_
3.46200.00.44169.96
167.172.20.95defaultGET / HTTP/1.1

3-41-0/0/242438.
4.773871200.00.00174.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-4197130/165/233108_
0.21100.00.15173.36
167.172.20.95defaultGET /debug/default/view?panel=config HTTP/1.1

5-41148910/2772/207663_
13.17000.02.18157.36
167.172.20.95defaultGET /server HTTP/1.1

6-41-0/0/200105.
2.8924182900.00.00145.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/201546.
6.4612159600.00.00148.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/184141.
7.1824182800.00.00137.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4194571/1514/162641C
10.02100.22.44117.40
167.172.20.95defaultGET /about HTTP/1.1

10-4137760/1186/148395_
7.80000.01.04107.12
167.172.20.95defaultGET /v2/_catalog HTTP/1.1

11-41303360/1184/116503W
8.36000.02.2287.96
167.172.20.95defaultGET /server-status HTTP/1.1

12-41303370/1175/87856_
7.92000.01.9865.47
167.172.20.95defaultGET /.vscode/sftp.json HTTP/1.1

13-41303380/1161/58351_
8.74300.02.2643.90
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

14-41-0/0/50426.
2.5964602300.00.0035.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/64822.
3.5081570700.00.0046.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40499.
0.0081571000.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/52003.
0.0181570900.00.0035.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36495.
0.0181571200.00.0025.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34183.
2.8181573700.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35014.
0.0181571100.00.0024.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28843.
0.0181570600.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20730.
2.8264520700.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27792.
0.0181574400.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12752.
12.55110294500.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11969.
9.35110294400.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8528.
0.00124078600.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11196.
14.7883065800.00.007.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2826.
9.04110295000.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3626.
0.01124077400.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2433.
0.01124077300.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4583.
0.00124078500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1775.
0.01124077500.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6150.
0.00124078400.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3385.
0.00124078300.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3332.
0.00124078200.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2370.
0.00124078100.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6004.
0.00124078000.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1734.
0.00124077900.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5089.
0.01124076000.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9422.
0.00124077800.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001708509200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011708509100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001708509000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001708508900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001708508800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001708508700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011708508600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011729694600.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001729694500.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011729694400.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001729694300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001729694200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011729690200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001729694100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001729694000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012365322000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012365322100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012365321600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012365321700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012365321400.00.000.03
127.0.0.1

Found on 2024-03-02 13:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165307d32b6

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 01-Mar-2024 08:36:08 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  730 days 18 hours 55 minutes 34 seconds
Total accesses: 3078315 - Total Traffic: 2.2 GB
CPU Usage: u101.48 s17.19 cu.25 cs0 - .000188% CPU load
.0488 requests/sec - 37 B/second - 759 B/request
3 requests currently being processed, 7 idle workers
W_._._.C.C____..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41195050/1017/248297W
4.52000.00.88177.05
137.184.162.65defaultGET /server-status HTTP/1.1

1-41195040/998/238377_
4.80000.00.74177.14
137.184.162.65defaultGET /.vscode/sftp.json HTTP/1.1

2-41-0/0/237113.
0.011576800.00.00169.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41288480/60/242005_
0.40300.00.09174.05
137.184.162.65defaultGET / HTTP/1.1

4-41-0/0/232943.
1.0410286000.00.00173.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41148910/2167/207058_
8.90100.01.68156.86
137.184.162.65defaultGET /debug/default/view?panel=config HTTP/1.1

6-41-0/0/200105.
2.8910286300.00.00145.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41303321/448/201262C
2.08000.30.33145.79
137.184.162.65defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-41-0/0/184141.
7.1810286200.00.00137.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4194571/756/161883C
4.16100.20.52115.49
137.184.162.65defaultGET /about HTTP/1.1

10-4137760/558/147767_
2.12000.00.39106.47
137.184.162.65defaultGET /v2/_catalog HTTP/1.1

11-41303360/450/115769_
2.32200.00.3486.08
137.184.162.65defaultGET / HTTP/1.1

12-41303370/450/87131_
1.99100.00.2763.77
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

13-41303380/466/57656_
1.79000.00.3341.98
137.184.162.65defaultGET /server HTTP/1.1

14-41-0/0/50426.
2.5950705800.00.0035.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/64822.
3.5067674200.00.0046.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40499.
0.0067674500.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/52003.
0.0167674400.00.0035.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36495.
0.0167674700.00.0025.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34183.
2.8167677200.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35014.
0.0167674600.00.0024.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28843.
0.0167674100.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20730.
2.8250624200.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27792.
0.0167677900.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12752.
12.5596398000.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11969.
9.3596397900.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8528.
0.00110182000.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11196.
14.7869169200.00.007.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2826.
9.0496398500.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3626.
0.01110180800.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2433.
0.01110180700.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4583.
0.00110181900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1775.
0.01110180900.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6150.
0.00110181800.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3385.
0.00110181700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3332.
0.00110181600.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2370.
0.00110181500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6004.
0.00110181400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1734.
0.00110181300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5089.
0.01110179400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9422.
0.00110181200.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001694612700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011694612600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001694612500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001694612400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001694612300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001694612200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011694612100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011715798000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001715797900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011715797800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001715797700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001715797600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011715793700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001715797500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001715797400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012351425400.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012351425500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012351425000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012351425100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012351424800.00.000.03
127.0.0.1

Found on 2024-02-29 22:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165818b93f3

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 19-Feb-2024 13:42:39 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  720 days 2 minutes 5 seconds
Total accesses: 3036791 - Total Traffic: 2.1 GB
CPU Usage: u116.9 s15.24 cu.08 cs0 - .000213% CPU load
.0488 requests/sec - 37 B/second - 759 B/request
2 requests currently being processed, 8 idle workers
.__.CW_.___........._......_....................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/245033.
8.813196700.00.00174.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41167960/166/235505_
2.12500.00.14174.98
164.90.222.93default\x16\x03\x01

2-41109580/336/234214_
6.35300.00.22167.43
164.90.222.93defaultGET / HTTP/1.1

3-41-0/0/238978.
5.763197300.00.00171.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41233291/310/229807C
5.64000.30.19170.76
164.90.222.93defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41167970/167/203956W
2.13000.00.13154.43
164.90.222.93defaultGET /server-status HTTP/1.1

6-41167980/167/196651_
1.89100.00.10142.82
164.90.222.93defaultGET /debug/default/view?panel=config HTTP/1.1

7-41-0/0/197731.
0.003198000.00.00143.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41168020/168/182153_
1.66000.00.14135.96
164.90.222.93defaultGET /about HTTP/1.1

9-41168030/162/159120_
1.86000.00.13113.61
164.90.222.93defaultGET /.vscode/sftp.json HTTP/1.1

10-41168040/212/146122_
2.14000.00.19105.19
164.90.222.93defaultGET /v2/_catalog HTTP/1.1

11-41-0/0/114437.
0.0116978700.00.0085.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/85340.
0.0116978600.00.0062.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/57180.
6.6816979300.00.0041.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/48823.
0.0116978400.00.0034.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/63976.
0.0116978300.00.0045.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/39659.
0.0116978200.00.0027.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/51997.
0.7814360500.00.0035.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36490.
3.416752900.00.0025.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/33362.
0.0116978100.00.0023.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41139550/788/34738_
10.40400.00.6624.19
185.180.143.80madonnaslilyflorist.com.auGET /favicon.ico HTTP/1.1

21-41-0/0/28837.
10.153197100.00.0020.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19917.
3.466773000.00.0013.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27790.
0.0116980200.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12752.
12.553197000.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11969.
9.353196900.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8528.
0.0016981100.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41139700/782/10170_
10.67400.00.636.84
164.90.222.93defaultGET / HTTP/1.1

28-41-0/0/2826.
9.043197500.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3626.
0.0116979900.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2433.
0.0116979800.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4583.
0.0016981000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1775.
0.0116980000.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6150.
0.0016980900.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3385.
0.0016980800.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3332.
0.0016980700.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2370.
0.0016980600.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6004.
0.0016980500.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1734.
0.0016980400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5089.
0.0116978500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9422.
0.0016980300.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001601411700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011601411600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001601411500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001601411400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001601411300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001601411200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011601411100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011622597000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001622596900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011622596800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001622596700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001622596600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011622592700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001622596500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001622596400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012258224500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012258224600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012258224100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012258224200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012258223900.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2024-02-19 03:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16567fa0655

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 16-Feb-2024 17:37:53 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  717 days 3 hours 57 minutes 19 seconds
Total accesses: 3025448 - Total Traffic: 2.1 GB
CPU Usage: u83.75 s14.93 cu.15 cs0 - .000159% CPU load
.0488 requests/sec - 37 B/second - 759 B/request
3 requests currently being processed, 7 idle workers
._C___W__._..C..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/244318.
1.432238000.00.00173.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-4143860/648/234513_
0.83200.00.48174.20
198.199.121.22defaultGET / HTTP/1.1

2-4157921/318/233529C
1.23100.20.22166.98
198.199.121.22defaultGET /about HTTP/1.1

3-4135630/2148/238496_
7.31300.01.45171.36
198.199.121.22defaultGET / HTTP/1.1

4-4149610/236/229163_
0.31300.00.15170.38
198.199.121.22default\x16\x03\x01

5-41242300/90/203468_
0.09100.00.07153.96
198.199.121.22defaultGET /debug/default/view?panel=config HTTP/1.1

6-41181680/612/196152W
1.26000.00.37142.34
198.199.121.22defaultGET /server-status HTTP/1.1

7-41218260/398/197586_
4.591900.00.27143.23
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-4143900/608/181665_
1.02000.00.34135.61
198.199.121.22defaultGET /.vscode/sftp.json HTTP/1.1

9-41-0/0/158952.
3.317098600.00.00113.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41218270/395/145571_
2.02000.00.30104.69
198.199.121.22defaultGET /v2/_catalog HTTP/1.1

11-41-0/0/114435.
0.007099400.00.0085.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/85338.
0.007099300.00.0062.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41192201/1690/56852C
5.66000.30.9641.33
198.199.121.22defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

14-41-0/0/48821.
0.007098700.00.0034.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/63974.
3.4612752000.00.0045.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/39657.
1.0125422000.00.0027.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/51887.
0.0227116600.00.0035.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36037.
0.5725419400.00.0024.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/33360.
0.0127117400.00.0023.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/33950.
0.0127117100.00.0023.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28193.
0.0127116800.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19445.
0.2125419200.00.0013.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27788.
0.0127116500.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12141.
0.0255623600.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11352.
12.3032441000.00.008.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8527.
0.0255622100.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9388.
0.0155623800.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2175.
0.0089939400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3624.
0.0089939300.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2431.
0.0089939200.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4582.
0.0089939100.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1773.
0.0089939000.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6149.
0.0089938900.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3384.
0.0089938800.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3331.
0.0089938700.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2369.
0.0089938600.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6003.
0.0089938500.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1733.
0.0089938400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5088.
0.0089938300.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9421.
34.8783721100.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001576903200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011576903100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001576903000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001576902900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001576902800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001576902700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011576902600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011598088500.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001598088400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011598088300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001598088200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001598088100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011598084200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001598088000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001598087900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012233716000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012233716100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012233715600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012233715700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012233715400.00.000.03
127.0.0.1web1.amb

Found on 2024-02-16 07:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165956dba0c

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 02-Feb-2024 05:31:56 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  702 days 15 hours 51 minutes 22 seconds
Total accesses: 2956620 - Total Traffic: 2.1 GB
CPU Usage: u25.59 s6.03 cu.12 cs0 - 5.23e-5% CPU load
.0487 requests/sec - 37 B/second - 761 B/request
2 requests currently being processed, 8 idle workers
_____W___...C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41292370/224/239220_
1.412200.00.21170.94
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-41294030/202/229900_
1.38000.00.11171.06
164.90.205.35defaultGET /.vscode/sftp.json HTTP/1.1

2-4189680/664/228077_
1.11300.00.54163.78
164.90.205.35defaultGET / HTTP/1.1

3-41293920/204/233292_
0.99200.00.11167.93
164.90.205.35defaultGET / HTTP/1.1

4-41292410/224/224833_
1.21100.00.33167.43
164.90.205.35defaultGET /debug/default/view?panel=config HTTP/1.1

5-41292480/221/200809W
0.59000.00.27152.10
164.90.205.35defaultGET /server-status HTTP/1.1

6-41293070/204/191135_
0.26400.00.14139.18
164.90.205.35default\x16\x03\x01

7-41293870/216/194233_
1.20000.00.28141.07
164.90.205.35defaultGET /about HTTP/1.1

8-41294040/209/178117_
0.52000.00.11133.50
164.90.205.35defaultGET /v2/_catalog HTTP/1.1

9-41-0/0/156206.
0.004730200.00.00111.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/143943.
0.464740400.00.00103.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/112607.
0.354732200.00.0083.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-4189771/556/82499C
1.88000.30.4160.63
164.90.205.35defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-41-0/0/51577.
0.734740300.00.0038.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/47564.
0.019420200.00.0033.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/61827.
0.544736300.00.0044.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/36493.
0.009421200.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/48574.
0.564739500.00.0034.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/35801.
0.019420100.00.0024.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/31806.
0.019419100.00.0022.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/32000.
0.019418800.00.0022.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28186.
0.019419000.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19357.
0.019419600.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27780.
0.404732300.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12136.
0.019419700.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/10277.
0.784739000.00.007.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8523.
0.019419500.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9385.
0.019419400.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2174.
0.019419200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3623.
0.009421100.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2430.
0.019419900.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4581.
0.019419800.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1772.
0.019420000.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6148.
0.009421000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3383.
0.009420900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3330.
0.009420800.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2368.
0.009420700.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6002.
0.009420600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1732.
0.009420500.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5087.
0.009420400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9006.
0.009420300.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001451587500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011451587400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001451587300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001451587200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001451587100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001451587000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011451586900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011472772800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001472772700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011472772600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001472772500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001472772400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011472768500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001472772300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001472772200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012108400200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012108400300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012108399800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012108399900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012108399600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2024-02-01 19:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1657c73a4a0

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 27-Jan-2024 04:31:09 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  696 days 14 hours 50 minutes 35 seconds
Total accesses: 2924654 - Total Traffic: 2.1 GB
CPU Usage: u145.62 s26.27 cu.38 cs0 - .000286% CPU load
.0486 requests/sec - 37 B/second - 762 B/request
2 requests currently being processed, 8 idle workers
_W______.._.C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41156460/1432/237451_
4.95300.01.01169.77
139.144.150.8defaultGET / HTTP/1.1

1-4195520/494/227083W
2.31000.00.34169.41
139.144.150.8defaultGET /server-status HTTP/1.1

2-41172260/904/225299_
2.10400.00.53161.91
139.144.150.8default\x16\x03\x01

3-41199030/1526/231270_
4.77000.00.99166.62
139.144.150.8defaultGET /.vscode/sftp.json HTTP/1.1

4-41165220/1696/222757_
7.29000.01.04166.10
223.252.6.1defaultGET /api/ns.php HTTP/1.0

5-41135860/2502/198259_
9.62000.01.69150.43
139.144.150.8defaultGET /about HTTP/1.1

6-41149310/4338/189037_
12.36000.02.91137.76
139.144.150.8defaultGET /v2/_catalog HTTP/1.1

7-41257220/44/191860_
0.05100.00.03139.39
139.144.150.8defaultGET /debug/default/view?panel=config HTTP/1.1

8-41-0/0/176393.
9.7010197400.00.00132.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/153964.
2.19984400.00.00110.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41122720/430/143258_
1.54200.00.25103.08
139.144.150.8defaultGET / HTTP/1.1

11-41-0/0/110016.
0.0010197300.00.0082.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41219261/2100/79988C
7.46000.31.4758.96
139.144.150.8defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-41-0/0/51222.
0.1685429800.00.0038.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/46876.
20.1785430100.00.0033.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/61251.
0.0185428100.00.0043.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35811.
0.0085431000.00.0025.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/47900.
29.7648335600.00.0033.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/35797.
0.0085430900.00.0024.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/31802.
0.49100300100.00.0022.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31996.
0.00104000800.00.0022.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28182.
5.36153404500.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19353.
0.01161206900.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27509.
0.16158112800.00.0019.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12131.
0.00161208200.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/9861.
12.68122700900.00.007.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8519.
14.33103998600.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9381.
0.00161208100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2169.
7.56142103500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3621.
0.01161206700.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2426.
0.00161208000.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4577.
0.00161207900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1768.
0.00161207800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6146.
0.00161207700.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3381.
0.00161207600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3328.
0.00161207500.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2366.
0.00161207400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6000.
0.00161207300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1730.
0.00161207200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5085.
0.00161207100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9004.
0.00161207000.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001399382800.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011399382700.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001399382600.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001399382500.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001399382400.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001399382300.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011399382200.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011420568100.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001420568000.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011420567900.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001420567800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001420567700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011420563800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001420567600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001420567500.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012056195500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012056195600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012056195100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012056195200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012056194900.00.000.03
127.0.0.1web1.am

Found on 2024-01-26 18:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16598913b1c

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 12-Jan-2024 03:03:10 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  681 days 13 hours 22 minutes 36 seconds
Total accesses: 2858793 - Total Traffic: 2.0 GB
CPU Usage: u83.21 s14.75 cu.21 cs0 - .000167% CPU load
.0485 requests/sec - 37 B/second - 763 B/request
3 requests currently being processed, 7 idle workers
__C__WC_.................__.....................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41228860/463/232140_
1.13000.00.47166.40
142.93.64.15defaultGET /.vscode/sftp.json HTTP/1.1

1-41236370/581/223196_
2.13200.00.40166.70
142.93.64.15defaultGET / HTTP/1.1

2-41258181/1260/220405C
10.20100.20.94158.60
142.93.64.15defaultGET /about HTTP/1.1

3-4192930/1010/225047_
4.57400.00.82162.64
142.93.64.15default\x16\x03\x01

4-41242930/177/218912_
0.74000.00.15163.56
142.93.64.15defaultGET /v2/_catalog HTTP/1.1

5-41125920/896/194024W
3.78000.00.60147.66
142.93.64.15defaultGET /server-status HTTP/1.1

6-4124901/570/183203C
1.85000.30.46133.87
142.93.64.15defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-41108160/131/185933_
0.76300.00.11135.52
142.93.64.15defaultGET / HTTP/1.1

8-41-0/0/171498.
0.0011977300.00.00129.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/150507.
2.202975400.00.00107.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/140705.
0.3610985800.00.00101.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/106980.
1.763871800.00.0079.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/77722.
0.0011976000.00.0057.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/51209.
0.0131077600.00.0038.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/45184.
0.1327986100.00.0032.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/60132.
1.0031078500.00.0043.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35802.
0.0131077500.00.0024.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44146.
0.0131077400.00.0031.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34831.
0.0131077300.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/31631.
7.5911975700.00.0022.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31995.
8.3611975500.00.0022.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28182.
5.3623276600.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19353.
0.0131079000.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27509.
0.1627984900.00.0019.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12131.
0.0031080300.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41289230/1471/9531_
11.97100.01.147.16
142.93.64.15defaultGET /debug/default/view?panel=config HTTP/1.1

26-41289240/1373/7076_
9.26200.01.165.13
165.154.244.2bakerpettener.com.auGET / HTTP/1.1

27-41-0/0/9381.
0.0031080200.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2169.
7.5611975600.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3621.
0.0131078800.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2426.
0.0031080100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4577.
0.0031080000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1768.
0.0031079900.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6146.
0.0031079800.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3381.
0.0031079700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3328.
0.0031079600.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2366.
0.0031079500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6000.
0.0031079400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1730.
0.0031079300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5085.
0.0031079200.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9004.
0.0031079100.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001269254900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011269254800.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001269254700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001269254600.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001269254500.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001269254400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011269254300.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011290440200.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001290440100.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011290440000.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001290439900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001290439800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011290435900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001290439700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001290439600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011926067600.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011926067700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011926067200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011926067300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011926067000.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2024-01-11 17:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165c9812c04

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 07-Jan-2024 09:02:47 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  676 days 19 hours 22 minutes 13 seconds
Total accesses: 2839428 - Total Traffic: 2.0 GB
CPU Usage: u65.41 s15.76 cu.27 cs0 - .000139% CPU load
.0486 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
___CW__.___.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4182350/366/230395_
1.121300.00.26165.16
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

1-4144490/1/222077_
0.01200.00.01165.88
178.62.3.65defaultGET / HTTP/1.1

2-41151030/542/218640_
1.48000.00.35157.40
178.62.3.65defaultGET /about HTTP/1.1

3-41224221/337/223490C
1.10000.30.27161.37
178.62.3.65defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-41232800/1178/217465W
3.36000.00.82162.59
178.62.3.65defaultGET /server-status HTTP/1.1

5-41183290/364/192644_
0.40400.00.21146.77
178.62.3.65default\x16\x03\x01

6-41110170/2273/182191_
6.37300.01.74133.10
178.62.3.65defaultGET / HTTP/1.1

7-41-0/0/185357.
6.8538400.00.00135.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41123610/2711/170978_
6.63000.01.89128.76
178.62.3.65defaultGET /v2/_catalog HTTP/1.1

9-41299270/1905/149510_
3.50100.01.36107.03
178.62.3.65defaultGET /debug/default/view?panel=config HTTP/1.1

10-41239950/2215/140645_
6.19000.01.44101.61
178.62.3.65defaultGET /.vscode/sftp.json HTTP/1.1

11-41-0/0/106611.
0.0011909600.00.0079.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/77656.
4.478374500.00.0057.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/51203.
0.0041774500.00.0038.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/45063.
0.01104834000.00.0032.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/59687.
0.01104833900.00.0042.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35795.
0.02104834500.00.0024.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44084.
0.03104323700.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34827.
3.3769741000.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/30792.
3.8269159700.00.0021.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31074.
4.0768771700.00.0021.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/27831.
6.0751143700.00.0020.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19346.
0.00104835300.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27369.
0.00104835200.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12079.
0.00104835100.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.00268133400.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00268133200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00268133100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00296806800.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00296806710.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00296806600.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00296806500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00296806400.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00296806300.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00296806200.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34268147000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00296806100.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00296806000.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01296805900.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00296805800.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00296805700.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001228212500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011228212400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001228212300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001228212200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001228212100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001228212000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011228211900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011249397900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001249397800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011249397700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001249397600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001249397500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011249393600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001249397400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001249397300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011885025300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011885025400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011885024900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011885025000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011885024700.00.000.03
127.0.0.1web1.ambient-it

Found on 2024-01-06 23:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165bb6e06eb

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 06-Jan-2024 00:57:08 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  675 days 11 hours 16 minutes 33 seconds
Total accesses: 2834151 - Total Traffic: 2.0 GB
CPU Usage: u74.31 s16.99 cu.29 cs0 - .000157% CPU load
.0486 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
._W__._____.C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/230029.
5.34357120.00.00164.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41135380/4727/221879_
11.30400.03.22165.74
207.154.240.169default\x16\x03\x01

2-41151030/17/218115W
0.02000.00.01157.05
207.154.240.169defaultGET /server-status HTTP/1.1

3-41159530/2156/222970_
5.10000.01.38160.94
207.154.240.169defaultGET /about HTTP/1.1

4-41232800/644/216931_
2.07100.00.44162.22
207.154.240.169defaultGET /debug/default/view?panel=config HTTP/1.1

5-41-0/0/192280.
0.01357000.00.00146.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41110170/1743/181661_
5.14000.01.29132.65
207.154.240.169defaultGET /v2/_catalog HTTP/1.1

7-41167640/2262/184826_
5.333300.01.51134.72
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-41123610/2189/170456_
5.72300.01.53128.39
207.154.240.169defaultGET / HTTP/1.1

9-41299270/1388/148993_
2.33000.00.93106.60
207.154.240.169defaultGET /.vscode/sftp.json HTTP/1.1

10-41239950/1705/140135_
5.01400.01.08101.24
207.154.240.169defaultGET / HTTP/1.1

11-41-0/0/106611.
0.00355600.00.0079.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41299341/1474/77496C
4.27000.31.0557.13
207.154.240.169defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-41-0/0/51203.
0.0030220500.00.0038.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/45063.
0.0193280100.00.0032.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/59687.
0.0193280000.00.0042.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35795.
0.0293280600.00.0024.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44084.
0.0392769800.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34827.
3.3758187000.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/30792.
3.8257605700.00.0021.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31074.
4.0757217800.00.0021.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/27831.
6.0739589800.00.0020.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19346.
0.0093281400.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27369.
0.0093281300.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12079.
0.0093281200.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.00256579500.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00256579300.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00256579200.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00285252800.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00285252710.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00285252600.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00285252500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00285252400.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00285252300.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00285252200.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34256593100.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00285252100.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00285252000.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01285251900.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00285251800.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00285251700.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001216658600.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011216658500.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001216658400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001216658300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001216658200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001216658100.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011216658000.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011237843900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001237843800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011237843700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001237843600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001237843500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011237839600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001237843400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001237843300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011873471400.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011873471500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011873471000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011873471100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011873470800.00.000.03
127.

Found on 2024-01-05 14:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165aa04bcd3

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 24-Dec-2023 06:27:07 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  662 days 16 hours 46 minutes 33 seconds
Total accesses: 2784849 - Total Traffic: 2.0 GB
CPU Usage: u50.64 s11.42 cu.18 cs0 - .000109% CPU load
.0486 requests/sec - 37 B/second - 764 B/request
2 requests currently being processed, 8 idle workers
.W___C_..._._.__................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/226251.
9.009122700.00.00162.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41109040/1068/217044W
2.56000.00.82162.40
165.232.76.155defaultGET /server-status HTTP/1.1

2-4144690/416/214690_
0.77500.00.25154.82
165.232.76.155default\x16\x03\x01

3-4187420/738/218279_
1.54000.00.43157.98
165.232.76.155defaultGET /about HTTP/1.1

4-41120370/746/212996_
1.20100.00.52159.65
165.232.76.155defaultGET /debug/default/view?panel=config HTTP/1.1

5-41138531/1775/190534C
7.66000.31.18145.41
165.232.76.155defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-41261670/572/178953_
1.01100.00.39130.79
165.232.76.155defaultGET /.vscode/sftp.json HTTP/1.1

7-41-0/0/180370.
0.9217776600.00.00131.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/167446.
0.1116921500.00.00126.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/146406.
0.1815191300.00.00104.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41123050/1273/136391_
3.583200.00.8298.92
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

11-41-0/0/106276.
5.1217774100.00.0079.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-4156120/762/75911_
1.63400.00.6356.00
165.232.76.155defaultGET / HTTP/1.1

13-41-0/0/51195.
0.0117776800.00.0038.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-4156140/750/44329_
1.50300.00.4831.78
165.232.76.155defaultGET / HTTP/1.1

15-4156150/727/58970_
0.89000.00.4542.09
165.232.76.155defaultGET /v2/_catalog HTTP/1.1

16-41-0/0/35786.
0.0117776200.00.0024.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44058.
0.0139856900.00.0031.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/33327.
1.9026058900.00.0022.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/29249.
0.01146239300.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29491.
0.01146238600.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25487.
0.01146238400.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19345.
0.01146238500.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27368.
0.01146238300.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12078.
0.00146239500.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.00146239400.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00146239200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00146239100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00174912700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00174912610.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00174912500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00174912400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00174912300.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00174912200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00174912100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34146253000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00174912000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00174911900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01174911800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00174911700.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00174911600.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001106318500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011106318400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001106318300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001106318200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001106318100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001106318000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011106317900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011127503800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001127503700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011127503600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001127503500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001127503400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011127499500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001127503300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001127503200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011763131300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011763131400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011763130900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011763131000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011763130700.00.000.03
127.0.0.1web1.

Found on 2023-12-23 20:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165bc6f5e22

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 16-Dec-2023 07:35:31 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  654 days 17 hours 54 minutes 57 seconds
Total accesses: 2754550 - Total Traffic: 2.0 GB
CPU Usage: u49.04 s10.14 cu.16 cs0 - .000105% CPU load
.0487 requests/sec - 37 B/second - 765 B/request
2 requests currently being processed, 8 idle workers
_C_W_.____.._...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41209070/300/224002_
1.16100.00.19160.64
165.22.74.203defaultGET /debug/default/view?panel=config HTTP/1.1

1-4182011/195/215006C
0.20000.30.14160.86
165.22.74.203defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41243240/518/212548_
1.88000.00.41153.31
165.22.74.203defaultGET /about HTTP/1.1

3-4191730/2474/215676W
10.53000.01.83156.19
165.22.74.203defaultGET /server-status HTTP/1.1

4-41204120/308/210051_
0.43800.00.25157.78
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

5-41-0/0/188091.
0.454033800.00.00143.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4181410/360/176283_
0.77300.00.29128.88
165.22.74.203defaultGET / HTTP/1.1

7-41151990/166/179411_
0.18400.00.12130.99
165.22.74.203defaultGET / HTTP/1.1

8-41120970/2306/165642_
10.03000.01.82124.93
165.22.74.203defaultGET /v2/_catalog HTTP/1.1

9-41208960/677/145140_
1.72100.00.50103.90
165.22.74.203defaultGET /.vscode/sftp.json HTTP/1.1

10-41-0/0/134383.
0.007442000.00.0097.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/104506.
0.007441900.00.0078.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41208970/680/75054_
2.48500.00.5155.28
165.22.74.203default\x16\x03\x01

13-41-0/0/50658.
0.0215532400.00.0037.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/42638.
0.0215532200.00.0030.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/57901.
0.5412105200.00.0041.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35445.
1.634366600.00.0024.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/43745.
3.3750745500.00.0030.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/32733.
1.2862591800.00.0022.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/29249.
0.0177529700.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29491.
0.0177529000.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25487.
0.0177528800.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19345.
0.0177528900.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27368.
0.0177528700.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12078.
0.0077529900.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.0077529800.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.0077529600.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.0077529500.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00106203200.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00106203110.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00106203000.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00106202900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00106202800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00106202700.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00106202600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.3477543400.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00106202500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00106202400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01106202300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00106202200.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00106202100.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001037609000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011037608900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001037608800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001037608700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001037608600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001037608500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011037608400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011058794300.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001058794200.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011058794100.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001058794000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001058793900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011058790000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001058793800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001058793700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011694421700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011694421800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011694421300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011694421400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011694421100.00.000.03
127.0.0.1web1.ambient-it.com.au<

Found on 2023-12-15 21:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165458534df

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 11-Dec-2023 21:32:37 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  650 days 7 hours 52 minutes 2 seconds
Total accesses: 2736742 - Total Traffic: 1.9 GB
CPU Usage: u54.91 s11.25 cu.11 cs0 - .000118% CPU load
.0487 requests/sec - 37 B/second - 764 B/request
3 requests currently being processed, 7 idle workers
CW____.__._C....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41120021/1554/222249C
6.63100.21.08159.27
159.203.94.228defaultGET /about HTTP/1.1

1-41277270/515/213389W
2.17000.00.33159.64
159.203.94.228defaultGET /server-status HTTP/1.1

2-41233390/447/210977_
0.46200.00.30152.09
159.203.94.228defaultGET / HTTP/1.1

3-4191730/558/213760_
1.54000.00.31154.67
159.203.94.228defaultGET /.vscode/sftp.json HTTP/1.1

4-41203710/184/208608_
0.53100.00.12156.73
159.203.94.228defaultGET /debug/default/view?panel=config HTTP/1.1

5-415990/571/186968_
2.24300.00.38142.71
159.203.94.228default\x16\x03\x01

6-41-0/0/175483.
5.954776700.00.00128.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41223490/1718/177775_
5.50300.01.18129.59
159.203.94.228defaultGET / HTTP/1.1

8-41120970/540/163876_
2.67300.00.37123.48
223.252.6.1defaultGET /api/ns.php HTTP/1.0

9-41-0/0/144463.
4.3810239100.00.00103.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41233410/427/133239_
1.33000.00.3196.67
159.203.94.228defaultGET /v2/_catalog HTTP/1.1

11-41223531/1739/103442C
5.51000.31.1977.16
159.203.94.228defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

12-41-0/0/74374.
0.0110238800.00.0054.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/50655.
0.0139351200.00.0037.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/42635.
0.0139352000.00.0030.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/57753.
0.0139351900.00.0041.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/34981.
0.0139351700.00.0024.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/43745.
3.3712568100.00.0030.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/32733.
1.2824414400.00.0022.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/29249.
0.0139352300.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29491.
0.0139351600.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25487.
0.0139351400.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19345.
0.0139351500.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27368.
0.0139351300.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12078.
0.0039352500.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.0039352400.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.0039352200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.0039352100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.0068025700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.0068025610.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.0068025500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.0068025400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.0068025300.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.0068025200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.0068025100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.3439366000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.0068025000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.0068024900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.0168024800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.0068024700.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.0068024600.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00999431500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01999431400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00999431300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00999431200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00999431100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00999431000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01999430900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011020616800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001020616700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011020616600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001020616500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001020616400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011020612500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001020616300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001020616200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011656244300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011656244400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011656243900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011656244000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011656243700.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2023-12-11 11:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165f2089abd

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 24-Nov-2023 17:58:22 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  633 days 4 hours 17 minutes 48 seconds
Total accesses: 2670321 - Total Traffic: 1.9 GB
CPU Usage: u73.52 s13.21 cu.56 cs0 - .00016% CPU load
.0488 requests/sec - 37 B/second - 765 B/request
2 requests currently being processed, 8 idle workers
____C.___........_..W...........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41260440/1509/216232_
4.96300.01.07155.29
207.154.240.169defaultGET / HTTP/1.1

1-4177660/1203/207843_
5.86000.00.92155.49
207.154.240.169defaultGET /about HTTP/1.1

2-41260460/1512/206223_
5.99400.01.23148.67
207.154.240.169defaultGET / HTTP/1.1

3-41138190/50/209149_
0.39100.00.05151.46
207.154.240.169defaultGET /.vscode/sftp.json HTTP/1.1

4-41118311/1367/205566C
4.89000.30.98154.38
207.154.240.169defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41-0/0/185143.
0.0129188600.00.00141.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4140400/1275/173005_
6.19500.00.98126.58
207.154.240.169default\x16\x03\x01

7-4152910/1310/174406_
6.15100.01.03127.30
207.154.240.169defaultGET /debug/default/view?panel=config HTTP/1.1

8-4140430/1275/160766_
6.48000.01.14121.55
207.154.240.169defaultGET /v2/_catalog HTTP/1.1

9-41-0/0/142425.
5.1410579110.00.00101.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/130137.
0.8429263000.00.0094.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/100242.
1.7529263400.00.0075.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/73746.
0.6829256100.00.0054.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/48189.
1.0129187900.00.0035.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/39415.
0.5031238400.00.0028.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/56020.
0.0535391700.00.0040.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/33904.
0.0235391300.00.0023.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41259050/1501/39634_
6.291700.01.1428.05
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

18-41-0/0/29670.
0.0235392200.00.0020.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/26696.
0.0135434300.00.0019.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41259090/1504/27803W
6.82000.01.1619.54
207.154.240.169defaultGET /server-status HTTP/1.1

21-41-0/0/25270.
0.44122783200.00.0018.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/18111.
4.99106560500.00.0012.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27309.
0.16128810000.00.0018.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12075.
0.00131210700.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8051.
0.00131210600.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5700.
0.00131210500.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9378.
0.00131210400.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1234.
0.00188675100.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3619.
0.01188670600.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2424.
0.37187530500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4575.
0.00188675000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1766.
0.01188673600.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6144.
0.06188671000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3379.
0.01188670900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2070.
0.01188672000.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.01225531200.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.00225531100.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.00225531000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.00225530900.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.00225530800.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00851266100.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01851266000.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00851265900.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00851265800.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00851265700.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00851265600.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01851265500.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01872451400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00872451300.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01872451200.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00872451100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00872451000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01872447100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00872450900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00872450800.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011508078800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011508078900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011508078400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011508078500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011508078200.00.000.03
127.0.0.1web1.amb

Found on 2023-11-24 07:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16585014c90

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 17-Nov-2023 03:38:37 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  625 days 13 hours 58 minutes 3 seconds
Total accesses: 2641051 - Total Traffic: 1.9 GB
CPU Usage: u164.54 s23.87 cu.31 cs0 - .000349% CPU load
.0489 requests/sec - 37 B/second - 765 B/request
3 requests currently being processed, 7 idle workers
W______.C.C_....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41225480/1307/213715W
12.51000.00.79153.54
142.93.158.96defaultGET /server-status HTTP/1.1

1-4115050/2128/205185_
14.20200.01.40153.51
142.93.158.96defaultGET / HTTP/1.1

2-4178960/2387/203582_
15.84300.01.70146.59
142.93.158.96default\x16\x03\x01

3-41129440/1901/207739_
18.22100.01.22150.41
142.93.158.96defaultGET /debug/default/view?panel=config HTTP/1.1

4-4174900/771/202906_
1.89000.00.43152.37
142.93.158.96defaultGET /v2/_catalog HTTP/1.1

5-41130570/2387/184086_
18.80300.01.76140.57
142.93.158.96defaultGET / HTTP/1.1

6-41190580/2181/170261_
15.45400.01.36124.31
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

7-41-0/0/172209.
0.017284700.00.00125.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41196231/4225/158162C
21.99100.22.74119.46
142.93.158.96defaultGET /about HTTP/1.1

9-41-0/0/140093.
0.017284600.00.00100.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41157581/2033/129186C
13.01000.31.2293.91
142.93.158.96defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

11-41146420/1531/98712_
12.44000.00.8973.87
142.93.158.96defaultGET /.vscode/sftp.json HTTP/1.1

12-41-0/0/73301.
13.0614754600.00.0053.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/47916.
0.0014754800.00.0035.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/39236.
0.0014754700.00.0027.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/55967.
0.0044668000.00.0040.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/33898.
1.1253725200.00.0023.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/38133.
3.0465571300.00.0026.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/29664.
0.1663171300.00.0020.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/26694.
0.1863171200.00.0019.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/26299.
3.5346938500.00.0018.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25270.
0.4457144700.00.0018.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/18111.
4.9940922000.00.0012.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27309.
0.1663171400.00.0018.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12075.
0.0065572200.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8051.
0.0065572100.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5700.
0.0065572000.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9378.
0.0065571900.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1234.
0.00123036500.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3619.
0.01123032000.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2424.
0.37121892000.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4575.
0.00123036400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1766.
0.01123035000.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6144.
0.06123032400.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3379.
0.01123032300.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2070.
0.01123033400.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.01159892700.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.00159892600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.00159892500.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.00159892400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.00159892300.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00785627500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01785627400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00785627300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00785627200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00785627100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00785627000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01785626900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01806812800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00806812700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01806812600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00806812500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00806812400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01806808500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00806812300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00806812200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011442440300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011442440400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011442439900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011442440000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011442439700.00.000.03
127.0.0.1w

Found on 2023-11-16 17:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165cc74b08f

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 06-Nov-2023 07:19:24 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  614 days 17 hours 38 minutes 50 seconds
Total accesses: 2598410 - Total Traffic: 1.9 GB
CPU Usage: u25.02 s5.91 cu.08 cs0 - 5.84e-5% CPU load
.0489 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
____C_._....._C..W..............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41162590/780/209690_
1.67100.00.61150.94
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

1-41169230/343/201820_
1.03300.00.23151.31
161.35.176.95defaultGET / HTTP/1.1

2-41244320/286/199575_
0.73100.00.19143.87
161.35.176.95defaultGET /debug/default/view?panel=config HTTP/1.1

3-41242210/150/204130_
0.15000.00.10148.05
161.35.176.95defaultGET /v2/_catalog HTTP/1.1

4-41128141/89/200124C
0.08100.20.04150.58
161.35.176.95defaultGET /about HTTP/1.1

5-41264050/68/180454_
0.10100.00.06137.89
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

6-41-0/0/166977.
0.019019300.00.00122.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41174320/423/170272_
0.62000.00.30124.39
161.35.176.95defaultGET /.vscode/sftp.json HTTP/1.1

8-41-0/0/153937.
0.933271100.00.00116.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/139736.
0.059016900.00.0099.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/127151.
0.019019200.00.0092.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/97178.
0.598477900.00.0072.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/72496.
0.079017300.00.0053.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41174160/413/47895_
0.86200.00.3735.81
161.35.176.95defaultGET / HTTP/1.1

14-41174171/397/37527C
0.83000.30.2926.90
161.35.176.95defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

15-41-0/0/55127.
0.551471100.00.0039.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/33305.
0.069019000.00.0023.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41174200/440/36892W
0.72000.00.3226.05
161.35.176.95defaultGET /server-status HTTP/1.1

18-41-0/0/29546.
0.156451000.00.0020.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/26599.
1.492186500.00.0018.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/25404.
0.019019700.00.0017.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/24894.
0.019017100.00.0018.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/17074.
0.009019600.00.0011.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27194.
0.019017000.00.0018.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12074.
0.019017600.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8050.
0.019017700.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5699.
0.019017800.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9377.
2.549019100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1234.
0.0029321300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3619.
0.0129316800.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2424.
0.3728176700.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4575.
0.0029321200.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1766.
0.0129319800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6144.
0.0629317200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3379.
0.0129317100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2070.
0.0129318200.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.0166177400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.0066177300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.0066177200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.0066177100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.0066177000.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00691912300.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01691912200.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00691912100.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00691912000.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00691911900.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00691911800.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01691911700.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01713097600.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00713097500.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01713097400.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00713097300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00713097200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01713093300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00713097100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00713097000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011348725100.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011348725200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011348724700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011348724800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011348724500.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2023-11-05 21:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1652957826b

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 26-Oct-2023 23:31:51 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  604 days 9 hours 51 minutes 17 seconds
Total accesses: 2554995 - Total Traffic: 1.8 GB
CPU Usage: u20.21 s4.84 cu.04 cs0 - 4.8e-5% CPU load
.0489 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
_C_..W..._.._.C_.._..._.........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4163370/178/206550_
0.37000.00.15148.85
162.243.184.251defaultGET /.vscode/sftp.json HTTP/1.1

1-4169281/46/198534C
0.31100.20.04148.88
162.243.184.251defaultGET /about HTTP/1.1

2-41125500/16/196204_
0.03100.00.03141.20
162.243.184.251defaultGET /debug/default/view?panel=config HTTP/1.1

3-41-0/0/200610.
0.013596300.00.00145.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41-0/0/197354.
0.013596200.00.00148.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-4164010/205/177244W
0.35000.00.18135.72
162.243.184.251defaultGET /server-status HTTP/1.1

6-41-0/0/164506.
0.023596700.00.00120.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/167126.
0.023597200.00.00122.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/151724.
0.40178200.00.00115.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4157370/192/137900_
0.38000.00.1498.05
162.243.184.251defaultGET /v2/_catalog HTTP/1.1

10-41-0/0/125902.
0.023597400.00.0091.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/97046.
0.033597500.00.0072.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-4164080/179/72208_
1.002200.00.1653.25
36.99.136.128hannahschristmasgift.comGET / HTTP/1.1

13-41-0/0/45775.
0.023597100.00.0034.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-4164091/176/36687C
0.31000.30.1526.32
162.243.184.251defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

15-4164100/182/53179_
0.78200.00.2938.04
162.243.184.251defaultGET / HTTP/1.1

16-41-0/0/32498.
0.023597300.00.0022.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/36081.
0.023596900.00.0025.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-4164110/195/28280_
0.25300.00.1619.64
162.243.184.251defaultGET / HTTP/1.1

19-41-0/0/25835.
0.023597000.00.0018.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/24621.
0.023596800.00.0017.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/24540.
0.84465700.00.0018.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-4164130/291/15575_
0.32300.00.1310.57
162.243.184.251default\x16\x03\x01

23-41-0/0/27186.
0.013596600.00.0018.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12067.
0.883631400.00.008.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8045.
0.0169877200.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5118.
0.0169877300.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8464.
0.0069878700.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1232.
0.0069878600.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3616.
0.0069878500.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2373.
0.0069878400.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4573.
0.0069878300.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1764.
0.0069878200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6141.
1.3862790500.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3375.
0.0069878100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2065.
0.0069878000.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2363.
0.0069877900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5997.
0.0069877800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1727.
0.0069877700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5082.
0.0069877600.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9001.
0.0069877500.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00602707000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01602706900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00602706800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00602706700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00602706600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00602706500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01602706400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01623892300.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00623892200.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01623892100.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00623892000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00623891900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01623888000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00623891800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00623891700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011259519700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011259519800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011259519300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011259519400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011259519100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTT

Found on 2023-10-26 13:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1652ce92c30

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 17-Oct-2023 01:21:58 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  594 days 11 hours 41 minutes 24 seconds
Total accesses: 2512791 - Total Traffic: 1.8 GB
CPU Usage: u34.01 s6.1 cu.05 cs0 - 7.82e-5% CPU load
.0489 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
...__._.CC_...W...__.._.........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/204521.
0.014121500.00.00147.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41-0/0/196173.
0.194121400.00.00146.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41-0/0/193723.
0.164122900.00.00139.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41108680/343/198020_
1.16000.00.20143.94
162.243.186.177defaultGET /v2/_catalog HTTP/1.1

4-41198050/212/195046_
1.02300.00.19146.85
162.243.186.177default\x16\x03\x01

5-41-0/0/174944.
0.014122800.00.00134.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41318440/183/162753_
0.21000.00.11119.22
162.243.186.177defaultGET /.vscode/sftp.json HTTP/1.1

7-41-0/0/164489.
0.014122000.00.00120.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41318461/186/148551C
0.87100.20.10113.03
162.243.186.177defaultGET /about HTTP/1.1

9-41318471/184/135540C
0.62000.30.1996.31
162.243.186.177defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-41318480/181/123856_
0.64100.00.1190.52
162.243.186.177defaultGET /debug/default/view?panel=config HTTP/1.1

11-41-0/0/96760.
0.014121700.00.0072.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/70937.
0.014121600.00.0052.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/44680.
0.014121300.00.0033.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41248220/199/35494W
0.40000.00.1425.46
162.243.186.177defaultGET /server-status HTTP/1.1

15-41-0/0/50763.
0.014121200.00.0036.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/30413.
0.014121000.00.0020.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/34733.
0.024124900.00.0024.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41248240/208/26872_
0.84300.00.1418.58
162.243.186.177defaultGET / HTTP/1.1

19-41248250/193/24374_
0.34200.00.1917.19
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

20-41-0/0/23277.
0.004481600.00.0016.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/24180.
0.104122500.00.0017.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41248280/206/14535_
0.64200.00.179.88
162.243.186.177defaultGET / HTTP/1.1

23-41-0/0/26982.
0.004481900.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/11786.
0.074125000.00.008.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8043.
0.0157265600.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5116.
0.0157265900.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8463.
0.0157266000.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1231.
0.0157265800.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3615.
0.0157265500.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2372.
0.0157265400.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4572.
0.0157265300.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1763.
0.0157265200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5784.
0.0157265100.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3374.
0.0157265000.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2064.
0.0157264900.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2362.
0.0157264700.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5996.
0.0157264600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1726.
0.0157264800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5081.
0.0157264500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9000.
15.3925126300.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00516967600.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01516967500.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00516967400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00516967300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00516967200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00516967100.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01516967000.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01538152900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00538152800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01538152700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00538152600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00538152500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01538148600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00538152400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00538152300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011173780400.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011173780500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011173780000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011173780100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011173779800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTI

Found on 2023-10-16 15:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165d505b4d5

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 27-Jul-2023 01:10:36 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  512 days 11 hours 30 minutes 2 seconds
Total accesses: 2186008 - Total Traffic: 1.6 GB
CPU Usage: u65.24 s15.2 cu.07 cs0 - .000182% CPU load
.0494 requests/sec - 38 B/second - 772 B/request
2 requests currently being processed, 8 idle workers
W__.______..C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41266750/166/181023W
0.93000.00.10131.50
165.22.74.203defaultGET /server-status HTTP/1.1

1-41253460/760/172873_
1.74000.00.55130.61
165.22.74.203defaultGET /v2/_catalog HTTP/1.1

2-41258520/804/170615_
2.19300.00.59123.73
165.22.74.203defaultGET / HTTP/1.1

3-41-0/0/174762.
1.471812600.00.00127.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41258530/780/172790_
5.47100.00.57131.27
165.22.74.203defaultGET /.vscode/sftp.json HTTP/1.1

5-41266760/157/156205_
0.48000.00.12120.75
165.22.74.203defaultGET /about HTTP/1.1

6-413540/380/144752_
1.71400.00.22106.85
210.116.91.94defaultGET /wordpress/wp-admin/atomlib.php HTTP/1.1

7-41192590/93/145455_
0.08400.00.08107.16
165.22.74.203defaultGET / HTTP/1.1

8-41281300/977/134736_
5.61500.00.71102.89
165.22.74.203default\x16\x03\x01

9-41298630/525/119639_
1.68100.00.4185.46
165.22.74.203defaultGET /debug/default/view?panel=config HTTP/1.1

10-41-0/0/106424.
7.453061300.00.0077.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/84682.
0.593061200.00.0063.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41266771/152/57281C
0.52000.30.0943.20
165.22.74.203defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

13-41-0/0/35936.
0.0010095900.00.0027.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/30650.
0.0010095800.00.0022.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/38109.
0.0129872400.00.0027.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/23362.
0.0129872000.00.0016.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/28818.
1.6920332540.00.0020.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/23009.
2.0415543100.00.0015.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/17178.
2.1320330700.00.0012.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/19672.
1.3520331700.00.0013.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/17695.
3.367681600.00.0013.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/10884.
3.0215727100.00.007.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/23420.
0.0029872700.00.0016.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/8748.
0.0029872600.00.006.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5671.
0.0188673400.00.004.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3157.
0.0188674900.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7713.
0.0088674800.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/758.
0.0088674700.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2768.
0.0088674600.00.001.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1665.
0.0088674500.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/3649.
0.0088674400.00.002.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1238.
0.0188674300.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5776.
0.0088674200.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3366.
0.0088674100.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2056.
0.0088674000.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2354.
0.0088673900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5988.
0.0188673800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1718.
0.0088673700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5073.
0.0088673600.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7004.
0.0088673500.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2032.
0.89465239200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1108.
0.01465233000.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/409.
0.01465232600.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/290.
0.01465231000.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2317.
6.36419186600.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1798.
4.05429353600.00.001.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/213.
0.01465232400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/397.
0.01465229000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/657.
0.01465232000.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2698.
5.97409408500.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/212.
0.01465232800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/212.
0.01465230600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/228.
0.01465232700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/229.
0.01465232500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1649.
2.40433439300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01465232200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01465232300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01465231800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01465231900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01465231600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HT

Found on 2023-07-26 15:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1654c6ee8cf

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Wednesday, 28-Jun-2023 14:47:15 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  484 days 1 hour 6 minutes 41 seconds
Total accesses: 2069248 - Total Traffic: 1.5 GB
CPU Usage: u94.33 s19.83 cu.16 cs0 - .000273% CPU load
.0495 requests/sec - 37 B/second - 761 B/request
3 requests currently being processed, 7 idle workers
C__C_W.__._..._.................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4110281/828/172820C
4.03000.30.54124.29
162.243.161.105defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-4179220/1279/163592_
5.28300.00.86120.38
162.243.161.105defaultGET / HTTP/1.1

2-41225900/1168/163209_
5.972800.00.66117.55
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-4112501/439/166896C
2.06100.20.28121.51
162.243.161.105defaultGET /about HTTP/1.1

4-41257570/2145/162763_
7.26400.01.37121.66
162.243.161.105default\x16\x03\x01

5-41310580/1122/146300W
4.62000.00.65109.15
162.243.161.105defaultGET /server-status HTTP/1.1

6-41-0/0/135679.
0.5519919700.00.0098.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41270320/2094/139049_
7.74100.01.49102.29
162.243.161.105defaultGET /debug/default/view?panel=config HTTP/1.1

8-41170290/1145/127987_
6.28000.00.7393.65
162.243.161.105defaultGET /.vscode/sftp.json HTTP/1.1

9-41-0/0/113023.
2.248875900.00.0080.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41310590/1100/101344_
5.20000.00.7274.15
162.243.161.105defaultGET /v2/_catalog HTTP/1.1

11-41-0/0/80736.
0.5619919500.00.0057.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/55104.
2.1816074300.00.0040.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/35492.
0.0049245300.00.0027.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41234770/3065/28744_
10.56200.02.0020.66
162.243.161.105defaultGET / HTTP/1.1

15-41-0/0/37683.
0.0049245200.00.0026.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/22289.
0.0049245100.00.0015.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/24714.
2.0855432900.00.0017.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/21631.
5.9764424500.00.0014.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15549.
0.0064425200.00.0011.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16905.
0.0064425100.00.0011.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13594.
0.0064425000.00.0010.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8590.
0.0064424900.00.005.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20688.
0.0064424800.00.0014.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/8258.
0.9754231600.00.006.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5669.
0.0086126400.00.004.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3155.
0.0086126300.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7711.
0.0086126200.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/756.
0.0086126100.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2766.
0.0686123100.00.001.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1663.
0.0086126000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/3647.
3.7686124400.00.002.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1236.
0.0086125900.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5125.
0.0086125800.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3364.
0.0086125700.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2054.
0.0086125600.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2352.
0.0086125500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5986.
0.0086125400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1716.
0.0086125300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5071.
0.0186125280.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7002.
0.0086125100.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2032.
0.89219579100.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1108.
0.01219572900.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/409.
0.01219572500.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/290.
0.01219570900.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2317.
6.36173526500.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1798.
4.05183693500.00.001.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/213.
0.01219572300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/397.
0.01219568900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/657.
0.01219571900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2698.
5.97163748400.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/212.
0.01219572700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/212.
0.01219570500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/228.
0.01219572600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/229.
0.01219572400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1649.
2.40187779200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01219572100.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01219572200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01219571700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01219571800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01219571500.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2023-06-28 04:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165ed23bc02

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 09-Jun-2023 18:32:03 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  465 days 4 hours 51 minutes 29 seconds
Total accesses: 1992164 - Total Traffic: 1.4 GB
CPU Usage: u45.73 s10.54 cu.05 cs0 - .00014% CPU load
.0496 requests/sec - 37 B/second - 762 B/request
2 requests currently being processed, 8 idle workers
_____.CW___.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4129880/114/165714_
0.14000.00.08119.40
68.183.13.153defaultGET /v2/_catalog HTTP/1.1

1-41164350/299/158315_
0.60100.00.22116.48
68.183.13.153defaultGET /.vscode/sftp.json HTTP/1.1

2-41182790/86/156178_
0.78100.00.05112.75
68.183.13.153defaultGET /debug/default/view?panel=config HTTP/1.1

3-41171770/547/160610_
1.481700.00.38117.09
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

4-4166790/1493/157161_
3.78500.01.09118.03
68.183.13.153default\x16\x03\x01

5-41-0/0/141256.
0.00937200.00.00105.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41102421/561/131350C
1.32000.30.5794.98
68.183.13.153defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-41303850/55/133300W
0.38000.00.0498.18
68.183.13.153defaultGET /server-status HTTP/1.1

8-41123390/148/120855_
1.13000.00.1188.95
68.183.13.153defaultGET /about HTTP/1.1

9-41123400/171/108305_
0.86400.00.1477.46
68.183.13.153defaultGET / HTTP/1.1

10-41162850/84/97868_
0.10300.00.0771.91
68.183.13.153defaultGET / HTTP/1.1

11-41-0/0/78028.
0.011537500.00.0055.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/54611.
0.0018148600.00.0040.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/33828.
0.0018148500.00.0026.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/24592.
0.0156766600.00.0017.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/37674.
0.0156766000.00.0026.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/22282.
0.0156766500.00.0015.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/24297.
0.0156766700.00.0016.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/20586.
0.0156766300.00.0014.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15542.
0.0156765800.00.0011.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16898.
0.0156765700.00.0011.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13066.
0.0156765900.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8507.
0.0156764400.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20039.
0.0156763500.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7828.
0.0156764700.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5580.
0.0156756500.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3152.
0.0156763800.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7707.
0.0156763300.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/752.
0.0156763700.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2762.
0.0156764100.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1659.
0.0156763400.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1698.
0.0156763600.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1232.
0.0156762800.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5122.
7.233372600.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3360.
0.0156763000.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2051.
1.3141604500.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2350.
0.0156762200.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5983.
0.0156762600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1714.
0.0156762000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4015.
0.0156762300.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7001.
0.0156761900.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2032.
0.8956768000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1108.
0.0156761800.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/409.
0.0156761400.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/290.
0.0156759800.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2317.
6.3610715400.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1798.
4.0520882400.00.001.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/213.
0.0156761200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/397.
0.0156757800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/657.
0.0156760800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2698.
5.97937300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/212.
0.0156761600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/212.
0.0156759400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/228.
0.0156761500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/229.
0.0156761300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1649.
2.4024968000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.0156761000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.0156761100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.0156760600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.0156760700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.0156760400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-41

Found on 2023-06-09 08:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16590efe121

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 26-May-2023 18:33:46 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  451 days 4 hours 53 minutes 12 seconds
Total accesses: 1936644 - Total Traffic: 1.4 GB
CPU Usage: u101.04 s11.11 cu.06 cs0 - .000288% CPU load
.0497 requests/sec - 37 B/second - 762 B/request
2 requests currently being processed, 8 idle workers
_C.__._.___......W_.............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41272430/448/161453_
0.83200.00.36116.20
139.144.183.106defaultGET / HTTP/1.1

1-41272411/443/153827C
1.19000.30.32113.12
139.144.183.106defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41-0/0/153212.
0.103069200.00.00110.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41151020/464/158270_
1.26100.00.39115.34
139.144.183.106defaultGET /debug/default/view?panel=config HTTP/1.1

4-4146590/226/153022_
0.24000.00.15114.95
139.144.183.106defaultGET /about HTTP/1.1

5-41-0/0/137637.
0.013069100.00.00103.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41290230/128/129502_
0.16100.00.1093.46
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

7-41-0/0/131662.
0.003069000.00.0096.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41290250/131/119106_
0.15000.00.1087.64
139.144.183.106defaultGET /v2/_catalog HTTP/1.1

9-41188090/699/105245_
1.41300.00.5074.97
139.144.183.106defaultGET / HTTP/1.1

10-41187940/708/94706_
1.58400.00.5469.33
139.144.183.106default\x16\x03\x01

11-41-0/0/76881.
1.633355500.00.0055.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/53776.
0.0210984400.00.0039.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/33820.
0.0210984000.00.0026.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/24588.
0.0410373100.00.0017.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/37670.
0.0210985500.00.0026.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/22278.
1.074998000.00.0015.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41151960/484/22653W
1.27000.00.4015.76
139.144.183.106defaultGET /server-status HTTP/1.1

18-41151970/467/19071_
1.19000.00.3613.06
139.144.183.106defaultGET /.vscode/sftp.json HTTP/1.1

19-41-0/0/15538.
0.0010985900.00.0011.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16893.
0.734992900.00.0011.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13062.
0.0010985800.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8503.
0.0116435300.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20035.
0.0116435100.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7824.
0.0116434800.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5576.
0.00345076800.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3148.
0.00345076700.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7703.
0.00345076600.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/748.
0.00345076500.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2758.
0.01345074700.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1655.
0.00345076400.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1694.
0.00345076300.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1228.
5.11340916900.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/2752.
31.89318931000.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3356.
0.00345076200.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1414.
0.00345076100.00.000.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2346.
0.00345076000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5979.
0.00345075900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1710.
0.00345075800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4011.
0.00345075700.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/6997.
30.70316943500.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/1820.
7.20502053100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1104.
0.13532411500.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/405.
0.00532414100.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/286.
0.13532410100.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/215.
0.00532414000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/208.
0.00532413900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/208.
0.00532413800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/393.
0.54528385700.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/653.
0.80528395600.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/195.
0.00532413700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/208.
0.00532413600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/208.
0.00532413500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/224.
0.00532413400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/225.
0.00532413300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/192.
0.00532413200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/291.
0.51528395800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/121.
0.00532413100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/108.
0.00532413000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/108.
0.00532412900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/108.
0.00532412800.00.000.03
127.0.0.1web1.ambient-it.com.auOP

Found on 2023-05-26 08:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1656f4b4b6b

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 19-May-2023 05:04:58 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  443 days 15 hours 24 minutes 23 seconds
Total accesses: 1906088 - Total Traffic: 1.4 GB
CPU Usage: u173.75 s23.11 cu.09 cs0 - .000514% CPU load
.0497 requests/sec - 37 B/second - 762 B/request
2 requests currently being processed, 8 idle workers
_C___.__.__.W...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4117620/665/158523_
1.42000.00.50113.91
68.183.13.153defaultGET /.vscode/sftp.json HTTP/1.1

1-4148601/762/151844C
3.03000.30.50111.74
68.183.13.153defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-4158230/1452/151052_
7.54000.00.96108.61
68.183.13.153defaultGET /about HTTP/1.1

3-41216610/2466/155672_
8.71000.01.70113.17
68.183.13.153defaultGET /v2/_catalog HTTP/1.1

4-41106510/8026/151118_
26.70100.05.07113.57
68.183.13.153defaultGET /debug/default/view?panel=config HTTP/1.1

5-41-0/0/135433.
0.0112517400.00.00101.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41122630/1484/127644_
5.51400.01.0392.07
68.183.13.153default\x16\x03\x01

7-4158240/1481/129410_
6.751500.01.0395.23
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

8-41-0/0/118144.
5.8312517500.00.0086.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41152900/572/102980_
2.34300.00.3973.43
68.183.13.153defaultGET / HTTP/1.1

10-4156730/1548/93678_
6.62300.00.9968.45
68.183.13.153defaultGET / HTTP/1.1

11-41-0/0/75709.
0.0012516200.00.0054.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41110380/3106/52608W
12.19000.02.0638.68
68.183.13.153defaultGET /server-status HTTP/1.1

13-41-0/0/33210.
5.2214738900.00.0025.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/23064.
0.0033040800.00.0016.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/36339.
0.0033040700.00.0025.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/21157.
0.0033040600.00.0014.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/22165.
0.0033040500.00.0015.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/18596.
0.0033040400.00.0012.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15291.
0.0232739100.00.0010.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16628.
0.00171777900.00.0011.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13059.
5.86145292700.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8500.
0.00171777800.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20033.
0.00171777700.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7821.
0.00171777600.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5576.
0.00279743900.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3148.
0.00279743800.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7703.
0.00279743700.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/748.
0.00279743600.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2758.
0.01279741900.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1655.
0.00279743500.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1694.
0.00279743400.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1228.
5.11275584000.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/2752.
31.89253598100.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3356.
0.00279743300.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1414.
0.00279743200.00.000.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2346.
0.00279743100.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5979.
0.00279743000.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1710.
0.00279742900.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4011.
0.00279742800.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/6997.
30.70251610600.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/1820.
7.20436720200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1104.
0.13467078600.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/405.
0.00467081200.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/286.
0.13467077200.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/215.
0.00467081100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/208.
0.00467081000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/208.
0.00467080900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/393.
0.54463052900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/653.
0.80463062800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/195.
0.00467080800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/208.
0.00467080700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/208.
0.00467080600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/224.
0.00467080500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/225.
0.00467080400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/192.
0.00467080300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/291.
0.51463063000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/121.
0.00467080200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/108.
0.00467080100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/108.
0.00467080000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/108.
0.00467079900.00.000.03
127.0.0.1web1.ambient-it.com.auOP

Found on 2023-05-18 19:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16597f9064c

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 08-May-2023 11:54:59 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  432 days 22 hours 14 minutes 25 seconds
Total accesses: 1865134 - Total Traffic: 1.3 GB
CPU Usage: u152.97 s22.31 cu.05 cs0 - .000469% CPU load
.0499 requests/sec - 38 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
_.C______W_.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4158280/486/155425_
0.86100.00.31111.83
137.184.106.30defaultGET /debug/default/view?panel=config HTTP/1.1

1-41-0/0/148758.
0.0010647900.00.00109.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41299291/1475/148308C
5.40000.30.89106.40
137.184.106.30defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-41226110/1510/152194_
4.491800.00.98110.78
147.78.47.249madonnaslilyflorist.com.auGET /public/_ignition/health-check/ HTTP/1.1

4-41106510/4002/147094_
12.65200.02.44110.94
137.184.106.30defaultGET / HTTP/1.1

5-41171870/1399/132678_
4.57000.00.9099.63
137.184.106.30defaultGET /.vscode/sftp.json HTTP/1.1

6-4153330/474/123764_
0.53300.00.3089.50
137.184.106.30defaultGET / HTTP/1.1

7-41134930/1591/125387_
5.13000.01.0992.48
137.184.106.30defaultGET /v2/_catalog HTTP/1.1

8-41196280/1924/114705_
6.56400.01.3184.38
137.184.106.30default\x16\x03\x01

9-41196260/1922/101382W
6.63000.01.3272.35
137.184.106.30defaultGET /server-status HTTP/1.1

10-41293240/1744/89823_
4.98000.01.1665.99
137.184.106.30defaultGET /about HTTP/1.1

11-41-0/0/74681.
0.0110647800.00.0053.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/49502.
0.0010647700.00.0036.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/32391.
4.8335490100.00.0025.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/23063.
1.9379197300.00.0016.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/36338.
7.1649837000.00.0025.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/21156.
0.5079197100.00.0014.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/22164.
1.4479197200.00.0015.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/18595.
2.5559671500.00.0012.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15275.
0.0079198100.00.0010.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16628.
0.0079198000.00.0011.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13059.
5.8652712800.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8500.
0.0079197900.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20033.
0.0079197800.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7821.
0.0079197700.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5576.
0.00187164000.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3148.
0.00187163900.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7703.
0.00187163800.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/748.
0.00187163700.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2758.
0.01187162000.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1655.
0.00187163600.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1694.
0.00187163500.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1228.
5.11183004100.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/2752.
31.89161018300.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3356.
0.00187163400.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1414.
0.00187163300.00.000.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2346.
0.00187163200.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5979.
0.00187163100.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1710.
0.00187163000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4011.
0.00187162900.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/6997.
30.70159030700.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/1820.
7.20344140300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1104.
0.13374498700.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/405.
0.00374501300.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/286.
0.13374497300.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/215.
0.00374501200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/208.
0.00374501100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/208.
0.00374501000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/393.
0.54370473000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/653.
0.80370482900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/195.
0.00374500900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/208.
0.00374500800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/208.
0.00374500700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/224.
0.00374500600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/225.
0.00374500500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/192.
0.00374500400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/291.
0.51370483100.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/121.
0.00374500300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/108.
0.00374500200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/108.
0.00374500100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/108.
0.00374500000.00.000.03
127.0.0.1

Found on 2023-05-08 01:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16506981879

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 05-May-2023 02:56:23 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  429 days 13 hours 15 minutes 48 seconds
Total accesses: 1848308 - Total Traffic: 1.3 GB
CPU Usage: u158.49 s21.23 cu.08 cs0 - .000484% CPU load
.0498 requests/sec - 38 B/second - 763 B/request
10 requests currently being processed, 0 idle workers
CCCCCWCCCC......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41319611/264/153847C
2.19000.30.15110.86
143.198.72.96defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

1-41105441/1038/147547C
4.52000.20.65108.95
143.198.72.96defaultGET /.env HTTP/1.1

2-41106491/2314/146713C
7.70000.21.50105.34
143.198.72.96defaultGET /.git/config HTTP/1.1

3-41106501/2258/150532C
6.49000.21.43109.60
143.198.72.96defaultGET /info.php HTTP/1.1

4-41106511/2336/145428C
7.92000.21.36109.86
143.198.72.96defaultGET /.vscode/sftp.json HTTP/1.1

5-41163800/2423/131115W
7.50000.01.6698.58
143.198.72.96defaultGET /server-status HTTP/1.1

6-4135451/923/123179C
4.65000.20.5889.10
143.198.72.96defaultGET /.DS_Store HTTP/1.1

7-4157651/1748/123794C
6.21009.11.2591.39
143.198.72.96defaultGET / HTTP/1.1

8-41196281/222/113003C
2.12000.30.1083.18
143.198.72.96defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

9-41196261/236/99696C
1.64002.70.1571.19
143.198.72.96defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

10-41-0/0/88079.
0.006338300.00.0064.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/74488.
0.0050046600.00.0053.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/49454.
5.345366500.00.0036.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/32391.
4.836338500.00.0025.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/23063.
1.9350045700.00.0016.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/36338.
7.1620685400.00.0025.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/21156.
0.5050045500.00.0014.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/22164.
1.4450045600.00.0015.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/18595.
2.5530519800.00.0012.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15275.
0.0050046500.00.0010.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16628.
0.0050046400.00.0011.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13059.
5.8623561200.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8500.
0.0050046300.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20033.
0.0050046200.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7821.
0.0050046100.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5576.
0.00158012400.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3148.
0.00158012300.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7703.
0.00158012200.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/748.
0.00158012100.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2758.
0.01158010400.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1655.
0.00158012000.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1694.
0.00158011900.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1228.
5.11153852500.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/2752.
31.89131866600.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3356.
0.00158011800.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1414.
0.00158011700.00.000.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2346.
0.00158011600.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5979.
0.00158011500.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1710.
0.00158011400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4011.
0.00158011300.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/6997.
30.70129879100.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/1820.
7.20314988700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1104.
0.13345347100.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/405.
0.00345349700.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/286.
0.13345345700.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/215.
0.00345349600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/208.
0.00345349500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/208.
0.00345349400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/393.
0.54341321400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/653.
0.80341331300.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/195.
0.00345349300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/208.
0.00345349200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/208.
0.00345349100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/224.
0.00345349000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/225.
0.00345348900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/192.
0.00345348800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/291.
0.51341331500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/121.
0.00345348700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/108.
0.00345348600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/108.
0.00345348500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/108.
0.00345348400.0

Found on 2023-05-04 16:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165525840ad

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 13-Apr-2023 23:17:26 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  408 days 9 hours 36 minutes 52 seconds
Total accesses: 1761024 - Total Traffic: 1.3 GB
CPU Usage: u479.42 s39.32 cu.2 cs0 - .00147% CPU load
.0499 requests/sec - 38 B/second - 767 B/request
11 requests currently being processed, 0 idle workers
CCWCCCCCCCC.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41118701/208/146895C
6.70000.20.20106.00
45.55.193.222defaultGET /info.php HTTP/1.1

1-4143291/305/141703C
6.58010.30.22105.04
45.55.193.222defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41256370/0/139010W
13.78000.00.00100.46
45.55.193.222defaultGET /server-status HTTP/1.1

3-4183921/216/143043C
2.75009.10.19104.61
45.55.193.222defaultGET / HTTP/1.1

4-4183931/201/138342C
4.42000.30.18105.47
45.55.193.222defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

5-41252581/2967/125831C
74.02000.21.9094.86
45.55.193.222defaultGET /debug/default/view?panel=config HTTP/1.1

6-4178101/194/120059C
6.09010.20.1086.97
45.55.193.222defaultGET /.git/config HTTP/1.1

7-4198011/39/118549C
0.75010.20.0287.66
45.55.193.222defaultGET /telescope/requests HTTP/1.1

8-4169871/126/108419C
4.03002.70.1080.23
45.55.193.222defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

9-41265431/1322/97243C
36.14000.20.9769.46
45.55.193.222defaultGET /.DS_Store HTTP/1.1

10-4186621/98/84064C
3.23000.20.0562.10
45.55.193.222defaultGET /.env HTTP/1.1

11-41-0/0/71619.
0.00819900.00.0051.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/45903.
0.00819800.00.0033.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/26848.
0.0189284800.00.0021.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/22013.
0.0189285200.00.0016.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/33882.
0.0189285400.00.0024.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/19460.
0.0189286600.00.0013.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/20605.
0.0189284900.00.0014.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/17157.
0.0189286000.00.0011.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15271.
0.0189285500.00.0010.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/15257.
0.0189285600.00.0010.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/10012.
0.0189285300.00.007.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8497.
0.0189285000.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20030.
0.0189285100.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7818.
0.0189286800.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5575.
0.0189286900.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3147.
0.0189284700.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7702.
98.066704500.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/747.
0.0189284500.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2756.
0.0189284600.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1654.
0.0189284300.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1693.
0.0189284200.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/979.
0.0189284400.00.000.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1481.
0.0189284000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3355.
27.6561661300.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1413.
0.0089287000.00.000.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2345.
1.6087774300.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5978.
91.604129900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1709.
25.3266744900.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4010.
44.5952982900.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/5615.
39.9256104900.00.004.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/1820.
7.20132235100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1104.
0.13162593500.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/405.
0.00162596100.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/286.
0.13162592100.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/215.
0.00162596000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/208.
0.00162595900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/208.
0.00162595800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/393.
0.54158567700.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/653.
0.80158577600.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/195.
0.00162595700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/208.
0.00162595600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/208.
0.00162595500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/224.
0.00162595400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/225.
0.00162595300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/192.
0.00162595200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/291.
0.51158577800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/121.
0.00162595100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/108.
0.00162595000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/108.
0.00162594900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/108.
0.00162594800.00

Found on 2023-04-13 13:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16518b5495d

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 21-Mar-2023 04:24:38 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  384 days 14 hours 44 minutes 4 seconds
Total accesses: 1663513 - Total Traffic: 1.2 GB
CPU Usage: u383.22 s38.13 cu.38 cs0 - .00127% CPU load
.0501 requests/sec - 38 B/second - 768 B/request
7 requests currently being processed, 3 idle workers
C_CC.CWC__.....C................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41212931/831/138524C
4.48000.30.65100.17
167.71.48.191defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-4172410/207/134003_
0.89100.00.1499.68
167.71.48.191default\x16\x03\x01

2-4190991/264/134157C
1.84000.30.2197.00
167.71.48.191defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

3-41140531/338/136508C
1.94000.20.2899.85
167.71.48.191defaultGET /.git/config HTTP/1.1

4-41-0/0/131909.
36.2982900.00.00100.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41273211/934/119180C
7.09000.20.6589.97
167.71.48.191defaultGET /info.php HTTP/1.1

6-41307850/2/113782W
0.01000.00.0082.54
167.71.48.191defaultGET /server-status HTTP/1.1

7-41321681/1441/112168C
6.73000.20.8983.05
167.71.48.191defaultGET /.DS_Store HTTP/1.1

8-4158800/1109/102441_
3.08200.00.7375.93
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

9-4172430/200/94482_
0.62000.00.1567.46
167.71.48.191defaultHELP

10-41-0/0/77225.
6.564496000.00.0057.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/71491.
6.444496100.00.0051.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/44516.
8.1257977700.00.0032.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/26766.
7.5357541600.00.0021.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/21260.
0.0159911300.00.0015.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41241091/6321/33032C
107.67000.23.9523.64
167.71.48.191defaultGET /debug/default/view?panel=config HTTP/1.1

16-41-0/0/19450.
0.0059911200.00.0013.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/18744.
0.0059911100.00.0013.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/15239.
71.1157491900.00.0010.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/14830.
0.0059911000.00.0010.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/15172.
0.0059910900.00.0010.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/9885.
0.0059910800.00.007.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/7251.
0.0059910700.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20022.
0.0059910600.00.0014.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7080.
0.0059910500.00.005.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5568.
16.77213827000.00.004.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3066.
0.00338974800.00.002.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/3713.
0.00338974700.00.002.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/741.
0.01338974600.00.000.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2750.
2.44334812100.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1648.
0.00338974500.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1687.
4.36334822300.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/973.
14.26324256300.00.000.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1474.
0.00338974400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/2047.
27.13338973200.00.001.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1337.
0.00338974300.00.000.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2207.
18.41338973000.00.001.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/250.
0.00338974200.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/654.
0.01338974110.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/2216.
3.43334822500.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/4005.
0.00338974000.00.002.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/470.
0.01755665300.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.291751125800.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.501748561000.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.011752747000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.011752747200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.011752746800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.011752746500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.011752746700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.011752746600.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.011752746200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.011752746100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.011752746400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.011752746300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.011752745900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.011752745800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.011752745700.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.011752746000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.011752745500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.011752745200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.011752745300.00.000.03

Found on 2023-03-20 18:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16535936748

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 18-Mar-2023 01:01:43 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  381 days 11 hours 21 minutes 9 seconds
Total accesses: 1649774 - Total Traffic: 1.2 GB
CPU Usage: u576.37 s50.38 cu.32 cs0 - .0019% CPU load
.0501 requests/sec - 38 B/second - 768 B/request
10 requests currently being processed, 0 idle workers
.C.CCCCW.CWC...W................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/137287.
99.253628500.00.0099.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-4115661/1698/132631C
31.55000.21.1798.75
161.35.190.56defaultGET /.DS_Store HTTP/1.1

2-41-0/0/133031.
0.013628400.00.0096.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-4199771/1795/135368C
31.33000.21.4299.06
161.35.190.56defaultGET /.env HTTP/1.1

4-4199781/1706/130578C
30.56000.31.20100.02
161.35.190.56defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

5-41192411/1944/118242C
39.39019.11.4589.32
161.35.190.56defaultGET / HTTP/1.1

6-41321671/177/113562C
0.77000.20.1482.42
161.35.190.56defaultGET /info.php HTTP/1.1

7-41321680/158/110885W
1.64000.00.0982.26
161.35.190.56defaultGET /telescope/requests HTTP/1.1

8-41-0/0/101331.
18.373627100.00.0075.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41108981/1763/94171C
32.24000.21.1867.25
161.35.190.56defaultGET /debug/default/view?panel=config HTTP/1.1

10-4121900/238/76072W
0.89000.00.1756.33
161.35.190.56defaultGET /.vscode/sftp.json HTTP/1.1

11-4121911/230/70336C
1.25000.30.1850.74
161.35.190.56defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

12-41-0/0/44516.
8.1230840100.00.0032.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/26766.
7.5330404000.00.0021.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/21260.
0.0132773700.00.0015.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41241090/4958/31669W
101.70000.03.1122.80
161.35.190.56defaultGET /server-status HTTP/1.1

16-41-0/0/19450.
0.0032773600.00.0013.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/18744.
0.0032773500.00.0013.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/15239.
71.1130354400.00.0010.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/14830.
0.0032773400.00.0010.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/15172.
0.0032773300.00.0010.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/9885.
0.0032773200.00.007.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/7251.
0.0032773100.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20022.
0.0032773000.00.0014.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7080.
0.0032772900.00.005.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5568.
16.77186689400.00.004.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3066.
0.00311837200.00.002.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/3713.
0.00311837100.00.002.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/741.
0.01311837000.00.000.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2750.
2.44307674500.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1648.
0.00311836900.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1687.
4.36307684700.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/973.
14.26297118700.00.000.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1474.
0.00311836800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/2047.
27.13311835600.00.001.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1337.
0.00311836700.00.000.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2207.
18.41311835400.00.001.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/250.
0.00311836600.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/654.
0.01311836510.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/2216.
3.43307684900.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/4005.
0.00311836400.00.002.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/470.
0.01728527800.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.291723988200.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.501721423500.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.011725609400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.011725609600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.011725609200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.011725608900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.011725609100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.011725609000.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.011725608600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.011725608500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.011725608800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.011725608700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.011725608300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.011725608200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.011725608100.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.011725608400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.011725607900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.011725607600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.011725607

Found on 2023-03-17 15:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16567d79c52

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 20-Feb-2023 15:40:41 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  356 days 2 hours 7 seconds
Total accesses: 1538529 - Total Traffic: 1.1 GB
CPU Usage: u263.47 s23.52 cu.29 cs0 - .000934% CPU load
.05 requests/sec - 38 B/second - 769 B/request
7 requests currently being processed, 3 idle workers
CWCC....C..CC.__..._............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41314081/204/127218C
4.33000.20.1092.24
159.223.236.123defaultGET /debug/default/view?panel=config HTTP/1.1

1-41153660/282/124332W
4.78000.00.1692.92
159.223.236.123defaultGET /server-status HTTP/1.1

2-41267231/774/123865C
13.67000.20.4889.47
159.223.236.123defaultGET /info.php HTTP/1.1

3-413531/2303/127041C
35.01000.21.6992.83
159.223.236.123defaultGET /.DS_Store HTTP/1.1

4-41-0/0/120337.
0.004787200.00.0092.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/111748.
0.004787100.00.0084.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41-0/0/105224.
0.004787000.00.0076.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/101843.
0.004786900.00.0075.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41312921/227/93420C
5.01009.10.1269.02
159.223.236.123defaultGET / HTTP/1.1

9-41-0/0/86645.
0.004786800.00.0061.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/74344.
0.014784300.00.0055.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41312951/248/69448C
5.57000.20.1750.14
159.223.236.123defaultGET /.env HTTP/1.1

12-41312961/214/41968C
1.56000.20.2331.36
159.223.236.123defaultGET /telescope/requests HTTP/1.1

13-41-0/0/26302.
0.004786700.00.0021.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41312980/209/20514_
4.93500.00.1315.22
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

15-41312990/231/26012_
5.64100.00.1419.27
159.223.236.123default\x16\x03\x01

16-41-0/0/18599.
0.004792800.00.0012.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/17875.
25.074791900.00.0012.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/12019.
0.004792700.00.008.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41313020/218/13043_
3.72000.00.179.18
159.223.236.123defaultHELP

20-41-0/0/11664.
0.004792600.00.008.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/8952.
24.894792000.00.007.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/6702.
0.004792500.00.004.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/18828.
0.004792400.00.0013.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7077.
0.004792300.00.005.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/4681.
18.5115968300.00.003.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3066.
0.0092471000.00.002.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/3713.
0.0092470900.00.002.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/741.
0.0192470800.00.000.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2750.
2.4488308300.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1648.
0.0092470700.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1687.
4.3688318500.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/973.
14.2677752500.00.000.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1474.
0.0092470600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/2047.
27.1392469400.00.001.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/1337.
0.0092470500.00.000.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2207.
18.4192469200.00.001.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/250.
0.0092470400.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/654.
0.0192470310.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/2216.
3.4388318700.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/4005.
0.0092470200.00.002.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/470.
0.01509161600.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.291504622000.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.501502057300.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.011506243200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.011506243400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.011506243000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.011506242700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.011506242900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.011506242800.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.011506242400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.011506242300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.011506242600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.011506242500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.011506242100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.011506242000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.011506241900.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.011506242200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.011506241700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.011506241400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.011506241500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-38

Found on 2023-02-20 05:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165c5aaa414

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 09-Feb-2023 22:26:21 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  345 days 8 hours 45 minutes 47 seconds
Total accesses: 1490732 - Total Traffic: 1.1 GB
CPU Usage: u291.32 s26.19 cu.28 cs0 - .00106% CPU load
.05 requests/sec - 38 B/second - 765 B/request
8 requests currently being processed, 2 idle workers
.CC_CC.._......CC.................W.C...........................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/123141.
2.012424200.00.0088.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41169741/1228/120963C
24.91000.30.8389.69
170.187.229.211defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

2-41148051/582/120458C
7.78000.20.4987.02
170.187.229.211defaultGET /debug/default/view?panel=config HTTP/1.1

3-4158070/343/123539_
4.77000.00.2390.02
170.187.229.211defaultHELP

4-4187021/114/116704C
2.99000.30.0987.67
170.187.229.211defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41142541/1539/107461C
24.79000.21.1880.92
170.187.229.211defaultGET /.env HTTP/1.1

6-41-0/0/102130.
2.6425656100.00.0073.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/98356.
0.0125654700.00.0071.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-4183590/1727/91413_
32.96000.01.1767.84
170.187.229.211default\x16\x03\x01

9-41-0/0/83606.
8.8025656400.00.0059.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/72332.
0.0125654600.00.0052.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/68633.
9.7925655600.00.0049.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/40391.
2.3825654400.00.0030.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/26292.
0.0125654500.00.0021.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/19133.
0.0025654300.00.0014.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-4149661/1185/25766C
22.23000.20.9519.12
170.187.229.211defaultGET /.DS_Store HTTP/1.1

16-4149671/1231/18587C
23.67019.11.0912.96
170.187.229.211defaultGET / HTTP/1.1

17-41-0/0/16224.
0.0125655700.00.0011.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/12012.
10.2112362400.00.008.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/12818.
0.0425051100.00.009.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/11473.
0.0025654200.00.008.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/5867.
0.0025653900.00.004.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/6697.
0.0025656300.00.004.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/18600.
0.0025655500.00.0013.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7072.
0.0025655100.00.005.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/3618.
0.0125655800.00.002.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3065.
0.0025654800.00.002.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/3712.
0.0025655000.00.002.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/740.
0.0025654000.00.000.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2520.
17.225090700.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1647.
0.0125656500.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1483.
0.0125654100.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/270.
0.0125656000.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1473.
0.0025655200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-4150600/1246/2036W
26.81000.00.761.19
170.187.229.211defaultGET /server-status HTTP/1.1

35-41-0/0/1336.
0.0125656600.00.000.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-4150621/1193/2199C
18.41000.20.881.49
170.187.229.211defaultGET /info.php HTTP/1.1

37-41-0/0/249.
0.0025656900.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/653.
0.0025656800.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1999.
0.0025656710.00.001.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/4004.
10.7712362900.00.002.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/470.
0.01416555600.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.291412016100.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.501409451300.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.011413637300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.011413637500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.011413637100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.011413636800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.011413637000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.011413636900.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.011413636500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.011413636400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.011413636700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.011413636600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.011413636200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.011413636100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.011413636000.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.011413636300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.011413635800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.011413635500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.011413635600.00.000.03
127.0.0.1<

Found on 2023-02-09 12:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165afcc4a8a

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 27-Jan-2023 08:07:34 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  331 days 18 hours 27 minutes
Total accesses: 1433022 - Total Traffic: 1.0 GB
CPU Usage: u308.16 s27.89 cu.39 cs0 - .00117% CPU load
.05 requests/sec - 38 B/second - 764 B/request
9 requests currently being processed, 1 idle workers
CCCC_.CCC.W.......C.............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4167841/1554/118586C
29.68000.20.9785.18
164.92.143.142defaultGET /.DS_Store HTTP/1.1

1-41172981/157/115853C
1.54000.30.1185.81
164.92.143.142defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41114901/1709/116187C
26.97000.21.3183.77
164.92.143.142defaultGET /telescope/requests HTTP/1.1

3-41157311/685/119396C
9.91000.20.4886.81
164.92.143.142defaultGET /info.php HTTP/1.1

4-41220650/1216/112928_
18.20000.00.9084.94
164.92.143.142defaultHELP

5-41-0/0/102862.
12.121506100.00.0077.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41267551/146/98326C
3.11000.20.1071.08
164.92.143.142defaultGET /.vscode/sftp.json HTTP/1.1

7-4199741/85/95197C
1.75009.10.0769.41
164.92.143.142defaultGET / HTTP/1.1

8-41231711/1134/88092C
18.25000.20.9465.66
164.92.143.142defaultGET /.git/config HTTP/1.1

9-41-0/0/80959.
0.0111278000.00.0057.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41277260/739/69705W
13.34000.00.5050.89
164.92.143.142defaultGET /server-status HTTP/1.1

11-41-0/0/67607.
0.0024940100.00.0048.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/38991.
8.5624939900.00.0029.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/26284.
0.0024940000.00.0021.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/19125.
10.1624939200.00.0014.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/22789.
0.0135182600.00.0016.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/16713.
1.9832859600.00.0011.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/16218.
1.4133082200.00.0011.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41134681/1620/10734C
25.96002.71.187.45
164.92.143.142defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

19-41-0/0/12784.
25.152240700.00.008.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/11468.
0.0035184200.00.008.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/5547.
0.0035184100.00.003.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/6692.
4.2128130600.00.004.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/18160.
4.1342089200.00.0012.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7067.
4.5342089100.00.005.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/3613.
13.6632859500.00.002.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3034.
5.8940309900.00.002.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/3492.
8.6835183300.00.002.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/736.
7.3542089500.00.000.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/1587.
6.4142088900.00.001.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1643.
3.9242089000.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1021.
0.0048794800.00.000.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/267.
0.0148792900.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/1006.
0.0148793000.00.000.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/789.
0.0048794700.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/234.
0.0048794600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/1005.
0.0048794500.00.000.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/247.
0.0048794400.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/651.
5.0242089600.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1997.
0.0048794300.00.001.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/3370.
0.0048794200.00.002.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/470.
0.01299082900.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.291294543300.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.501291978600.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.011296164500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.011296164700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.011296164300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.011296164000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.011296164200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.011296164100.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.011296163700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.011296163600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.011296163900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.011296163800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.011296163400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.011296163300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.011296163200.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.011296163500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.011296163000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.011296162700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.011296162800.00.000.03
127.0.0.1web1.ambient

Found on 2023-01-26 22:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165b9e9a042

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 10-Dec-2022 05:42:44 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  283 days 16 hours 2 minutes 10 seconds
Total accesses: 1225897 - Total Traffic: 873.3 MB
CPU Usage: u339.4 s27.49 cu.78 cs0 - .0015% CPU load
.05 requests/sec - 37 B/second - 746 B/request
5 requests currently being processed, 5 idle workers
C___W_C_.C.....C................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41298631/1161/102955C
21.63000.20.9974.16
164.92.143.142defaultGET /debug/default/view?panel=config HTTP/1.1

1-41218210/1475/100495_
30.08000.01.1171.53
164.92.143.142defaultHELP

2-41118360/212/99209_
3.26900.00.1671.07
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-41281850/958/104227_
24.343500.00.7274.77
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

4-4148330/828/99475W
21.20000.00.6571.05
164.92.143.142defaultGET /server-status HTTP/1.1

5-41298650/1286/89709W
22.36000.01.0966.01
164.92.143.142defaultGET /.git/config HTTP/1.1

6-4160711/836/84924C
20.19000.20.6360.52
164.92.143.142defaultGET /.DS_Store HTTP/1.1

7-41143060/656/82959_
14.90100.00.4459.83
164.92.143.142default\x16\x03\x01

8-41-0/0/80289.
0.0119500.00.0057.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41324031/1/71609C
0.01000.20.0050.46
164.92.143.142defaultGET /.env HTTP/1.1

10-41-0/0/62711.
0.0018000.00.0045.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/58665.
0.0134374100.00.0042.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/35974.
13.5417352800.00.0024.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/21799.
10.0124240800.00.0015.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/13614.
25.4811272700.00.009.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41154651/1663/13294C
32.24009.11.229.86
164.92.143.142defaultGET / HTTP/1.1

16-41-0/0/12652.
11.8917405400.00.008.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/13815.
33.4019600.00.009.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/5183.
6.1024502200.00.003.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/10008.
5.8524240900.00.006.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/5652.
3.6731724200.00.003.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/3716.
0.0034377900.00.002.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/6327.
0.0134375500.00.004.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/16674.
0.3334374800.00.0011.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/4661.
0.0134375000.00.003.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/2794.
0.0034377800.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/831.
0.0134375900.00.000.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/1500.
0.0134376000.00.000.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/328.
0.0034377700.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/249.
0.0134375800.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1306.
0.0034376700.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1013.
0.0034376600.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/258.
0.0034376500.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/997.
0.0034376400.00.000.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/228.
0.0034376300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/225.
0.0134375300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/996.
0.0134375200.00.000.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/239.
0.0134375600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/313.
0.0234375400.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1685.
0.0034376200.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/2281.
0.0034376100.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69876389900.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29878954400.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50876389600.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01880575600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01880575800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01880575400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01880575100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01880575300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01880575200.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01880574800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01880574700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01880575000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01880574900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01880574500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01880574400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01880574300.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01880574600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01880574100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01880573800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01880573900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-38-

Found on 2022-12-09 19:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165233b9800

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 28-Nov-2022 19:12:01 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  272 days 5 hours 31 minutes 27 seconds
Total accesses: 1178905 - Total Traffic: 839.7 MB
CPU Usage: u147.69 s13.81 cu.44 cs0 - .000689% CPU load
.0501 requests/sec - 37 B/second - 746 B/request
5 requests currently being processed, 5 idle workers
CC_C.___.WC_....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4170781/43/99104C
0.76002.70.0371.19
139.162.51.100defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

1-4170791/44/96658C
1.92000.20.0468.86
139.162.51.100defaultPUT /api/v2/cmdb/system/admin/admin HTTP/1.1

2-4166470/40/95413_
1.87000.00.0368.31
139.162.51.100default\x16\x03\x01

3-41124981/50/100382C
0.68000.20.0771.80
139.162.51.100defaultGET /debug/default/view?panel=config HTTP/1.1

4-41-0/0/95698.
0.90861400.00.0068.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41233960/79/85719_
2.172600.00.0363.04
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

6-41201930/897/81951_
16.58000.00.6858.52
139.162.51.100defaultHELP

7-41276830/1547/79669_
26.375600.01.0057.34
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

8-41-0/0/79491.
0.01861800.00.0056.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-414340/1453/69776W
23.75000.00.9849.30
139.162.51.100defaultGET /server-status HTTP/1.1

10-41313071/60/60316C
1.06000.20.0444.14
139.162.51.100defaultGET /.git/config HTTP/1.1

11-41184610/88/56186_
2.515200.00.0440.43
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

12-41-0/0/33629.
0.62861300.00.0022.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/21308.
0.01861500.00.0014.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/11651.
0.00861900.00.008.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/11625.
1.53592300.00.008.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/11857.
0.00861600.00.007.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/12146.
0.0029497800.00.008.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/4707.
1.5829497200.00.002.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/9537.
1.1029236200.00.006.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/5521.
0.0029497700.00.003.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/3711.
0.0029497600.00.002.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/6319.
9.5919433500.00.004.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/16664.
1.3829497100.00.0011.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/4651.
0.0029497500.00.003.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/2790.
0.0030828400.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/826.
0.0030828300.00.000.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/1495.
0.0030828200.00.000.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/324.
0.0030828100.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/247.
0.0030828000.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1304.
0.0030827900.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1011.
0.3430826400.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/255.
0.0130826500.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/992.
0.0130826600.00.000.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/223.
0.0030827200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/216.
0.0030827100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/986.
0.0130825000.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/228.
0.0030827000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/303.
0.0030826900.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1681.
0.0030826800.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/2277.
0.0030826700.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69777565600.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29780130100.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50777565300.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01781751300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01781751500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01781751100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01781750800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01781751000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01781750900.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01781750500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01781750400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01781750700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01781750600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01781750200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01781750100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01781750000.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01781750300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01781749800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01781749500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01781749600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2022-11-28 09:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165c18ce850

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 22-Nov-2022 23:03:22 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  266 days 9 hours 22 minutes 48 seconds
Total accesses: 1154195 - Total Traffic: 823.1 MB
CPU Usage: u387.16 s34.98 cu.68 cs0 - .00184% CPU load
.0501 requests/sec - 37 B/second - 747 B/request
9 requests currently being processed, 1 idle workers
WC_CC.C.CCC............W........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4177160/63/96860W
1.67000.00.0569.71
159.65.51.215defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

1-4184611/1395/94600C
23.60000.30.8367.48
159.65.51.215defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-4114900/477/93453_
8.31000.00.3767.05
159.65.51.215defaultHELP

3-4185271/1445/98172C
26.91000.21.0770.20
159.65.51.215defaultGET /info.php HTTP/1.1

4-41240751/1231/93866C
21.01009.10.9267.28
159.65.51.215defaultGET / HTTP/1.1

5-41-0/0/84200.
1.661503600.00.0062.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41117871/202/80127C
4.64000.20.1757.20
159.65.51.215defaultGET /.git/config HTTP/1.1

7-41-0/0/78071.
0.004391500.00.0056.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-4185281/1346/77216C
25.09000.20.9055.41
159.65.51.215defaultGET /.DS_Store HTTP/1.1

9-41159791/525/68297C
9.73012.70.4348.32
159.65.51.215defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

10-41118781/214/58053C
5.18000.20.1442.54
159.65.51.215defaultGET /.env HTTP/1.1

11-41-0/0/55189.
36.474391700.00.0039.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/33518.
30.4510479600.00.0022.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/21184.
40.7027709300.00.0014.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/11586.
0.0027708800.00.008.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/11507.
0.0027708700.00.008.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/11750.
0.0049563200.00.007.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/12096.
0.0049563100.00.008.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/4630.
0.0049563000.00.002.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/9406.
0.0049562900.00.006.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/5474.
0.0049562800.00.003.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/3647.
0.0049562700.00.002.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/5793.
0.0049562600.00.004.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41325080/6029/15719W
99.35000.04.2011.03
159.65.51.215defaultGET /server-status HTTP/1.1

24-41-0/0/4584.
0.0049562500.00.003.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/2789.
8.80111285400.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/825.
0.01118943900.00.000.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/1494.
3.38114071000.00.000.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/323.
0.00118944200.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/246.
0.00118944100.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1303.
0.00118944000.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1009.
8.80109516700.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/253.
0.00179777900.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/990.
0.00179777800.00.000.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/222.
0.00179777700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/215.
0.00179777600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/985.
0.00179777500.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/227.
0.00179777400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/302.
0.00179777300.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1680.
0.00179777200.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/2276.
0.00179777100.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69727113700.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29729678200.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50727113400.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01731299400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01731299600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01731299200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01731298900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01731299100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01731299000.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01731298500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01731298400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01731298800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01731298700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01731298200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01731298100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01731298000.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01731298300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01731297800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01731297500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01731297600.00.000.03
127.0.0.1web1.ambient-it

Found on 2022-11-22 13:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165c7734d9d

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 08-Nov-2022 02:58:57 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  251 days 13 hours 18 minutes 22 seconds
Total accesses: 1090440 - Total Traffic: 776.6 MB
CPU Usage: u139.64 s13.08 cu.44 cs0 - .000705% CPU load
.0502 requests/sec - 37 B/second - 746 B/request
8 requests currently being processed, 2 idle workers
_CW_..C...CC...CC..C............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41172310/202/91009_
4.33000.00.1565.38
139.162.51.51default\x16\x03\x01

1-41189031/533/89980C
9.46000.20.3764.16
139.162.51.51defaultGET /telescope/requests HTTP/1.1

2-41172320/222/88818W
4.73000.00.2063.76
139.162.51.51defaultGET /server-status HTTP/1.1

3-41172330/260/92908_
3.17000.00.1766.45
139.162.51.51defaultHELP

4-41-0/0/88580.
0.01360400.00.0063.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/81737.
0.00360300.00.0060.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4173951/23/77494C
0.02000.30.0355.40
139.162.51.51defaultGET /s/63e263e2235323e2332323/_/;/META-INF/maven/com.atlassian.

7-41-0/0/74491.
0.386301800.00.0053.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/71876.
0.016301400.00.0051.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/67258.
19.446302300.00.0047.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41144271/280/55133C
5.80009.10.2140.15
139.162.51.51defaultGET / HTTP/1.1

11-41144281/279/51135C
3.62000.20.1836.65
139.162.51.51defaultGET /.git/config HTTP/1.1

12-41-0/0/31680.
12.206301700.00.0021.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/18656.
0.456302200.00.0012.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/11577.
0.744599300.00.008.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41144301/302/11357C
6.42012.70.388.45
139.162.51.51defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

16-41144311/307/11350C
4.25000.20.217.57
139.162.51.51defaultGET /.DS_Store HTTP/1.1

17-41-0/0/12091.
1.644599400.00.008.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/4518.
4.05360500.00.002.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41144341/299/9014C
4.13000.20.276.17
139.162.51.51defaultGET /.env HTTP/1.1

20-41-0/0/3558.
0.686302400.00.002.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/2919.
0.006302900.00.001.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/5423.
0.006302800.00.003.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/9690.
0.006302700.00.006.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/4105.
0.484599500.00.003.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/2397.
0.006302600.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/824.
0.0051592000.00.000.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/1261.
0.0051591900.00.000.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/322.
0.0051591800.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/245.
0.0051591700.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1302.
0.0051591600.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/524.
0.0051591500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/253.
0.0051591400.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/990.
0.0051591300.00.000.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/222.
0.0051591200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/215.
0.0051591100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/985.
0.0051591000.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/227.
0.0051590900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/302.
0.0051590800.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/1680.
0.0051590700.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/2276.
0.0051590600.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69598927100.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29601491600.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50598926800.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01603112800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01603113000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01603112600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01603112300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01603112500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01603112400.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01603112000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01603111900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01603112200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01603112100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01603111700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01603111600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01603111500.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01603111800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01603111300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01603111000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01603111100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-38-

Found on 2022-11-07 16:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16558071db6

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 13-Oct-2022 03:26:14 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  225 days 13 hours 45 minutes 40 seconds
Total accesses: 980387 - Total Traffic: 698.2 MB
CPU Usage: u194.07 s18.7 cu.7 cs0 - .0011% CPU load
.0503 requests/sec - 37 B/second - 746 B/request
2 requests currently being processed, 8 idle workers
_.._W_..__._._C...._............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4126540/230/81058_
3.816800.00.1958.26
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-41-0/0/80375.
5.734644600.00.0057.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41-0/0/79687.
1.844644400.00.0057.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-4177990/312/82855_
6.82100.00.2359.82
164.92.175.242default\x16\x03\x01

4-41219760/429/79805W
6.40000.00.3657.06
164.92.175.242defaultGET /server-status HTTP/1.1

5-4111560/2200/72966_
27.92000.01.5953.88
164.92.175.242defaultHELP

6-41-0/0/70343.
4.194644900.00.0050.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/67142.
28.224644500.00.0048.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41131540/267/64324_
4.69900.00.2045.70
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

9-4126550/211/59595_
2.683900.00.1542.20
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

10-41-0/0/50201.
2.014644300.00.0036.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-4126560/226/47398_
5.046600.00.1434.14
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

12-41-0/0/30811.
0.014644800.00.0020.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-4126580/237/15792_
4.72600.00.1311.08
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

14-4126591/228/8470C
4.12000.20.166.04
164.92.175.242defaultGET /telescope/requests HTTP/1.1

15-41-0/0/11049.
0.014644700.00.008.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/11038.
0.019259600.00.007.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/12009.
0.009258900.00.008.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/3651.
0.009258800.00.002.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41219890/459/5063_
7.04900.00.413.32
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

20-41-0/0/2167.
0.019257900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/2914.
0.009258700.00.001.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/5160.
0.009258600.00.003.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/8430.
0.009258500.00.005.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/4018.
4.346003800.00.003.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-39-0/0/2395.
5.64275158900.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-39-0/0/823.
7.88275158900.00.000.49
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

27-39-0/0/1260.
6.0227515898370.00.000.69
37.139.53.82bakerpettener.com.auPOST /Mambo/index.php?option=com_contact&Itemid=3 HTTP/1.0

28-39-0/0/321.
0.00283004900.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-39-0/0/244.
0.00283005800.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-39-0/0/1301.
0.00283005700.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-39-0/0/523.
0.00283005600.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-39-0/0/252.
0.00283005500.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-39-0/0/989.
7.19275158900.00.000.68
178.254.0.82hannahschristmasgift.comGET /wp-content/plugins/press/wp-class.php HTTP/1.1

34-39-0/0/221.
0.00283005400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-39-0/0/214.
0.00283005300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-39-0/0/984.
0.00283005200.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-39-0/0/226.
0.00283005100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-39-0/0/301.
0.00283005000.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-38-0/0/1679.
0.01378636900.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-38-0/0/2275.
0.01378636700.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69374450900.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29377015400.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50374450600.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01378636600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01378636800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01378636400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01378636100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01378636300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01378636200.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01378635800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01378635700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01378636000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01378635900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01378635500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01378635400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01378635300.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01378635600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01378635100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01378634800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01378634900.00.000.03
127.0.0.1web1.ambient

Found on 2022-10-12 17:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1653476baad

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 27-Sep-2022 13:25:55 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  209 days 23 hours 45 minutes 21 seconds
Total accesses: 912428 - Total Traffic: 647.9 MB
CPU Usage: u464 s39.52 cu2.18 cs0 - .00279% CPU load
.0503 requests/sec - 37 B/second - 744 B/request
3 requests currently being processed, 7 idle workers
__C._____W.............C........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41319970/3058/76140_
46.712000.02.1654.89
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-41319980/2940/74945_
49.625000.02.1853.17
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

2-41270021/3894/73660C
68.52000.23.0053.02
139.59.168.195defaultGET /.DS_Store HTTP/1.1

3-41-0/0/76783.
14.56640600.00.0055.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41212600/2892/74235_
51.705000.02.0151.96
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

5-4182420/1341/66589_
23.224700.00.9448.92
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

6-41232800/1143/65626_
17.53000.00.8547.29
139.59.168.195defaultHELP

7-41158330/1868/62369W
38.02000.01.5245.20
139.59.168.195defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-41284500/29/60807_
0.75100.00.0342.97
139.59.168.195default\x16\x03\x01

9-4142190/910/55104W
17.15000.00.8139.17
139.59.168.195defaultGET /server-status HTTP/1.1

10-41-0/0/48144.
0.0130799600.00.0035.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/43537.
6.6323870700.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/28460.
0.0030799900.00.0019.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/14641.
0.0030799800.00.0010.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/6756.
0.0161454600.00.004.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/10787.
29.2720001300.00.007.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/10175.
0.0161453700.00.006.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/10142.
0.0061454500.00.006.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/3644.
0.0061454400.00.002.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/4582.
0.0061454300.00.002.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/2155.
0.0061454200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/2906.
0.0061454100.00.001.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/5144.
0.0061453900.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41320101/3027/7187C
48.39002.72.174.88
139.59.168.195defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

24-41-0/0/3844.
0.0061453800.00.003.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-39-0/0/2395.
5.64140517000.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-39-0/0/823.
7.88140517000.00.000.49
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

27-39-0/0/1260.
6.0214051708370.00.000.69
37.139.53.82bakerpettener.com.auPOST /Mambo/index.php?option=com_contact&Itemid=3 HTTP/1.0

28-39-0/0/321.
0.00148363000.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-39-0/0/244.
0.00148363900.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-39-0/0/1301.
0.00148363800.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-39-0/0/523.
0.00148363700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-39-0/0/252.
0.00148363600.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-39-0/0/989.
7.19140517000.00.000.68
178.254.0.82hannahschristmasgift.comGET /wp-content/plugins/press/wp-class.php HTTP/1.1

34-39-0/0/221.
0.00148363500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-39-0/0/214.
0.00148363400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-39-0/0/984.
0.00148363300.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-39-0/0/226.
0.00148363200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-39-0/0/301.
0.00148363100.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-38-0/0/1679.
0.01243995000.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-38-0/0/2275.
0.01243994800.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69239809000.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29242373500.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50239808700.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01243994700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01243994900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01243994500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01243994200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01243994400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01243994300.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01243993900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01243993800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01243994100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01243994000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01243993600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01243993500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01243993400.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01243993700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01243993200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01243992900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01243993000.0<

Found on 2022-09-27 03:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb16563a3666a

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 17-Sep-2022 15:22:33 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 40
Server uptime:  200 days 1 hour 41 minutes 59 seconds
Total accesses: 869598 - Total Traffic: 616.4 MB
CPU Usage: u263.32 s22.99 cu1.1 cs0 - .00166% CPU load
.0503 requests/sec - 37 B/second - 743 B/request
6 requests currently being processed, 4 idle workers
CW_.CC__C._C....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4086761/169/72097C
2.86009.10.1451.98
194.233.164.177defaultGET / HTTP/1.1

1-4083860/183/70788W
1.46000.00.1850.13
194.233.164.177defaultGET /server-status HTTP/1.1

2-4092060/1211/69480_
21.622800.01.0649.80
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-40-0/0/72932.
0.394123000.00.0052.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-4083891/212/69944C
3.00000.20.1649.01
194.233.164.177defaultGET /.git/config HTTP/1.1

5-40226011/1189/63534C
20.00000.21.1046.59
194.233.164.177defaultGET /telescope/requests HTTP/1.1

6-40317110/1532/61975_
22.402500.01.3144.66
185.196.220.81defaultPOST /boaform/admin/formLogin HTTP/1.1

7-40246090/241/59447_
6.09000.00.1942.89
194.233.164.177defaultHELP

8-40165091/1026/59266C
15.97000.20.9541.93
194.233.164.177defaultGET /info.php HTTP/1.1

9-40-0/0/53584.
32.884112100.00.0037.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-4083900/194/46820_
4.68100.00.1934.14
194.233.164.177default\x16\x03\x01

11-40254011/709/41082C
11.32002.70.5129.29
194.233.164.177defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

12-40-0/0/28126.
0.0111005400.00.0019.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-40-0/0/14303.
5.454122900.00.0010.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-40-0/0/6754.
0.0011006200.00.004.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-40-0/0/8665.
0.0011005900.00.006.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-40-0/0/10173.
0.0052279500.00.006.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-39-0/0/10140.
0.0162661400.00.006.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-39-0/0/3642.
0.0162661300.00.002.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-39-0/0/4580.
0.0162661200.00.002.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-39-0/0/2153.
0.0162661100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-39-0/0/2904.
0.0162661000.00.001.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-39-0/0/5142.
0.0162660800.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-40-0/0/4159.
42.574902000.00.002.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-40-0/0/3842.
2.8752278900.00.003.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-39-0/0/2395.
5.6454816700.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-39-0/0/823.
7.8854816700.00.000.49
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

27-39-0/0/1260.
6.025481678370.00.000.69
37.139.53.82bakerpettener.com.auPOST /Mambo/index.php?option=com_contact&Itemid=3 HTTP/1.0

28-39-0/0/321.
0.0062662800.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-39-0/0/244.
0.0062663700.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-39-0/0/1301.
0.0062663600.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-39-0/0/523.
0.0062663500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-39-0/0/252.
0.0062663400.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-39-0/0/989.
7.1954816700.00.000.68
178.254.0.82hannahschristmasgift.comGET /wp-content/plugins/press/wp-class.php HTTP/1.1

34-39-0/0/221.
0.0062663300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-39-0/0/214.
0.0062663200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-39-0/0/984.
0.0062663100.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-39-0/0/226.
0.0062663000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-39-0/0/301.
0.0062662900.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-38-0/0/1679.
0.01158294700.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-38-0/0/2275.
0.01158294500.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69154108800.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29156673300.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50154108500.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01158294400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01158294600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01158294200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01158293900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01158294100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01158294000.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01158293600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01158293500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01158293800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01158293700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01158293300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01158293200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01158293100.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01158293400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01158292900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01158292600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01158292700.00.000.03
127.0.0.1web1.ambient

Found on 2022-09-17 05:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb1652cefc796

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 12-Sep-2022 10:11:08 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 40
Server uptime:  194 days 20 hours 30 minutes 34 seconds
Total accesses: 845175 - Total Traffic: 597.8 MB
CPU Usage: u154.34 s14.16 cu.75 cs0 - .00101% CPU load
.0502 requests/sec - 37 B/second - 741 B/request
6 requests currently being processed, 4 idle workers
._C_CC_CWC............._........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-40-0/0/70608.
4.034241900.00.0050.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-40141550/321/68925_
6.09000.00.2748.70
104.200.20.186defaultHELP

2-4055191/445/67139C
7.42000.20.3248.11
104.200.20.186defaultGET /.git/config HTTP/1.1

3-40141560/322/71736_
4.05000.00.2251.89
104.200.20.186default\x16\x03\x01

4-4023011/435/68135C
7.05009.10.2647.56
104.200.20.186defaultGET / HTTP/1.1

5-4023031/445/61580C
8.23000.20.3645.03
104.200.20.186defaultGET /info.php HTTP/1.1

6-4023040/439/59812_
8.14300.00.3542.99
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

7-4023051/412/57654C
8.33000.20.3641.67
104.200.20.186defaultGET /.DS_Store HTTP/1.1

8-4098890/202/57014W
3.04000.00.1540.07
104.200.20.186defaultGET /server-status HTTP/1.1

9-40141601/345/51280C
3.75000.30.2336.22
104.200.20.186defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-40-0/0/45489.
0.017210700.00.0032.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-40-0/0/39952.
0.017210800.00.0028.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-40-0/0/28124.
0.017210600.00.0019.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-40-0/0/13873.
0.007211200.00.009.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-40-0/0/6752.
0.007211100.00.004.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-40-0/0/8663.
2.627210500.00.006.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-40-0/0/10173.
0.007211000.00.006.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-39-0/0/10140.
0.0117592800.00.006.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-39-0/0/3642.
0.0117592700.00.002.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-39-0/0/4580.
0.0117592600.00.002.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-39-0/0/2153.
0.0117592500.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-39-0/0/2904.
0.0117592400.00.001.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-39-0/0/5142.
0.0117592300.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-4055200/440/1797_
9.66300.00.301.14
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

24-40-0/0/3842.
2.877210400.00.003.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-39-0/0/2395.
5.649748200.00.001.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-39-0/0/823.
7.889748200.00.000.49
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

27-39-0/0/1260.
6.02974828370.00.000.69
37.139.53.82bakerpettener.com.auPOST /Mambo/index.php?option=com_contact&Itemid=3 HTTP/1.0

28-39-0/0/321.
0.0017594200.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-39-0/0/244.
0.0017595100.00.000.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-39-0/0/1301.
0.0017595000.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-39-0/0/523.
0.0017594900.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-39-0/0/252.
0.0017594800.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-39-0/0/989.
7.199748200.00.000.68
178.254.0.82hannahschristmasgift.comGET /wp-content/plugins/press/wp-class.php HTTP/1.1

34-39-0/0/221.
0.0017594700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-39-0/0/214.
0.0017594600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-39-0/0/984.
0.0017594500.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-39-0/0/226.
0.0017594400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-39-0/0/301.
0.0017594300.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-38-0/0/1679.
0.01113226200.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-38-0/0/2275.
0.01113226000.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-38-0/0/468.
2.69109040300.00.000.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-38-0/0/1025.
1.29111604700.00.000.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-38-0/0/403.
5.50109040000.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-38-0/0/206.
0.01113225900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-38-0/0/213.
0.01113226100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-38-0/0/206.
0.01113225700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-38-0/0/206.
0.01113225400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-38-0/0/206.
0.01113225600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-38-0/0/481.
0.01113225500.00.000.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-38-0/0/193.
0.01113225100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-38-0/0/206.
0.01113225000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-38-0/0/206.
0.01113225300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-38-0/0/222.
0.01113225200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-38-0/0/223.
0.01113224800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-38-0/0/190.
0.01113224700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-38-0/0/122.
0.01113224600.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-38-0/0/119.
0.01113224900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-38-0/0/106.
0.01113224400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-38-0/0/106.
0.01113224100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-38-0/0/106.
0.01113224200.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2022-09-12 00:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165711dacaf

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 10-Jun-2022 09:48:07 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 19
Server uptime:  100 days 20 hours 7 minutes 32 seconds
Total accesses: 431119 - Total Traffic: 297.1 MB
CPU Usage: u178.54 s14.88 cu.65 cs0 - .00223% CPU load
.0495 requests/sec - 35 B/second - 722 B/request
6 requests currently being processed, 4 idle workers
_C_CWCC.__..C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-19217110/831/35611_
14.67600.00.6424.50
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-19259751/576/33788C
10.22000.20.4922.71
165.22.26.210defaultGET /.DS_Store HTTP/1.1

2-19218770/277/34793_
4.84100.00.2224.54
165.22.26.210default\x16\x03\x01

3-19217941/828/36460C
14.66000.20.7825.74
165.22.26.210defaultGET /.env HTTP/1.1

4-19216510/1028/35267W
16.50000.00.8123.79
165.22.26.210defaultGET /server-status HTTP/1.1

5-1923391/101/30225C
1.37000.20.0621.22
165.22.26.210defaultGET /telescope/requests HTTP/1.1

6-19123491/873/30816C
16.73000.30.6921.66
165.22.26.210defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-19-0/0/27468.
13.572257800.00.0018.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-19215050/884/27681_
13.07000.00.7218.52
165.22.26.210defaultHELP

9-19271630/1099/26230_
15.72600.00.9318.34
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

10-19-0/0/19510.
4.2818112900.00.0013.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-19-0/0/24088.
0.0518111800.00.0016.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-19244951/917/17391C
14.28000.20.8212.02
165.22.26.210defaultGET /.git/config HTTP/1.1

13-19-0/0/5857.
5.9513143100.00.004.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-19-0/0/2862.
0.0018358400.00.001.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-19-0/0/6179.
0.0118859300.00.004.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-17-0/0/5937.
1.1545076600.00.003.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-19-0/0/8286.
11.6122092900.00.005.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-17-0/0/2690.
0.0147876500.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-17-0/0/3939.
0.0147877400.00.002.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-17-0/0/1509.
0.0047877900.00.000.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-17-0/0/2352.
0.0147886300.00.001.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-17-0/0/3717.
0.0147889900.00.002.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-17-0/0/520.
0.0147877800.00.000.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-19-0/0/2837.
8.7524894100.00.002.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-17-0/0/1698.
0.0047892400.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-16-0/0/32.
0.76121573600.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-11-0/0/456.
6.53327555500.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-11-0/0/9.
0.01334260000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-11-0/0/33.
0.01334259900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-11-0/0/19.
0.01334259400.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-11-0/0/305.
0.01334260500.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-11-0/0/40.
0.01334260400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-11-0/0/391.
0.01334260200.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-11-0/0/10.
0.01334259800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-11-0/0/5.
0.01334260300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-11-0/0/5.
0.01334259700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-11-0/0/5.
0.01334260100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-11-0/0/7.
0.01334259600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-11-0/0/6.
0.01334259300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-12-0/0/1718.
12.54299673000.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-11-0/0/2.
0.01334259500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-11-0/0/365.
6.79327555600.00.000.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 448total sessions expired since starting: 448total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 279 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-06-09 23:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165eafa0ceb

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 07-Jun-2022 20:25:51 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 19
Server uptime:  98 days 6 hours 45 minutes 17 seconds
Total accesses: 420754 - Total Traffic: 288.3 MB
CPU Usage: u96.88 s9.16 cu.49 cs0 - .00125% CPU load
.0495 requests/sec - 35 B/second - 718 B/request
5 requests currently being processed, 5 idle workers
C___.CC_C_.......W..............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-19309841/702/34600C
11.07000.20.6123.68
146.190.27.46defaultGET /telescope/requests HTTP/1.1

1-19312880/731/33103_
10.774300.00.6322.15
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

2-19319640/674/34368_
12.055100.00.6824.25
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-19295860/59/35531_
0.511700.00.1124.82
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

4-19-0/0/34239.
1.741181600.00.0022.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-1929181/246/29425C
5.20002.70.2720.62
146.190.27.46defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

6-1929271/256/29778C
2.76009.10.3220.85
146.190.27.46defaultGET / HTTP/1.1

7-19271620/67/26542_
1.48100.00.0918.08
146.190.27.46defaultHELP

8-19295871/53/26716C
2.08000.20.0517.73
146.190.27.46defaultGET /.env HTTP/1.1

9-19271630/65/25196_
0.56200.00.0817.48
146.190.27.46default\x16\x03\x01

10-19-0/0/19291.
6.601181700.00.0013.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-17-0/0/23975.
1.2021987400.00.0016.41
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

12-17-0/0/16474.
0.0125784100.00.0011.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-17-0/0/5587.
2.2623826400.00.003.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-17-0/0/2860.
0.0125784200.00.001.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-17-0/0/6178.
0.0025784500.00.004.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-17-0/0/5937.
1.1522983100.00.003.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-19309870/707/8284W
11.61000.00.505.50
146.190.27.46defaultGET /server-status HTTP/1.1

18-17-0/0/2690.
0.0125783000.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-17-0/0/3939.
0.0125783900.00.002.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-17-0/0/1509.
0.0025784400.00.000.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-17-0/0/2352.
0.0125792800.00.001.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-17-0/0/3717.
0.0125796400.00.002.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-17-0/0/520.
0.0125784300.00.000.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-19-0/0/2837.
8.752800600.00.002.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-17-0/0/1698.
0.0025798900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-16-0/0/32.
0.7699480100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-11-0/0/456.
6.53305462000.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-11-0/0/9.
0.01312166500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-11-0/0/33.
0.01312166400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-11-0/0/19.
0.01312165900.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-11-0/0/305.
0.01312167000.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-11-0/0/40.
0.01312166900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-11-0/0/391.
0.01312166700.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-11-0/0/10.
0.01312166300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-11-0/0/5.
0.01312166800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-11-0/0/5.
0.01312166200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-11-0/0/5.
0.01312166600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-11-0/0/7.
0.01312166100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-11-0/0/6.
0.01312165800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-12-0/0/1718.
12.54277579500.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-11-0/0/2.
0.01312166000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-11-0/0/365.
6.79305462100.00.000.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 165total sessions expired since starting: 165total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 101 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-06-07 10:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165a257f35d

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 31-May-2022 16:45:18 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 17
Server uptime:  91 days 3 hours 4 minutes 44 seconds
Total accesses: 390792 - Total Traffic: 265.6 MB
CPU Usage: u146.73 s13.11 cu.7 cs0 - .00204% CPU load
.0496 requests/sec - 35 B/second - 712 B/request
2 requests currently being processed, 8 idle workers
__W_C_____......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-17179000/1062/32042_
15.757800.00.6921.78
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-17140330/1140/30870_
17.227000.00.8620.46
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

2-17272560/200/31944W
4.61000.00.1522.14
159.89.164.143defaultGET /server-status HTTP/1.1

3-17300630/1062/32742_
17.44000.00.7722.55
159.89.164.143defaultHELP

4-17186921/1058/32093C
17.98009.10.7421.47
159.89.164.143defaultGET / HTTP/1.1

5-17196160/716/28074_
9.684400.00.5619.50
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

6-17272570/217/28064_
4.84000.00.1619.59
159.89.164.143default\x16\x03\x01

7-17196560/832/25478_
12.921000.00.5417.21
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-1719550/655/24409_
10.081800.00.4416.19
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

9-17225910/219/24726_
5.161800.00.2317.02
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

10-17-0/0/17928.
0.00366400.00.0012.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-17-0/0/21907.
0.00366300.00.0015.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-17-0/0/15156.
0.00365000.00.0010.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-16-0/0/5259.
0.0124906100.00.003.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-16-0/0/2837.
0.0024905700.00.001.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-16-0/0/6154.
0.0024905600.00.004.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-16-0/0/5613.
0.0024905500.00.003.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-16-0/0/5891.
2.4234373200.00.003.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-16-0/0/2667.
2.7834373300.00.001.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-16-0/0/3486.
0.4437669300.00.002.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-16-0/0/1500.
0.0138041600.00.000.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-16-0/0/2342.
0.0138043000.00.001.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-16-0/0/3712.
0.0138042800.00.002.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-16-0/0/506.
0.0138041500.00.000.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-16-0/0/287.
0.1037676400.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-17-0/0/1697.
12.524429200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-16-0/0/32.
0.7637676700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-11-0/0/456.
6.53243658700.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-11-0/0/9.
0.01250363200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-11-0/0/33.
0.01250363100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-11-0/0/19.
0.01250362600.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-11-0/0/305.
0.01250363700.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-11-0/0/40.
0.01250363600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-11-0/0/391.
0.01250363400.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-11-0/0/10.
0.01250363000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-11-0/0/5.
0.01250363500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-11-0/0/5.
0.01250362900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-11-0/0/5.
0.01250363300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-11-0/0/7.
0.01250362800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-11-0/0/6.
0.01250362500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-12-0/0/1718.
12.54215776200.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-11-0/0/2.
0.01250362700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-11-0/0/365.
6.79243658800.00.000.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 186total sessions expired since starting: 186total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 135 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-05-31 06:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165edf19dbe

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 26-May-2022 07:29:46 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 16
Server uptime:  85 days 17 hours 49 minutes 12 seconds
Total accesses: 366687 - Total Traffic: 247.3 MB
CPU Usage: u134.92 s12.18 cu.63 cs0 - .00199% CPU load
.0495 requests/sec - 35 B/second - 707 B/request
3 requests currently being processed, 7 idle workers
_.__C.W_._.C_.._................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-16227110/89/30193_
2.721200.00.1020.58
154.209.125.53defaultGET / HTTP/1.1

1-16-0/0/28678.
0.0111200000.00.0018.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-16263210/603/29675_
8.883800.00.7120.47
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

3-1688170/560/30868_
7.734500.00.4721.16
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

4-1638571/513/29751C
7.74000.20.4319.65
159.223.237.41defaultGET /.git/config HTTP/1.1

5-16-0/0/26324.
0.7311199900.00.0018.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-16184800/588/25792W
8.12000.00.4917.81
159.223.237.41defaultGET /server-status HTTP/1.1

7-1688180/535/23547_
8.00668980.00.5215.83
192.0.101.226unavita.com.auHEAD / HTTP/1.1

8-16-0/0/23246.
0.0111200100.00.0015.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-1688200/525/22807_
11.23100.00.5215.27
159.223.237.41default\x16\x03\x01

10-16-0/0/17362.
5.2211199800.00.0011.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-1621931/759/21168C
11.49009.10.6214.45
159.223.237.41defaultGET / HTTP/1.1

12-1688210/532/14698_
10.164500.00.439.80
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

13-16-0/0/5184.
15.581859600.00.003.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-16-0/0/2809.
0.0011200400.00.001.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-1621970/783/5716_
16.61000.00.754.04
159.223.237.41defaultHELP

16-16-0/0/5562.
0.0011200300.00.003.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-16-0/0/5718.
0.0111200200.00.003.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-16-0/0/2467.
0.0016375800.00.001.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-16-0/0/3451.
0.0016375700.00.002.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-16-0/0/1486.
0.0016375600.00.000.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-16-0/0/2330.
3.8716374500.00.001.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-16-0/0/3704.
0.0016375500.00.002.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-16-0/0/501.
0.0016375400.00.000.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-16-0/0/255.
3.7611961700.00.000.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-11-0/0/10.
0.01203831700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-11-0/0/9.
0.01203831800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-11-0/0/456.
6.53197125400.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-11-0/0/9.
0.01203829900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-11-0/0/33.
0.01203829800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-11-0/0/19.
0.01203829300.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-11-0/0/305.
0.01203830400.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-11-0/0/40.
0.01203830300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-11-0/0/391.
0.01203830100.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-11-0/0/10.
0.01203829700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-11-0/0/5.
0.01203830200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-11-0/0/5.
0.01203829600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-11-0/0/5.
0.01203830000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-11-0/0/7.
0.01203829500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-11-0/0/6.
0.01203829200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-12-0/0/1718.
12.54169243000.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-11-0/0/2.
0.01203829400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-11-0/0/365.
6.79197125500.00.000.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 454total sessions expired since starting: 454total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 278 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-05-25 21:29

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318a5fb1658a5fb165e798cd77

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 19-May-2022 16:10:18 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 15
Server uptime:  79 days 2 hours 29 minutes 43 seconds
Total accesses: 336451 - Total Traffic: 226.9 MB
CPU Usage: u77.46 s7.37 cu.12 cs0 - .00124% CPU load
.0492 requests/sec - 34 B/second - 707 B/request
3 requests currently being processed, 7 idle workers
___._.._.CC__W..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-1558960/222/28022_
3.041700.00.1519.13
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

1-1531630/353/26493_
5.453600.00.2617.60
40.77.167.1defaultGET /modele-mazdy-2017/ HTTP/1.1

2-1560090/268/27153_
5.25900.00.2318.66
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

3-15-0/0/28400.
1.624478900.00.0019.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-15137220/313/27166_
4.03000.00.1718.07
159.65.200.34defaultHELP

5-15-0/0/24534.
0.024478800.00.0016.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-15-0/0/24201.
0.004478700.00.0016.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-15137260/203/21266_
4.804300.00.1314.33
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-15-0/0/21929.
1.644738900.00.0014.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-1574851/388/20130C
6.69002.70.3313.54
159.65.200.34defaultGET /?rest_route=/wp/v2/users/ HTTP/1.1

10-1547181/717/16270C
10.54009.10.5111.03
159.65.200.34defaultGET / HTTP/1.1

11-1574860/393/19513_
5.641700.00.3213.26
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

12-1585910/211/13715_
4.43100.00.119.09
159.65.200.34default\x16\x03\x01

13-1576400/461/3803W
5.78000.00.332.58
159.65.200.34defaultGET /server-status HTTP/1.1

14-15-0/0/2573.
0.004741100.00.001.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-15-0/0/4714.
0.014739200.00.003.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-15-0/0/5527.
0.004740200.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-15-0/0/5495.
0.004740100.00.003.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-15-0/0/1949.
0.004740000.00.001.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-15-0/0/3257.
0.004739800.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-15-0/0/684.
0.004739700.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-15-0/0/2061.
0.004739600.00.001.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-15-0/0/3698.
0.004739500.00.002.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-15-0/0/482.
0.004739400.00.000.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-15-0/0/21.
0.004739300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-11-0/0/10.
0.01146474900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-11-0/0/9.
0.01146475000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-11-0/0/456.
6.53139768600.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-11-0/0/9.
0.01146473100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-11-0/0/33.
0.01146473000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-11-0/0/19.
0.01146472500.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-11-0/0/305.
0.01146473600.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-11-0/0/40.
0.01146473500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-11-0/0/391.
0.01146473300.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-11-0/0/10.
0.01146472900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-11-0/0/5.
0.01146473400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-11-0/0/5.
0.01146472800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-11-0/0/5.
0.01146473200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-11-0/0/7.
0.01146472700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-11-0/0/6.
0.01146472400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-12-0/0/1718.
12.54111886100.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-11-0/0/2.
0.01146472600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-11-0/0/365.
6.79139768700.00.000.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 149total sessions expired since starting: 149total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 86 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-05-19 06:10

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 223.252.6.6
Domain: quadbus.com.au
Port: 80
URL: http://quadbus.com.au

First seen 2023-06-12 01:20
Last seen 2024-04-02 05:35
Open for 295 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9773e2632

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 02-Apr-2024 15:35:32 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  763 days 1 hour 54 minutes 57 seconds
Total accesses: 3216877 - Total Traffic: 2.3 GB
CPU Usage: u91.45 s17.18 cu.12 cs0 - .000165% CPU load
.0488 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
W______C........_......_........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4195900/816/259641W
3.68000.00.57185.25
209.97.180.8defaultGET /server-status HTTP/1.1

1-41199480/818/249262_
3.55100.00.66185.34
209.97.180.8defaultGET /server HTTP/1.1

2-4147140/786/246766_
3.94000.00.58176.82
159.203.96.42default-223_252_6_6GET /

3-41107200/1768/252206_
7.26000.01.08181.82
209.97.180.8defaultGET /.vscode/sftp.json HTTP/1.1

4-41107210/1753/241328_
7.97000.01.19179.34
159.203.96.42default-223_252_6_6GET /

5-41222290/694/218310_
2.47000.00.48164.72
209.97.180.8defaultGET /about HTTP/1.1

6-41107220/1586/209484_
7.16100.01.03152.30
209.97.180.8defaultGET / HTTP/1.1

7-4162721/659/209791C
2.16000.30.43154.83
209.97.180.8defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-41-0/0/191594.
0.0144287400.00.00143.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/169206.
0.0144286900.00.00122.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/153934.
0.0144286800.00.00111.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/122146.
0.0144286700.00.0092.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/91495.
0.0144286600.00.0068.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/62543.
9.5315072200.00.0046.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/53957.
0.0144286200.00.0038.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/66972.
0.0144286100.00.0047.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41143280/2541/46389_
10.21100.01.9732.28
159.203.96.42default-223_252_6_6GET /

17-41-0/0/53453.
0.0144286000.00.0037.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36865.
0.0144285900.00.0025.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34284.
0.0144285800.00.0024.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35362.
0.0144284500.00.0024.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28891.
0.0144285700.00.0020.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20771.
0.0144285600.00.0014.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41150920/2424/30228_
12.76000.01.9921.40
209.97.180.8defaultGET /v2/_catalog HTTP/1.1

24-41-0/0/12770.
0.0144285500.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11985.
0.0144285400.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8544.
0.0144285300.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11416.
0.0144285200.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2841.
0.0144285100.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3641.
0.0144285000.00.002.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2446.
0.0144284900.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4812.
0.0144284800.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1918.
0.0144284700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6163.
0.0144284600.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3399.
0.0144284400.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3346.
0.0144284300.00.002.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2699.
0.0144284200.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6017.
0.0144284100.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1747.
0.0144284000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5102.
0.0144283900.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9435.
0.0144283700.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2047.
0.0144283600.00.001.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1222.
0.0144289900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/549.
0.0144283400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/578.
0.0144283300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2550.
0.0144287900.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1907.
0.0144283200.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/2613.
8.8317321200.00.001.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/2157.
11.7814232500.00.001.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/664.
0.0144289800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2705.
0.0144289700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/219.
0.0144289600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/219.
0.0144289500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/235.
0.0144289400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/236.
0.0144283500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1656.
0.0144289300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/301.
0.0144289200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/133.
0.0144287600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/118.
0.0144289100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/118.
0.0144289000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/118.
0.0144288900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-41

Found on 2024-04-02 05:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9bcfabb1d

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 22-Mar-2024 00:56:02 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  751 days 11 hours 15 minutes 27 seconds
Total accesses: 3165376 - Total Traffic: 2.3 GB
CPU Usage: u34.56 s7.83 cu.08 cs0 - 6.54e-5% CPU load
.0488 requests/sec - 37 B/second - 763 B/request
2 requests currently being processed, 8 idle workers
_W____._.C._...._...............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4138380/418/255292_
1.09400.00.24182.18
157.245.36.108defaultGET / HTTP/1.1

1-41158940/1395/245373W
4.00000.01.03182.38
157.245.36.108defaultGET /server-status HTTP/1.1

2-41223610/929/243107_
1.60100.00.69174.10
157.245.36.108defaultGET /.vscode/sftp.json HTTP/1.1

3-41202990/343/248434_
0.39100.00.29179.19
157.245.36.108defaultGET /about HTTP/1.1

4-41198750/217/237561_
0.19200.00.12176.55
157.245.36.108defaultGET /server HTTP/1.1

5-4139860/643/213636_
1.74100.00.40161.83
157.245.36.108defaultGET /v2/_catalog HTTP/1.1

6-41-0/0/205940.
0.008827500.00.00149.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-4138400/443/207180_
1.132400.00.27153.03
157.245.36.108default\x16\x03\x01\x01\x01\x01

8-41-0/0/189779.
0.019416000.00.00141.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41164121/1313/168300C
4.51000.31.31121.92
157.245.36.108defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-41-0/0/152675.
0.019415900.00.00110.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-4141210/638/120704_
1.92100.00.4891.27
157.245.36.108defaultGET /debug/default/view?panel=config HTTP/1.1

12-41-0/0/90836.
0.009415800.00.0067.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/59509.
0.898827400.00.0044.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/53494.
0.844134400.00.0038.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/66957.
0.009415700.00.0047.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41152130/1410/42530_
4.562300.00.8729.41
157.245.36.108defaultGET / HTTP/1.1

17-41-0/0/53440.
0.0325319300.00.0037.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36853.
0.0125320000.00.0025.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34273.
0.0125320100.00.0024.33
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35131.
0.0125319900.00.0024.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28879.
0.0025320600.00.0020.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20759.
0.0025320500.00.0014.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27797.
0.0025320400.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12759.
0.0025320300.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11975.
0.0155592000.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8534.
0.0155592100.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11405.
0.0055593400.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2831.
0.0055593300.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3631.
0.0055593200.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2436.
0.0055593100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4802.
0.0055593000.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1908.
0.0055592900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6153.
0.0155592800.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3389.
0.0055592700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3336.
0.0055592600.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2689.
2.2448345600.00.001.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6007.
0.0055592500.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1737.
0.0055592400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5092.
0.0055592300.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9425.
0.0055592200.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.00163677700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011873291900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001873291800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001873291700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001873291600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001873291500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011873291400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011894477300.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001894477200.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011894477100.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001894477000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001894476900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011894473000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001894476800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001894476700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012530104800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012530104900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012530104400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012530104500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012530104200.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2024-03-21 14:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9d1446695

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 07-Mar-2024 22:32:47 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  737 days 8 hours 52 minutes 13 seconds
Total accesses: 3104658 - Total Traffic: 2.2 GB
CPU Usage: u105.56 s16.1 cu.27 cs0 - .000191% CPU load
.0487 requests/sec - 37 B/second - 763 B/request
5 requests currently being processed, 5 idle workers
_C.C_._.CC__W...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4188320/134/250460_
0.80000.00.14178.68
139.59.230.191defaultGET /v2/_catalog HTTP/1.1

1-41309271/567/240134C
8.82100.20.40178.45
139.59.230.191defaultGET /server HTTP/1.1

2-41-0/0/238468.
0.653145600.00.00170.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41174891/1671/244236C
13.98100.21.40175.87
139.59.230.191defaultGET /.vscode/sftp.json HTTP/1.1

4-41207290/362/234118_
1.87000.00.25174.05
128.199.195.68default-223_252_6_6GET /

5-41-0/0/209267.
11.465640100.00.00158.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-4182040/236/201788_
1.14000.00.16146.86
139.59.230.191defaultGET /debug/default/view?panel=config HTTP/1.1

7-41-0/0/202991.
10.875641000.00.00149.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41186431/1259/185885C
10.13000.20.95138.77
139.59.230.191defaultGET /about HTTP/1.1

9-41297071/1137/163835C
10.76000.30.93118.39
139.59.230.191defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-41326100/236/149492_
0.94000.00.19108.10
128.199.195.68default-223_252_6_6GET /

11-41327550/267/116830_
0.85000.00.1688.19
128.199.195.68default-223_252_6_6GET /

12-413270/253/88174W
0.36000.00.2065.74
139.59.230.191defaultGET /server-status HTTP/1.1

13-41-0/0/58397.
9.1441857000.00.0043.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/52037.
12.995744000.00.0037.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/64825.
0.0141857600.00.0046.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/40502.
0.0141857700.00.0028.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/53315.
6.1112475100.00.0037.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/36748.
1.5336659400.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/34186.
0.0141857300.00.0024.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/35017.
0.0141857400.00.0024.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28846.
0.0141857500.00.0020.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/20731.
0.0141859900.00.0014.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27793.
0.0041859800.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12755.
0.0141856700.00.009.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/11972.
0.0141856800.00.008.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8531.
0.0141855700.00.006.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/11403.
1.4337837600.00.007.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2829.
0.0141855600.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3629.
0.0141855500.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2434.
0.0041859700.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4800.
0.4837725200.00.003.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1906.
0.2739643300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6151.
0.0041858200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3387.
0.0141857200.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3334.
0.0141856900.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2371.
0.0041858900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6005.
0.0041858800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1735.
0.0041858700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5090.
0.0041858500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9423.
0.0141858400.00.006.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2037.
0.0041858300.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011751472500.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001751472400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001751472300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001751472200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001751472100.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011751472000.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011772657900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001772657800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011772657700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001772657600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001772657500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011772653600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001772657400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001772657300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012408285300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012408285400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012408284900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012408285000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012408284700.00.000.03
127.0.0.1

Found on 2024-03-07 12:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d90ace0fc0

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 03-Feb-2024 14:55:48 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  704 days 1 hour 15 minutes 14 seconds
Total accesses: 2961733 - Total Traffic: 2.1 GB
CPU Usage: u48.9 s9.2 cu.21 cs0 - 9.59e-5% CPU load
.0487 requests/sec - 37 B/second - 761 B/request
3 requests currently being processed, 15 idle workers
_W_____C__C_______..............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41292370/764/239760_
4.21000.00.64171.38
139.144.150.45default-223_252_6_6GET /

1-41294030/722/230420W
5.18000.00.49171.44
137.184.150.232defaultGET /server-status HTTP/1.1

2-4189680/1154/228567_
3.72000.00.84164.08
205.169.39.151defaultGET /img/common/top_bg.png HTTP/1.1

3-41293920/708/233796_
4.30000.00.51168.33
205.169.39.151defaultGET /img/apps/poa-box.gif HTTP/1.1

4-41292410/730/225339_
3.19000.00.71167.81
205.169.39.151defaultGET /img/apps/pcp-box.gif HTTP/1.1

5-41292480/715/201303_
2.9503940.00.65152.48
205.169.39.151defaultGET /img/common/globe.png HTTP/1.1

6-41293070/717/191648_
3.43000.00.50139.54
205.169.39.151defaultGET /img/apps/server-box.gif HTTP/1.1

7-41293871/745/194762C
4.15000.30.76141.56
137.184.150.232defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-41294040/708/178616_
2.12100.00.42133.81
137.184.150.232defaultGET /debug/default/view?panel=config HTTP/1.1

9-418880/5/156211_
0.01000.00.02111.66
205.169.39.151defaultGET /img/apps/container-box.gif HTTP/1.1

10-418951/1/143944C
0.00100.20.00103.59
137.184.150.232defaultGET /about HTTP/1.1

11-418960/1/112608_
0.00000.00.0083.86
137.184.150.232defaultGET /v2/_catalog HTTP/1.1

12-4189770/1067/83010_
4.67000.00.8361.05
137.184.150.232defaultGET /.vscode/sftp.json HTTP/1.1

13-418970/0/51577_
0.73000.00.0038.34
139.144.150.45default-223_252_6_6GET /

14-419000/0/47564_
0.01000.00.0033.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-419010/0/61827_
0.54000.00.0044.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-419020/0/36493_
0.00000.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-419030/0/48574_
0.56000.00.0034.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/35801.
0.0121443300.00.0024.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/31806.
0.0121442300.00.0022.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/32000.
0.0121442000.00.0022.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28186.
0.0121442200.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19357.
0.0121442800.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27780.
0.4016755500.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12136.
0.0121442900.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/10277.
0.7816762200.00.007.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8523.
0.0121442700.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9385.
0.0121442600.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2174.
0.0121442400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3623.
0.0021444300.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2430.
0.0121443100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4581.
0.0121443000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1772.
0.0121443200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6148.
0.0021444200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3383.
0.0021444100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3330.
0.0021444000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2368.
0.0021443900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6002.
0.0021443800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1732.
0.0021443700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5087.
0.0021443600.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9006.
0.0021443500.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001463610700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011463610600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001463610500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001463610400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001463610300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001463610200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011463610100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011484796000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001484795900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011484795800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001484795700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001484795600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011484791700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001484795500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001484795400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012120423500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012120423600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012120423100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012120423200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012120422900.00.000

Found on 2024-02-03 04:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9fae8955a

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 02-Feb-2024 02:18:53 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  702 days 12 hours 38 minutes 18 seconds
Total accesses: 2956134 - Total Traffic: 2.1 GB
CPU Usage: u24.85 s5.81 cu.12 cs0 - 5.07e-5% CPU load
.0487 requests/sec - 37 B/second - 761 B/request
3 requests currently being processed, 7 idle workers
CC_____W_..._...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41292371/178/239174C
0.80100.20.18170.92
198.199.121.22defaultGET /about HTTP/1.1

1-41294031/153/229851C
1.35000.30.09171.05
198.199.121.22defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-4189680/614/228027_
1.07300.00.50163.75
198.199.121.22defaultGET / HTTP/1.1

3-41293920/154/233242_
0.951800.00.08167.90
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

4-41292410/177/224786_
1.17000.00.31167.41
198.199.121.22defaultGET /v2/_catalog HTTP/1.1

5-41292480/171/200759_
0.55100.00.23152.06
198.199.121.22defaultGET /debug/default/view?panel=config HTTP/1.1

6-41293070/157/191088_
0.23300.00.12139.16
198.199.121.22default\x16\x03\x01\x01\x01\x01

7-41293870/167/194184W
1.16000.00.25141.04
198.199.121.22defaultGET /server-status HTTP/1.1

8-41294040/161/178069_
0.48000.00.08133.47
198.199.121.22defaultGET /.vscode/sftp.json HTTP/1.1

9-41-0/0/156206.
0.003571800.00.00111.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/143943.
0.463582000.00.00103.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/112607.
0.353573800.00.0083.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-4189770/506/82449_
1.83200.00.3860.60
198.199.121.22defaultGET / HTTP/1.1

13-41-0/0/51577.
0.733581900.00.0038.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/47564.
0.018261800.00.0033.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/61827.
0.543577900.00.0044.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/36493.
0.008262800.00.0025.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/48574.
0.563581100.00.0034.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/35801.
0.018261700.00.0024.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/31806.
0.018260700.00.0022.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/32000.
0.018260400.00.0022.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/28186.
0.018260600.00.0020.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19357.
0.018261200.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27780.
0.403573900.00.0019.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12136.
0.018261300.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/10277.
0.783580600.00.007.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/8523.
0.018261100.00.006.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9385.
0.018261000.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/2174.
0.018260800.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3623.
0.008262700.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2430.
0.018261500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4581.
0.018261400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1772.
0.018261600.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6148.
0.008262600.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3383.
0.008262500.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3330.
0.008262400.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2368.
0.008262300.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6002.
0.008262200.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1732.
0.008262100.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5087.
0.008262000.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9006.
0.008261900.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001450429100.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011450429000.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001450428900.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001450428800.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001450428700.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001450428600.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011450428500.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011471614400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001471614300.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011471614200.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001471614100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001471614000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011471610100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001471613900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001471613800.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.012107241900.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.012107242000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.012107241500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.012107241600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.012107241300.00.000.03
127.0.0.1web1.ambient-it.com

Found on 2024-02-01 16:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d95469fceb

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 08-Jan-2024 21:18:30 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  678 days 7 hours 37 minutes 56 seconds
Total accesses: 2845690 - Total Traffic: 2.0 GB
CPU Usage: u31.21 s8.08 cu.15 cs0 - 6.73e-5% CPU load
.0486 requests/sec - 37 B/second - 763 B/request
4 requests currently being processed, 6 idle workers
..._....C.....C....W__._.C_._...................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/230968.
1.183090100.00.00165.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41-0/0/222110.
0.013089900.00.00165.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41-0/0/219145.
0.873090200.00.00157.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41320630/522/224032_
1.06000.00.42161.81
143.198.72.96defaultGET /debug/default/view?panel=config HTTP/1.1

4-41-0/0/217980.
0.523090500.00.00162.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/193128.
0.763090000.00.00147.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41-0/0/182633.
7.313090600.00.00133.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/185801.
0.603090300.00.00135.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-4148571/503/171495C
2.13100.20.34129.11
143.198.72.96defaultGET /about HTTP/1.1

9-41-0/0/149984.
5.323090800.00.00107.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/140662.
0.013089800.00.00101.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/106617.
0.013089700.00.0079.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/77721.
0.013089600.00.0057.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/51209.
0.013089500.00.0038.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41289131/113/45182C
0.13000.30.0632.38
143.198.72.96defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

15-41-0/0/60132.
1.003090400.00.0043.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35802.
0.013089400.00.0024.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44146.
0.013089300.00.0031.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34831.
0.013089200.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41289170/124/30918W
0.23000.00.1121.99
143.198.72.96defaultGET /server-status HTTP/1.1

20-41289180/127/31203_
0.18000.00.1021.99
143.198.72.96defaultGET /v2/_catalog HTTP/1.1

21-41289190/133/27966_
0.13100.00.0920.34
143.110.156.182default-223_252_6_6GET /

22-41-0/0/19353.
0.013090900.00.0013.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41289210/136/27507_
0.16000.00.0519.08
143.110.156.182default-223_252_6_6GET /

24-41-0/0/12131.
0.003092200.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41289231/145/8205C
0.18100.20.096.11
143.198.72.96defaultGET /.vscode/sftp.json HTTP/1.1

26-41289240/130/5833_
0.19000.00.074.05
143.110.156.182default-223_252_6_6GET /

27-41-0/0/9381.
0.003092100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41289260/121/1356_
0.18000.00.070.69
143.110.156.182default-223_252_6_6GET /

29-41-0/0/3621.
0.013090700.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2426.
0.003092000.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4577.
0.003091900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1768.
0.003091800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6146.
0.003091700.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3381.
0.003091600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3328.
0.003091500.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2366.
0.003091400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/6000.
0.003091300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1730.
0.003091200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5085.
0.003091100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9004.
0.003091000.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001241266800.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011241266700.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001241266600.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001241266500.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001241266400.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001241266300.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011241266200.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011262452200.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001262452100.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011262452000.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001262451900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001262451800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011262447900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001262451700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001262451600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011898079600.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011898079700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011898079200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011898079300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011898079000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTI

Found on 2024-01-08 11:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9a0d3e550

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 07-Jan-2024 19:43:34 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  677 days 6 hours 3 minutes
Total accesses: 2841268 - Total Traffic: 2.0 GB
CPU Usage: u28.46 s6.83 cu.07 cs0 - 6.04e-5% CPU load
.0486 requests/sec - 37 B/second - 764 B/request
3 requests currently being processed, 7 idle workers
_._C___W__.....C................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41102000/168/230576_
0.21000.00.10165.27
137.184.222.107defaultGET /v2/_catalog HTTP/1.1

1-41-0/0/222104.
0.062289800.00.00165.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-4182880/163/218809_
0.25000.00.12157.52
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

3-41320631/116/223626C
0.18000.30.06161.46
137.184.222.107defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-41320640/116/217603_
0.14200.00.08162.74
137.184.222.107defaultGET / HTTP/1.1

5-4119220/105/192813_
0.15100.00.10146.91
137.184.222.107defaultGET /debug/default/view?panel=config HTTP/1.1

6-41110170/2440/182358_
6.63300.01.85133.21
137.184.222.107default\x16\x03\x01\x01\x01\x01

7-41100990/147/185505W
0.23000.00.11135.22
137.184.222.107defaultGET /server-status HTTP/1.1

8-4148570/95/171087_
0.16300.00.06128.83
137.184.222.107defaultGET / HTTP/1.1

9-41299270/2100/149705_
3.92000.01.50107.17
137.184.222.107defaultGET /.vscode/sftp.json HTTP/1.1

10-41-0/0/140660.
0.003604200.00.00101.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/106615.
0.003604000.00.0079.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/77719.
0.142546000.00.0057.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/51207.
0.093603800.00.0038.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/45069.
0.023603200.00.0032.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41101051/172/59859C
0.31100.20.1942.77
137.184.222.107defaultGET /about HTTP/1.1

16-41-0/0/35800.
0.003603900.00.0024.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44144.
0.112425100.00.0031.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34829.
0.013607400.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/30794.
0.013607500.00.0021.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31076.
0.013607900.00.0021.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/27833.
0.013606800.00.0020.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19351.
0.023603400.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27371.
0.013607600.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12130.
0.102546200.00.009.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8060.
0.023603300.00.006.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00271977900.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00271977800.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00300651500.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00300651410.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00300651300.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00300651200.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00300651100.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00300651000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00300650900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34271991700.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00300650800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00300650700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01300650600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00300650500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00300650400.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001232057200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011232057100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001232057000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001232056900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001232056800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001232056700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011232056600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011253242600.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001253242500.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011253242400.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001253242300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001253242200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011253238200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001253242100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001253242000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011888870000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011888870100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011888869600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011888869700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011888869400.00.000.03
127.0.0.1

Found on 2024-01-07 09:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d93c889a8d

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 06-Jan-2024 09:46:57 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  675 days 20 hours 6 minutes 23 seconds
Total accesses: 2835756 - Total Traffic: 2.0 GB
CPU Usage: u76.1 s17.77 cu.29 cs0 - .000161% CPU load
.0486 requests/sec - 37 B/second - 764 B/request
4 requests currently being processed, 6 idle workers
.___C.__C_W.C...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/230029.
5.343536020.00.00164.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-41135380/4893/222045_
11.48000.03.34165.86
165.22.108.223defaultGET /debug/default/view?panel=config HTTP/1.1

2-41151030/190/218288_
0.26100.00.15157.19
165.22.108.223defaultGET / HTTP/1.1

3-41159530/2320/223134_
5.31100.01.53161.09
165.22.108.223default\x16\x03\x01\x01\x01\x01

4-41232801/801/217088C
2.56100.20.55162.33
165.22.108.223defaultGET /.vscode/sftp.json HTTP/1.1

5-41-0/0/192280.
0.013535900.00.00146.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41110170/1899/181817_
5.36100.01.44132.80
165.22.108.223defaultGET / HTTP/1.1

7-41167640/2424/184988_
5.81000.01.60134.82
165.22.108.223defaultGET /v2/_catalog HTTP/1.1

8-41123611/2349/170616C
5.91000.31.64128.51
165.22.108.223defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

9-41299270/1541/149146_
2.512200.01.07106.74
35.203.210.169defaultGET / HTTP/1.1

10-41239950/1860/140290W
5.19000.01.22101.39
165.22.108.223defaultGET /server-status HTTP/1.1

11-41-0/0/106611.
0.003534500.00.0079.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41299341/1633/77655C
4.47000.21.1557.23
165.22.108.223defaultGET /about HTTP/1.1

13-41-0/0/51203.
0.0033399400.00.0038.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/45063.
0.0196459000.00.0032.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/59687.
0.0196458900.00.0042.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/35795.
0.0296459500.00.0024.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44084.
0.0395948700.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/34827.
3.3761365900.00.0023.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/30792.
3.8260784700.00.0021.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/31074.
4.0760396700.00.0021.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/27831.
6.0742768700.00.0020.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19346.
0.0096460300.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27369.
0.0096460200.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12079.
0.0096460100.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.00259758400.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00259758200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00259758100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00288431700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00288431610.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00288431500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00288431400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00288431300.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00288431200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00288431100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34259772000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00288431000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00288430900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01288430800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00288430700.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00288430600.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001219837500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011219837400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001219837300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001219837200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001219837100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001219837000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011219836900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011241022800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001241022700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011241022600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001241022500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001241022400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011241018500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001241022300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001241022200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011876650300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011876650400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011876649900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011876650000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011876649700.00.000.03
127.0.0.1<

Found on 2024-01-05 23:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d96a41a58a

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 24-Dec-2023 13:40:05 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  662 days 23 hours 59 minutes 31 seconds
Total accesses: 2785960 - Total Traffic: 2.0 GB
CPU Usage: u36.57 s8.4 cu.19 cs0 - 7.88e-5% CPU load
.0486 requests/sec - 37 B/second - 764 B/request
3 requests currently being processed, 7 idle workers
_.C__C___....._W................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41139580/78/226329_
0.10000.00.08162.27
159.203.44.43defaultGET /v2/_catalog HTTP/1.1

1-41-0/0/217152.
2.67136500.00.00162.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-4144691/520/214794C
1.27100.20.31154.88
159.203.44.43defaultGET /about HTTP/1.1

3-41156400/6/218389_
0.01300.00.00158.06
159.203.44.43default\x16\x03\x01\x01\x01\x01

4-41120370/854/213104_
1.32000.00.58159.71
159.203.44.43defaultGET /.vscode/sftp.json HTTP/1.1

5-41155811/6/190572C
0.01000.30.00145.45
159.203.44.43defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-41261670/677/179058_
1.42100.00.46130.85
159.203.44.43defaultGET /debug/default/view?panel=config HTTP/1.1

7-41155820/6/180376_
0.023100.00.00131.70
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-41155830/7/167453_
0.02300.00.01126.31
159.203.44.43defaultGET / HTTP/1.1

9-41-0/0/146406.
0.1817789200.00.00104.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/136503.
3.70140300.00.0098.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/106276.
5.1220372000.00.0079.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/76016.
2.06140200.00.0056.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/51195.
0.0120374700.00.0038.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-4156140/872/44451_
1.66200.00.5731.88
159.203.44.43defaultGET / HTTP/1.1

15-4156150/835/59078W
1.02000.00.5242.16
159.203.44.43defaultGET /server-status HTTP/1.1

16-41-0/0/35786.
0.0120374100.00.0024.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/44058.
0.0142454700.00.0031.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/33327.
1.9028656800.00.0022.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/29249.
0.01148837200.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29491.
0.01148836500.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25487.
0.01148836300.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19345.
0.01148836400.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27368.
0.01148836200.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12078.
0.00148837400.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.00148837300.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.00148837100.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.00148837000.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.00177510600.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.00177510510.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.00177510400.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.00177510300.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.00177510200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.00177510100.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.00177510000.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.34148850900.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.00177509900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.00177509800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.01177509700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.00177509600.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.00177509500.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001108916400.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011108916300.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001108916200.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001108916100.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001108916000.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001108915900.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011108915800.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011130101700.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001130101600.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011130101500.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001130101400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001130101300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011130097400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001130101200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001130101100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011765729200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011765729300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011765728800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011765728900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011765728600.00.000.03
127.0.0.1

Found on 2023-12-24 03:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d90825658a

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 12-Dec-2023 07:58:16 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  650 days 18 hours 17 minutes 42 seconds
Total accesses: 2738410 - Total Traffic: 2.0 GB
CPU Usage: u61.22 s12.44 cu.13 cs0 - .000131% CPU load
.0487 requests/sec - 37 B/second - 764 B/request
3 requests currently being processed, 7 idle workers
C__W__.__._C....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41120021/1721/222416C
6.81100.21.24159.43
138.197.88.136defaultGET /about HTTP/1.1

1-41277270/683/213557_
2.91000.00.45159.77
138.197.88.136defaultGET /.vscode/sftp.json HTTP/1.1

2-41233390/606/211136_
1.25100.00.41152.20
138.197.88.136defaultGET /debug/default/view?panel=config HTTP/1.1

3-4191730/726/213928W
2.08000.00.45154.82
138.197.88.136defaultGET /server-status HTTP/1.1

4-41203710/354/208778_
1.62320200.00.23156.83
114.119.159.37defaultNULL

5-415990/733/187130_
3.01000.00.52142.85
138.197.88.136defaultGET /v2/_catalog HTTP/1.1

6-41-0/0/175483.
5.958530700.00.00128.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41223490/1885/177942_
6.39300.01.35129.77
138.197.88.136defaultGET / HTTP/1.1

8-41120970/718/164054_
3.91300.00.65123.76
87.236.176.82default-223_252_6_21GET /favicon.ico HTTP/1.1

9-41-0/0/144463.
4.3813993100.00.00103.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41233410/597/133409_
1.81200.00.4496.79
138.197.88.136defaultGET / HTTP/1.1

11-41223531/1898/103601C
6.32000.31.3077.26
138.197.88.136defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

12-41-0/0/74374.
0.0113992800.00.0054.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/50655.
0.0143105200.00.0037.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/42635.
0.0143106000.00.0030.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/57753.
0.0143105900.00.0041.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/34981.
0.0143105700.00.0024.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/43745.
3.3716322100.00.0030.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/32733.
1.2828168300.00.0022.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/29249.
0.0143106300.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29491.
0.0143105600.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25487.
0.0143105400.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19345.
0.0143105500.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27368.
0.0143105300.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12078.
0.0043106500.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8054.
0.0043106400.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5703.
0.0043106200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9380.
0.0043106100.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.0071779700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.0071779610.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.0071779500.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.0071779400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.0071779300.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.0071779200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.0071779100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/3327.
5.3443120000.00.002.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2365.
0.0071779000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.0071778900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.0171778800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.0071778700.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.0071778600.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.001003185500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.011003185400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.001003185300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.001003185200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.001003185100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.001003185000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.011003184900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.011024370800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.001024370700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.011024370600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.001024370500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.001024370400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.011024366500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.001024370300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.001024370200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011659998300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011659998400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011659997900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011659998000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011659997700.00.000.03
127.0.0.1web1.ambie

Found on 2023-12-11 21:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9390ba941

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Wednesday, 06-Dec-2023 15:18:28 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  645 days 1 hour 37 minutes 54 seconds
Total accesses: 2716451 - Total Traffic: 1.9 GB
CPU Usage: u61.68 s10.86 cu.2 cs0 - .000131% CPU load
.0487 requests/sec - 37 B/second - 764 B/request
2 requests currently being processed, 8 idle workers
_.W_..__C__......._................_............................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41188870/922/220426_
5.02000.00.59158.04
164.90.205.35defaultGET /about HTTP/1.1

1-41-0/0/211543.
4.311427500.00.00158.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41294470/847/208968W
4.03000.00.64150.80
164.90.205.35defaultGET /server-status HTTP/1.1

3-4163830/366/211946_
0.78000.00.25153.36
164.90.205.35defaultGET /v2/_catalog HTTP/1.1

4-41-0/0/207640.
0.011427800.00.00155.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/186366.
0.011428800.00.00142.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41148790/57/173691_
0.12100.00.05127.13
164.90.205.35defaultGET /debug/default/view?panel=config HTTP/1.1

7-41148800/62/175771_
0.09000.00.06128.24
128.199.61.251default-223_252_6_6GET /

8-41148811/61/163013C
0.09000.30.04122.87
164.90.205.35defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

9-41148820/60/143162_
0.09100.00.04102.50
128.199.61.251default-223_252_6_6GET /

10-41148830/64/132370_
0.10100.00.0396.04
164.90.205.35defaultGET /.vscode/sftp.json HTTP/1.1

11-41-0/0/101700.
0.001429000.00.0075.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/74120.
0.001428900.00.0054.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/50645.
3.061427600.00.0037.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/42632.
14.0622579000.00.0030.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/57749.
4.411427400.00.0041.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/34978.
0.0122578300.00.0024.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/42583.
2.039065900.00.0029.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41262410/1054/31827_
4.07200.00.6121.81
128.199.61.251default-223_252_6_6GET /

19-41-0/0/29244.
4.721427300.00.0020.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/29488.
0.1920042200.00.0020.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25482.
0.1720065000.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/19340.
3.211427700.00.0013.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27364.
0.1221318600.00.0019.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12076.
0.0022581300.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8052.
0.0022581200.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5701.
0.0022581100.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9379.
0.0022581000.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1235.
0.0022580900.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3620.
0.0022580810.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2425.
0.0022580700.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4576.
0.0022580600.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1767.
0.0022580500.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6145.
0.0022580400.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3380.
0.0022580300.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41262580/970/3040_
4.80000.00.752.01
128.199.61.251default-223_252_6_6GET /

36-41-0/0/2365.
0.0022580200.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5999.
0.0022580100.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1729.
0.0122580000.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5084.
0.0022579900.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9003.
0.0022579800.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00953986700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01953986600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00953986500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00953986400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00953986300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00953986200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01953986100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01975172000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00975171900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01975171800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00975171700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00975171600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01975167700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00975171500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00975171400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011610799500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011610799600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011610799100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011610799200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011610798900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2023-12-06 05:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9f746a268

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 17-Nov-2023 09:24:33 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  625 days 19 hours 43 minutes 59 seconds
Total accesses: 2641966 - Total Traffic: 1.9 GB
CPU Usage: u165.35 s24.13 cu.34 cs0 - .000351% CPU load
.0489 requests/sec - 37 B/second - 765 B/request
3 requests currently being processed, 7 idle workers
__._C__C_.W_....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41225480/1388/213796_
12.64000.00.85153.61
147.182.130.98defaultGET /v2/_catalog HTTP/1.1

1-4115050/2207/205264_
14.31100.01.44153.56
147.182.130.98defaultGET /debug/default/view?panel=config HTTP/1.1

2-41-0/0/203674.
15.93234700.00.00146.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41129440/1988/207826_
18.33200.01.28150.47
147.182.130.98defaultGET / HTTP/1.1

4-4174901/866/203001C
2.02000.30.54152.48
147.182.130.98defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41130570/2479/184178_
18.90300.01.85140.66
147.182.130.98defaultGET / HTTP/1.1

6-41190580/2271/170351_
15.54000.01.40124.36
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

7-41190591/11/172220C
0.02100.20.00125.74
147.182.130.98defaultGET /about HTTP/1.1

8-41196230/4314/158251_
22.07300.02.78119.50
147.182.130.98default\x16\x03\x01\x01\x01\x01

9-41-0/0/140093.
0.019360300.00.00100.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41157580/2118/129271W
13.18000.01.3094.00
147.182.130.98defaultGET /server-status HTTP/1.1

11-41146420/1645/98826_
12.52000.00.9573.93
147.182.130.98defaultGET /.vscode/sftp.json HTTP/1.1

12-41-0/0/73301.
13.0616830300.00.0053.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/47916.
0.0016830500.00.0035.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/39236.
0.0016830400.00.0027.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/55967.
0.0046743700.00.0040.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/33898.
1.1255800900.00.0023.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/38133.
3.0467646900.00.0026.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/29664.
0.1665247000.00.0020.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/26694.
0.1865246900.00.0019.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/26299.
3.5349014100.00.0018.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/25270.
0.4459220300.00.0018.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/18111.
4.9942997600.00.0012.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27309.
0.1665247100.00.0018.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12075.
0.0067647800.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8051.
0.0067647700.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5700.
0.0067647600.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9378.
0.0067647500.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1234.
0.00125112100.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3619.
0.01125107600.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2424.
0.37123967600.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4575.
0.00125112000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1766.
0.01125110600.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6144.
0.06125108000.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3379.
0.01125107900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2070.
0.01125109000.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.01161968300.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.00161968200.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.00161968100.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.00161968000.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.00161967900.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00787703200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01787703100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00787703000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00787702900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00787702800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00787702700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01787702600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01808888500.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00808888400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01808888300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00808888200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00808888100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01808884200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00808888000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00808887900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011444515900.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011444516000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011444515500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011444515600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011444515300.00.000.03
127

Found on 2023-11-16 23:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d95e510e1d

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 06-Nov-2023 14:42:18 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  615 days 1 hour 1 minute 44 seconds
Total accesses: 2599584 - Total Traffic: 1.9 GB
CPU Usage: u26.18 s6.34 cu.11 cs0 - 6.14e-5% CPU load
.0489 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
C__.____W.....C.._..............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41162591/897/209807C
1.81000.30.68151.00
137.184.150.232defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

1-41169230/459/201936_
1.18200.00.32151.39
137.184.150.232defaultGET / HTTP/1.1

2-41244320/406/199695_
1.721500.00.24143.91
51.195.94.201madonnaslilyflorist.com.auPOST / HTTP/1.1

3-41-0/0/204228.
0.28528400.00.00148.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41128140/208/200243_
0.22000.00.13150.67
137.184.150.232defaultGET /v2/_catalog HTTP/1.1

5-41264050/183/180569_
0.20000.00.14137.96
137.184.150.232defaultGET /.vscode/sftp.json HTTP/1.1

6-41154240/89/167066_
0.20300.00.08122.31
137.184.150.232default\x16\x03\x01\x01\x01\x01

7-41174320/556/170405_
1.04100.00.40124.48
137.184.150.232defaultGET /debug/default/view?panel=config HTTP/1.1

8-41196230/24/153961W
0.02000.00.02116.73
137.184.150.232defaultGET /server-status HTTP/1.1

9-41-0/0/139736.
0.0511674300.00.0099.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/127151.
0.0111676600.00.0092.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/97178.
0.5911135300.00.0072.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/72496.
0.0711674700.00.0053.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/47912.
0.872328500.00.0035.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41174171/511/37641C
0.99100.20.3826.99
137.184.150.232defaultGET /about HTTP/1.1

15-41-0/0/55127.
0.554128500.00.0039.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/33305.
0.0611676400.00.0023.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41174200/552/37004_
0.82300.00.4226.15
137.184.150.232defaultGET / HTTP/1.1

18-41-0/0/29546.
0.159108400.00.0020.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/26599.
1.494843800.00.0018.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/25404.
0.0111677100.00.0017.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/24894.
0.0111674500.00.0018.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/17074.
0.0011677000.00.0011.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27194.
0.0111674400.00.0018.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12074.
0.0111675000.00.008.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8050.
0.0111675100.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5699.
0.0111675200.00.003.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/9377.
2.5411676500.00.006.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1234.
0.0031978700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3619.
0.0131974200.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2424.
0.3730834100.00.001.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4575.
0.0031978600.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1766.
0.0131977200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6144.
0.0631974600.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3379.
0.0131974500.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2070.
0.0131975600.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.0168834800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.0068834700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.0068834600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.0068834500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.0068834400.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00694569700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01694569600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00694569500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00694569400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00694569300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00694569200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01694569100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01715755000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00715754900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01715754800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00715754700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00715754600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01715750700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00715754500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00715754400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011351382400.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011351382500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011351382000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011351382100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011351381800.00.000.03
127.0.0.1web1.ambient-it.c

Found on 2023-11-06 04:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9a0bf9d7e

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 30-Oct-2023 09:11:54 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  607 days 19 hours 31 minutes 20 seconds
Total accesses: 2571404 - Total Traffic: 1.8 GB
CPU Usage: u39.15 s9.46 cu.06 cs0 - 9.27e-5% CPU load
.049 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
_C_.........._._C.__W_..........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41200930/255/207394_
0.61000.00.12149.28
139.144.150.8default-223_252_6_6GET /

1-41231830/165/199443C
0.25000.00.13149.58
139.144.150.8default-223_252_6_6GET /

2-41257330/85/197274_
0.09000.00.04142.05
139.144.150.45defaultGET /.vscode/sftp.json HTTP/1.1

3-41-0/0/201987.
4.286371200.00.00146.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41-0/0/198349.
3.236371400.00.00149.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/178521.
4.006371000.00.00136.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41-0/0/165906.
0.026371700.00.00121.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/168408.
2.176371600.00.00122.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/153049.
3.836371800.00.00115.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/137908.
0.016371100.00.0098.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/126889.
0.016370900.00.0092.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/97048.
0.016370800.00.0072.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/72475.
0.016370700.00.0053.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41225400/324/46099_
0.75000.00.2434.33
139.144.150.45defaultGET /about HTTP/1.1

14-41-0/0/36973.
0.464915800.00.0026.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41225420/308/53701_
1.48000.00.2138.38
139.144.150.8default-223_252_6_6GET /

16-41225431/319/32817C
0.83000.30.1822.81
139.144.150.45defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

17-41-0/0/36234.
0.253115700.00.0025.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41225450/343/28836_
0.82100.00.2019.98
139.144.150.45defaultGET /debug/default/view?panel=config HTTP/1.1

19-41225460/330/26165_
1.04000.00.2318.47
139.144.150.45defaultGET /v2/_catalog HTTP/1.1

20-41225470/321/24942W
0.79000.00.2317.43
139.144.150.45defaultGET /server-status HTTP/1.1

21-41225480/342/24882_
1.67000.00.1818.27
139.144.150.45defaultGET / HTTP/1.1

22-41-0/0/17070.
4.811315700.00.0011.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/27187.
0.006373700.00.0018.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12068.
0.006373600.00.008.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8046.
0.006373500.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5119.
0.006373400.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8465.
0.006373300.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1233.
0.006373200.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3617.
0.006373100.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2374.
0.006373000.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4574.
0.006372900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1765.
0.006372800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6142.
0.006372700.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3376.
0.006372600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2066.
0.006372500.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2364.
0.016372400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5998.
0.006372300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1728.
0.006372200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5083.
0.006372100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9002.
0.006372000.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00632107200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01632107100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00632107000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00632106900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00632106800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00632106700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01632106600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01653292600.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00653292500.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01653292400.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00653292300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00653292200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01653288200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00653292100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00653292000.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011288920000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011288920100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011288919600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011288919700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011288919400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2023-10-29 23:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d927bf7eb3

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 27-Oct-2023 03:47:38 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  604 days 14 hours 7 minutes 4 seconds
Total accesses: 2556158 - Total Traffic: 1.8 GB
CPU Usage: u21.89 s5.42 cu.05 cs0 - 5.24e-5% CPU load
.0489 requests/sec - 37 B/second - 766 B/request
3 requests currently being processed, 7 idle workers
_..C._W_...._.__..C..._.........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4163370/304/206676_
0.61300.00.21148.92
146.190.64.200defaultGET / HTTP/1.1

1-41-0/0/198537.
0.391525900.00.00148.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41-0/0/196206.
0.031528300.00.00141.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41175081/92/200702C
0.20100.20.07145.77
146.190.64.200defaultGET /about HTTP/1.1

4-41-0/0/197355.
0.001528200.00.00148.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-4164010/304/177343_
0.54000.00.24135.78
146.190.64.200defaultGET /v2/_catalog HTTP/1.1

6-41175100/217/164723W
0.23000.00.09120.53
146.190.64.200defaultGET /server-status HTTP/1.1

7-41175110/91/167217_
0.15000.00.06122.13
146.190.64.200defaultGET /.vscode/sftp.json HTTP/1.1

8-41-0/0/151724.
0.401713000.00.00115.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/137903.
0.421527000.00.0098.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/125902.
0.025132100.00.0091.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/97046.
0.035132200.00.0072.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-4164080/322/72351_
1.22900.00.2253.31
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

13-41-0/0/45775.
0.025131800.00.0034.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-4164090/265/36776_
0.50300.00.2326.40
146.190.64.200default\x16\x03\x01\x01\x01\x01

15-4164100/276/53273_
0.94100.00.3538.10
146.190.64.200defaultGET /debug/default/view?panel=config HTTP/1.1

16-41-0/0/32498.
0.025132000.00.0022.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/36081.
0.025131600.00.0025.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-4164111/298/28383C
0.50000.30.2319.72
146.190.64.200defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

19-41-0/0/25835.
0.025131700.00.0018.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/24621.
0.025131500.00.0017.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/24540.
0.842000500.00.0018.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-4164130/391/15675_
0.72200.00.2310.67
146.190.64.200defaultGET / HTTP/1.1

23-41-0/0/27186.
0.015131300.00.0018.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/12067.
0.885166200.00.008.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8045.
0.0171411900.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5118.
0.0171412000.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8464.
0.0071413400.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1232.
0.0071413300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3616.
0.0071413200.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2373.
0.0071413100.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4573.
0.0071413000.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1764.
0.0071412900.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/6141.
1.3864325200.00.004.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3375.
0.0071412800.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2065.
0.0071412700.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2363.
0.0071412600.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5997.
0.0071412500.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1727.
0.0071412400.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5082.
0.0071412300.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/9001.
0.0071412200.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00604241700.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01604241600.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00604241500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00604241400.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00604241300.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00604241200.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01604241100.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01625427000.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00625426900.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01625426800.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00625426700.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00625426600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01625422700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00625426500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00625426400.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011261054500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011261054600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011261054100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011261054200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011261053900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS *

Found on 2023-10-26 17:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9499c3bc0

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Wednesday, 11-Oct-2023 14:02:41 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  589 days 22 minutes 7 seconds
Total accesses: 2491224 - Total Traffic: 1.8 GB
CPU Usage: u88.97 s10.38 cu.08 cs0 - .000195% CPU load
.049 requests/sec - 37 B/second - 767 B/request
4 requests currently being processed, 6 idle workers
_C_.C_...C_........._..._...............W.......................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41232990/802/203364_
10.60200.00.60146.61
172.105.37.32defaultGET / HTTP/1.1

1-4135611/828/194586C
10.22100.20.61145.86
172.105.37.32defaultGET /.vscode/sftp.json HTTP/1.1

2-41294730/107/192108_
0.23200.00.09138.64
172.105.37.32defaultGET / HTTP/1.1

3-41-0/0/196742.
0.832278500.00.00143.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

4-41322801/342/193214C
1.06000.30.20145.57
172.105.37.32defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41322810/335/173043_
1.07000.00.23132.86
172.105.37.32defaultGET /debug/default/view?panel=config HTTP/1.1

6-41-0/0/161791.
0.025640000.00.00118.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/164345.
0.015639900.00.00120.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/147362.
0.015639800.00.00112.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4178101/253/133477C
0.74100.20.2194.91
172.105.37.32defaultGET /about HTTP/1.1

10-41172150/467/121854_
8.97000.00.2789.11
172.105.37.32defaultGET /v2/_catalog HTTP/1.1

11-41-0/0/95797.
0.005640300.00.0071.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/70003.
0.005640200.00.0051.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/44650.
0.005640100.00.0033.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/35277.
0.007660800.00.0025.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/49853.
8.157660200.00.0035.76
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/29517.
0.007660700.00.0020.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/34711.
0.007660600.00.0024.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/26664.
0.007660500.00.0018.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/24181.
10.267660000.00.0016.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41233090/790/23274_
9.81300.00.5816.25
172.105.37.32default\x16\x03\x01\x01\x01\x01

21-41-0/0/24162.
0.007660410.00.0017.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/14329.
0.007660300.00.009.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26981.
0.389991200.00.0018.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41233130/766/11612_
9.861100.00.568.68
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

25-41-0/0/8043.
0.019989900.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5116.
0.019990200.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8463.
0.019990300.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1231.
0.019990100.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3615.
0.019989800.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2372.
0.019989700.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4572.
0.019989600.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1763.
0.019989500.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5784.
0.019989400.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3374.
0.019989300.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2064.
0.019989200.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2362.
0.019989000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5996.
0.019988900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1726.
0.019989100.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5081.
0.019988800.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41233290/829/7938W
9.86000.00.495.57
172.105.37.32defaultGET /server-status HTTP/1.1

41-41-0/0/2036.
0.00469691900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01469691800.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00469691700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00469691600.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00469691500.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00469691400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01469691300.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01490877200.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00490877100.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01490877000.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00490876900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00490876800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01490872900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00490876700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00490876600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011126504700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011126504800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011126504300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011126504400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011126504100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2023-10-11 04:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d93c55653e

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 08-Oct-2023 14:38:58 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  586 days 58 minutes 24 seconds
Total accesses: 2478708 - Total Traffic: 1.8 GB
CPU Usage: u71.7 s14.09 cu.18 cs0 - .00017% CPU load
.049 requests/sec - 37 B/second - 767 B/request
2 requests currently being processed, 8 idle workers
__.___W__........_...C..........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-4118390/412/202179_
0.79100.00.28145.74
143.110.218.229default-223_252_6_6GET /

1-4196260/2733/193348_
13.82100.01.73144.88
143.110.218.229default-223_252_6_6GET /

2-41-0/0/191408.
1.1015300.00.00138.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-417740/989/196168_
1.55000.00.73142.61
143.110.218.229default-223_252_6_6GET /

4-417080/2501/192512_
8.29000.01.73145.08
143.110.218.229default-223_252_6_6GET /

5-41230100/3/172418_
0.01000.00.02132.46
139.59.182.142defaultGET /v2/_catalog HTTP/1.1

6-41230190/1/161578W
0.01000.00.01118.43
139.59.182.142defaultGET /server-status HTTP/1.1

7-41277000/1442/163887_
3.73000.01.01120.05
139.59.182.142defaultGET /.vscode/sftp.json HTTP/1.1

8-41326480/799/146822_
1.05100.00.57111.79
139.59.182.142defaultGET /debug/default/view?panel=config HTTP/1.1

9-41-0/0/132938.
0.5155399300.00.0094.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/121195.
0.1059697300.00.0088.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/95715.
0.0159697600.00.0071.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/69885.
5.4132912100.00.0051.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/44546.
8.3018895100.00.0033.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/35258.
0.1159697200.00.0025.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/49397.
0.0159697700.00.0035.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/29193.
0.0159697500.00.0020.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41123860/2659/34182_
8.65000.01.9424.12
139.59.182.142defaultGET /about HTTP/1.1

18-41-0/0/26583.
0.1059697000.00.0018.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/23707.
0.0059698400.00.0016.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/22469.
5.8020583400.00.0015.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41123891/2741/24061C
9.38000.31.8617.72
139.59.182.142defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

22-41-0/0/14321.
0.0059698300.00.009.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26656.
0.0059698200.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10844.
0.0059698100.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8039.
0.00139075300.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5112.
0.00139075200.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8459.
0.00139075100.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1227.
0.01139075000.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3611.
0.00139074900.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2368.
0.00139074800.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4568.
0.00139074700.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1759.
0.01198505200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5780.
0.00198505100.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3370.
0.00198505000.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2060.
0.00198504900.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2358.
0.00198504800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5992.
0.00198504700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1722.
0.00198504600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5077.
0.00198504500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7109.
0.00198504400.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00443989600.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01443989500.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00443989400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00443989300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00443989200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00443989100.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01443989000.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01465174900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00465174800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01465174700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00465174600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00465174500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01465170600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00465174400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00465174300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.011100802400.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.011100802500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.011100802000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.011100802100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.011100801800.00.000.03
127.0.0.1web1.ambient-it.com.au

Found on 2023-10-08 04:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9f258e7b0

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 23-Sep-2023 13:22:57 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  570 days 23 hours 42 minutes 23 seconds
Total accesses: 2420754 - Total Traffic: 1.7 GB
CPU Usage: u32.03 s5.97 cu.04 cs0 - 7.71e-5% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
3 requests currently being processed, 7 idle workers
___C____.C..W...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41279160/88/198612_
0.98000.00.07143.47
142.93.64.15defaultGET /.vscode/sftp.json HTTP/1.1

1-41245070/171/188644_
1.42100.00.09141.81
142.93.64.15defaultGET /debug/default/view?panel=config HTTP/1.1

2-41235250/380/186585_
2.21200.00.21134.98
142.93.64.15defaultGET / HTTP/1.1

3-41235261/404/191698C
2.81000.30.28139.58
142.93.64.15defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-41235270/406/188520_
2.06300.00.26142.35
142.93.64.15default\x16\x03\x01\x01\x01\x01

5-41276360/76/168921_
1.22300.00.05129.98
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

6-41235280/390/156240_
2.57300.00.24114.79
142.93.64.15defaultGET / HTTP/1.1

7-41235290/391/160147_
1.13000.00.25117.41
142.93.64.15defaultGET /v2/_catalog HTTP/1.1

8-41-0/0/143507.
0.331620900.00.00109.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41235311/409/130138C
2.70100.20.3492.72
142.93.64.15defaultGET /about HTTP/1.1

10-41-0/0/118790.
0.018879400.00.0087.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/93624.
0.194084400.00.0070.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41235330/382/67063W
3.05000.00.2549.74
142.93.64.15defaultGET /server-status HTTP/1.1

13-41-0/0/42241.
0.018878600.00.0031.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/35137.
0.018879200.00.0025.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/49386.
0.008879500.00.0035.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/29180.
0.018879100.00.0020.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/31508.
0.018878800.00.0022.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/25837.
0.018879600.00.0017.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/23692.
0.028878700.00.0016.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20716.
0.018879000.00.0014.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/21318.
0.018879300.00.0015.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/14318.
0.008879900.00.009.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26653.
0.008879800.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10841.
0.008879700.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8039.
0.009019200.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5112.
0.009019100.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8459.
0.009019000.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1227.
0.019018900.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3611.
0.009018800.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2368.
0.009018700.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4568.
0.009018600.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1759.
0.0168449100.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5780.
0.0068449000.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3370.
0.0068448900.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2060.
0.0068448800.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2358.
0.0068448700.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5992.
0.0068448600.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1722.
0.0068448500.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5077.
0.0068448400.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7109.
0.0068448300.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00313933500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01313933400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00313933300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00313933200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00313933100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00313933000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01313932900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01335118800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00335118700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01335118600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00335118500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00335118400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01335114500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00335118300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00335118200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01970746300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01970746400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01970745900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01970746000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01970745700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2023-09-23 03:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d96ddabfca

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 19-Sep-2023 15:32:24 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  567 days 1 hour 51 minutes 50 seconds
Total accesses: 2405595 - Total Traffic: 1.7 GB
CPU Usage: u74.81 s13.68 cu.24 cs0 - .000181% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
3 requests currently being processed, 7 idle workers
_C.CW_._....__....._.._.........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41208050/864/197222_
4.73300.00.58142.57
137.184.222.107defaultGET / HTTP/1.1

1-414071/1398/187621C
7.45100.20.95141.19
137.184.222.107defaultGET /about HTTP/1.1

2-41-0/0/185572.
0.021490800.00.00134.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41295201/1516/190650C
6.66000.31.14138.92
137.184.222.107defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-41288880/507/187360W
3.36000.00.29141.51
137.184.222.107defaultGET /server-status HTTP/1.1

5-41113070/89/167955_
0.19100.00.06129.30
137.184.222.107defaultGET /debug/default/view?panel=config HTTP/1.1

6-41-0/0/155334.
0.021490500.00.00114.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41196440/54/158992_
0.51300.00.06116.72
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

8-41-0/0/142811.
0.011491000.00.00109.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/129386.
0.011490700.00.0092.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41-0/0/118357.
9.161490900.00.0086.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/93177.
0.011490400.00.0070.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41196480/59/65618_
0.15000.00.0548.80
137.184.222.107defaultGET /v2/_catalog HTTP/1.1

13-41196550/71/41604_
0.15300.00.0531.35
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

14-41-0/0/34491.
0.5034662900.00.0024.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/48505.
6.331490600.00.0034.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/29169.
0.0134664700.00.0020.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/31492.
0.2234664800.00.0022.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/25824.
2.5321051700.00.0017.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-4122060/1604/23403_
7.95200.01.1616.57
137.184.222.107defaultGET / HTTP/1.1

20-41-0/0/20705.
0.0134664300.00.0014.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/21306.
7.691491100.00.0015.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41183100/1493/14124_
8.27000.00.969.59
137.184.222.107defaultGET /.vscode/sftp.json HTTP/1.1

23-41-0/0/26649.
0.0134664100.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10837.
0.0134663900.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/8038.
5.4711757100.00.006.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5111.
0.0134664200.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8458.
0.0134663700.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1226.
0.0134664900.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3610.
0.0134664500.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2367.
0.0134663500.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4567.
0.0034665900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1759.
0.0134665800.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5780.
0.0034665700.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3370.
0.0034665600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2060.
0.0034665500.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2358.
0.0034665400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5992.
0.0034665300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1722.
0.0034665200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5077.
0.0034665100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7109.
0.0034665000.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00280150200.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01280150100.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00280150000.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00280149900.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00280149800.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00280149700.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01280149600.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01301335500.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00301335400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01301335300.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00301335200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00301335100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01301331200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00301335000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00301334900.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01936963000.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01936963100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01936962600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01936962700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01936962400.00.000.03
127.0.0.1web1.ambient

Found on 2023-09-19 05:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d993e24218

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 17-Sep-2023 00:25:17 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  564 days 10 hours 44 minutes 43 seconds
Total accesses: 2395790 - Total Traffic: 1.7 GB
CPU Usage: u48.24 s8.18 cu.15 cs0 - .000116% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
3 requests currently being processed, 7 idle workers
._.C......__..._.._W.__..C......................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/196358.
0.159575000.00.00141.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-414070/450/186673_
3.222300.00.38140.62
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

2-41-0/0/184757.
0.0611377800.00.00133.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-41295201/494/189628C
3.52100.20.43138.21
167.172.20.95defaultGET /about HTTP/1.1

4-41-0/0/186853.
0.0011377700.00.00141.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-41-0/0/167866.
0.0011376700.00.00129.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-41-0/0/155332.
0.0111941000.00.00114.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-41-0/0/158938.
0.0111940800.00.00116.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/142809.
0.1611940500.00.00109.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41-0/0/129384.
0.0111941400.00.0092.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-4121980/639/117325_
4.39400.00.5586.18
167.172.20.95default\x16\x03\x01\x01\x01\x01

11-4121990/764/93096_
3.58300.00.4970.16
167.172.20.95defaultGET / HTTP/1.1

12-41-0/0/65559.
0.8311940700.00.0048.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/41533.
0.8511940600.00.0031.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34491.
0.5011940300.00.0024.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-4122030/736/47609_
2.60000.00.5234.20
167.172.20.95defaultGET /.vscode/sftp.json HTTP/1.1

16-41-0/0/29169.
0.0111942100.00.0020.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/31492.
0.2211942200.00.0022.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-4122050/660/25753_
2.42000.00.4817.88
167.172.20.95defaultGET /v2/_catalog HTTP/1.1

19-4122060/651/22450W
4.16000.00.4615.88
167.172.20.95defaultGET /server-status HTTP/1.1

20-41-0/0/20705.
0.0111941700.00.0014.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41183090/516/20415_
4.11200.00.3315.27
167.172.20.95defaultGET / HTTP/1.1

22-41183100/530/13161_
4.27100.00.369.00
167.172.20.95defaultGET /debug/default/view?panel=config HTTP/1.1

23-41-0/0/26649.
0.0111941500.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10837.
0.0111941300.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41183131/538/7555C
4.16000.30.395.63
167.172.20.95defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

26-41-0/0/5111.
0.0111941600.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8458.
0.0111941100.00.005.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1226.
0.0111942300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3610.
0.0111941900.00.002.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2367.
0.0111940900.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4567.
0.0011943300.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1759.
0.0111943200.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5780.
0.0011943100.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3370.
0.0011943000.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2060.
0.0011942900.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2358.
0.0011942800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5992.
0.0011942700.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1722.
0.0011942600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5077.
0.0011942500.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7109.
0.0011942400.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00257427600.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01257427500.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00257427400.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00257427300.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00257427200.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00257427100.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01257427000.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01278612900.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00278612800.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01278612700.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00278612600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00278612500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01278608600.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00278612400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00278612300.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01914240300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01914240400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01914239900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01914240000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01914239700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIO

Found on 2023-09-16 14:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9dc0f57e1

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 14-Sep-2023 04:47:12 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  561 days 15 hours 6 minutes 38 seconds
Total accesses: 2384468 - Total Traffic: 1.7 GB
CPU Usage: u42.81 s8.93 cu.13 cs0 - .000107% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
2 requests currently being processed, 8 idle workers
_W_C__._.__._...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41166880/475/196140_
2.05000.00.36141.84
164.92.192.25defaultGET /about HTTP/1.1

1-41208470/9/186056W
0.01000.00.00140.12
164.92.192.25defaultGET /server-status HTTP/1.1

2-41178400/472/184280_
2.53400.00.42133.26
164.92.192.25default\x16\x03\x01\x01\x01\x01

3-41150471/927/188927C
2.43000.30.67137.58
164.92.192.25defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

4-41150500/930/186700_
3.821800.00.69141.10
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

5-41177250/779/167761_
2.32300.00.61129.18
164.92.192.25defaultGET / HTTP/1.1

6-41-0/0/155185.
3.95177640.00.00114.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-4156940/191/158651_
0.53300.00.20116.49
164.92.192.25defaultGET / HTTP/1.1

8-41-0/0/142513.
2.848267300.00.00108.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4177460/542/129128_
2.09000.00.4192.00
164.92.192.25defaultGET /.vscode/sftp.json HTTP/1.1

10-4177470/564/116403_
1.79100.00.4585.37
164.92.192.25defaultGET /debug/default/view?panel=config HTTP/1.1

11-41-0/0/92185.
0.0219487900.00.0069.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41145680/917/65156_
3.98000.00.7148.42
164.92.192.25defaultGET /v2/_catalog HTTP/1.1

13-41-0/0/41206.
0.0119489000.00.0031.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34231.
0.1119468400.00.0024.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/46663.
0.0919469400.00.0033.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/28999.
0.0119488700.00.0020.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/31174.
0.5212705000.00.0021.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24795.
0.0519467000.00.0017.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/21608.
0.0155283500.00.0015.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20686.
0.0555280700.00.0014.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/19888.
0.1755279900.00.0014.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/12470.
0.0155282000.00.008.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26640.
0.1153907200.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10822.
0.4149327800.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/7012.
4.5938537600.00.005.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5105.
0.0655281300.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02212074900.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02212074300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02212075000.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01212074400.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01212074500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01233079990.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00233079800.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00233079700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00233079600.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00233079500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00233079400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00233079300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00233079200.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00233079100.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00233079000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01233078900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00233078800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00233078700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00233078600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00233078500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01233078400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01254264400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00254264300.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01254264200.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00254264100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00254264000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01254260000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00254263900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00254263800.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01889891800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01889891900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01889891400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01889891500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01889891200.00.000.03
127.0.0.1web1.ambient-it.com.

Found on 2023-09-13 18:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d955096071

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Wednesday, 13-Sep-2023 08:52:22 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  560 days 19 hours 11 minutes 48 seconds
Total accesses: 2381302 - Total Traffic: 1.7 GB
CPU Usage: u34.71 s7.45 cu.06 cs0 - 8.71e-5% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
2 requests currently being processed, 8 idle workers
______W..C_._...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41166880/167/195832_
0.60100.00.16141.64
134.122.89.242defaultGET /debug/default/view?panel=config HTTP/1.1

1-41322480/49/185920_
0.07000.00.03140.04
134.122.89.242defaultGET /v2/_catalog HTTP/1.1

2-41178400/160/183968_
1.81000.00.18133.02
134.122.89.242defaultGET /about HTTP/1.1

3-41150470/598/188598_
1.12300.00.43137.35
134.122.89.242defaultGET / HTTP/1.1

4-41150500/612/186382_
2.57200.00.47140.89
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

5-41177250/459/167441_
1.28200.00.35128.92
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

6-41145660/619/154868W
2.16000.00.48113.77
134.122.89.242defaultGET /server-status HTTP/1.1

7-41-0/0/158460.
0.953501900.00.00116.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-41-0/0/142513.
2.841098300.00.00108.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4177461/234/128820C
0.91000.30.1591.74
134.122.89.242defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

10-4177470/251/116090_
1.06000.00.2185.13
134.122.89.242defaultGET /.vscode/sftp.json HTTP/1.1

11-41-0/0/92185.
0.0212318900.00.0069.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41145680/603/64842_
3.30300.00.5148.21
134.122.89.242defaultGET / HTTP/1.1

13-41-0/0/41206.
0.0112320000.00.0031.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34231.
0.1112299400.00.0024.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/46663.
0.0912300400.00.0033.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/28999.
0.0112319700.00.0020.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/31174.
0.525536000.00.0021.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24795.
0.0512298000.00.0017.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/21608.
0.0148114500.00.0015.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20686.
0.0548111700.00.0014.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/19888.
0.1748110900.00.0014.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/12470.
0.0148113000.00.008.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26640.
0.1146738200.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10822.
0.4142158800.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/7012.
4.5931368600.00.005.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5105.
0.0648112300.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02204905900.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02204905300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02204906000.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01204905400.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01204905500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01225910990.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00225910800.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00225910700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00225910600.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00225910500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00225910400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00225910300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00225910200.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00225910100.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00225910000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01225909900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00225909800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00225909700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00225909600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00225909500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01225909400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01247095400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00247095300.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01247095200.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00247095100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00247095000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01247091000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00247094900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00247094800.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01882722800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01882722900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01882722400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01882722500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01882722200.00.000.03
127.0.0.1web1.

Found on 2023-09-12 22:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d964fd9c78

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Sunday, 10-Sep-2023 22:26:52 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  558 days 8 hours 46 minutes 18 seconds
Total accesses: 2371621 - Total Traffic: 1.7 GB
CPU Usage: u59.06 s10.18 cu.06 cs0 - .000144% CPU load
.0492 requests/sec - 37 B/second - 769 B/request
2 requests currently being processed, 8 idle workers
.____C__.__....W................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41-0/0/195322.
6.70620200.00.00141.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-4117700/22/185136_
0.02300.00.02139.41
164.90.205.35defaultGET / HTTP/1.1

2-41225500/50/183313_
0.062300.00.03132.34
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

3-4184290/163/187617_
0.33000.00.13136.58
164.90.205.35defaultGET /about HTTP/1.1

4-41317800/296/185386_
2.30400.00.24140.07
164.90.205.35default\x16\x03\x01\x01\x01\x01

5-41170181/614/166700C
2.74000.30.38128.31
164.90.205.35defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-41134380/431/153893_
3.64200.00.31113.03
164.90.205.35defaultGET / HTTP/1.1

7-41170190/635/157677_
3.34000.00.43115.55
164.90.205.35defaultGET /.vscode/sftp.json HTTP/1.1

8-41-0/0/141784.
8.833450400.00.00108.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-41317810/284/128193_
1.74100.00.1391.27
164.90.205.35defaultGET /debug/default/view?panel=config HTTP/1.1

10-41297740/1323/115486_
7.00000.00.9784.63
164.90.205.35defaultGET /v2/_catalog HTTP/1.1

11-41-0/0/92098.
0.5223796000.00.0069.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/64239.
0.0127078900.00.0047.71
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/41204.
0.0127078500.00.0031.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34224.
0.0127079500.00.0024.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41297810/1391/46377W
7.33000.01.0333.32
164.90.205.35defaultGET /server-status HTTP/1.1

16-41-0/0/28997.
0.0127080100.00.0020.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/30872.
0.0127081600.00.0021.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24788.
1.9617437800.00.0017.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/21608.
0.0127081500.00.0015.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20686.
0.0527078700.00.0014.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/19888.
0.1727077900.00.0014.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/12470.
0.0127080000.00.008.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26640.
0.1125705200.00.0018.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10822.
0.4121125800.00.008.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/7012.
4.5910335600.00.005.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5105.
0.0627079300.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02183872900.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02183872300.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02183873000.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01183872400.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01183872500.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01204877990.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00204877800.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00204877700.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00204877600.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00204877500.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00204877400.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00204877300.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00204877200.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00204877100.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00204877000.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01204876900.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00204876800.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00204876700.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00204876600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00204876500.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01204876400.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01226062300.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00226062200.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01226062100.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00226062000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00226061900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01226058000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00226061800.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00226061700.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01861689800.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01861689900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01861689400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01861689500.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01861689200.00.000.03
127.0.0.1web1.ambient-it.co

Found on 2023-09-10 12:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d93b0ee6ff

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 07-Sep-2023 08:29:41 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  554 days 18 hours 49 minutes 7 seconds
Total accesses: 2356395 - Total Traffic: 1.7 GB
CPU Usage: u91.27 s15.04 cu.18 cs0 - .000222% CPU load
.0492 requests/sec - 37 B/second - 769 B/request
3 requests currently being processed, 7 idle workers
_C.CW_____..........._..........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41144390/808/193952_
2.15200.00.62140.13
178.128.151.41defaultGET / HTTP/1.1

1-41128271/44/183775C
0.08000.30.05138.42
178.128.151.41defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-41-0/0/182186.
16.20866000.00.00131.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-4152381/711/186557C
3.00100.20.57135.64
178.128.151.41defaultGET /about HTTP/1.1

4-4156540/2315/184086W
19.24000.01.87139.07
178.128.151.41defaultGET /server-status HTTP/1.1

5-41294060/866/165726_
3.03000.00.78127.67
178.128.151.41defaultGET /.vscode/sftp.json HTTP/1.1

6-41294200/850/153248_
1.91300.00.60112.53
178.128.151.41default\x16\x03\x01\x01\x01\x01

7-4152390/696/156836_
1.69100.00.48114.95
178.128.151.41defaultGET /debug/default/view?panel=config HTTP/1.1

8-4152400/713/140425_
3.22000.00.53107.04
178.128.151.41defaultGET /v2/_catalog HTTP/1.1

9-41126050/350/127711_
0.85300.00.2591.00
178.128.151.41defaultGET / HTTP/1.1

10-41-0/0/114163.
16.1717901200.00.0083.66
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-41-0/0/91942.
0.5917901000.00.0069.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/64235.
0.0217900600.00.0047.70
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/41200.
0.0117901600.00.0031.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34221.
0.0317586000.00.0024.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/44986.
0.2414865400.00.0032.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/28994.
0.0017901800.00.0019.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/30869.
0.3114865700.00.0021.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24342.
0.2714865500.00.0016.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/21606.
16.2717901500.00.0015.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20681.
0.0117901700.00.0014.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41296060/891/19765_
3.381100.00.7314.86
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

22-41-0/0/12467.
0.0048472900.00.008.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26476.
0.0048472800.00.0018.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10507.
0.0048472700.00.007.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/6253.
0.0092465100.00.004.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5102.
0.52144416400.00.003.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02152929800.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02152929200.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02152929900.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01152929300.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01152929400.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01173934890.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00173934700.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00173934600.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00173934500.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00173934400.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00173934300.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00173934200.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00173934100.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00173934000.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00173933900.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01173933800.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00173933700.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00173933600.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00173933500.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00173933400.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01173933300.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01195119200.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00195119100.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01195119000.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00195118900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00195118800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01195114900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00195118700.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00195118600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01830746700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01830746800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01830746300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01830746400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01830746100.00.000.03
127.0.0.1

Found on 2023-09-06 22:29

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d98373bc39

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 04-Sep-2023 09:20:26 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  551 days 19 hours 39 minutes 52 seconds
Total accesses: 2343670 - Total Traffic: 1.7 GB
CPU Usage: u134.7 s17.47 cu.07 cs0 - .000319% CPU load
.0492 requests/sec - 37 B/second - 768 B/request
3 requests currently being processed, 7 idle workers
_.____C_C.W........_............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41304100/1012/192842_
11.19500.00.61139.23
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

1-41-0/0/183193.
1.331365700.00.00138.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-4143380/879/180993_
11.16300.00.58130.52
137.184.150.232default\x16\x03\x01\x01\x01\x01

3-41304110/892/185363_
11.00000.00.58134.74
137.184.150.232defaultGET /.vscode/sftp.json HTTP/1.1

4-4156540/1124/182895_
14.86300.00.74137.94
137.184.150.232defaultGET / HTTP/1.1

5-41304120/1059/164543_
11.97100.00.74126.60
137.184.150.232defaultGET /debug/default/view?panel=config HTTP/1.1

6-41239191/377/152140C
2.17100.20.26111.70
137.184.150.232defaultGET /about HTTP/1.1

7-41312830/1590/155790_
14.59200.01.05114.15
137.184.150.232defaultGET / HTTP/1.1

8-41164371/61/139228C
0.76000.30.06106.14
137.184.150.232defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

9-41-0/0/127140.
0.011365570.00.0090.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-41312840/1564/113711W
14.87000.01.0983.37
137.184.150.232defaultGET /server-status HTTP/1.1

11-41-0/0/91727.
1.8022856600.00.0069.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/64231.
1.4422857100.00.0047.69
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/41197.
0.0122856200.00.0031.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/34205.
10.329200900.00.0024.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/44851.
0.6018379700.00.0032.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/28993.
10.329201000.00.0019.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/30732.
1.2918379600.00.0021.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24206.
0.0322465000.00.0016.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-4156620/1125/21247_
14.69000.00.8115.02
137.184.150.232defaultGET /v2/_catalog HTTP/1.1

20-41-0/0/20680.
0.0022857600.00.0014.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/18874.
0.0022857500.00.0014.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/12467.
0.0022857400.00.008.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26476.
0.0022857300.00.0018.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10507.
0.0022857200.00.007.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/6253.
0.0066849600.00.004.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5102.
0.52118800900.00.003.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02127314300.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02127313700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02127314400.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01127313800.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01127313900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01148319390.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00148319200.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00148319100.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00148319000.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00148318900.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00148318800.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00148318700.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00148318600.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00148318500.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00148318400.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01148318300.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00148318200.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00148318100.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00148318000.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00148317900.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01148317800.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01169503700.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00169503600.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01169503500.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00169503400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00169503300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01169499400.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00169503200.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00169503100.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01805131200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01805131300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01805130800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01805130900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01805130600.00.000.03
127.0.0.1

Found on 2023-09-03 23:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d9033aba71

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Friday, 01-Sep-2023 07:47:36 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  548 days 18 hours 7 minutes 2 seconds
Total accesses: 2330127 - Total Traffic: 1.7 GB
CPU Usage: u26.85 s7.29 cu.05 cs0 - 7.21e-5% CPU load
.0491 requests/sec - 37 B/second - 769 B/request
4 requests currently being processed, 6 idle workers
_.__CC_R.W__....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41259380/172/191536_
0.22000.00.10138.42
161.35.155.246defaultGET /v2/_catalog HTTP/1.1

1-41-0/0/182550.
0.01598800.00.00137.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-41128340/127/179971_
0.15100.00.06129.87
161.35.155.246defaultGET /debug/default/view?panel=config HTTP/1.1

3-4199620/677/184197_
3.89000.00.48134.03
161.35.155.246defaultGET /about HTTP/1.1

4-41299011/1298/181542C
3.93000.30.87137.08
161.35.155.246defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-41234640/42/163328C
0.41000.00.03125.75
139.144.150.26default-223_252_6_6GET /

6-41312820/239/151589_
1.00000.00.15111.29
139.144.150.26default-223_252_6_6GET /

7-41312830/246/154446R
0.63000.00.15113.25
??..reading.. 

8-41-0/0/139095.
1.38997200.00.00106.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-4193040/761/127070W
1.11000.00.4590.47
161.35.155.246defaultGET /server-status HTTP/1.1

10-41312840/265/112412_
0.50100.00.2782.55
139.144.150.26default-223_252_6_6GET /

11-41234670/42/91550_
0.06000.00.0169.05
161.35.155.246defaultGET /.vscode/sftp.json HTTP/1.1

12-41-0/0/64196.
0.00998900.00.0047.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/41194.
0.0115207700.00.0031.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/33471.
0.0115208300.00.0024.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/44632.
1.843155200.00.0031.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/28068.
0.0115207500.00.0019.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/30537.
0.0115206200.00.0021.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/24183.
0.0129043200.00.0016.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/20122.
1.1029042500.00.0014.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/20679.
0.0129043000.00.0014.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/18873.
0.0129042800.00.0014.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/12466.
0.0129042700.00.008.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/26475.
0.0129042600.00.0018.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/10506.
0.0040372800.00.007.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/6253.
0.0040372700.00.004.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/5102.
0.5292323900.00.003.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/8450.
0.02100837300.00.005.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/1223.
0.02100836700.00.000.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/3435.
0.02100837400.00.002.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/2365.
0.01100836800.00.001.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/4566.
0.01100836900.00.003.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1758.
0.01121842490.00.001.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5779.
0.00121842300.00.003.96
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3369.
0.00121842200.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2059.
0.00121842100.00.001.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2357.
0.00121842000.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5991.
0.00121841900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1721.
0.00121841800.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/5076.
0.00121841700.00.003.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7108.
0.00121841600.00.005.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2036.
0.00121841500.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1214.
0.01121841400.00.000.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/540.
0.00121841300.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/567.
0.00121841200.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2539.
0.00121841100.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1898.
0.00121841000.00.001.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/856.
0.01121840900.00.000.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/398.
0.01143026800.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/658.
0.00143026700.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2699.
0.01143026600.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/213.
0.00143026500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/213.
0.00143026400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/229.
0.01143022500.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/230.
0.00143026300.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1650.
0.00143026200.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.01778654300.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.01778654400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.01778653800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.01778653900.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.01778653600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/

Found on 2023-08-31 21:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31e8d899d9e8d899d96a692f25

Apache Status

Apache Server Status for quadbus.com.au

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 12-Jun-2023 11:20:30 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 41
Server uptime:  467 days 21 hours 39 minutes 55 seconds
Total accesses: 2004087 - Total Traffic: 1.4 GB
CPU Usage: u56.53 s14.96 cu.05 cs0 - .000177% CPU load
.0496 requests/sec - 37 B/second - 762 B/request
2 requests currently being processed, 8 idle workers
_.C____W___.....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-41189710/646/166841_
3.08000.00.37120.15
159.223.102.13default-223_252_6_6GET /

1-41-0/0/159016.
1.869693700.00.00116.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-4157601/453/157153C
0.60000.30.27113.37
139.144.150.23defaultGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

3-41226180/616/161760_
0.79100.00.39117.80
159.223.102.13default-223_252_6_6GET /

4-4166790/2763/158431_
5.95100.01.89118.83
159.223.102.13default-223_252_6_6GET /

5-41300930/1025/142281_
1.82000.00.60106.50
139.144.150.23defaultGET /about HTTP/1.1

6-4160980/680/132147_
1.15000.00.3895.43
139.144.150.23defaultGET /.vscode/sftp.json HTTP/1.1

7-41303850/1193/134438W
2.58000.00.7298.86
139.144.150.23defaultGET /server-status HTTP/1.1

8-41123390/1429/122136_
2.93000.00.9289.76
139.144.150.23defaultGET /v2/_catalog HTTP/1.1

9-41123400/1397/109531_
2.93000.00.9078.22
159.223.102.13default-223_252_6_6GET /

10-41162850/1316/99100_
2.11100.00.7672.60
139.144.150.23defaultGET /debug/default/view?panel=config HTTP/1.1

11-41-0/0/78029.
0.0015098500.00.0055.80
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-41-0/0/54611.
0.0041479200.00.0040.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-41-0/0/33828.
0.0041479100.00.0026.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-41-0/0/24592.
0.0180097200.00.0017.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-41-0/0/37674.
0.0180096600.00.0026.87
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-41-0/0/22282.
0.0180097100.00.0015.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-41-0/0/24297.
0.0180097300.00.0016.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-41-0/0/20586.
0.0180096900.00.0014.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-41-0/0/15542.
0.0180096400.00.0011.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-41-0/0/16898.
0.0180096300.00.0011.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-41-0/0/13066.
0.0180096500.00.009.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-41-0/0/8507.
0.0180095000.00.005.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-41-0/0/20039.
0.0180094100.00.0014.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-41-0/0/7828.
0.0180095300.00.006.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-41-0/0/5580.
0.0180087200.00.004.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-41-0/0/3152.
0.0180094400.00.002.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-41-0/0/7707.
0.0180093900.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-41-0/0/752.
0.0180094300.00.000.34
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-41-0/0/2762.
0.0180094700.00.001.94
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-41-0/0/1659.
0.0180094000.00.001.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-41-0/0/1698.
0.0180094200.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-41-0/0/1232.
0.0180093400.00.000.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-41-0/0/5122.
7.2326703200.00.003.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-41-0/0/3360.
0.0180093600.00.002.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-41-0/0/2051.
1.3164935100.00.001.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-41-0/0/2350.
0.0180092800.00.001.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-41-0/0/5983.
0.0180093200.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-41-0/0/1714.
0.0180092600.00.000.98
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-41-0/0/4015.
0.0180092900.00.002.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-41-0/0/7001.
0.0180092500.00.005.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-41-0/0/2032.
0.8980098600.00.001.32
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-41-0/0/1108.
0.0180092400.00.000.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-41-0/0/409.
0.0180092000.00.000.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-41-0/0/290.
0.0180090400.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-41-0/0/2317.
6.3634046000.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-41-0/0/1798.
4.0544213000.00.001.17
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-41-0/0/213.
0.0180091800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-41-0/0/397.
0.0180088400.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-41-0/0/657.
0.0180091400.00.000.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-41-0/0/2698.
5.9724267900.00.001.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-41-0/0/212.
0.0180092200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-41-0/0/212.
0.0180090000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-41-0/0/228.
0.0180092100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-41-0/0/229.
0.0180091900.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-41-0/0/1649.
2.4048298600.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-41-0/0/295.
0.0180091600.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-41-0/0/125.
0.0180091700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-41-0/0/112.
0.0180091200.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-41-0/0/112.
0.0180091300.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-41-0/0/112.
0.0180091000.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

Found on 2023-06-12 01:20

Create report

CheckMK monitoring endpoint publicly available

An open CheckMK agent is publicly available.

This could leak sensitive information such as :

Process list ( maybe credentials )
Network interfaces
Running services
Firewall rules
Internal OS configuration

https://docs.checkmk.com/latest/en/wato_monitoringagents.html

IP: 223.252.6.6
Port: 6556

First seen 2022-06-17 23:50
Last seen 2023-05-04 22:23
Open for 320 days

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398843814b5

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:08,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:01:05,3) [migration/0]
(root,0,0,00:10:52,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:12,6) [migration/1]
(root,0,0,00:06:28,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:01:04,9) [migration/2]
(root,0,0,00:06:13,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:01:02,12) [migration/3]
(root,0,0,00:06:08,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:41,15) [events/0]
(root,0,0,00:03:09,16) [events/1]
(root,0,0,00:02:47,17) [events/2]
(root,0,0,02:34:22,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:34,25) [sync_supers]
(root,0,0,00:00:57,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:27,31) [kblockd/0]
(root,0,0,00:01:52,32) [kblockd/1]
(root,0,0,00:01:19,33) [kblockd/2]
(root,0,0,00:01:35,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:13,51) [khungtaskd]
(root,0,0,00:00:17,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:05:03,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:05:02,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:19:34,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:14,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:22:16,1041) [flush-8:16]
(root,0,0,00:08:07,1044) [flush-8:112]
(root,0,0,00:14:30,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:40,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:56,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:32,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:27,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:29,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:16,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:55,1647) cron
(root,11540,532,00:24:28,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,18644,00:27:59,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,68944,04:17:58,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96204,21860,00:00:00,2697) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,2704) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,3429) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,500520,136108,00:00:05,3545) /usr/sbin/apache2 -k start
(root,96064,21756,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,07:50:00,3850) /usr/sbin/clamd
(clamav,58124,2516,08:20:08,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:49,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:37,3972) /usr/sbin/courierlogger imapd
(root,14132,780,00:00:05,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:02:11,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:39,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:07,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:20:12,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:22:24,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10348,00:41:09,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10412,00:46:19,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10340,00:41:06,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10692,00:41:01,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10404,00:40:57,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10892,00:47:00,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10632,01:08:08,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10348,00:00:05,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:04:20,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:21:35,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:38:24,4673) qmgr -l -t fifo -u
(root,20268,1060,00:02:04,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:04:53,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:31:57,4715) anvil -l -t unix -u -c
(root,450344,91924,00:12:07,4979) /usr/sbin/apache2 -k start
(root,465500,5788,00:07:29,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,10356,00:48:03,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7028,00:06:59,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:13:48,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21732,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1744,00:29:48,5848) rsyslogd -c4
(drweb,1093468,1089484,5-12:55:38,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21756,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21756,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:47:16,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,45256,3-06:31:59,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:22:00,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:15:31,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138832,06:06:15,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,10:40:42,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,11:12:38,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,0,0,00:00:00,8401) [flush-8:160]
(root,96064,21772,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,10340) CRON
(jec,4352,628,00:00:00,10344) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,10348) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,510136,145888,00:00:04,10544) /usr/sbin/apache2 -k start
(root,96204,21860,00:00:00,10577) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,504332,138140,00:00:07,10649) /usr/sbin/apache2 -k start
(www-data,504376,138196,00:00:06,10650) /usr/sbin/apache2 -k start
(www-data,502224,137916,00:00:08,10651) /usr/sbin/apache2 -k start
(root,96064,21836,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21768,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,11070) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,451008,85196,00:00:00,13493) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21756,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21772,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22092,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,513968,146584,00:00:07,16380) /usr/sbin/apache2 -k start
(postfix,87828,6028,00:00:00,16395) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21836,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1093468,1088056,00:00:00,18688) drwebd.real
(drweb,1093468,1088060,00:00:00,18689) drwebd.real
(drweb,1093468,1088060,00:00:00,18690) drwebd.real
(drweb,1093468,1088060,00:00:00,18691) drwebd.real
(root,49020,2332,00:00:00,18698) CRON
(jec,4352,632,00:00:00,18707) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,18711) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96204,21860,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21756,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21756,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2312,00:00:17,19392) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,496096,131500,00:00:02,19626) /usr/sbin/apache2 -k start
(www-data,495992,131360,00:00:02,19628) /usr/sbin/apache2 -k start
(root,0,0,00:00:00,19707) [flush-8:176]
(root,96076,21760,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,20199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2272,00:00:00,20757) proxymap -t unix -u
(root,96204,21860,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87788,5980,00:00:00,21105) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87840,6020,00:00:00,21180) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5984,00:00:00,21182) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87844,6188,00:00:00,21184) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87856,6208,00:00:00,21185) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87848,6200,00:00:00,21188) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87852,6208,00:00:00,21191) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87848,6208,00:00:00,21192) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87788,5992,00:00:00,21278) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,17952,1608,00:00:00,21456) /bin/bash /usr/bin/check_mk_agent
(root,15232,1132,00:00:00,21475) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,880,00:00:00,21476) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,21780,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2324,00:00:00,22398) pickup -l -t fifo -u -c
(root,96064,21836,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21772,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21772,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,14440,4208,00:00:00,23068) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96204,21860,00:00:00,24199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,24560) CRON
(jec,4352,632,00:00:00,24562) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,24566) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96204,21860,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,25408) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135412,69844,00:00:11,25658) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,146104,81004,00:00:24,25660) spamd child
(popuser,135412,68512,00:00:00,25661) spamd child
(root,96064,21836,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:02:35,26844) /usr/sbin/apache2 -k start
(root,96204,22100,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21836,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21784,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,27774) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21772,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,451036,85388,00:00:00,29324) /usr/sbin/apache2 -k start
(root,96204,21860,00:00:00,30866) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21756,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21756,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21772,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21756,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21860,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21760,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2023-05-04 22:23

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398e653cf24

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:07,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:58,3) [migration/0]
(root,0,0,00:09:40,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:04,6) [migration/1]
(root,0,0,00:05:38,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:57,9) [migration/2]
(root,0,0,00:05:26,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:55,12) [migration/3]
(root,0,0,00:05:21,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:17,15) [events/0]
(root,0,0,00:02:48,16) [events/1]
(root,0,0,00:02:29,17) [events/2]
(root,0,0,02:14:18,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:30,25) [sync_supers]
(root,0,0,00:00:50,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:11,31) [kblockd/0]
(root,0,0,00:01:41,32) [kblockd/1]
(root,0,0,00:01:09,33) [kblockd/2]
(root,0,0,00:01:24,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:11,51) [khungtaskd]
(root,0,0,00:00:13,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:04:30,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:04:29,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:17:18,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:12,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(popuser,141056,76000,00:00:00,700) spamd child
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:12:46,1041) [flush-8:16]
(root,0,0,00:07:10,1044) [flush-8:112]
(root,0,0,00:12:48,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:29,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:39,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:30,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:24,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:26,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:15,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(www-data,512312,146032,00:00:26,1566) /usr/sbin/apache2 -k start
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:35,1647) cron
(root,11540,532,00:21:42,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,18588,00:26:01,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,73820,03:48:53,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96204,21868,00:00:00,2697) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,2704) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,0,0,00:00:00,3352) [flush-251:0]
(root,96204,21868,00:00:00,3429) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:56:30,3850) /usr/sbin/clamd
(clamav,58124,2516,07:22:57,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:37,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:33,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:04,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:56,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:35,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:06,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:17:55,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:19:52,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:36:30,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:41:09,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:36:29,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:36:22,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:36:21,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:41:42,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,01:00:32,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:50,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:12:40,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:34:02,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:50,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:03:44,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:28:41,4715) anvil -l -t unix -u -c
(root,450344,92388,00:10:44,4979) /usr/sbin/apache2 -k start
(root,465500,5792,00:06:38,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15940,00:44:19,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7028,00:06:08,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:11:40,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1029660,1025696,4-21:54:38,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2312,00:00:15,6146) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(www-data,514828,146808,00:01:16,6199) /usr/sbin/apache2 -k start
(snmp,48300,3852,00:41:57,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,41268,2-21:17:01,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:19:33,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:06:57,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138548,05:25:40,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,09:29:45,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,09:58:07,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,504424,138188,00:00:28,9977) /usr/sbin/apache2 -k start
(www-data,512184,145988,00:00:25,9978) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,10340) CRON
(jec,4352,628,00:00:00,10344) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,10348) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,507000,140748,00:00:28,10898) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,502292,137856,00:00:15,11092) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,16840,6608,00:00:03,12334) /usr/bin/atop -a -w /var/log/atop.log 600
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(postfix,39572,2220,00:00:00,13956) pickup -l -t fifo -u -c
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1029660,1024272,00:00:00,15349) drwebd.real
(drweb,1029660,1024276,00:00:00,15350) drwebd.real
(drweb,1029660,1024276,00:00:00,15351) drwebd.real
(drweb,1029660,1024276,00:00:00,15352) drwebd.real
(postfix,87836,6020,00:00:00,16666) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6024,00:00:00,16668) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87844,6032,00:00:00,16669) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87892,6252,00:00:00,16674) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87820,6024,00:00:00,16676) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87848,6036,00:00:00,16686) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87852,6024,00:00:00,16687) smtpd -n smtp -t inet -u -c -o stress= -s 2
(popuser,154608,89536,00:01:22,16699) spamd child
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87884,6244,00:00:00,16822) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87836,6020,00:00:00,16908) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87820,6024,00:00:00,16909) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87876,6240,00:00:00,17247) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87812,5992,00:00:00,17588) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96204,21868,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512832,146624,00:00:34,19241) /usr/sbin/apache2 -k start
(root,17952,1612,00:00:00,19355) /bin/bash /usr/bin/check_mk_agent
(root,15232,1132,00:00:00,19374) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,19375) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,504868,138704,00:01:35,20538) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,505040,137700,00:01:38,24109) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,24199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,24560) CRON
(jec,4352,632,00:00:00,24562) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,24566) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96204,21868,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:02:02,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,27774) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,0,0,00:00:01,29219) [flush-8:160]
(www-data,501540,137228,00:00:15,29288) /usr/sbin/apache2 -k start
(syslog,255144,1724,01:14:08,31615) rsyslogd -c4
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135560,70016,00:01:38,32192) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2023-03-16 08:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda439861270d6e

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:07,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:56,3) [migration/0]
(root,0,0,00:09:17,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:02,6) [migration/1]
(root,0,0,00:05:24,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:55,9) [migration/2]
(root,0,0,00:05:13,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:53,12) [migration/3]
(root,0,0,00:05:07,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:09,15) [events/0]
(root,0,0,00:02:42,16) [events/1]
(root,0,0,00:02:24,17) [events/2]
(root,0,0,02:08:44,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:29,25) [sync_supers]
(root,0,0,00:00:48,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:06,31) [kblockd/0]
(root,0,0,00:01:37,32) [kblockd/1]
(root,0,0,00:01:06,33) [kblockd/2]
(root,0,0,00:01:20,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:10,51) [khungtaskd]
(root,0,0,00:00:12,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:04:20,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:04:19,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:16:41,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:12,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:09:54,1041) [flush-8:16]
(root,0,0,00:06:53,1044) [flush-8:112]
(root,0,0,00:12:18,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:27,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:33,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:29,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:23,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:25,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1432,00:00:15,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:30,1647) cron
(root,11540,532,00:20:55,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,18560,00:25:27,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,77460,03:40:30,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96204,21868,00:00:00,2697) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,2704) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512280,146076,00:00:48,2770) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,514532,146448,00:00:46,3065) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:41:33,3850) /usr/sbin/clamd
(clamav,58124,2516,07:06:37,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:33,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:31,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:04,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:52,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:34,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:06,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:17:17,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:19:09,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:35:10,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:39:37,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:35:10,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:35:04,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:35:02,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:40:12,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:58:21,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:42,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:09:57,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:32:48,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:46,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:03:26,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:27:28,4715) anvil -l -t unix -u -c
(root,135572,69996,00:00:06,4759) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,147772,82692,00:00:12,4760) spamd child
(popuser,135572,68664,00:00:00,4761) spamd child
(root,450344,92388,00:10:21,4979) /usr/sbin/apache2 -k start
(root,465500,5792,00:06:24,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15736,00:42:45,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7024,00:05:54,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:11:05,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1010924,1006948,4-17:28:31,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,503472,137144,00:00:10,6266) /usr/sbin/apache2 -k start
(www-data,512736,146372,00:00:09,6267) /usr/sbin/apache2 -k start
(snmp,48300,3852,00:40:26,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,39992,2-18:35:01,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:18:48,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:04:32,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138532,05:14:09,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,09:09:35,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,09:36:57,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(postfix,39572,2320,00:00:00,6830) pickup -l -t fifo -u -c
(root,14432,4200,00:00:03,6885) /usr/bin/atop -a -w /var/log/atop.log 600
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(www-data,510636,146008,00:00:04,8090) /usr/sbin/apache2 -k start
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,0,0,00:00:00,10627) [flush-8:160]
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,542012,148300,00:00:18,12053) /usr/sbin/apache2 -k start
(drweb,1010924,1005524,00:00:00,13496) drwebd.real
(drweb,1010924,1005528,00:00:00,13497) drwebd.real
(drweb,1010924,1005528,00:00:00,13498) drwebd.real
(drweb,1010924,1005528,00:00:00,13499) drwebd.real
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(postfix,87916,6256,00:00:00,13989) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87788,5992,00:00:00,14984) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5992,00:00:00,15451) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,0,0,00:00:00,16636) [flush-251:0]
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2272,00:00:00,17118) proxymap -t unix -u
(postfix,87788,5928,00:00:00,17284) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,0,0,00:00:00,17297) [flush-8:176]
(postfix,87788,5940,00:00:00,17298) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5984,00:00:00,17299) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77544,5444,00:00:00,17301) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87852,6160,00:00:00,17303) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87788,5936,00:00:00,17306) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5924,00:00:00,17309) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77544,5432,00:00:00,17405) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,17952,1604,00:00:00,17407) /bin/bash /usr/bin/check_mk_agent
(root,15232,1132,00:00:00,17426) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,17427) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(www-data,510384,145708,00:00:02,18261) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2308,00:00:43,22854) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,24560) CRON
(jec,4352,632,00:00:00,24562) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,24566) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96204,21868,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,502204,137652,00:00:06,25436) /usr/sbin/apache2 -k start
(www-data,510392,145844,00:00:08,25569) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:01:52,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(syslog,255144,1732,00:50:38,31615) rsyslogd -c4
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,506976,137568,00:01:09,31975) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2023-03-02 09:04

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398e780bd0b

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:07,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:56,3) [migration/0]
(root,0,0,00:09:16,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:01,6) [migration/1]
(root,0,0,00:05:23,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:55,9) [migration/2]
(root,0,0,00:05:12,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:53,12) [migration/3]
(root,0,0,00:05:07,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:09,15) [events/0]
(root,0,0,00:02:42,16) [events/1]
(root,0,0,00:02:23,17) [events/2]
(root,0,0,02:08:30,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:29,25) [sync_supers]
(root,0,0,00:00:48,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:06,31) [kblockd/0]
(root,0,0,00:01:37,32) [kblockd/1]
(root,0,0,00:01:06,33) [kblockd/2]
(root,0,0,00:01:19,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:10,51) [khungtaskd]
(root,0,0,00:00:12,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:04:20,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:04:19,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:16:39,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:12,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:09:46,1041) [flush-8:16]
(root,0,0,00:06:52,1044) [flush-8:112]
(root,0,0,00:12:17,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:27,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:33,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:29,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:23,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:25,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1432,00:00:15,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:29,1647) cron
(root,11540,532,00:20:53,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,18560,00:25:25,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,76256,03:40:08,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96204,21868,00:00:00,2697) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,2704) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,503500,137292,00:00:44,2770) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,514532,146440,00:00:41,3065) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:40:27,3850) /usr/sbin/clamd
(clamav,58124,2516,07:05:53,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:33,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:31,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:04,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:52,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:34,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:06,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:17:15,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:19:07,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:35:07,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:39:33,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:35:06,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:35:00,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:34:59,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:40:07,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:58:16,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:42,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:09:50,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:32:45,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:46,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:03:25,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:27:25,4715) anvil -l -t unix -u -c
(root,450344,92388,00:10:20,4979) /usr/sbin/apache2 -k start
(root,465500,5792,00:06:23,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15692,00:42:41,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7024,00:05:54,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:11:03,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1010124,1006128,4-17:16:59,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,501436,136788,00:00:05,6266) /usr/sbin/apache2 -k start
(www-data,512480,146064,00:00:02,6267) /usr/sbin/apache2 -k start
(snmp,48300,3852,00:40:22,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,39904,2-18:27:44,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:18:47,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:04:25,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138532,05:13:38,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,09:08:40,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,09:36:00,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,135516,69996,00:00:10,7481) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,148504,83436,00:00:14,7482) spamd child
(popuser,138468,73364,00:00:00,7483) spamd child
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,16460,6228,00:00:04,9188) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,0,0,00:00:00,10627) [flush-8:160]
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,542012,148272,00:00:14,12053) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87896,6292,00:00:00,15093) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87912,6248,00:00:00,15099) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87844,6020,00:00:00,15100) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87888,6252,00:00:00,18169) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,96204,21868,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87836,6040,00:00:00,19522) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(postfix,87864,6032,00:00:00,19603) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87908,6352,00:00:00,19825) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87956,6284,00:00:00,19827) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87844,6024,00:00:00,20171) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87960,6288,00:00:00,20174) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96204,21868,00:00:00,20199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87888,6260,00:00:00,20308) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87948,6276,00:00:00,20309) smtpd -n smtp -t inet -u -c -o stress= -s 2
(drweb,1010124,1004704,00:00:00,20643) drwebd.real
(drweb,1010124,1004708,00:00:00,20644) drwebd.real
(drweb,1010124,1004708,00:00:00,20645) drwebd.real
(drweb,1010124,1004708,00:00:00,20646) drwebd.real
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87880,6244,00:00:00,22196) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87864,6224,00:00:00,22198) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2308,00:00:31,22854) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,0,0,00:00:00,23634) [flush-251:0]
(postfix,39572,2220,00:00:00,24028) pickup -l -t fifo -u -c
(root,17952,1604,00:00:00,24126) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,24145) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,24146) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,49020,2332,00:00:00,24560) CRON
(jec,4352,632,00:00:00,24562) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,24566) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96204,21868,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,502192,137548,00:00:03,25436) /usr/sbin/apache2 -k start
(www-data,510392,145780,00:00:03,25569) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:01:52,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,503544,137348,00:00:19,30777) /usr/sbin/apache2 -k start
(syslog,255144,1732,00:49:43,31615) rsyslogd -c4
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,506976,137556,00:01:06,31975) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,543448,148580,00:00:59,32743) /usr/sbin/apache2 -k start

Found on 2023-03-01 18:30

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398ee389d68

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:07,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:55,3) [migration/0]
(root,0,0,00:09:04,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:00,6) [migration/1]
(root,0,0,00:05:16,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:54,9) [migration/2]
(root,0,0,00:05:06,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:52,12) [migration/3]
(root,0,0,00:05:00,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:06,15) [events/0]
(root,0,0,00:02:38,16) [events/1]
(root,0,0,00:02:21,17) [events/2]
(root,0,0,02:05:46,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:28,25) [sync_supers]
(root,0,0,00:00:48,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:04,31) [kblockd/0]
(root,0,0,00:01:35,32) [kblockd/1]
(root,0,0,00:01:05,33) [kblockd/2]
(root,0,0,00:01:18,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:10,51) [khungtaskd]
(root,0,0,00:00:11,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:04:15,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:04:14,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:16:20,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:11,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:08:25,1041) [flush-8:16]
(root,0,0,00:06:44,1044) [flush-8:112]
(root,0,0,00:12:03,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:25,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:30,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:28,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:23,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:25,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1432,00:00:15,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:27,1647) cron
(root,11540,532,00:20:30,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,18556,00:25:07,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,78468,03:36:03,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2312,00:01:26,3466) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:33:33,3850) /usr/sbin/clamd
(clamav,58124,2516,06:57:52,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:31,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:31,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:04,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:50,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:33,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:05,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:16:56,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:18:46,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:34:29,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:38:48,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:34:28,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:34:22,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:34:21,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:39:23,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:57:14,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:38,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:08:22,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:32:08,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:44,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:03:15,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:26:37,4715) anvil -l -t unix -u -c
(root,450344,92388,00:10:09,4979) /usr/sbin/apache2 -k start
(root,465500,5792,00:06:16,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,17864,00:41:58,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7024,00:05:47,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:10:46,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,1001020,996968,4-15:07:16,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:39:38,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,39312,2-17:05:09,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:18:26,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:03:13,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138396,05:07:48,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,08:58:24,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,09:25:16,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87852,6160,00:00:00,12730) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2220,00:00:00,15326) pickup -l -t fifo -u -c
(www-data,530784,139136,00:00:25,15366) /usr/sbin/apache2 -k start
(postfix,87852,6212,00:00:00,16192) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87884,6140,00:00:00,16193) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87868,6232,00:00:00,16195) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87952,6312,00:00:00,16196) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6008,00:00:00,16200) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87836,6032,00:00:00,16201) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6004,00:00:00,16202) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87820,6024,00:00:00,16204) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87828,5996,00:00:00,16206) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6032,00:00:00,16214) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87860,6220,00:00:00,16304) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87868,6132,00:00:00,16379) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87916,6228,00:00:00,16381) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87844,6204,00:00:00,16382) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87848,6204,00:00:00,16383) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,0,0,00:00:00,16601) [flush-251:0]
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(psaadm,241464,15292,00:00:00,16877) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(postfix,40716,3800,00:00:00,16910) trivial-rewrite -n rewrite -t unix -u -c
(postfix,39876,3040,00:00:00,16917) cleanup -z -t unix -u -c
(psaadm,246280,28260,00:00:00,16938) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(psaadm,250376,29056,00:00:00,16939) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(psaadm,249840,29036,00:00:00,16940) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(postfix,39576,2336,00:00:00,16943) pipe -n plesk_virtual -t unix flags=DORhu user=popuser popuser argv=/usr/lib/plesk-9.0/postfix-local -f ${sender} -d ${recipient} -p /var/qmail/mailnames
(root,0,0,00:00:00,17023) [flush-8:176]
(drweb,1001020,995544,00:00:00,17078) drwebd.real
(drweb,1001020,995548,00:00:00,17079) drwebd.real
(drweb,1001020,995548,00:00:00,17080) drwebd.real
(drweb,1001020,995548,00:00:00,17081) drwebd.real
(postfix,87788,5932,00:00:00,17167) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,39572,2260,00:00:00,17168) proxymap -t unix -u
(postfix,87788,5932,00:00:00,17169) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,17952,1608,00:00:00,17266) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,17285) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8576,804,00:00:00,17286) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96204,21868,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135452,70008,00:00:02,20266) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,136248,70932,00:00:00,20267) spamd child
(popuser,135452,68676,00:00:00,20268) spamd child
(root,0,0,00:00:00,20783) [flush-8:160]
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,15120,4888,00:00:00,22958) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:01:47,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(syslog,255144,1720,00:34:40,31615) rsyslogd -c4
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,504356,138108,00:00:11,31975) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,510200,145828,00:00:06,32734) /usr/sbin/apache2 -k start
(www-data,501504,137124,00:00:07,32740) /usr/sbin/apache2 -k start
(www-data,510388,145800,00:00:05,32741) /usr/sbin/apache2 -k start
(www-data,539412,147380,00:00:08,32743) /usr/sbin/apache2 -k start
(www-data,502008,137640,00:00:06,32744) /usr/sbin/apache2 -k start
(www-data,510936,145760,00:00:07,32745) /usr/sbin/apache2 -k start
(www-data,501424,136848,00:00:04,32746) /usr/sbin/apache2 -k start
(www-data,512260,145936,00:00:06,32749) /usr/sbin/apache2 -k start

Found on 2023-02-22 22:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398620f0ea7

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1912,00:00:07,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:54,3) [migration/0]
(root,0,0,00:09:00,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:01:00,6) [migration/1]
(root,0,0,00:05:14,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:53,9) [migration/2]
(root,0,0,00:05:04,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:51,12) [migration/3]
(root,0,0,00:04:58,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:03:05,15) [events/0]
(root,0,0,00:02:37,16) [events/1]
(root,0,0,00:02:20,17) [events/2]
(root,0,0,02:04:57,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:28,25) [sync_supers]
(root,0,0,00:00:47,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:02:04,31) [kblockd/0]
(root,0,0,00:01:35,32) [kblockd/1]
(root,0,0,00:01:05,33) [kblockd/2]
(root,0,0,00:01:16,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:10,51) [khungtaskd]
(root,0,0,00:00:11,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:04:14,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:04:13,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:16:14,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:11,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:07:56,1041) [flush-8:16]
(root,0,0,00:06:41,1044) [flush-8:112]
(root,0,0,00:11:58,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:24,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:29,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:28,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:22,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:25,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1432,00:00:15,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,968,00:02:26,1647) cron
(root,11540,532,00:20:23,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:02,1678) /usr/sbin/sshd -D
(bind,433080,19076,00:25:02,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,77028,03:34:46,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2312,00:00:21,3466) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:30:54,3850) /usr/sbin/clamd
(clamav,58124,2516,06:55:19,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:31,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:31,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:04,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:49,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:33,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:05,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:02,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:16:50,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,860,00:18:39,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:34:16,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:38:33,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:34:15,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:34:10,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:34:08,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:39:09,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:56:55,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:37,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:07:55,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:31:57,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:43,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3160,00:03:13,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:26:23,4715) anvil -l -t unix -u -c
(root,450344,92388,00:10:05,4979) /usr/sbin/apache2 -k start
(root,465500,5792,00:06:14,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15444,00:41:44,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,50968,7024,00:05:45,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:10:41,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,997928,993988,4-14:25:48,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:39:24,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,39208,2-16:40:23,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:18:20,6402) /usr/sbin/vnstatd -d
(root,69736,1648,01:02:51,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2617484,138448,05:06:12,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,08:55:32,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,09:22:15,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,501400,136716,00:00:01,9617) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,10902) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,628,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,501448,136976,00:00:07,15366) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,510380,145704,00:00:03,17901) /usr/sbin/apache2 -k start
(root,0,0,00:00:00,18683) [flush-8:160]
(root,96204,21868,00:00:00,18910) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,628,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,628,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,628,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87824,6032,00:00:00,23126) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96204,21868,00:00:00,24726) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2216,00:00:00,25231) pickup -l -t fifo -u -c
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,997928,992560,00:00:00,26699) drwebd.real
(drweb,997928,992564,00:00:00,26700) drwebd.real
(drweb,997928,992564,00:00:00,26701) drwebd.real
(drweb,997928,992564,00:00:00,26702) drwebd.real
(postfix,87848,6016,00:00:00,26703) smtpd -n smtp -t inet -u -c -o stress= -s 2
(www-data,510440,146136,00:00:15,26723) /usr/sbin/apache2 -k start
(postfix,87840,6012,00:00:00,26779) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6016,00:00:00,26780) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87840,6016,00:00:00,26782) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6012,00:00:00,26784) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87872,6236,00:00:00,26788) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87864,6224,00:00:00,26789) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(www-data,322724,80448,00:01:46,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87840,6020,00:00:00,26935) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87840,6032,00:00:00,26987) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87884,6244,00:00:00,26992) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87868,6228,00:00:00,27163) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,135396,69928,00:00:09,27183) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,148204,83116,00:00:23,27184) spamd child
(popuser,138480,73288,00:00:00,27188) spamd child
(root,14968,4736,00:00:04,27468) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,28212) CRON
(jec,4352,628,00:00:00,28220) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,28224) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87848,6168,00:00:00,28863) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87852,6192,00:00:00,28938) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,624,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,17952,1608,00:00:00,29299) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,29318) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,884,00:00:00,29319) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(www-data,501456,136964,00:00:07,31292) /usr/sbin/apache2 -k start
(www-data,504936,140320,00:00:06,31296) /usr/sbin/apache2 -k start
(www-data,501416,136816,00:00:07,31298) /usr/sbin/apache2 -k start
(www-data,510632,146056,00:00:07,31299) /usr/sbin/apache2 -k start
(www-data,512440,146084,00:00:07,31302) /usr/sbin/apache2 -k start
(www-data,510380,145792,00:00:08,31408) /usr/sbin/apache2 -k start
(syslog,255144,1744,00:30:16,31615) rsyslogd -c4
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2023-02-20 16:21

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda43988bc0cf84

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:06,1) /sbin/init
(root,0,0,00:00:02,2) [kthreadd]
(root,0,0,00:00:51,3) [migration/0]
(root,0,0,00:08:22,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:56,6) [migration/1]
(root,0,0,00:04:52,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:50,9) [migration/2]
(root,0,0,00:04:43,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:48,12) [migration/3]
(root,0,0,00:04:38,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:53,15) [events/0]
(root,0,0,00:02:28,16) [events/1]
(root,0,0,00:02:12,17) [events/2]
(root,0,0,01:56:05,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:26,25) [sync_supers]
(root,0,0,00:00:44,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:56,31) [kblockd/0]
(root,0,0,00:01:30,32) [kblockd/1]
(root,0,0,00:01:01,33) [kblockd/2]
(root,0,0,00:01:11,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:09,51) [khungtaskd]
(root,0,0,00:00:08,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:03:58,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:03:58,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:15:15,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:11,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,01:03:29,1041) [flush-8:16]
(root,0,0,00:06:14,1044) [flush-8:112]
(root,0,0,00:11:09,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:19,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:21,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:27,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:21,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:22,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:14,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:02:17,1647) cron
(root,11540,532,00:19:10,1653) /usr/sbin/irqbalance
(root,48096,1652,00:00:01,1678) /usr/sbin/sshd -D
(bind,433080,20712,00:24:08,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,77368,03:21:41,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,06:07:16,3850) /usr/sbin/clamd
(clamav,58124,2516,06:29:52,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:25,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:29,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:03,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:01,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:43,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:31,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:05,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(www-data,503520,137192,00:00:09,4266) /usr/sbin/apache2 -k start
(ntp,28744,1752,00:15:49,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:17:32,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:32:12,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:36:13,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:32:11,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:32:06,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:32:05,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:36:44,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:53:27,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:04,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:03:24,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,01:03:31,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:30:02,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:37,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3108,00:02:56,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:24:10,4715) anvil -l -t unix -u -c
(root,450344,92552,00:09:28,4979) /usr/sbin/apache2 -k start
(root,465500,5796,00:05:51,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15156,00:39:21,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6028,00:05:23,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22868,00:09:47,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,970504,966596,4-07:29:19,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:37:02,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,37272,2-12:29:45,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:17:12,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:59:04,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(www-data,498080,131912,00:00:14,6547) /usr/sbin/apache2 -k start
(tomcat6,2617484,141412,04:47:41,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,08:22:57,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,08:48:13,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,17952,1604,00:00:00,8276) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,8295) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,8296) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,9709) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,11100) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96196,22100,00:00:00,14630) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135384,69848,00:00:02,14792) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,135384,68516,00:00:00,14793) spamd child
(popuser,135384,68516,00:00:00,14794) spamd child
(syslog,255144,1736,01:54:10,15492) rsyslogd -c4
(drweb,970504,965172,00:00:00,15717) drwebd.real
(drweb,970504,965176,00:00:00,15718) drwebd.real
(drweb,970504,965176,00:00:00,15719) drwebd.real
(drweb,970504,965176,00:00:00,15720) drwebd.real
(root,96064,21844,00:00:00,16766) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,510628,146248,00:00:08,16976) /usr/sbin/apache2 -k start
(root,14552,4320,00:00:00,17739) /usr/bin/atop -a -w /var/log/atop.log 600
(postfix,87832,6008,00:00:00,18050) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6012,00:00:00,18893) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87836,6016,00:00:00,18894) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6028,00:00:00,18895) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6016,00:00:00,18902) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2216,00:00:00,19379) pickup -l -t fifo -u -c
(root,0,0,00:00:00,19465) [flush-251:0]
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512680,146512,00:00:15,20253) /usr/sbin/apache2 -k start
(www-data,503500,137132,00:00:11,20447) /usr/sbin/apache2 -k start
(www-data,510192,145800,00:00:06,20501) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,20829) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,20831) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,510636,146196,00:00:07,20870) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,0,0,00:00:00,21696) [flush-8:160]
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2308,00:00:17,22138) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,510628,146184,00:00:05,23768) /usr/sbin/apache2 -k start
(www-data,510388,145760,00:00:04,23769) /usr/sbin/apache2 -k start
(www-data,501420,136808,00:00:05,23770) /usr/sbin/apache2 -k start
(root,96204,21868,00:00:00,25122) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26159) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:01:31,26844) /usr/sbin/apache2 -k start
(root,96204,22108,00:00:00,26857) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,28199) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,29075) CRON
(jec,4352,628,00:00:00,29086) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,29087) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96204,21868,00:00:00,32153) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2023-01-29 21:33

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda43989bb7e4ba

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:05,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:44,3) [migration/0]
(root,0,0,00:07:15,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:49,6) [migration/1]
(root,0,0,00:04:10,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:43,9) [migration/2]
(root,0,0,00:04:02,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:42,12) [migration/3]
(root,0,0,00:03:56,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:30,15) [events/0]
(root,0,0,00:02:08,16) [events/1]
(root,0,0,00:01:54,17) [events/2]
(root,0,0,01:36:48,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:23,25) [sync_supers]
(root,0,0,00:00:38,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:42,31) [kblockd/0]
(root,0,0,00:01:18,32) [kblockd/1]
(root,0,0,00:00:54,33) [kblockd/2]
(root,0,0,00:01:01,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:08,51) [khungtaskd]
(root,0,0,00:00:07,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:03:26,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:03:25,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:13:11,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:09,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:54:36,1041) [flush-8:16]
(root,0,0,00:05:21,1044) [flush-8:112]
(root,0,0,00:09:34,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:08,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:02:02,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:23,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:18,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1212,00:00:19,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:12,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:58,1647) cron
(root,11540,532,00:16:32,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,431520,21048,00:22:11,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,72704,02:53:56,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1139468,816996,05:18:39,3850) /usr/sbin/clamd
(clamav,58124,2516,05:35:47,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:14,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:25,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:03,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:31,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:28,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:04,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:13:39,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:15:07,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:27:48,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:31:21,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:27:47,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:27:43,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:27:41,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:31:50,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:46:16,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:03,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:56,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,00:55:18,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:25:56,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:24,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3108,00:02:29,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:21:17,4715) anvil -l -t unix -u -c
(root,450344,92552,00:08:10,4979) /usr/sbin/apache2 -k start
(root,465500,5796,00:05:03,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,547076,15856,00:33:59,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6024,00:04:36,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22860,00:08:01,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,908660,904752,3-16:57:29,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:31:59,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,33956,2-03:57:27,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:14:53,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:50:57,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2615428,140756,04:08:52,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,07:15:13,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,07:37:07,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,8750) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10786) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,10789) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,0,0,00:00:00,13865) [flush-8:160]
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1736,00:59:12,15492) rsyslogd -c4
(postfix,39572,2316,00:00:00,16591) pickup -l -t fifo -u -c
(www-data,512512,146220,00:00:10,18496) /usr/sbin/apache2 -k start
(www-data,495996,131268,00:00:01,18993) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2308,00:00:12,22244) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135424,69900,00:00:03,22857) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,142868,77764,00:00:00,22858) spamd child
(popuser,135424,68568,00:00:00,22859) spamd child
(drweb,908660,903328,00:00:00,22940) drwebd.real
(drweb,908660,903332,00:00:00,22941) drwebd.real
(drweb,908660,903332,00:00:00,22942) drwebd.real
(drweb,908660,903332,00:00:00,22943) drwebd.real
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512728,146396,00:00:02,24419) /usr/sbin/apache2 -k start
(www-data,512696,146352,00:00:03,24420) /usr/sbin/apache2 -k start
(www-data,503496,137140,00:00:02,24424) /usr/sbin/apache2 -k start
(www-data,504268,137860,00:00:01,24426) /usr/sbin/apache2 -k start
(www-data,495988,130768,00:00:00,24452) /usr/sbin/apache2 -k start
(root,14524,4292,00:00:01,24582) /usr/bin/atop -a -w /var/log/atop.log 600
(postfix,87788,5972,00:00:00,25988) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5980,00:00:00,26035) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5996,00:00:00,26043) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5972,00:00:00,26047) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5988,00:00:00,26049) smtpd -n smtp -t inet -u -c -o stress= -s 2
(www-data,504308,138072,00:00:12,26111) /usr/sbin/apache2 -k start
(root,0,0,00:00:00,26134) [flush-251:0]
(www-data,507020,140792,00:00:11,26136) /usr/sbin/apache2 -k start
(www-data,512468,146040,00:00:01,26405) /usr/sbin/apache2 -k start
(root,17952,1608,00:00:00,26579) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,26598) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,26599) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(www-data,322724,80448,00:00:59,26844) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,26899) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-12-13 23:01

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398e54dc8c4

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:05,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:40,3) [migration/0]
(root,0,0,00:06:32,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:44,6) [migration/1]
(root,0,0,00:03:44,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:39,9) [migration/2]
(root,0,0,00:03:38,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:38,12) [migration/3]
(root,0,0,00:03:33,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:16,15) [events/0]
(root,0,0,00:01:56,16) [events/1]
(root,0,0,00:01:44,17) [events/2]
(root,0,0,01:25:19,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:20,25) [sync_supers]
(root,0,0,00:00:34,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:32,31) [kblockd/0]
(root,0,0,00:01:11,32) [kblockd/1]
(root,0,0,00:00:50,33) [kblockd/2]
(root,0,0,00:00:56,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:07,51) [khungtaskd]
(root,0,0,00:00:07,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:03:06,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:03:05,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:11:57,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:08,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:49:32,1041) [flush-8:16]
(root,0,0,00:04:53,1044) [flush-8:112]
(root,0,0,00:08:43,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:02,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:51,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:22,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:16,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:18,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:11,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:46,1647) cron
(root,11540,532,00:14:58,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,431520,21020,00:20:53,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,75600,02:37:11,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(www-data,514484,146384,00:00:46,2772) /usr/sbin/apache2 -k start
(www-data,512712,146536,00:00:41,2773) /usr/sbin/apache2 -k start
(root,96064,21844,00:00:00,3057) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135252,69692,00:00:09,3564) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,148044,82944,00:00:18,3566) spamd child
(popuser,138636,73428,00:00:00,3567) spamd child
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1138444,815972,04:47:42,3850) /usr/sbin/clamd
(clamav,58124,2516,05:03:08,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:06,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:22,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:02,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:22,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:25,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:03,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(www-data,503716,137480,00:00:10,4228) /usr/sbin/apache2 -k start
(ntp,28744,1748,00:12:19,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:13:39,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:25:07,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:28:24,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:25:06,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:25:04,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:25:01,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:28:48,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:41:53,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:03,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:39,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,00:50:49,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:23:26,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:16,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:02:22,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:20:29,4715) anvil -l -t unix -u -c
(root,450344,92552,00:07:22,4979) /usr/sbin/apache2 -k start
(root,465500,5796,00:04:34,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,15152,00:30:42,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6024,00:04:04,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(www-data,503504,137324,00:00:24,5673) /usr/sbin/apache2 -k start
(root,96064,22860,00:07:03,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,871096,867184,3-08:00:13,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(www-data,504260,138048,00:00:10,5971) /usr/sbin/apache2 -k start
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:28:55,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,31992,1-22:59:32,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:13:28,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:45:53,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2615428,140388,03:44:40,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,06:33:22,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,06:53:15,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,14404,4172,00:00:04,6686) /usr/bin/atop -a -w /var/log/atop.log 600
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,503468,137220,00:00:10,11298) /usr/sbin/apache2 -k start
(www-data,512204,146012,00:00:26,12062) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1736,00:40:29,15492) rsyslogd -c4
(root,0,0,00:00:00,15629) [flush-8:160]
(postfix,30232,2304,00:00:00,19059) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2216,00:00:00,20452) pickup -l -t fifo -u -c
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,520500,153584,00:00:37,22470) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,513604,146192,00:00:36,23787) /usr/sbin/apache2 -k start
(drweb,871096,865760,00:00:00,25141) drwebd.real
(drweb,871096,865764,00:00:00,25142) drwebd.real
(drweb,871096,865764,00:00:00,25143) drwebd.real
(drweb,871096,865764,00:00:00,25144) drwebd.real
(www-data,322724,80448,00:00:40,26844) /usr/sbin/apache2 -k start
(postfix,87824,6008,00:00:00,26858) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6000,00:00:00,26859) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6004,00:00:00,26860) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87844,6152,00:00:00,26865) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87844,6148,00:00:00,27033) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,87824,6012,00:00:00,27116) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87828,6012,00:00:00,27783) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,17952,1608,00:00:00,29203) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,29222) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,884,00:00:00,29223) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512208,146044,00:00:54,32508) /usr/sbin/apache2 -k start
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-11-15 15:02

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398ed6cd5d0

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1908,00:00:04,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:39,3) [migration/0]
(root,0,0,00:06:21,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:43,6) [migration/1]
(root,0,0,00:03:39,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:38,9) [migration/2]
(root,0,0,00:03:34,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:37,12) [migration/3]
(root,0,0,00:03:28,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:13,15) [events/0]
(root,0,0,00:01:53,16) [events/1]
(root,0,0,00:01:41,17) [events/2]
(root,0,0,01:22:53,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:20,25) [sync_supers]
(root,0,0,00:00:34,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:30,31) [kblockd/0]
(root,0,0,00:01:09,32) [kblockd/1]
(root,0,0,00:00:49,33) [kblockd/2]
(root,0,0,00:00:55,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:07,51) [khungtaskd]
(root,0,0,00:00:07,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:03:02,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:03:01,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:11:40,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:08,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:48:27,1041) [flush-8:16]
(root,0,0,00:04:49,1044) [flush-8:112]
(root,0,0,00:08:35,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:01:01,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:49,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:21,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:16,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:15,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:11,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:44,1647) cron
(root,11540,532,00:14:38,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,431520,21012,00:18:40,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,75332,02:33:39,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(postfix,87788,5992,00:00:00,1843) smtpd -n smtp -t inet -u -c -o stress= -s 2
(drweb,863668,858336,00:00:00,2360) drwebd.real
(drweb,863668,858340,00:00:00,2361) drwebd.real
(drweb,863668,858340,00:00:00,2362) drwebd.real
(drweb,863668,858340,00:00:00,2363) drwebd.real
(postfix,87816,6012,00:00:00,2712) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5996,00:00:00,2798) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,5996,00:00:00,3357) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5968,00:00:00,3359) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6004,00:00:00,3365) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5996,00:00:00,3366) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87784,5972,00:00:00,3533) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87824,6000,00:00:00,3534) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87816,5992,00:00:00,3536) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87780,5972,00:00:00,3621) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5940,00:00:00,3679) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87832,6000,00:00:00,3680) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5932,00:00:00,3683) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5932,00:00:00,3686) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5968,00:00:00,3687) smtpd -n smtp -t inet -u -c -o stress= -s 2
(clamav,1138444,815972,04:41:45,3850) /usr/sbin/clamd
(postfix,87788,5968,00:00:00,3859) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5968,00:00:00,3939) smtpd -n smtp -t inet -u -c -o stress= -s 2
(clamav,58124,2516,04:56:13,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:05,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:22,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:02,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:21,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:25,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:03,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(postfix,87780,5972,00:00:00,4040) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5964,00:00:00,4418) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,39572,2256,00:00:00,4419) proxymap -t unix -u
(psaadm,241464,15292,00:00:00,4422) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(ntp,28744,1748,00:12:03,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:13:22,4446) sshd:
(psaadm,248308,26340,00:00:00,4481) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(psaadm,244208,20028,00:00:00,4482) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(psaadm,241464,5268,00:00:00,4483) /usr/bin/sw-engine-cgi -c /opt/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:24:35,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:27:48,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:24:34,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:24:30,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:24:28,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:28:11,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:41:04,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:03,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:36,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2352,00:49:49,4663) /usr/lib/postfix/master
(root,17952,1604,00:00:00,4669) /bin/bash /usr/bin/check_mk_agent
(postfix,39744,2528,00:22:55,4673) qmgr -l -t fifo -u
(root,15232,1136,00:00:00,4689) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,884,00:00:00,4690) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,20268,1060,00:01:14,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:02:21,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2488,00:20:13,4715) anvil -l -t unix -u -c
(root,450344,92552,00:07:12,4979) /usr/sbin/apache2 -k start
(root,465500,5796,00:04:28,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,14852,00:30:00,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6024,00:03:58,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22800,00:06:51,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,863668,859760,3-06:04:46,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:28:17,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,31304,1-21:56:45,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:13:08,6402) /usr/sbin/vnstatd -d
(www-data,512440,145972,00:00:04,6497) /usr/sbin/apache2 -k start
(root,69736,1648,00:44:54,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2615428,138284,03:40:09,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,06:25:30,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,06:45:04,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135388,69784,00:00:09,13331) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,147276,82168,00:00:21,13394) spamd child
(popuser,135388,68448,00:00:00,13395) spamd child
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,0,0,00:00:00,13938) [flush-8:160]
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,16592,6360,00:00:03,14269) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1744,00:34:03,15492) rsyslogd -c4
(www-data,503456,137196,00:00:17,17231) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21844,00:00:00,22446) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512684,146272,00:00:03,24949) /usr/sbin/apache2 -k start
(www-data,322724,80436,00:00:36,26844) /usr/sbin/apache2 -k start
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,450816,84828,00:00:00,27888) /usr/sbin/apache2 -k start
(postfix,39572,2216,00:00:00,28348) pickup -l -t fifo -u -c
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,30232,2304,00:06:16,29473) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,504256,137920,00:00:07,32505) /usr/sbin/apache2 -k start
(www-data,504260,137892,00:00:05,32506) /usr/sbin/apache2 -k start
(www-data,512404,146008,00:00:05,32508) /usr/sbin/apache2 -k start
(www-data,504252,137868,00:00:05,32509) /usr/sbin/apache2 -k start
(www-data,504256,137924,00:00:08,32510) /usr/sbin/apache2 -k start
(www-data,504232,137836,00:00:07,32516) /usr/sbin/apache2 -k start
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-11-09 14:19

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda43984cd6947b

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1912,00:00:04,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:38,3) [migration/0]
(root,0,0,00:06:09,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:42,6) [migration/1]
(root,0,0,00:03:33,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:38,9) [migration/2]
(root,0,0,00:03:27,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:36,12) [migration/3]
(root,0,0,00:03:22,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:10,15) [events/0]
(root,0,0,00:01:51,16) [events/1]
(root,0,0,00:01:39,17) [events/2]
(root,0,0,01:20:19,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:19,25) [sync_supers]
(root,0,0,00:00:33,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:28,31) [kblockd/0]
(root,0,0,00:01:08,32) [kblockd/1]
(root,0,0,00:00:48,33) [kblockd/2]
(root,0,0,00:00:53,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:07,51) [khungtaskd]
(root,0,0,00:00:05,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:02:58,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:02:57,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:11:21,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:08,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(postfix,77412,5428,00:00:00,520) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,39572,2284,00:00:00,521) proxymap -t unix -u
(postfix,77544,5448,00:00:00,522) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77544,5444,00:00:00,523) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77544,5444,00:00:00,524) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77412,5432,00:00:00,525) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77544,5444,00:00:00,547) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,77412,5440,00:00:00,615) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,17952,1608,00:00:00,617) /bin/bash /usr/bin/check_mk_agent
(root,15232,1132,00:00:00,636) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8576,804,00:00:00,637) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(www-data,503496,137408,00:00:48,941) /usr/sbin/apache2 -k start
(root,0,0,00:46:47,1041) [flush-8:16]
(root,0,0,00:04:41,1044) [flush-8:112]
(root,0,0,00:08:22,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:00:59,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:46,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:21,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:16,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:14,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:10,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:41,1647) cron
(root,11540,572,00:14:17,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,430480,25824,00:16:21,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,74708,02:29:55,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1138444,815976,04:35:18,3850) /usr/sbin/clamd
(clamav,58124,2516,04:48:52,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:03,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:21,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:02,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:19,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:24,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:03,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:11:46,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:13:03,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:23:57,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:27:06,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:23:58,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:23:54,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:23:52,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:27:29,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:40:03,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:03,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:33,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2356,00:47:57,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:22:22,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:12,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:02:17,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2484,00:18:52,4715) anvil -l -t unix -u -c
(root,450344,95956,00:07:02,4979) /usr/sbin/apache2 -k start
(root,465500,5892,00:04:22,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,17040,00:29:17,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6024,00:03:52,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(www-data,540340,146552,00:00:10,5546) /usr/sbin/apache2 -k start
(root,96064,22748,00:06:39,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,854424,850396,3-04:07:13,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(snmp,48300,3852,00:27:36,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,30900,1-20:36:23,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:12:49,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:43:50,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2615428,140944,03:34:53,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,06:16:05,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,06:35:15,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512716,146380,00:00:11,12905) /usr/sbin/apache2 -k start
(www-data,521408,154308,00:00:09,12913) /usr/sbin/apache2 -k start
(www-data,504252,137932,00:00:09,12914) /usr/sbin/apache2 -k start
(www-data,504228,137892,00:00:09,12917) /usr/sbin/apache2 -k start
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,510328,145720,00:00:08,13935) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,503520,137364,00:00:38,14380) /usr/sbin/apache2 -k start
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1732,00:07:12,15492) rsyslogd -c4
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21788,00:00:00,22134) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2328,00:00:00,24775) pickup -l -t fifo -u -c
(root,0,0,00:00:03,25069) [flush-8:160]
(www-data,322724,80448,00:00:32,26844) /usr/sbin/apache2 -k start
(root,96064,21792,00:00:00,26974) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,854424,848968,00:00:00,27094) drwebd.real
(drweb,854424,848972,00:00:00,27095) drwebd.real
(drweb,854424,848972,00:00:00,27096) drwebd.real
(drweb,854424,848972,00:00:00,27097) drwebd.real
(root,135232,69664,00:00:06,28229) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,146652,81540,00:00:13,28230) spamd child
(popuser,139044,73748,00:00:00,28231) spamd child
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,498020,131476,00:00:01,29153) /usr/sbin/apache2 -k start
(www-data,510596,145916,00:00:02,29319) /usr/sbin/apache2 -k start
(postfix,30232,2312,00:00:38,29473) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,14972,4740,00:00:02,29915) /usr/bin/atop -a -w /var/log/atop.log 600
(postfix,87788,5964,00:00:00,31590) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87816,6008,00:00:00,31615) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87780,5928,00:00:00,32255) smtpd -n smtp -t inet -u -c -o stress= -s 2
(root,0,0,00:00:00,32671) [flush-251:0]
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-11-03 07:20

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398a4003cda

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:04,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:37,3) [migration/0]
(root,0,0,00:05:44,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:40,6) [migration/1]
(root,0,0,00:03:23,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:36,9) [migration/2]
(root,0,0,00:03:17,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:34,12) [migration/3]
(root,0,0,00:03:13,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:02:04,15) [events/0]
(root,0,0,00:01:46,16) [events/1]
(root,0,0,00:01:35,17) [events/2]
(root,0,0,01:15:47,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:19,25) [sync_supers]
(root,0,0,00:00:31,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:24,31) [kblockd/0]
(root,0,0,00:01:04,32) [kblockd/1]
(root,0,0,00:00:45,33) [kblockd/2]
(root,0,0,00:00:51,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:06,51) [khungtaskd]
(root,0,0,00:00:05,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:02:50,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:02:49,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:10:51,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:07,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(www-data,504292,138060,00:00:26,764) /usr/sbin/apache2 -k start
(root,0,0,00:44:36,1041) [flush-8:16]
(root,0,0,00:04:27,1044) [flush-8:112]
(root,0,0,00:07:58,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:00:56,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:41,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:20,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:15,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:14,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:09,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:37,1647) cron
(root,11540,572,00:13:40,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,430480,26124,00:15:49,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,74908,02:23:15,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1138444,815976,04:23:18,3850) /usr/sbin/clamd
(clamav,58124,2516,04:35:51,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:01:00,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:20,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:02,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:16,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:23,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:03,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:11:14,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:12:28,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:22:54,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:25:54,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:22:54,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:22:51,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:22:48,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:26:17,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:38:21,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:02,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:26,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2356,00:45:45,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:21:21,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:09,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:02:12,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2484,00:17:55,4715) anvil -l -t unix -u -c
(root,450344,95956,00:06:43,4979) /usr/sbin/apache2 -k start
(root,465500,5892,00:04:10,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,14972,00:27:58,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(postfix,30232,2312,00:03:02,5487) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(1003,49964,6024,00:03:41,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22744,00:06:16,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,840008,835952,3-00:39:57,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,327756,134356,00:35:51,6345) /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini /usr/lib/plesk-9.0/psa-health-monitor-notification.php
(snmp,48300,3852,00:26:23,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,29940,1-18:30:46,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:12:16,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:41:55,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2611316,140408,03:25:34,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,05:59:53,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,06:18:23,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,96064,21780,00:00:00,8559) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,514120,146668,00:00:29,9651) /usr/sbin/apache2 -k start
(www-data,502220,137900,00:00:15,10361) /usr/sbin/apache2 -k start
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,14578) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1712,03:20:46,14723) rsyslogd -c4
(www-data,501396,136868,00:00:08,18189) /usr/sbin/apache2 -k start
(www-data,514116,146880,00:00:11,18612) /usr/sbin/apache2 -k start
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,135236,69680,00:00:04,22520) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,141896,76756,00:00:03,22521) spamd child
(popuser,135236,68344,00:00:00,22526) spamd child
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,512416,146168,00:00:22,23372) /usr/sbin/apache2 -k start
(www-data,503704,137488,00:00:20,23552) /usr/sbin/apache2 -k start
(drweb,840008,834528,00:00:00,24264) drwebd.real
(drweb,840008,834532,00:00:00,24265) drwebd.real
(drweb,840008,834532,00:00:00,24266) drwebd.real
(drweb,840008,834532,00:00:00,24267) drwebd.real
(root,0,0,00:00:02,25069) [flush-8:160]
(postfix,87844,6180,00:00:00,25087) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,14420,4188,00:00:01,25190) /usr/bin/atop -a -w /var/log/atop.log 600
(postfix,87844,6208,00:00:00,26174) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,39572,2216,00:00:00,26353) pickup -l -t fifo -u -c
(www-data,506396,138220,00:00:26,26581) /usr/sbin/apache2 -k start
(www-data,322724,80448,00:00:24,26844) /usr/sbin/apache2 -k start
(www-data,505436,137588,00:00:05,26913) /usr/sbin/apache2 -k start
(postfix,87788,5980,00:00:00,27878) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,39572,2268,00:00:00,27879) proxymap -t unix -u
(root,0,0,00:00:00,27884) [flush-251:0]
(postfix,87788,5984,00:00:00,27885) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5992,00:00:00,27891) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5932,00:00:00,27940) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5936,00:00:00,27975) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5980,00:00:00,27976) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87844,6180,00:00:00,28144) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,17952,1604,00:00:00,28367) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,28386) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8576,804,00:00:00,28387) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,21780,00:00:00,28544) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,31737) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,506360,138240,00:00:37,31952) /usr/sbin/apache2 -k start
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-10-23 03:34

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda43983a4e1927

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:04,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:33,3) [migration/0]
(root,0,0,00:05:11,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:36,6) [migration/1]
(root,0,0,00:03:02,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:32,9) [migration/2]
(root,0,0,00:02:57,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:31,12) [migration/3]
(root,0,0,00:02:52,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:01:52,15) [events/0]
(root,0,0,00:01:35,16) [events/1]
(root,0,0,00:01:26,17) [events/2]
(root,0,0,01:05:46,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:17,25) [sync_supers]
(root,0,0,00:00:28,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:16,31) [kblockd/0]
(root,0,0,00:00:58,32) [kblockd/1]
(root,0,0,00:00:41,33) [kblockd/2]
(root,0,0,00:00:46,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:05,51) [khungtaskd]
(root,0,0,00:00:05,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:02:33,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:02:32,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:09:47,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:07,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:40:13,1041) [flush-8:16]
(root,0,0,00:04:01,1044) [flush-8:112]
(root,0,0,00:07:10,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:00:50,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:31,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:18,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:13,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:12,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:08,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:27,1647) cron
(root,11540,572,00:12:17,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,430480,26120,00:14:23,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,77552,02:08:48,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(postfix,87784,5976,00:00:00,1810) smtpd -n smtp -t inet -u -c -o stress= -s 2
(www-data,495960,131252,00:00:01,1889) /usr/sbin/apache2 -k start
(root,0,0,00:00:00,1895) [flush-251:0]
(postfix,39876,3008,00:00:00,1991) cleanup -z -t unix -u -c
(postfix,40716,3764,00:00:00,1992) trivial-rewrite -n rewrite -t unix -u -c
(postfix,39576,2332,00:00:00,1993) pipe -n plesk_virtual -t unix flags=DORhu user=popuser popuser argv=/usr/lib/plesk-9.0/postfix-local -f ${sender} -d ${recipient} -p /var/qmail/mailnames
(root,0,0,00:00:00,2017) [flush-8:176]
(postfix,30232,1812,00:00:00,2098) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,17952,1608,00:00:00,2194) /bin/bash /usr/bin/check_mk_agent
(root,15232,1128,00:00:00,2213) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,888,00:00:00,2214) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,135228,69600,00:00:23,3786) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,150068,84940,00:00:44,3787) spamd child
(popuser,135228,68264,00:00:00,3788) spamd child
(clamav,1138444,815976,03:58:03,3850) /usr/sbin/clamd
(clamav,58124,2516,04:08:10,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:00:54,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:18,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:01,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:09,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:21,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:03,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(www-data,514524,146328,00:00:30,4219) /usr/sbin/apache2 -k start
(ntp,28744,1752,00:10:07,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:11:13,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:20:38,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:23:22,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:20:39,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:20:36,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:20:33,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:23:43,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:34:38,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:02,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:11,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2356,00:41:37,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:19:14,4673) qmgr -l -t fifo -u
(root,20268,1060,00:01:02,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:01:59,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2484,00:16:42,4715) anvil -l -t unix -u -c
(root,450344,95956,00:06:03,4979) /usr/sbin/apache2 -k start
(root,465500,5892,00:03:45,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,17176,00:25:10,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6024,00:03:15,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,96064,22736,00:05:32,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,808584,804676,2-17:00:34,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,316236,122944,00:32:05,6345) /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini /usr/lib/plesk-9.0/psa-health-monitor-notification.php
(snmp,48300,3852,00:23:46,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,27588,1-14:06:05,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:10:58,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:37:44,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2611316,140180,03:05:10,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,05:24:29,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,05:41:08,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,0,0,00:00:04,8000) [flush-8:160]
(www-data,505836,138324,00:00:39,8242) /usr/sbin/apache2 -k start
(www-data,513604,146028,00:00:16,9509) /usr/sbin/apache2 -k start
(www-data,503464,137196,00:00:19,9511) /usr/sbin/apache2 -k start
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(syslog,255144,1712,02:56:33,14723) rsyslogd -c4
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21780,00:00:00,22631) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21780,00:00:00,22987) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,322724,80448,00:00:07,26844) /usr/sbin/apache2 -k start
(www-data,505568,137352,00:00:12,27081) /usr/sbin/apache2 -k start
(www-data,510320,145704,00:00:04,28344) /usr/sbin/apache2 -k start
(www-data,510348,145748,00:00:02,28345) /usr/sbin/apache2 -k start
(www-data,504276,138016,00:00:14,28450) /usr/sbin/apache2 -k start
(drweb,808584,803252,00:00:00,30106) drwebd.real
(drweb,808584,803256,00:00:00,30107) drwebd.real
(drweb,808584,803256,00:00:00,30108) drwebd.real
(drweb,808584,803256,00:00:00,30109) drwebd.real
(postfix,39572,2332,00:00:00,30886) pickup -l -t fifo -u -c
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,14500,4268,00:00:01,31936) /usr/bin/atop -a -w /var/log/atop.log 600
(www-data,521428,154432,00:01:02,32010) /usr/sbin/apache2 -k start
(postfix,87852,6340,00:00:00,32489) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-09-29 03:39

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda43981ca251f7

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1904,00:00:03,1) /sbin/init
(root,0,0,00:00:01,2) [kthreadd]
(root,0,0,00:00:31,3) [migration/0]
(root,0,0,00:04:48,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:34,6) [migration/1]
(root,0,0,00:02:48,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:30,9) [migration/2]
(root,0,0,00:02:44,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:29,12) [migration/3]
(root,0,0,00:02:38,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:01:44,15) [events/0]
(root,0,0,00:01:28,16) [events/1]
(root,0,0,00:01:19,17) [events/2]
(root,0,0,00:59:10,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:15,25) [sync_supers]
(root,0,0,00:00:26,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:01:11,31) [kblockd/0]
(root,0,0,00:00:54,32) [kblockd/1]
(root,0,0,00:00:38,33) [kblockd/2]
(root,0,0,00:00:43,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:05,51) [khungtaskd]
(root,0,0,00:00:05,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:02:21,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:02:21,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:09:04,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:06,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:37:25,1041) [flush-8:16]
(root,0,0,00:03:44,1044) [flush-8:112]
(root,0,0,00:06:40,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:00:46,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:01:24,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:17,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:12,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:11,1263) /usr/sbin/vsftpd
(109,23684,360,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1436,00:00:07,1363) avahi-daemon: running [web1.local]
(avahi,34184,296,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,564,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,564,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,564,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,564,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,564,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,316,00:00:00,1641) atd
(root,19060,976,00:01:20,1647) cron
(root,11540,572,00:11:22,1653) /usr/sbin/irqbalance
(root,48096,1640,00:00:00,1678) /usr/sbin/sshd -D
(bind,429960,25584,00:13:25,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1502312,75020,01:59:03,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(www-data,519568,152600,00:00:15,2305) /usr/sbin/apache2 -k start
(root,135244,69768,00:00:05,2459) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,146284,81188,00:00:16,2537) spamd child
(popuser,135244,68432,00:00:00,2538) spamd child
(root,96064,21764,00:00:00,3571) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(clamav,1138444,815976,03:40:38,3850) /usr/sbin/clamd
(clamav,58124,2516,03:49:35,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:00:50,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:17,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:01,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:01:05,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:20,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:02,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:01,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1752,00:09:21,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:10:22,4446) sshd:
(root,14508,4276,00:00:02,4484) /usr/bin/atop -a -w /var/log/atop.log 600
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:19:05,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:21:37,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:19:06,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:19:04,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:19:01,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:22:00,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:32:04,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:02,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:02:01,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2356,00:38:52,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:17:49,4673) qmgr -l -t fifo -u
(root,20268,1060,00:00:58,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3104,00:01:51,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2484,00:16:03,4715) anvil -l -t unix -u -c
(root,448768,94440,00:05:35,4979) /usr/sbin/apache2 -k start
(www-data,321148,78940,00:00:01,5324) /usr/sbin/apache2 -k start
(root,465500,5892,00:03:28,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,16964,00:23:17,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(1003,49964,6004,00:03:01,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(www-data,502720,136284,00:00:14,5519) /usr/sbin/apache2 -k start
(www-data,502688,136460,00:00:20,5520) /usr/sbin/apache2 -k start
(root,96064,22732,00:05:04,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,785980,781928,2-11:53:56,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,308556,115360,00:29:35,6345) /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini /usr/lib/plesk-9.0/psa-health-monitor-notification.php
(snmp,48300,3852,00:22:01,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,25900,1-11:04:46,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:10:10,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:34:55,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2611316,138496,02:51:15,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,05:00:25,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,05:15:53,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(root,0,0,00:00:02,8000) [flush-8:160]
(www-data,510640,144440,00:00:13,9889) /usr/sbin/apache2 -k start
(root,96064,21776,00:00:00,11006) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,39572,2324,00:00:00,11491) pickup -l -t fifo -u -c
(root,49020,2332,00:00:00,13582) CRON
(jec,4352,632,00:00:00,13588) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,13592) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,14108) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(www-data,511088,144848,00:00:11,14155) /usr/sbin/apache2 -k start
(www-data,511084,144820,00:00:11,14156) /usr/sbin/apache2 -k start
(www-data,510860,144600,00:00:10,14160) /usr/sbin/apache2 -k start
(syslog,255144,1712,02:44:18,14723) rsyslogd -c4
(drweb,785980,780504,00:00:00,16575) drwebd.real
(drweb,785980,780508,00:00:00,16576) drwebd.real
(drweb,785980,780508,00:00:00,16577) drwebd.real
(drweb,785980,780508,00:00:00,16578) drwebd.real
(www-data,510832,144552,00:00:04,17126) /usr/sbin/apache2 -k start
(www-data,508760,144184,00:00:02,17187) /usr/sbin/apache2 -k start
(www-data,511092,144720,00:00:02,17188) /usr/sbin/apache2 -k start
(postfix,87908,6248,00:00:00,18992) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87848,6152,00:00:00,19004) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,96064,21764,00:00:00,19114) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,19127) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(postfix,87844,6148,00:00:00,19168) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,39572,2264,00:00:00,19169) proxymap -t unix -u
(postfix,77560,5612,00:00:00,19178) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(postfix,40716,3776,00:00:00,19254) trivial-rewrite -n rewrite -t unix -u -c
(postfix,87844,6136,00:00:00,19256) smtpd -n smtps -t inet -u -c -o stress= -s 2 -o smtpd_tls_wrappermode=yes
(root,17952,1608,00:00:00,19509) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,19528) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8580,880,00:00:00,19529) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,49020,2332,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2332,00:00:00,21405) CRON
(jec,4352,632,00:00:00,21408) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,21413) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,49020,2332,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96064,21764,00:00:00,31680) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31684) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96064,21764,00:00:00,31839) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-09-13 04:54

Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcb0928f4f5d588c3c6d1d4d0fd5fda4398fbd8ccd0

Found public CheckMk agent:
Version: 1.2.6p12
AgentOS: linux
AgentDirectory: /etc/check_mk
DataDirectory: /var/lib/check_mk_agent
SpoolDirectory: /var/lib/check_mk_agent/spool
PluginsDirectory: /usr/lib/check_mk_agent/plugins
LocalDirectory: /usr/lib/check_mk_agent/local
OnlyFrom: 

Found process list through CheckMk:
(root,23940,1912,00:00:02,1) /sbin/init
(root,0,0,00:00:00,2) [kthreadd]
(root,0,0,00:00:17,3) [migration/0]
(root,0,0,00:02:35,4) [ksoftirqd/0]
(root,0,0,00:00:00,5) [watchdog/0]
(root,0,0,00:00:19,6) [migration/1]
(root,0,0,00:01:30,7) [ksoftirqd/1]
(root,0,0,00:00:00,8) [watchdog/1]
(root,0,0,00:00:17,9) [migration/2]
(root,0,0,00:01:30,10) [ksoftirqd/2]
(root,0,0,00:00:00,11) [watchdog/2]
(root,0,0,00:00:16,12) [migration/3]
(root,0,0,00:01:23,13) [ksoftirqd/3]
(root,0,0,00:00:00,14) [watchdog/3]
(root,0,0,00:00:58,15) [events/0]
(root,0,0,00:00:50,16) [events/1]
(root,0,0,00:00:45,17) [events/2]
(root,0,0,00:23:41,18) [events/3]
(root,0,0,00:00:00,19) [cpuset]
(root,0,0,00:00:00,20) [khelper]
(root,0,0,00:00:00,21) [netns]
(root,0,0,00:00:00,22) [async/mgr]
(root,0,0,00:00:00,23) [pm]
(root,0,0,00:00:08,25) [sync_supers]
(root,0,0,00:00:14,26) [bdi-default]
(root,0,0,00:00:00,27) [kintegrityd/0]
(root,0,0,00:00:00,28) [kintegrityd/1]
(root,0,0,00:00:00,29) [kintegrityd/2]
(root,0,0,00:00:00,30) [kintegrityd/3]
(root,0,0,00:00:40,31) [kblockd/0]
(root,0,0,00:00:30,32) [kblockd/1]
(root,0,0,00:00:23,33) [kblockd/2]
(root,0,0,00:00:23,34) [kblockd/3]
(root,0,0,00:00:00,35) [kacpid]
(root,0,0,00:00:00,36) [kacpi_notify]
(root,0,0,00:00:00,37) [kacpi_hotplug]
(root,0,0,00:00:00,38) [ata/0]
(root,0,0,00:00:00,39) [ata/1]
(root,0,0,00:00:00,40) [ata/2]
(root,0,0,00:00:00,41) [ata/3]
(root,0,0,00:00:00,42) [ata_aux]
(root,0,0,00:00:00,43) [ksuspend_usbd]
(root,0,0,00:00:00,44) [khubd]
(root,0,0,00:00:00,45) [kseriod]
(root,0,0,00:00:00,46) [kmmcd]
(root,0,0,00:00:02,51) [khungtaskd]
(root,0,0,00:00:01,52) [kswapd0]
(root,0,0,00:00:00,53) [ksmd]
(root,0,0,00:00:00,54) [aio/0]
(root,0,0,00:00:00,55) [aio/1]
(root,0,0,00:00:00,56) [aio/2]
(root,0,0,00:00:00,57) [aio/3]
(root,0,0,00:00:00,58) [ecryptfs-kthrea]
(root,0,0,00:00:00,59) [crypto/0]
(root,0,0,00:00:00,60) [crypto/1]
(root,0,0,00:00:00,61) [crypto/2]
(root,0,0,00:00:00,62) [crypto/3]
(root,0,0,00:00:00,65) [pciehpd]
(root,0,0,00:00:00,66) [scsi_eh_0]
(root,0,0,00:00:00,67) [scsi_eh_1]
(root,0,0,00:00:00,69) [kstriped]
(root,0,0,00:00:00,70) [kmpathd/0]
(root,0,0,00:00:00,71) [kmpathd/1]
(root,0,0,00:00:00,72) [kmpathd/2]
(root,0,0,00:00:00,73) [kmpathd/3]
(root,0,0,00:00:00,74) [kmpath_handlerd]
(root,0,0,00:00:00,75) [ksnapd]
(root,0,0,00:00:00,76) [kondemand/0]
(root,0,0,00:00:00,77) [kondemand/1]
(root,0,0,00:00:00,78) [kondemand/2]
(root,0,0,00:00:00,79) [kondemand/3]
(root,0,0,00:00:00,80) [kconservative/0]
(root,0,0,00:00:00,81) [kconservative/1]
(root,0,0,00:00:00,82) [kconservative/2]
(root,0,0,00:00:00,83) [kconservative/3]
(root,0,0,00:01:19,287) [mpt_poll_0]
(root,0,0,00:00:00,290) [mpt/0]
(root,0,0,00:00:00,291) [scsi_eh_2]
(root,0,0,00:01:19,293) [mpt_poll_1]
(root,0,0,00:00:00,294) [mpt/1]
(root,0,0,00:00:00,302) [scsi_eh_3]
(root,0,0,00:05:03,389) [jbd2/sdb1-8]
(root,0,0,00:00:00,390) [ext4-dio-unwrit]
(root,0,0,00:00:00,391) [ext4-dio-unwrit]
(root,0,0,00:00:00,392) [ext4-dio-unwrit]
(root,0,0,00:00:00,393) [ext4-dio-unwrit]
(root,0,0,00:00:03,399) [kdmflush]
(root,17296,608,00:00:00,439) upstart-udev-bridge --daemon
(root,17308,360,00:00:00,447) udevd --daemon
(root,17520,236,00:00:00,690) udevd --daemon
(root,0,0,00:00:00,722) [kpsmoused]
(root,0,0,00:20:32,1041) [flush-8:16]
(root,0,0,00:02:03,1044) [flush-8:112]
(root,0,0,00:03:43,1179) [jbd2/sdh1-8]
(root,0,0,00:00:00,1180) [ext4-dio-unwrit]
(root,0,0,00:00:00,1181) [ext4-dio-unwrit]
(root,0,0,00:00:00,1182) [ext4-dio-unwrit]
(root,0,0,00:00:00,1183) [ext4-dio-unwrit]
(root,0,0,00:00:26,1186) [jbd2/dm-0-8]
(root,0,0,00:00:00,1187) [ext4-dio-unwrit]
(root,0,0,00:00:00,1188) [ext4-dio-unwrit]
(root,0,0,00:00:00,1189) [ext4-dio-unwrit]
(root,0,0,00:00:00,1190) [ext4-dio-unwrit]
(root,0,0,00:00:47,1193) [jbd2/sdk1-8]
(root,0,0,00:00:00,1194) [ext4-dio-unwrit]
(root,0,0,00:00:00,1195) [ext4-dio-unwrit]
(root,0,0,00:00:00,1196) [ext4-dio-unwrit]
(root,0,0,00:00:00,1197) [ext4-dio-unwrit]
(root,0,0,00:00:09,1200) [jbd2/sdl1-8]
(root,0,0,00:00:00,1201) [ext4-dio-unwrit]
(root,0,0,00:00:00,1202) [ext4-dio-unwrit]
(root,0,0,00:00:00,1203) [ext4-dio-unwrit]
(root,0,0,00:00:00,1204) [ext4-dio-unwrit]
(root,0,0,00:00:00,1207) [jbd2/sdn1-8]
(root,0,0,00:00:00,1208) [ext4-dio-unwrit]
(root,0,0,00:00:00,1209) [ext4-dio-unwrit]
(root,0,0,00:00:00,1210) [ext4-dio-unwrit]
(root,0,0,00:00:00,1211) [ext4-dio-unwrit]
(root,0,0,00:00:07,1214) [jbd2/sdm1-8]
(root,0,0,00:00:00,1215) [ext4-dio-unwrit]
(root,0,0,00:00:00,1216) [ext4-dio-unwrit]
(root,0,0,00:00:00,1217) [ext4-dio-unwrit]
(root,0,0,00:00:00,1218) [ext4-dio-unwrit]
(root,25116,1208,00:00:06,1263) /usr/sbin/vsftpd
(syslog,255144,2460,02:31:41,1279) rsyslogd -c4
(109,23684,472,00:00:00,1348) dbus-daemon --system --fork
(avahi,34308,1580,00:00:04,1363) avahi-daemon: running [web1.local]
(avahi,34184,520,00:00:00,1364) avahi-daemon: chroot helper
(root,6336,664,00:00:00,1593) /sbin/getty -8 38400 tty4
(root,6336,664,00:00:00,1605) /sbin/getty -8 38400 tty5
(root,6336,664,00:00:00,1631) /sbin/getty -8 38400 tty2
(root,6336,664,00:00:00,1632) /sbin/getty -8 38400 tty3
(root,6336,668,00:00:00,1638) /sbin/getty -8 38400 tty6
(daemon,16864,460,00:00:00,1641) atd
(root,19060,1056,00:00:45,1647) cron
(root,11540,636,00:06:28,1653) /usr/sbin/irqbalance
(root,48096,2748,00:00:00,1678) /usr/sbin/sshd -D
(bind,429700,31320,00:07:30,1707) /usr/sbin/named -t /var/named/run-root -c /etc/named.conf -u bind
(mysql,1370716,74920,01:06:12,1717) /usr/sbin/mysqld --pid-file=/var/run/mysqld/mysqld.pid
(drweb,669868,664540,00:00:00,3354) drwebd.real
(drweb,669868,664544,00:00:00,3355) drwebd.real
(drweb,669868,664544,00:00:00,3356) drwebd.real
(drweb,669868,664544,00:00:00,3357) drwebd.real
(clamav,1138444,815896,02:05:10,3850) /usr/sbin/clamd
(www-data,291232,50008,00:00:01,3861) /usr/sbin/apache2 -k start
(www-data,480912,115876,00:00:18,3868) /usr/sbin/apache2 -k start
(www-data,480800,115708,00:00:14,3870) /usr/sbin/apache2 -k start
(clamav,58124,2516,02:07:36,3959) /usr/bin/freshclam -d --quiet
(root,14132,740,00:00:28,3970) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,668,00:00:09,3972) /usr/sbin/courierlogger imapd
(root,14132,744,00:00:00,3981) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir
(root,4260,672,00:00:00,3983) /usr/sbin/courierlogger imapd-ssl
(root,14132,744,00:00:37,3991) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:11,3993) /usr/sbin/courierlogger pop3d
(root,14132,744,00:00:01,4001) /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir
(root,4260,668,00:00:00,4003) /usr/sbin/courierlogger pop3d-ssl
(ntp,28744,1748,00:05:15,4429) /usr/sbin/ntpd -p /var/run/ntpd.pid -g -u 115:123
(root,2444,856,00:05:49,4446) sshd:
(list,54512,8428,00:00:00,4539) /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start
(list,54352,10368,00:10:46,4540) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
(list,54428,10432,00:12:15,4541) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s
(list,54356,10360,00:10:45,4542) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
(list,54488,10712,00:10:44,4543) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s
(list,54376,10424,00:10:41,4544) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
(list,54808,10912,00:12:22,4545) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s
(list,54496,10652,00:18:12,4546) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
(list,54352,10368,00:00:01,4547) /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
(postfix,142440,888,00:01:09,4558) /usr/lib/plesk-9.0/psa-pc-remote -p inet:12768@localhost -b
(root,37504,2356,00:20:44,4663) /usr/lib/postfix/master
(postfix,39744,2528,00:09:57,4673) qmgr -l -t fifo -u
(root,20268,1060,00:00:32,4695) /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive
(postfix,42012,3112,00:00:50,4712) tlsmgr -l -t unix -u -c
(postfix,39712,2484,00:07:17,4715) anvil -l -t unix -u -c
(root,418848,65708,00:03:06,4979) /usr/sbin/apache2 -k start
(root,0,0,00:00:00,5159) [flush-251:0]
(postfix,87788,5984,00:00:00,5334) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,39572,2264,00:00:00,5335) proxymap -t unix -u
(postfix,30232,2308,00:00:00,5337) plesk_saslauthd -l -t unix -u -c status=5 listen=6 dbpath=/plesk/passwd.db
(root,465500,5928,00:01:57,5407) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true
(root,546020,17088,00:13:00,5413) /usr/bin/newrelic-daemon --agent --pidfile /var/run/newrelic-daemon.pid --logfile /var/log/newrelic/newrelic-daemon.log --port @newrelic --wait-for-port 0s --define utilization.detect_aws=true --define utilization.detect_azure=true --define utilization.detect_gcp=true --define utilization.detect_pcf=true --define utilization.detect_docker=true -no-pidfile
(postfix,87788,5980,00:00:00,5437) smtpd -n smtp -t inet -u -c -o stress= -s 2
(postfix,87788,5984,00:00:00,5439) smtpd -n smtp -t inet -u -c -o stress= -s 2
(1003,48992,5072,00:01:47,5494) /usr/sbin/sw-cp-serverd -f /etc/sw-cp-server/config
(root,17952,1608,00:00:00,5776) /bin/bash /usr/bin/check_mk_agent
(root,15232,1136,00:00:00,5795) ps ax -o user,vsz,rss,cputime,pid,command --columns 10000
(root,8576,800,00:00:00,5796) sed -e 1d -e s/ *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) *\([^ ]*\) */(\1,\2,\3,\4,\5) /
(root,96064,22720,00:02:44,5808) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,94016,21740,00:00:00,5830) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(drweb,669868,665964,1-09:38:50,5902) drwebd.real
(root,17284,184,00:00:00,5918) udevd --daemon
(root,96072,21764,00:00:00,6024) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,96072,21764,00:00:00,6028) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,267080,75040,00:16:21,6345) /usr/bin/sw-engine -c /opt/psa/admin/conf/php.ini /usr/lib/plesk-9.0/psa-health-monitor-notification.php
(snmp,48300,3852,00:12:28,6367) /usr/sbin/snmpd -Lsd -Lf /dev/null -u snmp -g snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1
(root,556552,14948,19:15:21,6371) /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf -P /var/run/sw-collectd.pid
(root,7356,688,00:05:42,6402) /usr/sbin/vnstatd -d
(root,69736,1648,00:19:35,6531) /opt/Kaseya/AMBNTT09617760821768/bin/AgentMon --daemon
(tomcat6,2596924,128220,01:36:01,6561) /usr/lib/jvm/java-6-openjdk/bin/java -Djava.util.logging.config.file=/var/lib/tomcat6/conf/logging.properties -Djava.awt.headless=true -Xmx128M -XX:+UseConcMarkSweepGC -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/usr/share/tomcat6/endorsed -classpath /var/lib/tomcat6/bin/tomcat-juli.jar:/usr/share/tomcat6/bin/bootstrap.jar -Dcatalina.base=/var/lib/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.io.tmpdir=/tmp/tomcat6-tmp org.apache.catalina.startup.Bootstrap start
(root,18460,2212,02:50:01,6563) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scheduler.lua
(root,18356,2116,02:59:15,6566) /opt/Kaseya/AMBNTT09617760821768/extensions/lua scripts/scriptRunner.lua
(root,6336,664,00:00:00,6939) /sbin/getty -8 38400 tty1
(www-data,480904,115652,00:00:03,16301) /usr/sbin/apache2 -k start
(root,49020,2360,00:00:00,19535) CRON
(jec,4352,632,00:00:00,19543) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2012,00:00:00,19547) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(root,96076,21768,00:00:00,20072) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
(root,49020,2360,00:00:00,22490) CRON
(jec,4352,632,00:00:00,22496) /bin/sh -c /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7 1> /dev/null 2> /dev/null
(jec,27516,2008,00:00:00,22500) /usr/bin/wget -O /dev/null -T 0 http://www.jec.com.au/listmailpro/dailymail.php?pw=lmpdmpswd7
(www-data,464456,100972,00:00:00,23937) /usr/sbin/apache2 -k start
(www-data,478844,115388,00:00:01,25601) /usr/sbin/apache2 -k start
(root,0,0,00:00:09,25643) [flush-8:160]
(www-data,480900,115836,00:00:13,25665) /usr/sbin/apache2 -k start
(www-data,481156,116028,00:00:09,26953) /usr/sbin/apache2 -k start
(root,135604,70064,00:00:03,28214) /usr/sbin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock
(popuser,139016,73896,00:00:00,28215) spamd child
(popuser,135604,68728,00:00:00,28216) spamd child
(postfix,39572,2316,00:00:00,29243) pickup -l -t fifo -u -c
(www-data,480900,115700,00:00:05,31602) /usr/sbin/apache2 -k start
(www-data,471972,106808,00:00:04,31603) /usr/sbin/apache2 -k start
(www-data,480904,115736,00:00:07,31673) /usr/sbin/apache2 -k start
(root,14476,4244,00:00:01,31704) /usr/bin/atop -a -w /var/log/atop.log 600
(root,96076,21768,00:00:00,32727) /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Found on 2022-06-17 23:50

Create report

Leak detected by ApacheStatusHttpPlugin

No description available

IP: 223.252.6.6
Port: 80
URL: http://223.252.6.6/server-status

First seen 2021-07-05 09:34
Last seen 2022-07-14 05:38
Open for 373 days

Severity: medium
Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5e4d33612

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 14-Jul-2022 15:38:11 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 27
Server uptime:  135 days 1 hour 57 minutes 37 seconds
Total accesses: 587019 - Total Traffic: 411.5 MB
CPU Usage: u159.98 s15.07 cu.54 cs0 - .0015% CPU load
.0503 requests/sec - 36 B/second - 735 B/request
1 requests currently being processed, 9 idle workers
____W_._.___....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-27129230/291/48022_
5.53200.00.2733.76
143.198.136.88defaultHELP

1-2771340/623/45384_
12.46300.00.4231.56
143.198.136.88default\x16\x03\x01

2-27129260/274/46373_
3.26300.00.2033.27
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-27239160/256/49419_
4.11000.00.2235.98
143.198.136.88defaultGET /.DS_Store HTTP/1.1

4-27220900/537/47849W
10.38000.00.4833.21
143.198.136.88defaultGET /server-status HTTP/1.1

5-2748930/119/41452_
1.39100.00.1230.63
143.198.136.88defaultCONNECT leakix.net:443 HTTP/1.1

6-27-0/0/41160.
0.00188000.00.0029.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

7-27119430/779/39699_
13.72000.00.5928.25
143.198.136.88defaultGET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-di

8-27-0/0/38456.
11.03186300.00.0027.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-27220910/555/33641_
9.03000.00.4523.99
143.198.136.88defaultGET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e

10-27193100/9/29305_
0.02100.00.0021.33
143.198.136.88defaultPUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.

11-27193110/12/30278_
0.02100.00.0121.95
143.198.136.88defaultGET / HTTP/1.1

12-27-0/0/20047.
0.0116282400.00.0013.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-27-0/0/7926.
0.0116422900.00.005.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-27-0/0/4985.
15.302478300.00.003.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-27-0/0/6922.
0.0116422800.00.004.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-27-0/0/7656.
3.2313451300.00.004.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-27-0/0/9538.
12.74188300.00.006.36
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-27-0/0/3509.
8.335573200.00.002.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-27-0/0/4358.
3.9011829000.00.002.73
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-27-0/0/1794.
0.0016423700.00.000.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-27-0/0/2709.
0.0016423600.00.001.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-27-0/0/4540.
0.0016423500.00.003.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-27-0/0/872.
0.0016423400.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-27-0/0/3209.
0.0016423300.00.002.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-26-0/0/1921.
0.0138717300.00.001.37
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-26-0/0/254.
0.0138729000.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-26-0/0/783.
0.0138735800.00.000.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-26-0/0/315.
0.0138734000.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-26-0/0/238.
0.0038736200.00.000.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-27-0/0/1295.
19.1616473900.00.000.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-26-0/0/517.
0.0138724400.00.000.27
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-26-0/0/246.
0.0138734400.00.000.07
152.32.214.157defaultNULL

33-26-0/0/613.
0.0138733800.00.000.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-26-0/0/215.
0.0038736000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-22-0/0/208.
0.08208942100.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-23-0/0/978.
4.40196105300.00.000.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-22-0/0/220.
0.10208936800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-22-0/0/296.
0.17208936600.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-23-0/0/1674.
18.46180784900.00.001.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-22-0/0/2270.
5.58203128300.00.001.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-22-0/0/285.
0.12208937100.00.000.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-22-0/0/923.
5.38203128400.00.000.45
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-22-0/0/203.
0.10208941000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-22-0/0/203.
0.10208941300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-22-0/0/210.
0.09208936000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-22-0/0/203.
0.10208941200.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-22-0/0/203.
0.10208940800.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-22-0/0/203.
0.10208940600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-22-0/0/478.
5.54203128500.00.000.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-22-0/0/190.
0.10208936300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-22-0/0/203.
0.12208940300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-22-0/0/203.
0.09208939000.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-22-0/0/219.
0.11208935900.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-22-0/0/220.
0.11208937400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-22-0/0/187.
0.08208937600.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-22-0/0/119.
0.09208935400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-22-0/0/116.
0.06208939600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-22-0/0/103.
0.05208940000.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-22-0/0/103.
0.05208938000.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-22-0/0/103.
0.05208939500.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-22-0/0/103.
0.06208938900.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-22-0/0/89.
0.04208935500.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-22-0/0/102.
0.05208938300.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-22-0/0/16.
0.01208938500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-22-0/0/1.
0.00208943100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-22-0/0/1.
0.01208943000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-22-0/0/1.
0.01208942900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-22-0/0/1.
0.00208942800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-22-0/0/1.
0.00208942700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-22-0/0/1.
0.00208942600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-22-0/0/1.
0.00208942500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-22-0/0/99.
0.07208938600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

73-22-0/0/102.
0.06208936200.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

74-22-0/0/102.
0.05208939200.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

75-22-0/0/100.
0.05208939300.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

76-22-0/0/102.
0.05208939400.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

77-22-0/0/102.
0.05208939800.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

78-22-0/0/1.
0.00208942400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

79-22-0/0/102.
0.07208939700.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

80-22-0/0/1.
0.00208942300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

81-22-0/0/1.
0.00208942200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

82-22-0/0/84.
0.04208938800.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

83-22-0/0/83.
0.05208937200.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 501total sessions expired since starting: 501total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 305 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-07-14 05:38

Severity: medium
Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5c34be828

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 28-Apr-2022 13:34:39 AEST
Restart Time: Tuesday, 01-Mar-2022 13:40:34 AEST
Parent Server Generation: 10
Server uptime:  57 days 23 hours 54 minutes 4 seconds
Total accesses: 246874 - Total Traffic: 164.6 MB
CPU Usage: u140.76 s12.57 cu.31 cs0 - .00307% CPU load
.0493 requests/sec - 34 B/second - 699 B/request
1 requests currently being processed, 9 idle workers
_._W____..._....._...._.........................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-10123780/645/21011_
12.483000.00.4914.08
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

1-10-0/0/19704.
0.477894200.00.0012.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-10160570/462/19994_
9.38100.00.3613.49
143.198.136.88defaultGET / HTTP/1.1

3-1013380/481/21433W
8.14000.00.4914.49
143.198.136.88defaultGET /server-status HTTP/1.1

4-10119160/353/19612_
6.09100.00.2612.97
143.198.136.88defaultPUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.

5-1029400/1764/17828_
30.61100.01.3712.06
143.198.136.88defaultHELP

6-10155320/399/17215_
5.76200.00.2911.75
143.198.136.88default\x16\x03\x01

7-1086850/402/15020_
8.36000.00.2810.14
143.198.136.88defaultGET /.DS_Store HTTP/1.1

8-10-0/0/17396.
0.009194700.00.0011.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-10-0/0/13390.
0.009194400.00.008.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-10-0/0/12701.
3.6312010900.00.008.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-1096630/689/16244_
13.96400.00.6110.83
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

12-10-0/0/9481.
20.4915091700.00.006.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-10-0/0/3333.
4.059941200.00.002.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-10-0/0/1116.
1.3613341000.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-10-0/0/3913.
1.5013823900.00.002.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-10-0/0/4960.
4.449753900.00.003.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-1096680/847/3421_
13.73000.00.652.24
143.198.136.88defaultCONNECT leakix.net:443 HTTP/1.1

18-10-0/0/1944.
0.0115092500.00.001.16
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-10-0/0/1361.
0.0115092600.00.000.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-10-0/0/681.
0.0115093100.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-10-0/0/2058.
0.0015093000.00.001.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-1096730/710/1724_
9.20000.00.641.32
143.198.136.88defaultGET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e

23-10-0/0/479.
0.0015092900.00.000.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-10-0/0/18.
0.0015092800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-10-0/0/8.
0.0015092700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-4-0/0/7.
0.00318199000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-4-0/0/7.
0.00318198900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-4-0/0/7.
0.01318197900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-4-0/0/31.
0.01318197700.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-4-0/0/17.
0.00318198800.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-4-0/0/303.
0.01318197400.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-2-0/0/38.
0.00356489100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-2-0/0/389.
0.00356489000.00.000.25
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-2-0/0/8.
0.01356488900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-2-0/0/3.
0.00356488800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-2-0/0/3.
0.00356488700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-2-0/0/3.
0.00356488600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-2-0/0/5.
0.00356488500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-2-0/0/4.
0.00356488400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-2-0/0/4.
0.00356488300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 525total sessions expired since starting: 525total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 364 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2022-04-28 03:34

Severity: medium
Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea553d8731c

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 14-Dec-2021 05:32:56 AEST
Restart Time: Thursday, 28-Oct-2021 09:35:55 AEST
Parent Server Generation: 8
Server uptime:  46 days 19 hours 57 minutes
Total accesses: 210317 - Total Traffic: 148.9 MB
CPU Usage: u278.72 s20.45 cu.04 cs0 - .00739% CPU load
.052 requests/sec - 38 B/second - 742 B/request
1 requests currently being processed, 9 idle workers
_____.__W_._....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-8206710/96/18099_
3.65400.00.0413.20
161.35.86.181default\x16\x03\x01

1-8223420/209/16145_
6.89000.00.1411.85
161.35.86.181defaultGET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e

2-8274270/996/15392_
28.74200.00.6710.75
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

3-897520/30/14429_
0.80200.00.0310.04
161.35.86.181defaultGET / HTTP/1.1

4-8282270/830/13355_
29.52200.00.479.21
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

5-8-0/0/11502.
14.99586900.00.008.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-8145520/437/14323_
16.43000.00.359.74
161.35.86.181defaultGET /.DS_Store HTTP/1.1

7-8274290/888/13270_
24.70300.00.579.75
161.35.86.181defaultHELP

8-8274300/962/14816W
36.13000.00.6110.46
161.35.86.181defaultGET /server-status HTTP/1.1

9-8146130/402/9178_
14.58100.00.286.33
118.123.105.67defaultNULL

10-8-0/0/11249.
0.01585200.00.007.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-8274260/979/10397_
27.50100.00.547.04
161.35.86.181defaultCONNECT leakix.net:443 HTTP/1.1

12-7-0/0/6431.
5.3016765900.00.004.67
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

13-7-0/0/6207.
6.4517334800.00.004.52
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-7-0/0/7286.
0.0042369100.00.005.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-7-0/0/2078.
0.0063017100.00.001.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-7-0/0/7632.
9.7454894900.00.005.19
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-6-0/0/2052.
4.56108479500.00.001.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-6-0/0/3850.
23.2686473000.00.002.85
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-6-0/0/2355.
18.9088282200.00.001.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-6-0/0/2029.
24.9486472900.00.001.55
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-6-0/0/2531.
0.00108480400.00.001.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-6-0/0/90.
0.00108480200.00.000.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-6-0/0/1295.
0.00108480500.00.000.92
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-6-0/0/796.
0.00108480300.00.000.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-4-0/0/3330.
2.13189367800.00.002.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-4-0/0/200.
0.01190687400.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 333total sessions expired since starting: 333total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 259 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2021-12-13 19:32

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea53cc93661

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Wednesday, 14-Jul-2021 22:47:06 AEST
Restart Time: Wednesday, 14-Jul-2021 14:51:37 AEST
Parent Server Generation: 0
Server uptime:  7 hours 55 minutes 28 seconds
Total accesses: 3154 - Total Traffic: 24.5 MB
CPU Usage: u38.22 s4.17 cu.05 cs0 - .149% CPU load
.111 requests/sec - 901 B/second - 8.0 kB/request
1 requests currently being processed, 9 idle workers
.________W._....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-0-0/0/283.
4.41257200.00.002.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-0179320/240/296_
3.9044810.01.361.94
75.119.200.127jeddartchambers.com.auPOST /wp-login.php HTTP/1.1

2-0213160/48/263_
0.95100.00.091.23
161.35.86.181defaultGET /api/search?folderIds=0 HTTP/1.1

3-065030/122/330_
3.342600.00.962.86
161.35.86.181defaultHELP

4-0289020/23/217_
0.54300.00.041.94
161.35.86.181defaultCONNECT leakix.net:443 HTTP/1.1

5-0212320/66/227_
1.062700.00.150.97
161.35.86.181default\x16\x03\x01

6-0200050/62/269_
1.351500.00.120.77
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

7-080390/125/306_
3.73172010.00.792.39
207.46.13.82emicindustries.com.auGET /home.php?cat=249&&sort=price&sort_direction=0 HTTP/1.1

8-0204100/64/103_
1.451500.02.482.87
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

9-0151020/273/274W
11.50000.02.362.36
161.35.86.181defaultGET /server-status HTTP/1.1

10-0-0/0/181.
3.95731000.00.001.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-0255220/173/176_
4.292600.01.801.80
161.35.86.181defaultGET / HTTP/1.1

12-0-0/0/48.
0.00731200.00.000.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-0-0/0/88.
1.072263500.00.001.09
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-0-0/0/1.
0.012389500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-0-0/0/1.
0.002390300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-0-0/0/1.
0.002390200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-0-0/0/88.
0.901794600.00.000.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-0-0/0/1.
0.002390100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-0-0/0/1.
0.002389900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 1

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)


PidActiveIdleAccessesState
97517171Ready


Active and Idle are time active and time since
last request, in seconds.



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 0subcaches: 32, indexes per subcache: 133index usage: 0%, cache usage: 0%total sessions stored since starting: 135total sessions expired since starting: 135total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 1 hit, 49 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2021-07-14 12:46

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea575c53807

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Monday, 05-Jul-2021 19:34:21 AEST
Restart Time: Monday, 31-May-2021 13:14:10 AEST
Parent Server Generation: 5
Server uptime:  35 days 6 hours 20 minutes 10 seconds
Total accesses: 421410 - Total Traffic: 2.9 GB
CPU Usage: u68.44 s7.03 cu0 cs0 - .00248% CPU load
.138 requests/sec - 1015 B/second - 7.2 kB/request
2 requests currently being processed, 8 idle workers
.__WW____....._..._.............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-5-0/0/35621.
0.00601800.00.00249.26
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

1-5166740/296/35016_
9.62300.02.82237.35
161.35.188.242defaultCONNECT leakix.net:443 HTTP/1.1

2-5138860/99/33029_
5.9012460.00.72220.00
35.227.106.252recyclingshower.com.auGET /about/the-company/ HTTP/1.0

3-569757/156/34173W
2.74001.52.42206.63
161.35.188.242defaultGET /server-status HTTP/1.1

4-527150/159/31077W
3.91000.06.77224.41
46.4.40.172recyclingshower.com.auGET /wp-includes/lfx.php HTTP/1.1

5-5236620/235/30697_
3.6163610.01.90226.57
46.4.40.172recyclingshower.com.auGET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1

6-5162960/290/31036_
12.87304130.02.12232.72
46.4.40.172recyclingshower.com.auGET /wp-content/wp-old-index.php?action=login&pass=-1&submit= H

7-586070/117/28830_
2.95192650.00.92199.05
46.4.40.172recyclingshower.com.auGET /legion.php HTTP/1.1

8-5314210/171/24353_
5.07203070.01.78182.08
46.4.40.172recyclingshower.com.auGET /wp-content/plugins/wpconfig.bak.php?act=sf HTTP/1.1

9-5-0/0/24215.
0.00600900.00.00166.60
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-5-0/0/23874.
3.411465800.00.00160.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-5-0/0/18716.
0.002457000.00.00139.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-5-0/0/15173.
0.002456900.00.00114.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-5-0/0/11258.
0.002456800.00.0075.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-5135520/342/7173_
7.9103930.05.0260.48
35.227.106.252recyclingshower.com.auGET /about-cintep/the-company/ HTTP/1.0

15-5-0/0/5620.
0.052278900.00.0043.53
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-5-0/0/6274.
1.822456700.00.0034.31
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-5-0/0/3973.
0.022775300.00.0028.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-5131810/321/4786_
8.843100.04.6635.19
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

19-5-0/0/3372.
0.342709400.00.0025.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-5-0/0/1168.
0.012775000.00.0011.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-5-0/0/1644.
0.002776300.00.0011.65
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-5-0/0/689.
0.002776200.00.003.39
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-5-0/0/2504.
0.002776100.00.0010.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-5-0/0/786.
0.002776000.00.001.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-5-0/0/403.
0.002794900.00.003.93
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-5-0/0/33.
0.002794800.00.000.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-4-0/0/24.
0.0129805000.00.002.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-4-0/0/27.
0.0129805400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-4-0/0/498.
1.2629123400.00.001.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-4-0/0/153.
0.0129805100.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-4-0/0/545.
0.0129804500.00.003.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-4-0/0/1155.
0.0129805500.00.0011.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-4-0/0/14.
0.0129804700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-4-0/0/55.
0.0229804300.00.002.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-4-0/0/419.
0.0129804800.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-4-0/0/139.
0.0129804200.00.001.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-4-0/0/99.
0.0129805200.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-4-0/0/201.
0.0129805300.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-4-0/0/16.
0.0129803900.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-4-0/0/702.
0.0129804600.00.005.42
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-4-0/0/57.
0.0129809500.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-4-0/0/41.
0.0129804100.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-4-0/0/157.
0.0129809700.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-4-0/0/588.
0.0029809600.00.004.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-4-0/0/9.
0.0129809400.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-4-0/0/9.
0.0029809300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-4-0/0/9.
0.0129803700.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-4-0/0/9.
0.0029809200.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-4-0/0/8.
0.0029809100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-4-0/0/123.
0.0029809000.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-4-0/0/214.
0.0029808900.00.001.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-4-0/0/6.
0.0129808800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-4-0/0/4.
0.0029808700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-4-0/0/6.
0.0029808600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-4-0/0/179.
1.0429394000.00.000.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-4-0/0/53.
1.5429393900.00.000.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-4-0/0/27.
1.3429492900.00.000.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-4-0/0/3.
0.0029808500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-4-0/0/5.
0.0129808410.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-4-0/0/4.
0.0129803800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-4-0/0/4.
0.0029808300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-4-0/0/3.
0.0029808200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-4-0/0/4.
0.0029808100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-4-0/0/49.
0.9829372500.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-4-0/0/5.
0.0029808000.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-4-0/0/268.
0.0129803600.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-4-0/0/4.
0.0029807900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-4-0/0/5.
0.0029807800.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-4-0/0/4.
0.0029807700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-4-0/0/4.
0.0029807600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-4-0/0/5.
0.0029807500.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-4-0/0/4.
0.0129807400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 3subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 189 seconds, (range: 108...232)index usage: 0%, cache usage: 0%total sessions stored since starting: 519total sessions expired since starting: 516total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 287 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 80

Found on 2021-07-05 09:34

Create report

Leak detected by ApacheStatusHttpPlugin

No description available

IP: 223.252.6.6
Port: 8443
URL: https://223.252.6.6:8443/server-status

First seen 2021-07-13 02:16
Last seen 2021-07-16 14:42
Open for 3 days

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5bcaed3af

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 17-Jul-2021 00:43:00 AEST
Restart Time: Wednesday, 14-Jul-2021 14:51:37 AEST
Parent Server Generation: 0
Server uptime:  2 days 9 hours 51 minutes 22 seconds
Total accesses: 23156 - Total Traffic: 151.1 MB
CPU Usage: u39.5 s4.1 cu.08 cs0 - .021% CPU load
.111 requests/sec - 760 B/second - 6.7 kB/request
1 requests currently being processed, 9 idle workers
_W___.__..__..._................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-078040/191/2091_
1.82200.00.2112.82
167.99.133.28default-223_252_6_6GET /v2/_catalog HTTP/1.1

1-03670/355/1912W
6.23000.01.2210.98
167.99.133.28default-223_252_6_6GET /server-status HTTP/1.1

2-078050/175/1915_
1.96600.00.2010.84
167.99.133.28default-223_252_6_6GET /.json HTTP/1.1

3-011210/353/2034_
5.632000.02.8414.45
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

4-0119270/154/1823_
0.901000.00.0810.22
167.99.133.28default-223_252_6_6GET /info.php HTTP/1.1

5-0-0/0/1693.
0.01432500.00.007.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

6-0165990/95/1897_
1.113300.00.0912.11
54.36.148.67defaultGET / HTTP/1.1

7-0291180/400/2002_
7.961700.00.7513.20
167.99.133.28default-223_252_6_6GET /idx_config/ HTTP/1.1

8-0-0/0/1413.
0.01432300.00.0012.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

9-0-0/0/1659.
5.38432400.00.0013.97
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-0185550/446/1186_
7.67800.02.478.59
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

11-078060/182/1554_
1.511300.00.2310.58
167.99.133.28default-223_252_6_6GET /telescope/requests HTTP/1.1

12-0-0/0/408.
0.00901400.00.004.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-0-0/0/720.
0.00901300.00.002.67
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-0-0/0/319.
0.00901200.00.001.88
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-063130/179/227_
3.52800.02.362.38
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

16-0-0/0/206.
0.01901100.00.001.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-0-0/0/93.
0.00901000.00.000.54
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-0-0/0/2.
0.00900900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-0-0/0/2.
0.00900800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 6subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 288 seconds, (range: 280...298)index usage: 0%, cache usage: 0%total sessions stored since starting: 1028total sessions expired since starting: 1022total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 1 hit, 440 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 443

Found on 2021-07-16 14:42

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5eb2e6757

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 13-Jul-2021 12:17:06 AEST
Restart Time: Monday, 31-May-2021 13:14:10 AEST
Parent Server Generation: 6
Server uptime:  42 days 23 hours 2 minutes 55 seconds
Total accesses: 497511 - Total Traffic: 3.3 GB
CPU Usage: u65.2 s7.45 cu.06 cs0 - .00196% CPU load
.134 requests/sec - 950 B/second - 6.9 kB/request
6 requests currently being processed, 6 idle workers
_K__W_KKKK.__...................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-6154890/90/42357_
4.09100.00.65283.73
167.71.13.196default-223_252_6_6GET /v2/_catalog HTTP/1.1

1-62065214/60/41508K
2.3781119.61.49272.85
119.17.52.6recyclingshower.com.auGET /wp-content/themes/Karma/images/skins/secondary-teal-grey/b

2-6242520/5/39000_
0.57500.00.09256.02
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-6256200/2/40065_
0.01400.00.00235.95
167.71.13.196default-223_252_6_6GET /info.php HTTP/1.1

4-6256210/0/36860W
0.00000.00.00258.54
167.71.13.196default-223_252_6_6GET /server-status HTTP/1.1

5-6176730/69/36672_
1.99500.00.55263.60
119.17.52.6defaultNULL

6-62242211/24/36878K
0.0480208.80.21261.39
119.17.52.6recyclingshower.com.auGET /wp-content/themes/Karma/images/skins/secondary-teal-grey/b

7-6246771/233/33773K
6.3185614.11.01228.97
119.17.52.6recyclingshower.com.auGET /wp-content/uploads/2013/04/staff-matt_small.jpg HTTP/1.1

8-6161238/101/29652K
3.5690249.90.92213.54
119.17.52.6recyclingshower.com.auGET /wp-content/themes/Karma/images/skins/secondary-teal-grey/b

9-62242310/34/28698K
0.0980370.10.45189.36
119.17.52.6recyclingshower.com.auGET /wp-content/themes/Karma/images/_global/global-sprite-color

10-6-0/0/29309.
7.55170600.00.00190.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-696070/117/22872_
1.81600.00.45162.63
167.71.13.196default-223_252_6_6GET /config.json HTTP/1.1

12-696080/130/17859_
7.7484770.00.83124.88
119.17.52.6recyclingshower.com.auGET /wp-admin/admin-ajax.php?action=wordfence_logHuman&hid=555F

13-6-0/0/12093.
0.01466400.00.0081.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-6-0/0/8845.
3.03152200.00.0066.78
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-6-0/0/6860.
0.01466200.00.0051.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-6-0/0/6769.
0.01466300.00.0037.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-6-0/0/4434.
0.01916400.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-6-0/0/5044.
2.069569800.00.0035.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-6-0/0/3504.
5.239569610.00.0026.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-6-0/0/1258.
6.109569200.00.0011.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-5-0/0/1763.
0.0321796000.00.0011.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-5-0/0/725.
0.1021798000.00.003.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-5-0/0/2627.
0.2721796100.00.0011.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-6-0/0/1308.
4.0217552200.00.004.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-5-0/0/458.
0.0121800900.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-5-0/0/48.
0.0121798200.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-5-0/0/28.
0.3242801900.00.002.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-5-0/0/31.
0.3142801400.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-5-0/0/502.
0.3942802300.00.001.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-5-0/0/156.
0.7542799600.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-5-0/0/549.
0.4242802100.00.003.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-5-0/0/1159.
0.3842803000.00.0011.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-5-0/0/18.
0.3942802700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-5-0/0/59.
0.3742801300.00.002.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-5-0/0/422.
0.7042800900.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-5-0/0/142.
0.7442800700.00.001.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-5-0/0/102.
0.7242799500.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-5-0/0/205.
0.3342802200.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-5-0/0/20.
0.3742801700.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-5-0/0/731.
1.1742387600.00.005.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-5-0/0/59.
0.3442802900.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-5-0/0/43.
0.3742802400.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-5-0/0/159.
0.3342803300.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-5-0/0/590.
0.3742801800.00.004.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-5-0/0/11.
0.3842803210.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-5-0/0/11.
0.3742802600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-5-0/0/11.
0.0342803900.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-5-0/0/11.
0.3742803100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-5-0/0/10.
0.3842801500.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-5-0/0/125.
0.4042802800.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-5-0/0/216.
0.3042801600.00.001.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-5-0/0/7.
0.0042806200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-5-0/0/6.
0.0142803800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-5-0/0/7.
0.0042805900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-5-0/0/180.
0.0042806000.00.000.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-5-0/0/55.
0.0142803700.00.000.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-5-0/0/28.
0.0142806100.00.000.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-5-0/0/4.
0.0042805800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-5-0/0/6.
0.0042805700.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-5-0/0/6.
0.0142803600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-5-0/0/5.
0.0142805200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-5-0/0/4.
0.0142805600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-5-0/0/6.
0.0142803400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-5-0/0/51.
0.0142803500.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-5-0/0/6.
0.0042805500.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-5-0/0/269.
0.0142805400.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-5-0/0/5.
0.0042805300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-5-0/0/6.
0.0042805100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-5-0/0/5.
0.0042805000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-5-0/0/5.
0.0042804900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-5-0/0/110.
1.7242021200.00.000.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-5-0/0/5.
0.0042804700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

73-5-0/0/1.
0.0142804810.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

74-5-0/0/118.
2.8441899400.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

75-5-0/0/1.
0.0042804600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

76-5-0/0/1.
0.0042804500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

77-5-0/0/1.
0.0042804400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

78-5-0/0/1.
0.0142804210.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

79-5-0/0/1.
0.0142804300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

80-5-0/0/1.
0.0042804100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

81-5-0/0/1.
0.0042804000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 1

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)


PidActiveIdleAccessesState
2561831243Ready


Active and Idle are time active and time since
last request, in seconds.



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 13subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 267 seconds, (range: 219...299)index usage: 0%, cache usage: 0%total sessions stored since starting: 975total sessions expired since starting: 962total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 490 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 443

Found on 2021-07-13 02:16

Create report

Leak detected by ApacheStatusHttpPlugin

No description available

IP: 223.252.6.6
Port: 443
URL: https://223.252.6.6/server-status

First seen 2021-06-25 20:26
Last seen 2021-07-12 14:36
Open for 16 days

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5d1db83d5

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Tuesday, 13-Jul-2021 00:36:49 AEST
Restart Time: Monday, 31-May-2021 13:14:10 AEST
Parent Server Generation: 6
Server uptime:  42 days 11 hours 22 minutes 38 seconds
Total accesses: 493100 - Total Traffic: 3.3 GB
CPU Usage: u123.98 s11.62 cu0 cs0 - .0037% CPU load
.134 requests/sec - 956 B/second - 7.0 kB/request
1 requests currently being processed, 9 idle workers
__.___W__.__....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-6126840/281/41958_
8.23200.04.87282.18
54.245.195.184holisticinfrastructuresolutionsGET / HTTP/1.1

1-613750/104/41107_
5.44215750.00.29270.42
5.188.48.10recyclingshower.com.auGET /commercial/ HTTP/1.0

2-6-0/0/38806.
0.01515100.00.00255.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

3-6100260/325/39666_
6.80100.01.32234.44
143.198.136.88default-223_252_6_6HELP

4-6324780/185/36615_
3.75200.01.53257.64
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

5-6192940/199/36284_
5.9736750.01.48262.14
5.34.180.192recyclingshower.com.auGET / HTTP/1.1

6-6183190/252/36577W
8.23000.01.35260.33
143.198.136.88default-223_252_6_6GET /server-status HTTP/1.1

7-6202730/170/33401_
4.68110.00.50227.81
17.121.114.93defaultNULL

8-6184980/281/29276_
10.12100.02.17211.89
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

9-6-0/0/28414.
2.10487200.00.00188.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-636950/376/29018_
5.77000.03.72189.86
54.36.149.10ascotflorist.com.auGET /page008.html HTTP/1.1

11-6173250/40/22617_
0.76300.00.17161.62
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

12-6-0/0/17484.
1.343379100.00.00122.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-6-0/0/12054.
2.193077500.00.0081.08
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

14-6-0/0/8766.
4.383098000.00.0066.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-6-0/0/6854.
6.224937700.00.0051.04
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-6-0/0/6763.
4.144754200.00.0037.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-6-0/0/4433.
21.962207700.00.0031.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-6-0/0/5044.
2.065368000.00.0035.82
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-6-0/0/3504.
5.235367810.00.0026.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-6-0/0/1258.
6.105367400.00.0011.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-5-0/0/1763.
0.0317594300.00.0011.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-5-0/0/725.
0.1017596300.00.003.58
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-5-0/0/2627.
0.2717594400.00.0011.84
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-6-0/0/1308.
4.0213350400.00.004.89
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-5-0/0/458.
0.0117599200.00.004.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-5-0/0/48.
0.0117596500.00.000.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-5-0/0/28.
0.3238600100.00.002.24
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-5-0/0/31.
0.3138599600.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-5-0/0/502.
0.3938600500.00.001.86
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-5-0/0/156.
0.7538597800.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-5-0/0/549.
0.4238600300.00.003.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-5-0/0/1159.
0.3838601200.00.0011.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-5-0/0/18.
0.3938600900.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-5-0/0/59.
0.3738599500.00.002.46
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-5-0/0/422.
0.7038599100.00.002.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-5-0/0/142.
0.7438598900.00.001.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-5-0/0/102.
0.7238597700.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-5-0/0/205.
0.3338600400.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-5-0/0/20.
0.3738599900.00.000.07
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-5-0/0/731.
1.1738185900.00.005.44
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-5-0/0/59.
0.3438601100.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-5-0/0/43.
0.3738600600.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-5-0/0/159.
0.3338601500.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-5-0/0/590.
0.3738600000.00.004.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-5-0/0/11.
0.3838601410.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-5-0/0/11.
0.3738600800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-5-0/0/11.
0.0338602100.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-5-0/0/11.
0.3738601300.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-5-0/0/10.
0.3838599700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-5-0/0/125.
0.4038601000.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-5-0/0/216.
0.3038599800.00.001.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-5-0/0/7.
0.0038604400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-5-0/0/6.
0.0138602000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-5-0/0/7.
0.0038604100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-5-0/0/180.
0.0038604200.00.000.95
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-5-0/0/55.
0.0138601900.00.000.13
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-5-0/0/28.
0.0138604300.00.000.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-5-0/0/4.
0.0038604000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-5-0/0/6.
0.0038603900.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-5-0/0/6.
0.0138601800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-5-0/0/5.
0.0138603400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-5-0/0/4.
0.0138603800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-5-0/0/6.
0.0138601600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-5-0/0/51.
0.0138601700.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-5-0/0/6.
0.0038603700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-5-0/0/269.
0.0138603600.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-5-0/0/5.
0.0038603500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-5-0/0/6.
0.0038603300.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-5-0/0/5.
0.0038603200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-5-0/0/5.
0.0038603100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-5-0/0/110.
1.7237819400.00.000.90
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-5-0/0/5.
0.0038602900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

73-5-0/0/1.
0.0138603010.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

74-5-0/0/118.
2.8437697700.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

75-5-0/0/1.
0.0038602800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

76-5-0/0/1.
0.0038602700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

77-5-0/0/1.
0.0038602600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

78-5-0/0/1.
0.0138602410.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

79-5-0/0/1.
0.0138602500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

80-5-0/0/1.
0.0038602300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

81-5-0/0/1.
0.0038602200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 7subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 211 seconds, (range: 165...240)index usage: 0%, cache usage: 0%total sessions stored since starting: 719total sessions expired since starting: 712total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 0 hit, 386 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 443

Found on 2021-07-12 14:36

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea5ea8c0b43

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Thursday, 01-Jul-2021 06:17:26 AEST
Restart Time: Monday, 31-May-2021 13:14:10 AEST
Parent Server Generation: 4
Server uptime:  30 days 17 hours 3 minutes 15 seconds
Total accesses: 361405 - Total Traffic: 2.5 GB
CPU Usage: u193.46 s16.4 cu.02 cs0 - .00791% CPU load
.136 requests/sec - 1026 B/second - 7.4 kB/request
1 requests currently being processed, 9 idle workers
______W._.._._..................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-49440/221/30674_
7.46255540.00.61217.33
35.185.54.243jeddartchambers.com.auGET /comments/feed/ HTTP/1.0

1-4318510/45/30762_
1.733600.00.16218.88
127.0.0.1web1.ambient-it.com.auGET /server-status?auto HTTP/1.1

2-4170970/100/28597_
3.133600.00.20194.39
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-4280080/454/28932_
15.33122120.01.39178.34
54.36.148.2recyclingshower.com.auGET / HTTP/1.1

4-4318540/51/26251_
1.894000.00.08192.69
161.35.188.242default-223_252_6_6GET / HTTP/1.1

5-4218780/95/26242_
3.224200.00.23203.21
161.35.188.242default-223_252_6_6HELP

6-4271030/69/26934W
3.03000.00.10205.29
161.35.188.242default-223_252_6_6GET /server-status HTTP/1.1

7-4-0/0/24833.
5.40866900.00.00177.68
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-410280/230/19954_
6.23000.00.95145.67
135.181.111.3defaultGET /.git/config HTTP/1.1

9-4-0/0/21390.
5.84608300.00.00152.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

10-4-0/0/19514.
5.99866800.00.00142.40
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

11-4271040/80/15902_
2.44100.00.34123.03
193.107.216.238default-223_252_6_6GET //a2billing/customer/templates/default/footer.tpl HTTP/1.1

12-4-0/0/12311.
0.01867000.00.00100.83
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-4271060/77/10593_
1.812800.02.3470.04
193.107.216.238default-223_252_6_21GET //a2billing/customer/templates/default/footer.tpl HTTP/1.1

14-4-0/0/5706.
0.01867400.00.0049.62
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-4-0/0/4545.
0.01867300.00.0036.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-4-0/0/5740.
0.01867200.00.0031.21
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

17-4-0/0/3394.
31.5926608700.00.0025.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-4-0/0/4338.
28.2326608400.00.0029.77
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-4-0/0/3328.
28.3026608500.00.0024.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-4-0/0/850.
0.0426606600.00.0010.57
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-4-0/0/1441.
0.0126609300.00.0010.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-4-0/0/642.
7.4626088400.00.002.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-4-0/0/1764.
0.0526607200.00.006.51
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-4-0/0/762.
0.0426607600.00.001.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-4-0/0/362.
0.0126609700.00.003.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-4-0/0/29.
0.0126609900.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-4-0/0/22.
0.0126610200.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-4-0/0/25.
0.0126609500.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-4-0/0/437.
0.0426607900.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-4-0/0/151.
0.0426606500.00.000.75
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-4-0/0/543.
0.0126610400.00.003.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-4-0/0/1153.
0.0426607500.00.0011.48
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-4-0/0/11.
0.0426607100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-4-0/0/52.
0.0126609200.00.002.41
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-4-0/0/415.
4.7026282100.00.002.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-4-0/0/136.
0.0426606200.00.001.30
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-4-0/0/97.
0.0426606900.00.000.14
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-4-0/0/199.
0.0126609000.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-4-0/0/11.
0.0126609600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-4-0/0/700.
19.2224965000.00.005.38
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-4-0/0/55.
0.0426607400.00.000.43
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-4-0/0/39.
0.0426607800.00.000.03
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-4-0/0/156.
0.0126609800.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-4-0/0/587.
16.4325168200.00.004.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-4-0/0/8.
0.0426606400.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-4-0/0/8.
0.0126610100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-4-0/0/7.
0.0426607300.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-4-0/0/8.
0.0426606700.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-4-0/0/7.
0.0426606800.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-4-0/0/122.
0.0126609100.00.001.22
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-4-0/0/213.
6.2926088300.00.001.35
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-4-0/0/5.
0.0026612300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-4-0/0/3.
0.0026612200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-4-0/0/5.
0.0026612100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-4-0/0/128.
3.2126294900.00.000.79
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-4-0/0/2.
0.0126612010.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-4-0/0/2.
0.0026611900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-4-0/0/2.
0.0026611800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-4-0/0/4.
0.0626606300.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-4-0/0/2.
0.0026611700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-4-0/0/3.
0.0026611600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-4-0/0/2.
0.0026611500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-4-0/0/3.
0.0026611400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-4-0/0/2.
0.0026611300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-4-0/0/4.
0.0426608300.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-4-0/0/266.
0.0026611200.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-4-0/0/3.
0.0026611100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-4-0/0/4.
0.0426608200.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-4-0/0/3.
0.0026611000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-4-0/0/3.
0.0026610900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-4-0/0/4.
0.0426608100.00.000.01
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-4-0/0/3.
0.0026610800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 13subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 93 seconds, (range: 67...299)index usage: 0%, cache usage: 0%total sessions stored since starting: 1742total sessions expired since starting: 1729total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 1 hit, 904 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 443

Found on 2021-06-30 20:17

Fingerprint: c72c1c3018e67f2f18e67f2f9d6971f19d6971f128b0dea528b0dea526d6784f

Apache Status

Apache Server Status for 223.252.6.6

Server Version: Apache/2.2.14 (Ubuntu) DAV/2 mod_fcgid/2.3.6 mod_jk/1.2.28 mod_python/3.3.1 Python/2.6.5 mod_ssl/2.2.14 OpenSSL/0.9.8k mod_perl/2.0.4 Perl/v5.10.1
Server Built: Mar  5 2015 18:10:23

Current Time: Saturday, 26-Jun-2021 06:27:02 AEST
Restart Time: Monday, 31-May-2021 13:14:10 AEST
Parent Server Generation: 3
Server uptime:  25 days 17 hours 12 minutes 51 seconds
Total accesses: 281211 - Total Traffic: 2.1 GB
CPU Usage: u56.47 s4.46 cu.05 cs0 - .00274% CPU load
.127 requests/sec - 1004 B/second - 7.8 kB/request
1 requests currently being processed, 9 idle workers
_._W.__.___.._.._...............................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-3194430/53/23964_
2.961000.00.17179.74
161.35.86.181default-223_252_6_6GET /.env HTTP/1.1

1-3-0/0/23815.
0.00202800.00.00181.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

2-3194460/54/22229_
0.631200.00.12161.35
127.0.0.1web1.ambient-it.com.au\x80g\x01\x03\x01

3-3190860/62/22398W
3.21000.00.07144.76
161.35.86.181default-223_252_6_6GET /server-status HTTP/1.1

4-3-0/0/21814.
0.00202700.00.00165.10
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

5-3199710/51/19827_
0.49100.00.04162.76
161.35.86.181default-223_252_6_6GET /.json HTTP/1.1

6-3276050/13/20709_
0.581200.00.00170.24
161.35.86.181default-223_252_6_6GET /config.json HTTP/1.1

7-3-0/0/20907.
1.91202900.00.00154.18
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

8-3199740/50/16427_
0.36300.00.03121.07
161.35.86.181default-223_252_6_6GET /info.php HTTP/1.1

9-3191710/65/16797_
1.44500.00.10118.83
161.35.86.181default-223_252_6_6GET /telescope/requests HTTP/1.1

10-3254970/210/16317_
6.05700.00.71122.16
161.35.86.181default-223_252_6_6GET /idx_config/ HTTP/1.1

11-3-0/0/12802.
0.01570600.00.00101.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

12-3-0/0/9860.
0.01570700.00.0082.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

13-3199770/44/7797_
0.05200.00.0551.74
161.35.86.181default-223_252_6_6GET / HTTP/1.1

14-3-0/0/4292.
0.32569000.00.0040.91
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

15-3-0/0/3658.
0.01570500.00.0030.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

16-3191760/68/3233_
2.06800.00.0823.92
161.35.86.181default-223_252_6_6GET /.git/config HTTP/1.1

17-3-0/0/1220.
0.01596500.00.0014.81
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

18-3-0/0/2476.
0.019483600.00.0023.59
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

19-3-0/0/1582.
5.667301000.00.0018.99
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

20-3-0/0/842.
0.009483500.00.0010.56
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

21-3-0/0/1433.
5.069482700.00.0010.49
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

22-3-0/0/417.
0.009483400.00.001.06
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

23-3-0/0/1756.
0.0012210800.00.006.50
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

24-3-0/0/753.
0.0112214500.00.001.72
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

25-3-0/0/357.
0.0112214100.00.003.63
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

26-3-0/0/24.
0.0112213900.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

27-3-0/0/17.
0.0112213800.00.002.23
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

28-3-0/0/20.
0.0112214300.00.000.05
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

29-3-0/0/430.
0.0112214000.00.001.61
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

30-3-0/0/145.
0.0112213700.00.000.74
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

31-3-0/0/538.
10.376932400.00.003.20
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

32-3-0/0/1147.
0.0112216000.00.0011.47
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

33-3-0/0/5.
0.0012216700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

34-3-0/0/5.
0.0012216600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

35-3-0/0/266.
0.0012216500.00.001.15
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

36-3-0/0/129.
0.0012216400.00.001.29
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

37-3-0/0/90.
0.0012216300.00.000.11
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

38-3-0/0/194.
0.0112216200.00.001.12
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

39-3-0/0/6.
0.0112213600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

40-3-0/0/5.
0.0012216100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

41-3-0/0/6.
0.0122759700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

42-1-0/0/33.
0.84154959300.00.000.02
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

43-1-0/0/153.
6.66154217400.00.001.28
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

44-1-0/0/3.
0.52155482800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

45-1-0/0/3.
0.53155483700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

46-1-0/0/3.
0.53155486000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

47-1-0/0/1.
0.00155489500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

48-1-0/0/3.
0.52155483200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

49-1-0/0/1.
0.00155489200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

50-1-0/0/3.
0.53155482900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

51-1-0/0/1.
0.00155489400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

52-1-0/0/3.
0.52155482700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

53-1-0/0/1.
0.00155489100.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

54-1-0/0/3.
0.54155483500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

55-1-0/0/1.
0.00155489300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

56-1-0/0/1.
0.00155488600.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

57-1-0/0/1.
0.00155489000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

58-1-0/0/1.
0.00155488400.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

59-1-0/0/1.
0.00155488900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

60-1-0/0/1.
0.00155488800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

61-1-0/0/2.
0.26155485300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

62-1-0/0/1.
0.00155488500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

63-1-0/0/2.
0.25155485200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

64-1-0/0/1.
0.00155488700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

65-1-0/0/2.
0.26155484900.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

66-1-0/0/265.
6.21153637400.00.001.64
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

67-1-0/0/2.
0.25155484300.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

68-1-0/0/2.
0.25155485000.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

69-1-0/0/2.
0.25155484700.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

70-1-0/0/2.
0.26155484800.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

71-1-0/0/2.
0.25155484200.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0

72-1-0/0/2.
0.25155484500.00.000.00
127.0.0.1web1.ambient-it.com.auOPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 1

Process: cgi_wrapper  (/var/www/cgi-bin/cgi_wrapper/cgi_wrapper)


PidActiveIdleAccessesState
3144534341Ready


Active and Idle are time active and time since
last request, in seconds.



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current sessions: 9subcaches: 32, indexes per subcache: 133time left on oldest entries' SSL sessions: avg: 291 seconds, (range: 285...299)index usage: 0%, cache usage: 0%total sessions stored since starting: 1934total sessions expired since starting: 1925total (pre-expiry) sessions scrolled out of the cache: 0total retrieves since starting: 2 hit, 1206 misstotal removes since starting: 0 hit, 0 miss


Apache Server at 223.252.6.6 Port 443

Found on 2021-06-25 20:26

Create report

Open service 223.252.6.6:80

2024-04-10 14:43

HTTP/1.1 200 OK
Date: Wed, 10 Apr 2024 14:43:11 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-04-10 by HttpPlugin

Create report

Open service 223.252.6.6:443 · quadbus.com.au

2024-04-02 05:35

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
Instead use the HTTPS scheme to access this URL, please.<br />
<blockquote>Hint: <a href="https://default-223_252_6_6/"><b>https://default-223_252_6_6/</b></a></blockquote></p>
<hr>
<address>Apache Server at default-223_252_6_6 Port 443</address>
</body></html>

Found 2024-04-02 by HttpPlugin

Create report

Open service 223.252.6.6:80 · quadbus.com.au

2024-04-02 05:35

HTTP/1.1 200 OK
Date: Tue, 02 Apr 2024 05:35:27 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-04-02 by HttpPlugin

Create report

Open service 223.252.6.6:80 · quadbus.com.au

2024-03-21 14:55

HTTP/1.1 200 OK
Date: Thu, 21 Mar 2024 14:55:56 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-21 by HttpPlugin

Create report

Open service 223.252.6.6:80

2024-03-21 10:32

HTTP/1.1 200 OK
Date: Thu, 21 Mar 2024 10:32:11 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-21 by HttpPlugin

Create report

Open service 223.252.6.6:8080

2024-03-11 03:59

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"1887-1332307200000"
Last-Modified: Wed, 21 Mar 2012 05:20:00 GMT
Content-Type: text/html
Content-Length: 1887
Date: Mon, 11 Mar 2024 03:59:28 GMT
Connection: close

Page title: Apache Tomcat

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
    <title>Apache Tomcat</title>
</head>

<body>
<h1>It works !</h1>

<p>If you're seeing this page via a web browser, it means you've setup Tomcat successfully. Congratulations!</p>
 
<p>This is the default Tomcat home page. It can be found on the local filesystem at: <code>/var/lib/tomcat6/webapps/ROOT/index.html</code></p>

<p>Tomcat6 veterans might be pleased to learn that this system instance of Tomcat is installed with <code>CATALINA_HOME</code> in <code>/usr/share/tomcat6</code> and <code>CATALINA_BASE</code> in <code>/var/lib/tomcat6</code>, following the rules from <code>/usr/share/doc/tomcat6-common/RUNNING.txt.gz</code>.</p>

<p>You might consider installing the following packages, if you haven't already done so:</p>

<p><b>tomcat6-docs</b>: This package installs a web application that allows to browse the Tomcat 6 documentation locally. Once installed, you can access it by clicking <a href="docs/">here</a>.</p>

<p><b>tomcat6-examples</b>: This package installs a web application that allows to access the Tomcat 6 Servlet and JSP examples. Once installed, you can access it by clicking <a href="examples/">here</a>.</p>

<p><b>tomcat6-admin</b>: This package installs two web applications that can help managing this Tomcat instance. Once installed, you can access the <a href="manager/html">manager webapp</a> and the <a href="host-manager/html">host-manager webapp</a>.<p>

<p>NOTE: For security reasons, using the manager webapp is restricted to users with role "manager". The host-manager webapp is restricted to users with role "admin". Users are defined in <code>/etc/tomcat6/tomcat-users.xml</code>.</p>

</body>
</html>

Found 2024-03-11 by HttpPlugin

Create report

Open service 223.252.6.6:80 · quadbus.com.au

2024-03-08 08:10

HTTP/1.1 200 OK
Date: Fri, 08 Mar 2024 08:11:17 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-08 by HttpPlugin

Create report

Open service 223.252.6.6:80

2024-03-08 04:59

HTTP/1.1 200 OK
Date: Fri, 08 Mar 2024 04:59:06 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-08 by HttpPlugin

Create report

Open service 223.252.6.6:80

2024-03-07 18:16

HTTP/1.1 200 OK
Date: Thu, 07 Mar 2024 18:16:21 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-07 by HttpPlugin

Create report

Open service 223.252.6.6:80 · quadbus.com.au

2024-03-07 12:32

HTTP/1.1 200 OK
Date: Thu, 07 Mar 2024 12:32:46 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-07 by HttpPlugin

Create report

Open service 223.252.6.6:443 · quadbus.com.au

2024-03-07 12:32

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
Instead use the HTTPS scheme to access this URL, please.<br />
<blockquote>Hint: <a href="https://default-223_252_6_6/"><b>https://default-223_252_6_6/</b></a></blockquote></p>
<hr>
<address>Apache Server at default-223_252_6_6 Port 443</address>
</body></html>

Found 2024-03-07 by HttpPlugin

Create report

Open service 223.252.6.6:80

2024-03-06 20:18

HTTP/1.1 200 OK
Date: Wed, 06 Mar 2024 20:18:58 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-06 by HttpPlugin

Create report

Open service 223.252.6.6:80

2024-03-02 13:12

HTTP/1.1 200 OK
Date: Sat, 02 Mar 2024 13:12:10 GMT
Server: Apache
Last-Modified: Wed, 06 Feb 2013 23:03:05 GMT
ETag: "1d050d-2476-4d516542bdc40"
Accept-Ranges: bytes
Content-Length: 9334
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Default Parallels Plesk Panel Page

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Default Parallels Plesk Panel Page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-Control" content="no-cache" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript">
//<![CDATA[
document.write('<script type="text/javascript" src="http://' + (location.hostname.indexOf(':')>=0?'['+location.hostname+']':location.hostname) + ':8880/javascript/promo-flags.js.php"></' + 'script>\n');
//]]>
</script>
</head>
<body>
<div class="page">
  <div class="header clear">
    <script type="text/javascript">
    //<![CDATA[
      if (window.product_copyrights) { document.write('<a class="company-logo" href="http://www.parallels.com">Parallels</a>'); }
    //]]>
    </script>
    <div class="header-area">
      <h1><a class="product-logo" href="http://www.parallels.com/products/panel/intro" title="Parallels Plesk Panel">Parallels Plesk Panel</a></h1>
      <span class="header-text">
        <script type="text/javascript">
        //<![CDATA[
        if (window.product_copyrights) {
          document.write('<a class="top-copyright" href="http://www.parallels.com">&copy; 1999-2011, Parallels<br />All rights reserved</a>');
        }
        //]]>
        </script>
      </span>
    </div>
  </div>
  <div id="body" class="clear">
    <div class="box">
      <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
      <div class="content">
        <div class="globe"></div>
        <div class="welcome">
          <h2>Web Server's Default Page</h2>
          <p><strong>This page is generated by <a href="http://www.parallels.com/products/panel/intro">Parallels Plesk Panel</a>, the leading hosting automation software. You see this page because there is no Web site at this address.</strong></p>
          <p>You can do the following:</p>
          <script type="text/javascript">
          //<![CDATA[
          document.write('<ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li>');
          if (window.plesk_promo.virtuozzo) {
            document.write('<li>Use <a href="http://www.parallels.com/en/virtuozzo/">Parallels Virtuozzo Containers</a> with Parallels Plesk Panel to set up domains (Web sites) in virtual dedicated servers. Using a number of virtual servers with Parallels Plesk Panel on a single machine allows for flexible management of your server\'s resources.</li></ul>');
          }
          document.write('</ul>');
          //]]>
          </script>
          <noscript>
            <ul><li>Create domains and set up Web hosting using Parallels Plesk Panel.</li></ul>
          </noscript>
        </div>
      </div>
    </div>

    <div class="new-to-parallels">
      <h3>New to <a href="http://www.parallels.com/intro">Parallels</a>?</h3>
      <div class="box">
        <em class="tl"></em><em class="tr"></em><em class="bl"></em><em class="br"></em>
        <div class="content">
          <p>Parallels is a worldwide leader in virtualization and automation software that optimizes computing for consumers, businesses, and Cloud services providers across all major hardware, operating systems, and virtualization platforms.</p>
          <p>For the Cloud, Parallels automation and virtualization software enables cloud services providers to rapidly and profitably deliver the widest range of cloud services that small businesses want and need. Our software includes key building blocks of cloud service delivery - self service control panels, billing, cloud service provisioning and virtualization. We enable the delivery of all types of services that small businesses need - shared web hosting and web applications, messaging and collaboration services, virtualized infrastructure services and

Found 2024-03-02 by HttpPlugin

Create report

Domain summary

quadbus.com.au 32

1 recorded