LeakIX - Host 3.171.214.81

Host 3.171.214.81

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

CloudFront

tcp/443 tcp/80

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 3.171.214.87
Domain: oakhill-login.cloudworkengine.net
Port: 443
URL: https://oakhill-login.cloudworkengine.net

First seen 2024-10-08 05:19
Last seen 2025-12-18 14:23
Open for 436 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c62d9293f4

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 14:24:04 UTC
Restart Time: Tuesday, 16-Dec-2025 06:39:08 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 7 hours 44 minutes 56 seconds
Server load: 0.64 0.66 0.68
Total accesses: 46567 - Total Traffic: 168.4 MB - Total Duration: 49328221
CPU Usage: u16 s11.12 cu0 cs0 - .0135% CPU load
.232 requests/sec - 879 B/second - 3791 B/request - 1059.3 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0420/893/893_
10.8742739231520.03.333.33
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-0420/923/923_
10.875565628511271970.03.153.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/760/760_
10.89187310497230.02.722.72
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85tVk

0-0420/970/970_
10.9058413792460.03.153.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/984/984_
10.87557013375110.03.403.40
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0420/852/852_
10.8831937222070.03.213.21
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOevk

0-0420/845/845_
10.891696004410492310.03.093.09
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/849/849_
10.90418210475010.03.153.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/881/881_
10.891647211180440.02.972.97
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/966/966_
10.90118411355340.03.153.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/897/897_
10.90137777193680.03.053.05
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/983/983_
10.88253689017590.03.553.55
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/860/860_
10.8740556999690.03.323.32
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-04241/930/930W
10.910088578892.13.403.40
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /server-status HTTP/1.1

0-0420/1018/1018_
10.8747858958600.03.893.89
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/852/852_
10.8835222413177660.03.293.29
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/996/996_
10.9065758224130.03.453.45
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/943/943_
10.87517308246130.03.573.57
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0420/991/991_
10.88267748211770.03.953.95
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/899/899_
10.87389788780000.03.423.42
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/1108/1108_
10.90876612303000.04.194.19
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/974/974_
10.882366003811340840.03.703.70
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/889/889_
10.8743956739750.03.423.42
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/898/898_
10.882107010108250.02.932.93
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/878/878_
10.88279410395460.03.263.26
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0430/869/869_
11.075496004212942670.03.053.05
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/923/923_
11.099937569510.03.563.56
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0430/975/975_
11.10657612998860.03.793.79
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/1038/1038_
11.09219411661350.03.273.27
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96rpNh

1-0430/1069/1069_
11.10527611596900.03.553.55
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/921/921_
11.083777611779700.03.493.49
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/937/937_
11.0753868806450.03.443.44
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0430/1050/1050_
11.092016004914426040.03.763.76
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/961/961_
11.08456737167700.03.703.70
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/832/832_
11.083087011509600.03.173.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/903/903_
11.0757845464050.03.433.43
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lj

1-0430/1003/1003_
11.08434878250250.03.493.49
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/994/994_
11.1077856147810.03.773.77
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/967/967_
11.092126004214509460.03.433.43
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/889/889_
11.082686004610393890.03.173.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/867/867_
11.0841856824510.03.043.04
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0430/874/874_
11.08286778767680.03.173.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/898/898_
11.0849944399690.03.113.11
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0430/971/971_
11.09238610569600.03.453.45
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0430/932/932_
11.09129211099110.03.353.35
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0430/899/899_
11.08399717345030.03.343.34
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/906/906_
11.0919521103589

Found on 2025-12-18 14:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c62fcd86a0

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 09:50:09 UTC
Restart Time: Tuesday, 16-Dec-2025 06:39:08 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 hours 11 minutes 1 second
Server load: 0.73 0.91 0.98
Total accesses: 2620 - Total Traffic: 9.7 MB - Total Duration: 2064637
CPU Usage: u.91 s.62 cu0 cs0 - .0133% CPU load
.229 requests/sec - 886 B/second - 3877 B/request - 788.029 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0420/65/65_
0.6027051267790.00.190.19
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/36/36_
0.593634836080.00.140.14
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/43/43_
0.62284430304030.00.130.13
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/51/51_
0.62160404630.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /api/graphql HTTP/1.1

0-0420/53/53_
0.5933051682760.00.170.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/65/65_
0.62662193231540.00.290.29
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/55/55_
0.62533113345040.00.170.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/61/61_
0.594363633620.00.290.29
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0420/40/40_
0.6239440050.00.160.16
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RU

0-0420/40/40_
0.59391108870500.00.160.16
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/58/58_
0.593900424000.00.280.28
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0420/37/37_
0.5942013194760.00.160.16
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/61/61_
0.62810248260.00.250.25
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0420/47/47_
0.602501815060.00.150.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0420/66/66_
0.592831684580.00.280.28
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0420/51/51_
0.60230390790.00.180.18
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-0420/48/48_
0.60210443070.00.160.16
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/56/56_
0.61194121131810.00.210.21
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/59/59_
0.61183459510.00.170.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0420/46/46_
0.611673162120.00.180.18
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0420/71/71_
0.611031558274250.00.260.26
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/31/31_
0.6115914270630.00.090.09
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/44/44_
0.611171523224940.00.210.21
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0420/47/47_
0.61137496183310.00.150.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0420/46/46_
0.61148049940.00.150.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0430/44/44_
0.5935141157210.00.150.15
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0430/73/73_
0.6022335758350.00.320.32
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c941c810dc291

1-0430/43/43_
0.593900797310.00.160.16
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

1-0430/52/52_
0.593803790520.00.170.17
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0430/52/52_
0.59286286990.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0430/44/44_
0.60250064170.00.240.24
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0430/76/76_
0.602053135360.00.290.29
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-0430/39/39_
0.60191369520.00.110.11
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0430/43/43_
0.6018145689130.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/35/35_
0.601613248380.00.120.12
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0430/31/31_
0.6015411189220.00.090.09
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/62/62_
0.621213120430.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0430/55/55_
0.601480330100.00.220.22
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0430/54/54_
0.621104121160.00.180.18
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tXU

1-0430/43/43_
0.621011549165790.00.140.14
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/53/53_
0.62792194219080.00.190.19
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/50/50_
0.62634344990.00.180.18
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0430/59/59_
0.62503105293480.00.210.21
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/61/61_
0.62294433429560.00.240.24
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0430/73/73_
0.6356354402830.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-04313/102/102W
0.63003194418.70.410.41
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /server-status HTTP/1.1

1-0430/55/55_
0.594234344550.00.200.20
127.0.0.1http/1.1ip-10-1-103-151.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

Found on 2025-12-16 09:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c636cb46ca

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 14-Dec-2025 05:12:41 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 days 7 hours 31 minutes 53 seconds
Server load: 0.64 0.64 0.73
Total accesses: 561862 - Total Traffic: 2.1 GB - Total Duration: 558428844
CPU Usage: u13.7 s22.45 cu174.06 cs103.33 - .0273% CPU load
.488 requests/sec - 1998 B/second - 4092 B/request - 993.89 ms/request
1 requests currently being processed, 49 idle workers
____W_____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0269380/320/9178_
3.54113386102385290.01.1236.69
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdp2

0-0269380/281/9441_
3.53489793616460.00.9437.36
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/352/9693_
3.5494688665500.01.2738.45
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/254/9006_
3.534549101938350.00.8135.16
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02693828/327/9469W
3.5500927382136.71.1337.66
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /server-status HTTP/1.1

0-0269380/271/9700_
3.52574693538450.00.8738.05
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/350/9265_
3.53419357100460940.01.2136.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8IwFID%2Fyt761JW

0-0269380/285/9291_
3.5338710698000860.00.9537.17
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0269380/299/8876_
3.54193637295076050.00.9934.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0269380/303/9148_
3.53360594290630.01.0036.14
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0269380/239/9630_
3.53472248197034100.00.7837.94
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0269380/290/9285_
3.5352237586548740.00.9536.32
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0269380/279/8902_
3.53308182756300.00.8835.43
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0269380/300/9170_
3.5332938694419460.01.0035.78
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0269380/310/8988_
3.54274699178260.01.0036.24
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/275/9950_
3.5418136291053650.00.9539.10
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEid

0-0269380/279/9466_
3.5421912091380540.01.0437.16
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0269380/275/9356_
3.54249693704730.00.9036.63
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/285/8596_
3.5350637291995390.01.0134.07
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96jo2m

0-0269380/357/9272_
3.52609693761820.01.2436.19
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/292/8904_
3.5469696005240.00.9334.99
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/348/9885_
3.53549784951580.01.0538.94
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/340/8890_
3.541403183842440.00.9934.52
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_c89dbcdc1f643

0-0269380/298/9001_
3.54341383285320.00.9435.79
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0269380/308/9136_
3.53426764997524240.01.0035.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-013440/83/8726_
0.865373594687820.00.3234.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-013440/80/8526_
0.87459343093500780.00.3733.90
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-013440/50/8574_
0.891062789886850.00.1633.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_20cf02c62a006

1-013440/84/8564_
0.86609637886798490.00.3134.47
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-013440/71/8844_
0.86592910192971440.00.3034.57
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-013440/71/8744_
0.86561183392340.00.2434.89
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

1-013440/66/8496_
0.89129678971760.00.2134.29
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-013440/63/7572_
0.87213693649970.00.2530.82
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-013440/52/8466_
0.9023484006060.00.1733.12
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https://oakhill-log

1-013440/66/8616_
0.8954691721490.00.2233.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt76tJX

1-013440/63/8823_
0.87189688459920.00.2735.09
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-013440/77/8990_
0.87334689153910.00.2135.05
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-013440/81/8560_
0.8987595347290.00.3334.68
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-013440/68/9082_
0.87429683849170.00.2535.23
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-013440/74/8129_
0.87298497822240.00.2732.07
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

1-013440/58/8837_
0.87236592571730.00.2235.12
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-013440/66/8464_
0.8726238686262540.00.2434.21
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8MgFID%2FSt94aim

1-013440/57/8129_
0.873171542102094710.00.2732.28
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-013440/78/8609_
0.87369689223940.00.3134.39
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-013440/51/8519_
0.87387388917500.00.1633.55
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-013440/93/8445

Found on 2025-12-14 05:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6faa53e40

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 22:57:51 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  12 days 1 hour 17 minutes 3 seconds
Server load: 0.75 0.84 0.98
Total accesses: 536122 - Total Traffic: 2.1 GB - Total Duration: 500320463
CPU Usage: u29.85 s30.8 cu149.67 cs87.82 - .0286% CPU load
.515 requests/sec - 2118 B/second - 4114 B/request - 933.221 ms/request
1 requests currently being processed, 74 idle workers
________________________________________________________________
W__________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320020/1067/8844_
14.00371697905450.03.9835.53
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1210/9139_
14.012649786825380.04.6636.35
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1221/9320_
13.995582824578883160.04.6037.12
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1012/8738_
14.00300596367540.03.8434.31
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZW

0-0320020/1109/9124_
13.9963310287710850.03.9336.48
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1166/9417_
13.996461040586958340.04.4437.14
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1107/8872_
13.998669692771520.04.0435.41
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1110/8979_
14.01279888704280.04.0236.10
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0320020/1006/8533_
13.9893710584024940.03.6933.75
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1103/8820_
14.00431785595520.04.0735.05
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1085/9372_
14.01232933191125700.04.2837.09
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1057/8978_
14.0341581033050.03.8035.31
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEqe

0-0320020/1050/8608_
14.0215210174495750.04.0334.50
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1008/8854_
14.00324286645550.03.7134.72
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/wstrust/mex.php HTTP/1.1

0-0320020/1145/8639_
13.99698491321730.04.3835.07
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0320020/1193/9659_
13.995971909284315950.04.6538.10
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1103/9168_
13.997612384868240.04.1836.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/1099/9050_
14.00464686538300.04.1035.63
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1133/8289_
14.0220110582292020.04.2732.92
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1259/8888_
13.99487156187897720.04.7834.87
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1121/8569_
13.99824889079280.04.1433.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1154/9519_
13.98911778183070.04.3537.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1132/8533_
13.99731778203390.03.9633.46
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1055/8681_
14.02104677195830.03.6834.72
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1004/8800_
13.99551689176440.03.6234.52
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/1011/8470_
10.90131788375800.03.8734.01
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/878/8216_
10.88884686841700.03.1732.79
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/877/8316_
10.9021310285230870.02.8932.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/957/8280_
10.8962341580464000.03.4133.38
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/1013/8548_
10.88777582846280.03.4433.45
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92joqh

1-094730/920/8482_
10.9072154977235180.03.2533.94
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/701/8245_
10.88704160774284250.02.6833.50
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/788/7320_
10.9014084832940.03.0329.87
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /swagger-ui.html HTTP/1.1

1-094730/1078/8182_
10.89344181378472220.03.5932.10
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/900/8365_
10.901593082887630.03.1133.00
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94srG

1-094730/849/8577_
10.88922480901410.03.0834.16
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92gp1C

1-094730/813/8719_
10.90251783625720.03.0534.23
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/860/8302_
10.89491686095600.03.0733.68
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/905/8832_
10.90265779739590.03.3734.34
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-094730/883/7793_
10.88851790934080.03.2530.76
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/841/8601_
10.8874347686536360.03.1734.20
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/914/8148_
10.89448577406220.03.4833.11
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-094730/834/7875_
10.886271335894944760.03.0431.30
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/816/8348_
10.886572780424200.03.1133.45
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_72fba62db8e53

1-094730/892/8255_
10.89379081560750.03.0632.58
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /.env HTTP/1.1

1-094730/760/8153_
10.895569879976250.0

Found on 2025-12-12 22:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c67039d7dd

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 17:09:29 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 19 hours 28 minutes 41 seconds
Server load: 0.52 1.32 1.45
Total accesses: 531705 - Total Traffic: 2.0 GB - Total Duration: 492632950
CPU Usage: u28.44 s29.54 cu149.67 cs87.82 - .029% CPU load
.521 requests/sec - 2146 B/second - 4120 B/request - 926.516 ms/request
1 requests currently being processed, 74 idle workers
______________________W_________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320020/1023/8800_
13.30696497371760.03.8335.38
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92rqNC

0-0320020/1141/9070_
13.30439162986257570.04.3936.09
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefEicud

0-0320020/1138/9237_
13.30931477367430.04.3536.86
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctXTt5

0-0320020/973/8699_
13.3057539895173330.03.7134.18
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEiehp

0-0320020/1053/9068_
13.30105110787369380.03.7136.26
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1095/9346_
13.301102685990930.04.2236.92
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1055/8820_
13.3111910691747190.03.8835.25
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1048/8917_
13.30498688401510.03.7735.86
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/940/8467_
13.3114710183330070.03.5233.57
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1026/8743_
13.30754785071540.03.8734.85
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEie

0-0320020/1030/9317_
13.3137572190303350.04.0636.88
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZV

0-0320020/1009/8930_
13.31193479294420.03.6435.15
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https://oakhill-log

0-0320020/995/8553_
13.3124050873828200.03.8634.33
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/955/8801_
13.30635585560110.03.5334.54
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/1074/8568_
13.301162690635830.04.0334.73
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1151/9617_
13.301028182083216790.04.5237.97
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1049/9114_
13.3012059784070820.03.9835.86
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1006/8957_
13.307952585110600.03.8835.42
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0320020/1088/8244_
13.31333581431270.04.1332.78
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctbTdq

0-0320020/1190/8819_
13.30862686653390.04.5634.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1071/8519_
13.3171687568580.03.9533.75
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92soGD

0-0320020/1109/9474_
13.3117514976608640.04.2037.68
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-03200228/1078/8479W
13.3200770935441.33.8133.31
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /server-status HTTP/1.1

0-0320020/982/8608_
13.31297675805640.03.4834.52
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/958/8754_
13.30989687749780.03.4834.37
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-094730/942/8401_
10.2424239687698180.03.6033.74
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tXW

1-094730/836/8174_
10.24122586071140.03.0332.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctay46

1-094730/834/8273_
10.23537682424780.02.7432.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/902/8225_
10.231028188379959150.03.2433.22
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/967/8502_
10.2452680505450.03.3033.30
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/870/8432_
10.242021076748000.03.0933.78
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/645/8189_
10.231061154073655710.02.4533.27
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/746/7278_
10.24177684271670.02.9029.73
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/1018/8122_
10.23657577779380.03.3831.89
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-094730/818/8283_
10.24357681792650.02.9232.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/776/8504_
10.24154580095290.02.8833.96
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92soGE

1-094730/766/8672_
10.2430443382998450.02.9034.08
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92roNn

1-094730/772/8214_
10.2388139785228310.02.8433.45
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92soGQ

1-094730/851/8778_
10.2438915978872150.03.1934.16
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/833/7743_
10.2482690131020.03.1030.60
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/774/8534_
10.231216154885766900.02.9533.98
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/834/8068_
10.23783576349710.03.2632.89
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92srGm

1-094730/775/7816_
10.23111038593600510.02.8031.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/765/8297_
10.23117337879051740.02.9333.27
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctaydn

1-094730/811/8174_
10.2370339180791980.02.8832.40
127.0.0.1http/1.1ip-10-1-91-

Found on 2025-12-12 17:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6ded7db61

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 15:15:39 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 17 hours 34 minutes 52 seconds
Server load: 0.75 0.79 0.87
Total accesses: 530770 - Total Traffic: 2.0 GB - Total Duration: 491733831
CPU Usage: u28.08 s29.28 cu149.67 cs87.82 - .0291% CPU load
.524 requests/sec - 2157 B/second - 4120 B/request - 926.454 ms/request
2 requests currently being processed, 73 idle workers
_____________________________________W__________________W_______
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320020/1012/8789_
13.17102438997301470.03.7935.34
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/1127/9056_
13.17873685932610.04.3536.04
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1129/9228_
13.19279777327550.04.3236.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/963/8689_
13.1794738495069020.03.6834.15
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZU

0-0320020/1047/9062_
13.191942987347230.03.6936.24
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEic

0-0320020/1085/9336_
13.19238785990020.04.1936.89
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1044/8809_
13.18513691583160.03.8435.21
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1038/8907_
13.17913588278630.03.7435.82
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdS8MwFIb%2FSu9y1aY

0-0320020/928/8455_
13.18564483225110.03.4833.53
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https://oakhill-log

0-0320020/1018/8735_
13.171048684996480.03.8434.82
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1016/9303_
13.178362890284100.04.0136.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b0b3b14ef7c2a

0-0320020/998/8919_
13.1764312279223540.03.6035.11
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/983/8541_
13.17694181073814190.03.8234.30
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/935/8781_
13.17970312485332690.03.4734.48
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1064/8558_
13.19285490630390.04.0034.69
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctayVb

0-0320020/1141/9607_
13.1911343483078740.04.4837.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92so2E

0-0320020/1040/9105_
13.18339583751210.03.9535.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0320020/993/8944_
13.171108785059870.03.8435.37
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/1077/8233_
13.1779138181287070.04.1032.75
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctaysi

0-0320020/1180/8809_
13.1711532886592830.04.5234.61
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_721f30140916c

0-0320020/1062/8510_
13.18473184087407040.03.9233.71
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/1095/9460_
13.1861838376598830.04.1337.60
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/1036/8437_
13.18439676885610.03.7233.22
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0320020/972/8598_
13.17732575792350.03.4534.49
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEic

0-0320020/950/8746_
13.195413987504540.03.4534.35
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/932/8391_
10.1070536887529100.03.5633.70
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEuf

1-094730/823/8161_
10.10524486010920.02.9932.61
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEsemK

1-094730/822/8261_
10.109332982285850.02.7032.62
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/890/8213_
10.1115810279898180.03.2033.18
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/953/8488_
10.10453680363570.03.2533.25
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/858/8420_
10.10660476733040.03.0533.74
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https://oakhill-log

1-094730/635/8179_
10.10213673453630.02.4233.24
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/737/7269_
10.10625246684110310.02.8729.70
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/1005/8109_
10.09988777516390.03.3331.85
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/807/8272_
10.108133181781420.02.8832.77
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/766/8494_
10.10584480002640.02.8533.92
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https://oakhill-log

1-094730/743/8649_
10.10739482968530.02.7633.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefEjths

1-094731/751/8193W
10.110085140641.12.7933.40
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /server-status HTTP/1.1

1-094730/835/8762_
10.10844278778460.03.1434.11
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-094730/822/7732_
10.10494589955280.03.0630.56
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEID%2FSt94amn

1-094730/766/8526_
10.1039810085522350.02.9233.95
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/825/8059_
10.09107610376198430.03.2332.86
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/767/7808_
10.1025442993434550.02.7731.03
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92roNR

1-094730/757/8289_
10.10304578622330.02.9033.24
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEuf

1-094730/804/8167_
10.091034156880670790.02.8532.38
127.0.0.1http

Found on 2025-12-12 15:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6dd4ee28e

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 10-Dec-2025 17:27:19 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 19 hours 46 minutes 32 seconds
Server load: 0.60 0.71 0.92
Total accesses: 492796 - Total Traffic: 1.9 GB - Total Duration: 441863449
CPU Usage: u14.8 s19.19 cu149.67 cs87.82 - .032% CPU load
.581 requests/sec - 2408 B/second - 4148 B/request - 896.646 ms/request
5 requests currently being processed, 45 idle workers
_W______WW_______________________WW_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320020/485/8262_
6.7915047789964750.01.9433.49
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0320020/555/8484W
6.7739076896500.02.3534.04
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/605/8704_
6.79167672477690.02.2734.78
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/472/8198_
6.79252689103440.01.7832.25
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/535/8550_
6.79192882324580.02.0634.61
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/530/8781_
6.79407677947930.02.1434.85
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/547/8312_
6.775037282721300.02.1033.47
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/513/8382_
6.784596980836190.02.0234.10
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320022/487/8014W
6.80260749233610.41.9031.96
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320023/559/8276W
6.80590779057514.02.1133.09
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/467/8754_
6.774798079837270.01.7634.58
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/480/8401_
6.7930137372080920.01.9033.41
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0320020/439/7997_
6.79432768500310.01.7732.24
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/481/8327_
6.774992739880628420.01.8532.86
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/546/8040_
6.7938740982277350.02.1032.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZNlqt

0-0320020/593/9059_
6.792236678653320.02.3235.77
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/552/8617_
6.79331476344570.02.3334.21
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0320020/474/8425_
6.775411916576104330.01.8133.35
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/547/7703_
6.801036673594730.02.0330.68
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/548/8177_
6.79133680046330.02.3632.46
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/527/7975_
6.79360580377050.02.1231.91
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0320020/580/8945_
6.80876367526180.02.1235.60
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0320020/569/7970_
6.79372672384530.02.1031.60
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320020/544/8170_
6.7753747168704020.01.8732.91
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0320020/471/8267_
6.79287783101270.01.7632.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/316/7775_
3.723118381149970.01.2531.40
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/346/7684_
3.72444577245610.01.3931.01
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDtpE

1-094730/259/7698_
3.724896575434110.01.0030.91
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/320/7643_
3.723666674490560.01.2531.23
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/348/7883_
3.73386004375079210.01.2131.21
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/393/7955_
3.725521466906920.01.3332.01
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/219/7763_
3.725099667578900.00.8731.69
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/242/6774_
3.731196578502410.00.9627.79
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-0947330/283/7387W
3.7500708076349.50.9929.50
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /server-status HTTP/1.1

1-094730/293/7758W
3.7133072990780.01.0130.89
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/303/8031_
3.72347673229280.01.1532.23
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-094730/272/8178_
3.72268776189300.01.0132.19
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-094730/249/7691_
3.724738079992410.00.9331.53
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/312/8239_
3.722937173533550.01.2232.19
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/294/7204_
3.74136003980221680.01.2028.70
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/313/8073_
3.731386380333480.01.3132.35
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/308/7542_
3.732057269098790.01.3030.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/252/7293_
3.723937682886420.00.9629.22
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/305/7837_
3.731596974242380.01.1731.51
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/301/7664_
3.724266873801730.01.1130.64
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-094730/234/7627_
3.723829975746240.00.9431.00
127.0.0.1

Found on 2025-12-10 17:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6695ca28f

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 08-Dec-2025 03:02:03 UTC
Restart Time: Sunday, 30-Nov-2025 21:40:47 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 5 hours 21 minutes 16 seconds
Server load: 1.07 1.13 1.00
Total accesses: 404286 - Total Traffic: 1.6 GB - Total Duration: 310454546
CPU Usage: u21.6 s20.45 cu109.38 cs66.49 - .0349% CPU load
.648 requests/sec - 2674 B/second - 4128 B/request - 767.908 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0289110/1192/6644_
15.64357759062610.04.8927.02
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0289110/1351/6758_
15.71287949458800.05.2626.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

0-0289110/1328/6933_
15.6534373746285580.05.2527.58
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0289110/1069/6165_
15.66283155701030.04.2924.47
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0289110/1281/6771_
15.62545552298340.04.9027.19
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

0-0289110/1336/6882_
15.6724910650917070.05.2827.18
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0289110/1355/6478_
15.70142052915320.05.2126.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0289110/1088/6672_
15.70172310053664070.04.3827.22
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0289110/1267/6213_
15.70190650128610.04.9024.78
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0289110/1265/6675_
15.6247359951709000.04.8726.59
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKduC

0-0289110/1311/7075_
15.62437748688430.05.1227.66
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/loginuserpass.php HTTP/1.1

0-0289110/1296/6843_
15.7169046205890.05.0027.12
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0289110/1004/6325_
15.7098045022540.03.8025.54
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0289110/1077/6594_
15.65337754898540.04.1825.93
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0289110/1045/6086_
15.6242320656736830.04.0924.39
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZFBb4MwDIX%2FCsq9SUh

0-0289110/1274/7276_
15.70201217955167390.04.9528.70
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0289110/1648/6653_
15.64380851818580.06.1826.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0289110/1117/6714_
15.625244049354090.04.0826.40
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0289110/1062/5926_
15.65317551430220.04.1523.48
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0289110/1125/6460_
15.68229156755157410.04.4025.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0289110/1184/6198_
15.6340620848009250.04.6424.58
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0289110/1354/7095_
15.6250021647790730.05.1928.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0289110/1268/6364_
15.6439510150096720.04.9625.15
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

0-0289110/1151/6313_
15.701083049462560.04.7425.61
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0289110/1269/6588_
15.66260154345100.04.9025.75
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-066650/593/5897_
8.91254154731180.02.6323.81
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-066650/685/5668_
8.8932321251273760.02.6122.74
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=nZFBT8MwDIXvk%2FYfqtz

1-066650/627/6056_
8.89370653031780.02.5324.30
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-066650/530/5839_
8.8935040548873620.02.1023.80
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-066650/647/5974_
8.87536551356530.02.6524.06
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-066650/587/6062_
8.87490744795210.02.4224.83
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-066650/708/6138_
8.8741165440945390.03.0124.97
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=lZJBb9swDIX%2FiqHDbrZ

1-066650/613/5044_
8.912071252178150.02.3820.55
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-066650/577/5750_
8.8838510246265170.02.4723.25
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/wstrust/active.php HTTP/1.1

1-066650/514/6262_
8.89333046366640.02.2724.91
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-066650/855/6131_
8.9116031848630050.03.5624.55
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZFBboMwEEWvgryPMQ4OY

1-066650/691/6250_
8.9441549338420.02.8024.30
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0666529/635/5981W
8.9500530354240.32.5624.42
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /server-status HTTP/1.1

1-066650/699/6260_
8.90260144853120.02.9224.51
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-066650/541/5608_
8.92130651816980.02.1822.20
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-066650/719/6253_
8.91177548861370.02.8124.77
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-066650/621/5626_
8.9310834046383390.02.4622.65
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-066650/685/5779_
8.91233052952690.03.0123.01
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-066650/678/6048_
8.91247046470760.02.9324.40
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-066650/567/6146_
8.87506546045380.02.3724.81
127.0.0.1http/1.1ip-10-1-91-33.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-06665

Found on 2025-12-08 03:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c67b23f04e

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 30-Nov-2025 15:47:08 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 18 hours 4 minutes 3 seconds
Server load: 0.71 0.59 0.62
Total accesses: 1731609 - Total Traffic: 6.7 GB - Total Duration: 965306561
CPU Usage: u39.18 s57.8 cu516.81 cs311.12 - .0317% CPU load
.594 requests/sec - 2451 B/second - 4128 B/request - 557.462 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................W_____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0285770/31/29554_
0.4352518177778050.00.13117.33
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEjf

0-0285770/23/28509_
0.43986149550960.00.08112.09
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0285770/35/29289_
0.431217155464400.00.11116.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/34/29551_
0.431819169827330.00.10117.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/68/29828_
0.432417178113600.00.21118.54
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/23/28293_
0.435417162451140.00.08111.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/39/29467_
0.44286165378840.00.13115.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0285770/50/28732_
0.4210987161292840.00.21114.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpg

0-0285770/29/27901_
0.4210716162830680.00.09109.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcpr

0-0285770/28/28058_
0.4210043176051140.00.12111.33
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0285770/24/29227_
0.439746171143720.00.08115.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpi

0-0285770/24/28200_
0.43917548168639990.00.08110.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0285770/36/28106_
0.438998160257050.00.11111.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0285770/53/29320_
0.438417164684940.00.18115.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/26/28595_
0.437885166803990.00.09111.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdJW

0-0285770/49/29194_
0.437505158673780.00.15116.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0285770/29/29409_
0.43716192157762000.00.09115.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0285770/40/30338_
0.436618158708920.00.16119.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/38/29116_
0.436017157996220.00.11114.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/31/29189_
0.4358830167552150.00.09115.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZV

0-0285770/39/30820_
0.435136168832220.00.12120.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdu0

0-0285770/40/28414_
0.43437530143671820.00.12112.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0285770/44/29390_
0.434085162466470.00.14115.93
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEsdpI

0-0285770/61/29136_
0.433617159988990.00.25115.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0285770/40/29094_
0.433018155189680.00.16113.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/23340.
0.002364560133918990.00.0090.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /robots.txt HTTP/1.1

1-0-0/0/23713.
0.00236456119134060190.00.0092.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23261.
0.00236456644145196490.00.0090.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/23924.
0.002364560139043840.00.0093.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/22997.
0.002364560137748500.00.0088.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0-0/0/23093.
0.002364569139075590.00.0090.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/23711.
0.002364561135699010.00.0091.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0-0/0/24343.
0.002364564773140286530.00.0095.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23728.
0.002364563113124304680.00.0092.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23147.
0.00236456112143532270.00.0089.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/22603.
0.002364562133529460.00.0088.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/23743.
0.002364561910143890520.00.0092.75
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/22877.
0.002364561549128846200.00.0090.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23216.
0.002364560139278060.00.0089.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/22785.
0.002364563107133908830.00.0087.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/25382.
0.002364566361138067890.00.0099.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23857.
0.002364561124502110.00.0092.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/23437.
0.002364566127269990.00.0092.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tXU

1-0-0/0/23647.
0.00236456483134160460.00.0092.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0-0/0/23400.
0.00236456224135841290.00.0090.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fgroklear

Found on 2025-11-30 15:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6adf74a71

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 28-Nov-2025 03:22:08 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 5 hours 39 minutes 3 seconds
Server load: 0.93 1.75 1.96
Total accesses: 1680476 - Total Traffic: 6.5 GB - Total Duration: 928151974
CPU Usage: u32.49 s51.43 cu505.45 cs304.43 - .0331% CPU load
.623 requests/sec - 2576 B/second - 4137 B/request - 552.315 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................___W__________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0118740/388/28483_
5.56101275170323100.01.69113.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJRb5swFIX%2FCvK7IUB

0-0118740/339/27616_
5.551593445141254150.01.35108.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0118740/425/28286_
5.53337764147888600.01.82112.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

0-0118740/537/28545_
5.48420308162728750.02.24114.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0118740/363/28743_
5.56113231170526900.01.64114.55
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZLLUsIwFIZfpZN9mzaAY

0-0118740/425/27388_
5.551817156683490.01.80108.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0118740/354/28363_
5.56127219158072050.01.55111.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFP4rS99Z2XACD

0-0118740/472/27577_
5.57570154092230.02.12110.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0118740/285/26880_
5.5684230156514410.01.28105.55
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZJNT8IwGMe%2FytL71q0

0-0118740/394/27080_
5.4746530168828290.01.79107.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0118740/398/28257_
5.48410345163936950.01.73111.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c73009e00192e

0-0118740/348/27193_
5.5820158025360.01.46106.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /webjars/swagger-ui/index.html HTTP/1.1

0-0118740/413/27075_
5.57357151237420.01.74107.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0118740/399/28171_
5.523420157362330.01.83110.90
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0118740/369/27581_
5.484041542160493640.01.59108.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJba9wwEEb%2FilGfbV1

0-0118740/389/28192_
5.474588150042770.01.79112.45
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0118740/362/28459_
5.474430150598280.01.61112.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0118740/555/29295_
5.523431070150147440.02.52115.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNT4NAEIb%2FCtl7d2G

0-0118740/526/28073_
5.5430679149217480.02.41110.83
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0118740/335/28123_
5.503780160592230.01.43111.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0118740/434/29516_
5.552545158898520.02.01116.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0118740/531/27492_
5.5431091137127600.02.45109.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0118740/456/28281_
5.552892005155257090.02.02112.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJfb9sgFMW%2FisU7%2F

0-0118740/421/27983_
5.552749154209470.01.84111.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/.well-known/openid-configuration HTTP/1.1

0-0118740/439/28036_
5.552319149605320.01.97110.05
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/23340.
0.00189560133918990.00.0090.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /robots.txt HTTP/1.1

1-0-0/0/23713.
0.0018956119134060190.00.0092.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23261.
0.0018956644145196490.00.0090.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/23924.
0.00189560139043840.00.0093.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/22997.
0.00189560137748500.00.0088.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0-0/0/23093.
0.00189569139075590.00.0090.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/23711.
0.00189561135699010.00.0091.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0-0/0/24343.
0.00189564773140286530.00.0095.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23728.
0.00189563113124304680.00.0092.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23147.
0.0018956112143532270.00.0089.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/22603.
0.00189562133529460.00.0088.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/23743.
0.00189561910143890520.00.0092.75
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/22877.
0.00189561549128846200.00.0090.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23216.
0.00189560139278060.00.0089.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/22785.
0.00189563107133908830.00.0087.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/25382.
0.00189566361138067890.00.0099.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/23857.
0.00189561124502110.00.0092.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/23437.
0.00189566127269990.00.0092.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tXU

1-0-0/0/23647.
0.0018956483134160460.00.0092.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0-0/0/23400.
0.0018956224135841290.00.0090.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fgroklear

1-0-0/0/23201.
0.00

Found on 2025-11-28 03:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6490f0234

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 26-Nov-2025 12:13:30 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 14 hours 30 minutes 25 seconds
Server load: 0.46 0.61 0.86
Total accesses: 1620432 - Total Traffic: 6.2 GB - Total Duration: 862643180
CPU Usage: u39.94 s53.85 cu476.1 cs287.78 - .0335% CPU load
.634 requests/sec - 2613 B/second - 4124 B/request - 532.354 ms/request
3 requests currently being processed, 47 idle workers
______W_W_______________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-05310/844/27158_
11.91682483157476720.03.52107.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/738/26595_
11.91386680129048730.03.08104.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/874/26969_
11.91476665134505770.03.81106.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/995/27299_
11.91822467145967510.04.04108.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/858/27539_
11.91669431155359440.03.46109.42
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/898/26156_
11.91204727144805950.03.62103.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05315/812/27254W
11.9200145447015.43.24106.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-05310/812/26329_
11.91566528143252760.03.57104.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05318/988/25919W
11.9180143112659.13.99101.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/947/25856_
11.9114365153292730.04.03102.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Stu

0-05310/937/27029_
11.91191795150829690.03.74106.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/970/26163_
11.91743420147572040.03.76102.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/860/25921_
11.91704712136776840.03.61102.30
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/879/26621_
11.90943106143012030.03.50104.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/1089/26342_
11.91453404144050080.04.60102.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/856/27063_
11.9222462138334350.03.59107.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/924/27287_
11.91863448137769610.03.69107.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/1036/27850_
11.90954738137927370.04.26109.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/894/26831_
11.91883383137931540.03.88105.26
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/1099/26952_
11.91846656148900200.04.50106.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/777/28320_
11.91563371145853800.03.26111.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/976/26201_
11.91744431124496360.04.11103.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/927/27021_
11.90992490144792790.03.67106.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/862/26885_
11.91344706143033290.03.63106.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-05310/900/26740_
11.91672535139406230.03.64104.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/794/22184_
10.54973104123668510.03.4585.74
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/795/22773_
10.5611122119584410.03.4088.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/805/22329_
10.56716684132178520.03.2586.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/720/22968_
10.54921840128011060.03.0689.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/756/22053_
10.5662356126467620.03.2384.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/799/22226_
10.5620119124095060.03.4586.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/907/22915_
10.56189404125043690.03.5388.16
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/765/23424_
10.56834741130405440.03.1491.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/814/22660_
10.56794711117243610.03.2687.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/807/22228_
10.54993402128840020.03.2786.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/1026/21716_
10.56499546123975590.04.2684.78
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/689/22716_
10.55891555132086750.02.6388.24
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/748/22014_
10.562913435120400370.03.1886.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/690/22280_
10.56493105128706480.02.8485.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/797/21994_
10.54971819123193850.03.1784.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051581/887/24251W
10.5670125283771.13.6694.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/1002/22898_
10.56703389114972900.04.4688.90
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/798/22509_
10.56379118117417670.03.3488.25
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/665/22806_
10.56564737122846250.02.7488.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/742/22434_
10.56732470124619870.03.0986.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-051580/650/22305_
10.56636800125626660.02.5686.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.</

Found on 2025-11-26 12:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c669629842

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 22-Nov-2025 14:13:35 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 16 hours 30 minutes 31 seconds
Server load: 1.45 1.00 0.98
Total accesses: 1327401 - Total Traffic: 5.1 GB - Total Duration: 747497536
CPU Usage: u36.83 s48.18 cu392.74 cs237.02 - .0322% CPU load
.598 requests/sec - 2477 B/second - 4142 B/request - 563.129 ms/request
1 requests currently being processed, 49 idle workers
_______________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-033120/1121/22590_
15.40735134573990.04.4889.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKIq

0-033120/1163/22229_
15.40254508109235340.04.4187.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEuf

0-033120/1406/22111_
15.394236113855730.05.1787.01
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1248/22119_
15.40180521125124060.05.0888.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNehl

0-033120/1237/22790_
15.402247130618330.04.7690.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEjd

0-033120/1290/21425_
15.401236122753340.05.2184.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1037/22076_
15.3950924123263230.04.0986.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1286/21770_
15.396036121488430.05.1087.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1129/20914_
15.39583596124298560.04.3182.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-033120/1044/21192_
15.4203113131780780.04.2283.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/1151/21900_
15.39460111127275360.04.4286.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/1214/21581_
15.396296127376750.04.2484.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1154/21271_
15.395426117467640.04.3884.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1084/22077_
15.401496123703800.04.1286.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1084/21429_
15.3868924121718430.04.1183.75
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1267/22009_
15.395696115752300.05.0787.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1357/22311_
15.403636112579640.05.3788.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1149/22558_
15.40297120281730.04.6188.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1103/21982_
15.394836117060780.04.1786.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1264/21830_
15.396636129606690.05.1686.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1195/23358_
15.40444125579440.04.7191.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdOu

0-033120/1246/21201_
15.403296103169600.04.9983.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/1167/21943_
15.39391117120099410.04.6987.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/1117/22391_
15.402844122423500.04.5189.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdOK

0-033120/1060/21552_
15.394441566117281250.04.1284.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0269960/534/18894_
7.584635112419740.01.9473.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDduo

1-0269960/564/19529_
7.592096107872500.02.2176.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0269960/624/19345_
7.5861450118395750.02.3575.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0269960/553/19941_
7.584496116783920.02.0478.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0269960/586/18670_
7.582698112330300.02.1972.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0269960/620/18775_
7.583036114228570.02.3673.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0269964/595/19384W
7.6000112280604.32.2375.25
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-0269960/630/20407_
7.586734116191390.02.4280.09
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmJi6c

1-0269960/649/19161_
7.585970105763210.02.6274.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0269960/609/18633_
7.60371553115340890.02.2772.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0269960/661/18559_
7.591636111917520.02.5973.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0269960/631/19745_
7.58493502119370400.02.4977.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT9wwEIb%2FSm4%2BO

1-0269960/641/19030_
7.585245110866770.02.4875.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduS

1-0269960/611/19012_
7.583411558113947930.02.3673.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0269960/559/19065_
7.6066132108769400.02.0673.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0269960/556/20492_
7.584337112200660.02.1680.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZW

1-0269960/610/19403_
7.585546104916870.02.1575.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0269960/598/19477_
7.583737106214590.02.1776.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0269960/599/19931_
7.58404511109853440.02.1777.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2FQgEIb%2FSm%2B

1-0269960/605/19350_
7.60242223114758030.02.3675.40
127.0.0.1h

Found on 2025-11-22 14:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6e225ece5

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 20-Nov-2025 18:11:56 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 20 hours 28 minutes 51 seconds
Server load: 0.78 1.81 1.90
Total accesses: 1279321 - Total Traffic: 4.9 GB - Total Duration: 687972242
CPU Usage: u34.85 s45.21 cu376.96 cs228.15 - .0332% CPU load
.621 requests/sec - 2571 B/second - 4142 B/request - 537.764 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-033120/214/21683_
2.711015122587080.00.8285.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-033120/238/21304_
2.71203698702710.00.9584.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/194/20899_
2.712296103328090.00.7782.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/227/21098_
2.7058943113696200.00.9784.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/214/21767_
2.706236113321750.00.8387.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/206/20341_
2.711278112131810.00.7380.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-033120/206/21245_
2.71385107170390.00.7683.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbhshEIZfZW%2BcWAx

0-033120/217/20701_
2.705581581108301030.00.8682.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/194/19979_
2.70575140113990280.00.7378.59
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/163/20311_
2.70533611118895350.00.6079.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/190/20939_
2.704696113880650.00.7783.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/262/20629_
2.704437118591250.00.6981.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0331226/209/20326W
2.72001052688932.30.7380.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-033120/285/21278_
2.70353604110816200.01.0083.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/188/20533_
2.705037111204070.00.6980.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/210/20952_
2.703023115106910270.00.7983.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/241/21195_
2.712446355102439900.00.9283.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/236/21645_
2.703381554108845020.00.9585.01
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-033120/203/21082_
2.703836108655650.00.7682.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/222/20788_
2.7167498111870200.00.9282.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUVrmt

0-033120/175/22338_
2.7028027112318070.00.6487.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpy

0-033120/228/20183_
2.70263693414460.00.8579.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/219/20995_
2.7040931106692370.00.8183.30
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-033120/169/21443_
2.711785110936460.00.6085.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-033120/183/20675_
2.71160534107720180.00.8280.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcps

1-0209220/1393/18018_
19.73605698336780.05.5270.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yYq

1-0209220/1618/18587_
19.7342952599806830.06.3472.63
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpi

1-0209220/1272/18366_
19.73340878104779080.05.2571.54
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEid

1-0209220/1517/19052_
19.74236101466260.06.5775.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0209220/1329/17779_
19.734952205100731790.05.6468.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1424/17784_
19.74208221799985840.05.8069.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1620/18441_
19.74109699716020.06.6271.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0209220/1469/19388_
19.732896103230160.06.0475.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0209220/1201/18113_
19.73370691238760.05.0670.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0209220/1454/17674_
19.735427103118990.05.7269.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcmX

1-0209220/1613/17532_
19.735811664100167970.06.7968.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0209220/1460/18780_
19.741698108554080.06.3373.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0209220/1215/18062_
19.732664440100618450.05.1271.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1383/18074_
19.734016101061220.05.8469.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0209220/1340/18203_
19.73452694975990.05.3070.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0209220/1639/19592_
19.742481551100453390.06.8276.44
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1404/18369_
19.7426111894750730.06.1071.44
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1506/18481_
19.73320221395856480.06.0272.97
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0209220/1343/19062_
19.741885100595720.05.4674.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0209220/1401/18361_
19.735637102145810.05.8471.40
127.0.0.1http/1.1ip-

Found on 2025-11-20 18:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c65f4bfd4b

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 10:21:58 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  19 days 12 hours 38 minutes 54 seconds
Server load: 0.82 1.78 2.23
Total accesses: 1129652 - Total Traffic: 4.3 GB - Total Duration: 503649690
CPU Usage: u36.86 s41.73 cu317.59 cs194.87 - .035% CPU load
.67 requests/sec - 2751 B/second - 4109 B/request - 445.845 ms/request
1 requests currently being processed, 74 idle workers
________________________________W_______________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-047360/1431/19064_
16.97141586546480.05.5574.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/1202/18765_
16.93732069641610.04.7373.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-047360/1191/18428_
16.95611776761030.04.6471.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-047360/1193/18533_
16.97111175140400.04.8173.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-047360/1217/19311_
16.9873482070410.04.8476.47
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-047360/1134/17877_
16.96400377084723700.04.7170.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-047360/1164/18933_
16.96515375749090.04.4373.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdua

0-047360/1287/18062_
16.97201575114830.05.2471.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/1304/17807_
16.96291573617290.04.9269.63
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/1201/18061_
16.93794686167920.04.5670.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-047360/1326/18461_
16.93750085944650.05.4272.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-047360/1307/18091_
16.9835488961880.05.2470.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lg

0-047360/1386/17793_
16.97237576619500.05.4469.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-047360/1292/18719_
16.9283023580199640.05.1273.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNTsMwEIRfJfK9ju38t

0-047360/1469/18317_
16.96317778792380.05.8571.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-047360/1447/18524_
16.95604476242860.05.9373.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMehL

0-047360/1274/18816_
16.963545776999350.04.9473.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ad1f397600f02

0-047360/1302/19213_
16.96265174608120.05.0374.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-047360/1254/18346_
16.96476471155790.05.0171.78
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-047360/1279/18414_
16.96441676046720.04.7272.11
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/1444/19672_
16.9364883486339750.05.6376.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-047360/1207/17784_
16.93702066494380.04.8969.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-047360/1171/18406_
16.9558413376833190.04.4472.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-047360/1273/18693_
16.9555022784835350.05.2373.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBT4QwEIX%2FCul9S1s

0-047360/1355/18572_
16.96336079033270.05.3672.11
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0228130/659/15838_
10.55282471070940.02.6061.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNTwMhEIb%2Fyt44sZR

1-0228130/892/16208_
10.5763572829690.03.0263.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0228130/881/16367_
10.55133470257450.03.4363.33
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yZK

1-0228130/786/16810_
10.5678072654480.02.9265.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0228130/754/15641_
10.5516049770694050.02.5859.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJi

1-0228130/773/15652_
10.54351573941190.02.8260.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/751/16057_
10.50809474328220.02.7761.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-02281340/919/17059W
10.5700794541971.93.4366.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-0228130/812/16152_
10.51681669035570.03.0262.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/840/15628_
10.51740478333400.03.1860.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0228130/785/15242_
10.5342553072099120.02.9059.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dj

1-0228130/768/16587_
10.516294780773860.02.7264.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0228130/758/16119_
10.516114471034310.02.7963.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0228130/767/15840_
10.5176389677413830.02.6660.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0228130/739/16232_
10.51711072849820.02.7762.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET / HTTP/1.1

1-0228130/860/17139_
10.51622175037390.03.3666.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0228130/820/16354_
10.53471469981690.03.1162.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/836/16218_
10.525402672883580.03.1663.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whi

1-0228130/761/17009_
10.52501575208330.02.9165.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/837/16305_
10.52574078808900.02.8462.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeas

Found on 2025-11-16 10:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c64bceaf5c

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 11:12:20 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 13 hours 29 minutes 16 seconds
Server load: 3.96 2.44 2.35
Total accesses: 1095274 - Total Traffic: 4.2 GB - Total Duration: 489401619
CPU Usage: u24.19 s31.77 cu317.59 cs194.87 - .0375% CPU load
.722 requests/sec - 2973 B/second - 4119 B/request - 446.83 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-047360/780/18413_
9.946383683299180.03.1872.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_800c7063a05ac

0-047360/717/18280_
9.95365467280230.03.0671.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMf

0-047360/702/17939_
9.95393572781290.03.0470.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/699/18039_
9.946134072769180.02.9271.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTuMwFEB%2FJTuvHMe

0-047360/695/18789_
9.94590579815670.02.9374.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-047360/700/17443_
9.9693582447540.03.0968.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/695/18464_
9.96134574307560.02.8372.01
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/778/17553_
9.946564772856020.03.3669.75
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-047360/739/17242_
9.927212971023480.02.9767.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdNU

0-047360/578/17438_
9.94473583223510.02.2968.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-047360/846/17981_
9.94453483637360.03.5670.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/786/17570_
9.94550086531680.03.3669.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-047360/868/17275_
9.93667574643080.03.5467.74
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-047360/653/18080_
9.94494477874340.02.7370.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/851/17699_
9.9275153276249640.03.5568.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-047360/809/17886_
9.96149153374873590.03.3370.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-047360/791/18333_
9.9669474829970.03.3572.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0473626/717/18628W
9.9700722661645.42.8672.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-047360/720/17812_
9.95254569517870.03.0369.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/780/17915_
9.9610723874102890.02.9670.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Ftrackone

0-047360/844/19072_
9.944341883929500.03.3773.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/707/17284_
9.95314564032820.03.1767.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/624/17859_
9.95194775486690.02.6270.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-047360/761/18181_
9.95290083697640.03.3572.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-047360/797/18014_
9.9639476873670.03.3070.05
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0228130/179/15358_
3.90142568924660.00.8259.63
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0228130/370/15686_
3.9010022770707630.01.0561.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBTsMwEEWvEnlfO7YTc

1-0228130/300/15786_
3.8920421467579820.01.2361.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZFPT8MwDMXvk%2FYdqtz

1-0228130/304/16328_
3.901533070063260.01.2163.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0228130/263/15150_
3.9012222768061260.00.8558.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNT4NAEIb%2FCtl79wM

1-0228130/309/15188_
3.883742471471850.01.1158.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/237/15543_
3.9081471314870.00.9560.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMfZt

1-0228130/318/16458_
3.9051576927270.01.4064.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0228130/315/15655_
3.9133567714670.01.2260.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/246/15034_
3.917076921500.01.0358.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /swagger-ui.html HTTP/1.1

1-0228130/280/14737_
3.88513570137010.01.0557.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/304/16123_
3.87666478578850.01.2162.78
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0228130/260/15621_
3.88646368611030.01.0861.75
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0228130/285/15358_
3.877343975711960.01.0858.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/247/15740_
3.87690671715300.01.0760.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMchK

1-0228130/310/16589_
3.88633572725920.01.2864.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/287/15821_
3.88573566675940.01.1761.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0228130/328/15710_
3.8859767670569030.01.3261.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

1-0228130/208/16456_
3.8848651972742630.00.9563.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdJg

1-0228130/379/15847_
3.88459476527590.01.2661.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.

Found on 2025-11-14 11:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6870b0e73

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 11:00:26 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  15 days 13 hours 17 minutes 21 seconds
Server load: 14.62 4.23 2.43
Total accesses: 1034212 - Total Traffic: 3.9 GB - Total Duration: 462574287
CPU Usage: u62.47 s54.54 cu256.3 cs157.64 - .0395% CPU load
.77 requests/sec - 3153 B/second - 4098 B/request - 447.272 ms/request
2 requests currently being processed, 48 idle workers
_______________________K_.........................______________
_________W_.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0105950/4472/17158_
53.0129477272000.017.0066.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt78lDh

0-0105950/4808/17192_
52.92520461927220.018.3667.24
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0105950/4947/16860_
52.96400567374320.018.7765.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0105950/4938/16929_
52.98326168365410.018.6966.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0105950/5541/17668_
52.97373336675440180.021.0869.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0105950/4917/16369_
53.0056377798520.018.3064.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0105950/5303/17338_
52.96470066984800.019.7467.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /lv.php HTTP/1.1

0-0105950/5077/16254_
52.9828952467842890.019.2263.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedbNlOv

0-0105950/4499/16068_
52.98194567228610.016.8362.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0105950/4718/16353_
53.0138078446410.017.7663.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0105950/4645/16677_
52.98182178610650.017.5365.16
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed12cf6023f24

0-0105950/4916/16272_
52.98252380109380.018.7063.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0105950/4580/15877_
52.92568469162820.017.2961.91
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96roNU

0-0105950/4745/16990_
52.97352173119720.017.8765.93
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0105950/4859/16465_
52.97348571310400.018.1963.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0105950/4746/16618_
52.98139468750920.017.9265.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0105950/4713/17093_
52.96439470009730.017.8966.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0105950/4994/17515_
52.9969166155530.018.7368.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0105950/4688/16681_
52.98267064671190.017.5464.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0105950/5071/16716_
52.9254822668983500.019.1865.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Wto

0-0105950/4920/17837_
52.98160679387110.018.8768.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0105950/4499/16221_
52.9645521659176170.017.2062.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBboMwEEWvgryPsQ2EY

0-0105950/5039/16758_
52.98100569204380.019.5265.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-01059518/4496/16967K
53.0210785284846.316.8466.83
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /v2/_catalog HTTP/1.1

0-0105950/4926/16776_
52.98242370491250.018.3264.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-0-0/0/15179.
0.0051700468449610.00.0058.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tRU

1-0-0/0/15316.
0.0051700669980380.00.0060.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/15486.
0.0051700066875760.00.0059.90
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/16024.
0.005170058869326240.00.0062.43
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/14887.
0.005170033967482120.00.0057.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/14879.
0.0051700137570825160.00.0057.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15306.
0.0051700670707110.00.0059.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/16140.
0.0051700175597640.00.0062.74
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/15340.
0.00517006666659470.00.0059.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/14788.
0.0051700124276302930.00.0057.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/14457.
0.00517005069163450.00.0056.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/15819.
0.005170076477874210.00.0061.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_295ad251237f5

1-0-0/0/15361.
0.0051700267816780.00.0060.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/15073.
0.0051700675122740.00.0057.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15493.
0.0051700171073090.00.0059.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/16279.
0.0051700072155750.00.0062.93
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15534.
0.00517005165604800.00.0059.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/15382.
0.00517002369687420.00.0060.63
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92so6U

1-0-0/0/16248.
0.005170081572021910.00.0062.97
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15468.
0.0051700175796730.00.0059.95
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

Found on 2025-11-12 11:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c64623e1fb

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 17:10:38 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 days 19 hours 27 minutes 33 seconds
Server load: 0.58 1.67 2.08
Total accesses: 835553 - Total Traffic: 3.2 GB - Total Duration: 416947032
CPU Usage: u43.44 s41.3 cu218.9 cs133.61 - .0366% CPU load
.7 requests/sec - 2884 B/second - 4118 B/request - 499.007 ms/request
2 requests currently being processed, 48 idle workers
________________________W___W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0105950/1800/14486_
17.00176570012250.06.6956.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0105950/1473/13857_
17.02145554869120.05.4354.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0105950/1594/13507_
16.76543559746780.05.9452.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0105950/1743/13734_
17.0692561308140.06.4054.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0105950/2048/14175_
16.63766567261310.07.5856.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0105950/1712/13164_
17.06110470648670.06.3152.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0105950/1788/13823_
16.7655271861153920.06.7354.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0105950/1992/13169_
16.89361460149420.07.4452.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9a31e77801c2e

0-0105950/1682/13251_
16.85411358625180.06.2152.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a9092b64e22d0

0-0105950/1446/13081_
16.69642471577320.05.2851.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1908b80be4e5e

0-0105950/1715/13747_
17.066343470330290.06.3453.97
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0105950/1839/13195_
17.001621310272305010.06.7351.43
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0105950/1464/12761_
16.93284561956500.05.3850.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0105950/1465/13710_
16.92318564461360.05.4453.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0105950/1341/12947_
16.93264664391950.04.9050.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0105950/1735/13607_
16.726093961062260.06.4153.78
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0105950/1661/14041_
16.96216635962962510.06.1055.08
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0105950/1610/14131_
16.81487359095720.05.8955.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_386e761f3c8e8

0-0105950/1636/13629_
17.0636458345890.05.9853.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0105950/1584/13229_
17.06982711261982280.05.8752.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0105950/1798/14715_
16.71611344771805580.06.5756.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0105950/1547/13269_
16.65689550956410.05.6851.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0105950/1813/13532_
16.716111661445150.06.8552.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0105950/1317/13788_
17.102472715010.04.7354.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_100b6dd4eb06e

0-0105951/1483/13333W
17.100061197373.25.4351.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-022960/3443/12776_
33.986313963983660.012.9050.09
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-022960/2956/13066_
34.14339465283080.011.4251.59
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-022960/3344/13297_
34.24193911762500380.012.7651.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-022967/3341/13103W
34.3700647408616.112.7051.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-022960/2687/12710_
34.23238462113530.010.4449.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_54679756f09ed

1-022960/2930/12509_
34.26156465949750.011.4549.01
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-022960/3341/12766_
33.986201065402870.012.8849.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_93a58cf5b8e0d

1-022960/3111/13697_
34.02567370601260.011.9253.70
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f4fd5a982461

1-022960/3037/13217_
34.05516462466760.011.8051.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e41f137b57557

1-022960/2751/12330_
34.18298370823570.010.4048.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b224398e5a7a8

1-022960/2807/12222_
34.23242445864281800.010.9148.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-022960/3157/12975_
34.3449373104780.012.2250.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b768874e39a27

1-022960/3218/12869_
34.12387563035940.012.1851.33
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-022960/2851/12628_
34.02578470268400.010.6748.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_01109293d9976

1-022960/3198/12792_
34.3083566160520.012.1349.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-022960/2965/13766_
34.27135567158410.011.5753.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-022960/3016/12925_
34.01579461432490.011.5649.98
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-022960/3395/12542_
33.95728464652860.013.0550.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_59775a2671200

1-022960/3169/13932_
34.20269967907230.012.0654.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /mo

Found on 2025-11-10 17:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6330e5c51

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 19:53:16 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 22 hours 10 minutes 12 seconds
Server load: 0.77 1.19 1.72
Total accesses: 674992 - Total Traffic: 2.6 GB - Total Duration: 348006041
CPU Usage: u26.92 s28.04 cu189.36 cs116.31 - .035% CPU load
.655 requests/sec - 2714 B/second - 4143 B/request - 515.571 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0172090/468/11034_
6.09284555523730.01.6843.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/414/10590_
6.09343443934960.01.5141.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-0172090/541/10522_
6.07429546241890.02.0141.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/450/10436_
6.07404543730680.01.5942.09
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/396/10238_
6.074901553933650.01.3540.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/488/9989_
6.09312188453585760.01.9139.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/536/10464_
6.07415347048702790.02.0341.11
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/463/9731_
6.09185310846932480.01.5438.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/492/9996_
6.08374642547254710.01.6839.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/490/10187_
6.1044659467280.01.7740.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/484/10524_
6.09123556258950.01.6841.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0172090/427/9759_
6.09203219354584570.01.5938.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/588/9661_
6.0970548484010.02.1037.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/492/10837_
6.09252450250858440.01.9142.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/556/9678_
6.07439552108670.01.9438.11
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0172090/435/10189_
6.07524547319790.01.5940.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/554/10547_
6.09164450224260.01.9541.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/496/10714_
6.09153447241830.01.6941.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-01720929/504/10412W
6.1100471306742.01.9141.07
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-0172090/449/10221_
6.09219155549225780.01.5540.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/486/11083_
6.075465628256703880.01.7643.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/529/10141_
6.07464541095530.01.9639.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0172090/452/10366_
6.075266006150291620.01.5340.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/469/10883_
6.0923513360419040.01.7243.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0172090/503/10568_
6.10545749891240.01.8241.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294180/1589/9247_
20.015053648595570.06.7036.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvEsd

1-0294180/1425/10005_
20.01399477251088100.05.9539.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1579/9831_
20.031620849485350.06.5038.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBboMwEER%2FBfkeYxt

1-0294180/1698/9676_
20.036354151389910.07.1838.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1394/9914_
20.01412348123190.05.7938.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt76tJV

1-0294180/1420/9482_
20.01370648762790.05.9537.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/1429/9336_
20.0357051407600.05.8236.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0294180/1349/10502_
20.01433256653278280.05.6941.47
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1737/10084_
20.01470645546709480.07.1339.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

1-0294180/1456/9449_
20.01276312457515320.06.0437.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1463/9317_
20.01447202249120070.06.3237.07
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1597/9718_
20.01597457743380.06.3838.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0294180/1538/9531_
20.0156648148547770.06.4438.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0294180/1379/9646_
20.01423455296510.05.5937.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0294180/1693/9487_
20.02153634953927930.06.9537.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1241/10683_
20.01248654337510.04.9441.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0294180/1608/9799_
20.02169445249592450.06.3438.05
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1635/9016_
20.0132813951647170.07.0536.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0294180/1390/10679_
20.02130655201560.05.7041.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/1465/9286_
20.01207254180780.05.9836.59
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0

Found on 2025-11-08 19:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c63a38b1cb

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 07-Nov-2025 05:18:40 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 7 hours 35 minutes 36 seconds
Server load: 3.77 2.62 2.41
Total accesses: 648268 - Total Traffic: 2.5 GB - Total Duration: 311363150
CPU Usage: u34.48 s30.41 cu171.69 cs106.69 - .0385% CPU load
.727 requests/sec - 3022 B/second - 4156 B/request - 480.3 ms/request
2 requests currently being processed, 48 idle workers
.........................______W________________________________
_W_________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/10566.
0.0080853548881080.00.0041.93
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/10176.
0.008085380138487730.00.0040.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/9981.
0.0080853140973230.00.0039.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0-0/0/9986.
0.00808534937779790.00.0040.50
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9842.
0.00808532550180950.00.0039.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8ae66ee974d29

0-0-0/0/9501.
0.0080853746225670.00.0037.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9928.
0.0080853540797700.00.0039.08
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9268.
0.0080853141119820.00.0037.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0-0/0/9504.
0.0080853140340270.00.0037.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0-0/0/9697.
0.008085323751389320.00.0038.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Sls

0-0-0/0/10040.
0.0080853543735110.00.0039.83
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9332.
0.0080853544297400.00.0037.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9073.
0.0080853740097290.00.0035.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0-0/0/10345.
0.0080853345061060.00.0040.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0-0/0/9122.
0.0080853048050700.00.0036.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/9754.
0.0080853038514360.00.0038.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/9993.
0.0080853045883670.00.0039.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/10218.
0.0080853642899090.00.0040.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/9908.
0.0080853540968120.00.0039.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0-0/0/9772.
0.0080853539040110.00.0039.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/10597.
0.0080853148613880.00.0041.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0-0/0/9612.
0.0080853335735310.00.0037.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XV

0-0-0/0/9914.
0.008085352144038550.00.0039.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0-0/0/10414.
0.0080853550111300.00.0041.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0-0/0/10065.
0.0080853543455180.00.0039.78
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/1128/8786_
13.23494042910070.05.1635.31
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0294180/898/9478_
13.25291542705910.04.0137.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/1064/9316_
13.24404542899090.04.5436.43
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/1231/9209_
13.2444124443994170.05.4336.83
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0294180/842/9362_
13.25317541125630.03.7736.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/882/8944_
13.261791041841347530.03.9735.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-02941827/947/8854W
13.2900439629942.74.1034.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-0294180/878/10031_
13.253174346546300.03.8739.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294180/1163/9510_
13.25359540800730.05.0437.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/959/8952_
13.2968552065690.04.2435.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/819/8673_
13.23454541768730.03.8034.54
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/1081/9202_
13.24377450876780.04.5136.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCfZd

1-0294180/978/8971_
13.24428542596780.04.3736.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/824/9091_
13.2994449329090.03.6035.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/1183/8977_
13.25274442388780.05.1835.35
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/769/10211_
13.27165545968750.03.2539.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/1089/9280_
13.2928444130970.04.4336.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET / HTTP/1.1

1-0294180/1105/8486_
13.25248643828800.05.0434.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294180/908/10197_
13.262113246809320.04.1040.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/861/8682_
13.28141546466290.03.6534.26
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0294180/892/8397_
13.25338256238371630.03.86

Found on 2025-11-07 05:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c69ee460a8

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 05-Nov-2025 04:21:03 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 6 hours 37 minutes 58 seconds
Server load: 1.27 1.85 2.15
Total accesses: 570216 - Total Traffic: 2.2 GB - Total Duration: 230024632
CPU Usage: u25.46 s22.98 cu151.6 cs95.83 - .0414% CPU load
.797 requests/sec - 3269 B/second - 4099 B/request - 403.399 ms/request
1 requests currently being processed, 49 idle workers
_W_______________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0186440/1329/9859_
20.8399044096950.05.7838.76
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-01864434/1622/9445W
20.8400338593271.46.8637.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-0186440/1885/9331_
20.82338891634474620.07.9836.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0186440/1840/9319_
20.82384226234256370.07.9037.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0186440/1714/9150_
20.82187043428790.07.4236.29
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0186440/1614/8843_
20.81407540508230.07.1235.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0186440/1417/9168_
20.8358735591340.06.2135.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0186440/1610/8536_
20.82368035406810.07.0234.05
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0186440/1625/8719_
20.79510435519670.07.0334.64
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/1472/8928_
20.822547843745810.06.3434.97
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0186440/1719/9180_
20.82330635643110.07.0836.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/1298/8548_
20.82166037461210.05.6733.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0186440/1214/8414_
20.79468434708390.05.2132.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDv

0-0186440/1541/9512_
20.8334535734820.06.4337.08
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0186440/1457/8448_
20.82284441894650.06.3533.27
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0186440/1408/9048_
20.7855423234063080.05.8935.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNboMwEIRfBfke82cIW

0-0186440/1516/9206_
20.78546536361700.06.6536.21
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0186440/1380/9514_
20.83116637100940.05.5537.03
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/1249/9120_
20.795271835472870.05.5735.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0186440/1431/8951_
20.83150431949060.06.4235.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/1566/9833_
20.82384641839860.06.6038.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0186440/1235/8934_
20.82223317031391220.05.2734.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMe

0-0186440/1619/9263_
20.8376536545390.07.0136.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whj

0-0186440/1215/9505_
20.7948721441535990.05.6837.97
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bj

0-0186440/1581/9403_
20.7944522234430040.06.7637.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZE9T8MwEIb3Sv0PkffGc

1-0-0/0/7658.
0.0069540531203110.00.0030.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/8580.
0.0069540132060650.00.0033.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/8252.
0.0069540432456650.00.0031.88
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/7978.
0.00695402732376260.00.0031.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdctbS1n

1-0-0/0/8520.
0.00695402731637790.00.0032.59
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0-0/0/8062.
0.0069540429449150.00.0031.24
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/7907.
0.0069540536024510.00.0030.54
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/9153.
0.0069540435803090.00.0035.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpU

1-0-0/0/8347.
0.006954023227591890.00.0032.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNTsMwEIRfJfK9%2Fkl

1-0-0/0/7993.
0.00695403138006680.00.0031.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/7854.
0.0069540032237720.00.0030.74
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/8121.
0.0069540039601310.00.0031.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/7993.
0.0069540032538510.00.0032.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/8267.
0.0069540034643580.00.0031.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0-0/0/7794.
0.0069540262528715180.00.0030.17
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLbsIwEEV%2FJfIev8C

1-0-0/0/9442.
0.0069540435055140.00.0036.67
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0-0/0/8191.
0.00695402635265910.00.0031.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-0-0/0/7381.
0.0069540434015220.00.0029.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/9289.
0.0069540285736461740.00.0036.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/7821.
0.0069540598231689690.00.0030.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0-0/0/7505.
0.00695

Found on 2025-11-05 04:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c62523ebec

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 15:26:43 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 17 hours 43 minutes 38 seconds
Server load: 0.20 0.48 0.64
Total accesses: 502263 - Total Traffic: 1.9 GB - Total Duration: 200317367
CPU Usage: u18.78 s18.14 cu132.6 cs85.13 - .0437% CPU load
.863 requests/sec - 3489 B/second - 4045 B/request - 398.83 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0186440/147/8677_
2.077672938788250.00.5933.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0186440/153/7976_
2.07873028819610.00.6931.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0186440/162/7608_
2.0782849725360320.00.6729.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0186440/185/7664_
2.077052928118400.00.7630.42
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpK

0-0186440/157/7593_
2.07805037056700.00.6729.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /xmlrpc.php HTTP/1.1

0-0186440/183/7412_
2.0867550034126780.00.7028.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEED%2FSm4%2

0-0186440/130/7881_
2.0773650930035310.00.5630.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0186440/171/7097_
2.09529328264070.00.7727.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0186440/155/7249_
2.08636429521290.00.6528.26
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/111/7567_
2.08616436961750.00.5029.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe92kqHM

0-0186440/158/7619_
2.09576529972100.00.7029.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/171/7421_
2.09438333753160.00.7728.63
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0186440/139/7339_
2.09309529826740.00.5728.25
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt76tHU

0-0186440/130/8101_
2.09336529475620.00.5131.16
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/129/7120_
2.09216536105250.00.5627.49
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/155/7795_
2.0925554328124920.00.6230.45
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJbS8MwFID%2FSt%2Fyl

0-0186440/126/7816_
2.0947053230350770.00.5930.14
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdq61

0-0186440/175/8309_
2.09156431794530.00.6532.13
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/164/8035_
2.0918222731260660.00.6930.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0186440/135/7655_
2.09396626794540.00.6029.66
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0186440/147/8414_
2.097549134608570.00.6132.11
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0186440/137/7836_
2.091064226301910.00.6430.19
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0186440/154/7798_
2.078942927524000.00.6429.98
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3d7e76c048cca

0-0186440/129/8419_
2.0936535246380.00.5732.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-01864425/183/8005W
2.0900282489330.30.6530.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-096300/1310/6751_
18.41540627647280.05.2426.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcJo

1-096300/1479/7684_
18.41797728644470.05.9230.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096300/1460/7502_
18.4296428922680.05.8529.12
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/1200/7111_
18.41888428496340.04.9527.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wgT

1-096300/1490/7878_
18.42224528304040.05.4629.92
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-096300/1445/7208_
18.42196426596740.06.1527.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096300/1330/7053_
18.41452531125380.05.3427.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096300/1473/8130_
18.4158253030415450.06.4131.46
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096300/1222/7634_
18.41696424612280.05.1529.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/1359/6898_
18.4173650933944250.05.6026.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-096300/1324/7041_
18.4216549829497470.05.5127.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096300/1193/7197_
18.4240892635401990.04.7227.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpC

1-096300/1572/6882_
18.42276427575810.06.8727.60
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/1567/7443_
18.42135430799970.05.9528.30
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-096300/1281/6852_
18.42376526182530.05.1526.24
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-096300/1672/8637_
18.4229431709090.06.7433.30
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096300/1498/7420_
18.423184631654880.06.0428.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5c58ba8b10c41

1-096300/1368/6599_
18.4191752730388150.05.5226.22
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

1-096300/1238/8450_
18.41857532316570.04.8532.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJI

1-096300/1362/7294_
18.41629428743850.05.5028

Found on 2025-11-03 15:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c66330ac32

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 02-Nov-2025 05:16:14 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 7 hours 33 minutes 10 seconds
Server load: 1.83 1.78 1.84
Total accesses: 449325 - Total Traffic: 1.7 GB - Total Duration: 178159031
CPU Usage: u13.48 s13.99 cu118.45 cs76.97 - .0485% CPU load
.979 requests/sec - 3917 B/second - 4003 B/request - 396.504 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292690/785/7625_
10.2859033046630.02.9629.24
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0292690/750/6821_
10.2810835222955190.02.9126.08
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBb4MwDIX%2FCsq9IQR

0-0292690/756/6491_
10.27175420818240.02.9024.40
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BsgFMe%2FSt94o

0-0292690/735/6476_
10.2713775922888390.02.7625.43
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbsIwEP2VyHfiEAioF

0-0292690/784/6521_
10.26342633719600.02.9025.16
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/834/6307_
10.272914229706230.03.2124.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292690/770/6835_
10.27237425032500.02.7625.65
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-0292690/857/6103_
10.2720452224103230.03.3323.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0292690/869/6186_
10.2630782125043210.03.3223.94
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-02926929/943/6568W
10.3000312788044.33.6024.98
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

0-0292690/834/6528_
10.288423725312270.03.0025.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt76tHU

0-0292690/853/6391_
10.24642429082220.02.9624.33
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/671/6350_
10.246672424356530.02.5824.07
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/637/7118_
10.3034025510060.02.2427.18
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0292690/723/6213_
10.2459449831737360.02.6723.71
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0292690/784/6865_
10.24564525078950.03.0426.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

0-0292690/867/6880_
10.26402526825120.02.8726.25
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/884/7060_
10.2453053627301170.03.2926.72
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0292690/709/7012_
10.24483427375010.02.6826.56
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0292690/779/6757_
10.25411422740070.02.9325.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0292690/796/7207_
10.246074428125390.02.8027.00
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/834/6732_
10.27256423137760.03.1225.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0292690/778/6845_
10.25462523293360.02.7725.98
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292690/827/7319_
10.26316630341420.03.0328.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0292690/737/6954_
10.26367424374570.02.8026.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/348/5789_
4.14127423489890.01.2322.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/327/6532_
4.14162423705740.01.2925.53
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/397/6439_
4.147724925031710.01.4324.70
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-096300/294/6205_
4.1447024806870.01.0823.86
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-096300/384/6772_
4.14102423703340.01.0625.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/297/6060_
4.1168151522452530.01.0722.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096300/280/6003_
4.1441625018650.00.9722.69
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-096300/332/6989_
4.11627627221550.01.3326.38
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096300/279/6691_
4.11657420734650.01.0225.25
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096300/281/5820_
4.116008030563890.00.9922.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096300/307/6024_
4.11582425029360.01.0922.79
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/294/6298_
4.11547531014750.01.0324.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/400/5710_
4.12427422741480.01.6422.37
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/414/6290_
4.12522425973530.01.2323.58
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096300/261/5832_
4.12475421982240.00.9522.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tXU

1-096300/365/7330_
4.1338182227835850.01.4327.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096300/310/6232_
4.12403026733780.01.1323.62
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-096300/298/5529_
4.1335352326295590.01.0321.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcJa

1-096300/283/7495_
4.14316028976980.00.9428.80
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-096300/330/6262_
4.13326425211900.01.2524.20
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8Mg

Found on 2025-11-02 05:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6b0688075

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 29-Oct-2025 01:56:47 UTC
Restart Time: Monday, 27-Oct-2025 21:43:04 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 4 hours 13 minutes 43 seconds
Server load: 1.31 1.63 2.12
Total accesses: 130351 - Total Traffic: 509.0 MB - Total Duration: 43191221
CPU Usage: u39.22 s25.74 cu0 cs0 - .0639% CPU load
1.28 requests/sec - 5.1 kB/second - 4094 B/request - 331.346 ms/request
2 requests currently being processed, 73 idle workers
________________________________________W_______________________
_K_________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/2889/2889_
26.15603410274540.011.3911.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0350/2320/2320_
26.3527527336290.08.858.85
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0350/2028/2028_
26.2055634275090.07.997.99
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/2139/2139_
26.3620137311320.08.708.70
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/2295/2295_
26.508839847350.09.029.02
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/2293/2293_
26.3524726077790.08.878.87
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36ba21e068877

0-0350/2313/2313_
26.591525086990.08.898.89
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0350/2174/2174_
26.4113935199390.08.528.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/1981/1981_
26.2154734958300.07.747.74
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0350/1893/1893_
26.26442212103350.07.307.30
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9f179f26ec3e3

0-0350/1953/1953_
26.156038934342460.07.597.59
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0350/2219/2219_
26.54392708689110.08.938.93
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZFBT8MwDIXvk%2FYfqtz

0-0350/2238/2238_
26.2641536805780.08.578.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/2335/2335_
26.0866690047747680.09.329.32
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0350/2157/2157_
26.29320411785640.08.528.52
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2fd472f758368

0-0350/2341/2341_
26.0866127469460.09.489.48
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bde22eda32e92

0-0350/1953/1953_
26.362071315775430.07.687.68
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0350/2337/2337_
26.235283849435710.09.049.04
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bd

0-0350/2141/2141_
26.1560327174480.08.158.15
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_21fa4222fab78

0-0350/1788/1788_
26.2935445743390.06.966.96
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0350/2517/2517_
26.2935434708230.09.779.77
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0350/2188/2188_
26.245025066136160.08.288.28
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

0-0350/2498/2498_
26.4511426365070.09.819.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_042294d2e7118

0-0350/2539/2539_
26.2645927310270.010.0610.06
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a26ee0de8498

0-0350/2030/2030_
26.1261924507360.08.108.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0360/2153/2153_
27.2112999095370.08.518.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_90a4d810ac663

1-0360/2200/2200_
27.004501326622190.08.738.73
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0360/1985/1985_
26.9551035257870.07.847.84
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-0360/2538/2538_
27.2564210294620.09.909.90
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1bd99eda0442c

1-0360/2460/2460_
27.255148810220.09.349.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0360/2133/2133_
26.9256038413550.08.238.23
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0360/2126/2126_
27.0931406221580.08.458.45
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0360/2639/2639_
26.8958537932360.010.1010.10
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0360/2173/2173_
27.1721325095780.08.368.36
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_42d5e511b0297

1-0360/1919/1919_
27.0440228561750.07.417.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0360/2194/2194_
26.8664628747790.08.578.57
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6bab7b46f6986

1-0360/2210/2210_
26.8565447762780.08.618.61
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0360/2664/2664_
27.2116727538250.010.5110.51
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0360/2303/2303_
27.0937978544120.08.818.81
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0360/2012/2012_
26.9158335540640.07.827.82
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-03689/2711/2711W
27.2900772111295.310.3910.39
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /server-status HTTP/1.1

1-0360/2214/2214_
27.0934526968000.08.348.34
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2d64e62c3dfe9

1-0360/1787/1787_
26.8663638730160.07.267.26
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0360/3132/3132_
27.21157227319350.012.4112.41
127.0.0.1http/1.1ip-10-1-103-230.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ea23b8ac9cba7

1-0360/2619/2619_
26.9549448546960.0

Found on 2025-10-29 01:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c64b5dba50

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 27-Oct-2025 00:27:59 UTC
Restart Time: Tuesday, 30-Sep-2025 02:16:15 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  26 days 22 hours 11 minutes 43 seconds
Server load: 2.42 2.26 2.31
Total accesses: 1198976 - Total Traffic: 4.6 GB - Total Duration: 578459901
CPU Usage: u34.3 s45.91 cu346.52 cs208.06 - .0273% CPU load
.515 requests/sec - 2111 B/second - 4096 B/request - 482.462 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-018880/1080/21267_
13.31512095902940.04.4382.75
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-018880/869/20091_
13.39301633094383160.03.3977.59
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-018880/1264/19532_
13.4287898760280.05.0776.09
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-018880/1056/19714_
13.42175189429760.04.1177.11
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-018880/1188/20116_
13.373764397678710.04.8077.17
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-018880/1142/20340_
13.392321781810320.04.7879.08
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-018880/1229/20706_
13.354216776232670.04.9179.86
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-018880/991/20053_
13.324901107665500.03.5477.51
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-018880/1019/19942_
13.40205191177320.04.3377.90
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-018880/1191/19936_
13.383223903190667700.04.7778.19
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-018880/1055/20627_
13.38320090812830.04.3079.21
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

0-018880/1079/20252_
13.42681199696380.04.3178.22
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-018880/971/20119_
13.37344090787940.04.1577.95
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-018880/1225/20309_
13.392954103195130.04.9279.05
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-018880/881/20100_
13.39250633692890510.03.5377.99
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-018880/1031/20817_
13.42174189641260.04.1280.58
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-018880/935/20565_
13.426768496891120.03.6879.48
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLTtwwFN1X4h8s7%2FO

0-018880/966/20027_
13.31530123995390770.03.9777.39
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-018880/1248/20396_
13.34476692217030.05.0178.80
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-018880/971/19023_
13.4224095441880.04.0073.21
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-018880/1087/20785_
13.4235497989770.04.2380.95
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

0-018880/1002/20693_
13.4213921093226750.04.1381.28
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVJNb9QwEL0j8R8s3%2FO

0-018880/1032/20668_
13.39286211987332610.04.4180.60
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-018880/1067/20135_
13.363871086735590.04.2977.64
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-018880/1131/20688_
13.34471089040930.04.5480.95
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-02765928/518/18896W
4.0100901416242.52.1773.77
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /server-status HTTP/1.1

1-0276590/327/20129_
3.991063100952780.01.5078.17
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0276590/296/20326_
3.942983907884268040.01.3879.79
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0276590/265/18521_
3.96188583780330.01.0971.30
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKchV

1-0276590/243/18923_
3.94292693880510.01.0673.13
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0276590/291/19178_
3.943446009285068360.01.3974.84
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0276590/376/20987_
3.94320097046890.01.6682.10
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0276590/230/19856_
3.9052153886972840.01.1377.78
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBbsIwEEWvEnmP7Zg6J

1-0276590/228/19690_
4.006820983723140.01.1877.53
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZJPb9swDMXvA%2FYdBN3

1-0276590/250/21091_
4.004688290948010.01.1682.64
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0276590/376/19242_
3.9435056897671500.01.6475.74
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0276590/362/20383_
3.93399081258020.01.5179.58
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0276590/176/20732_
3.95267673605480.00.9180.56
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0276590/189/20519_
3.98147691272140.00.8680.73
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0276590/293/19071_
3.95243693175570.01.3873.82
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

1-0276590/334/19649_
3.92442099490990.01.5777.73
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0276590/295/20299_
4.002438391300300.01.5279.75
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0276590/290/19846_
3.91490186194050.01.3477.15
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0276590/261/19353_
3.9620020785592560.01.2175.54
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Smk

1-0276590/271/19841_
4.00652290377600.01.1876.59
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

1-0276590/273/19691_
3.90515493852630.01.4777.29
127.0.0.1http/1.1

Found on 2025-10-27 00:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6ab6c8202

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 24-Oct-2025 16:23:28 UTC
Restart Time: Tuesday, 30-Sep-2025 02:16:15 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 14 hours 7 minutes 12 seconds
Server load: 0.32 0.49 0.59
Total accesses: 1133718 - Total Traffic: 4.3 GB - Total Duration: 534631620
CPU Usage: u40.64 s47.18 cu316.74 cs191.93 - .0281% CPU load
.534 requests/sec - 2183 B/second - 4090 B/request - 471.574 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-08470/1840/19985_
22.055622687290010.07.5577.51
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-08470/1568/19028_
22.05682786147590.06.7173.44
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1600/18071_
22.0412812791636560.06.7470.36
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1608/18400_
22.05351581966320.07.0172.01
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu56tZW

0-08470/1686/18702_
22.0572925389233740.06.6171.51
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-08470/1856/19006_
22.051162675423220.07.8973.62
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1730/19196_
22.05801670549160.07.2273.84
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1625/18863_
22.05403598129240.07.0173.17
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUbquq

0-08470/1692/18671_
22.05597484543430.07.0872.61
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-08470/1672/18547_
22.0521826183834720.06.9772.67
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefEschL

0-08470/1562/19351_
22.05772581792550.06.5674.13
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-08470/1777/18985_
22.05296490429860.07.4373.30
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-08470/1746/18947_
22.05141681837730.07.2873.09
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/2050/18911_
22.05981693318680.08.3473.54
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1572/19010_
22.051102787103790.06.7273.67
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1704/19566_
22.05115577474060.06.8375.65
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-08470/1957/19428_
22.05441690235960.07.9775.07
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1703/18885_
22.05476685236850.07.3172.81
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4a

0-08470/1717/18944_
22.041195585431770.06.7473.03
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-08470/1278/17804_
22.051035486305590.05.1068.21
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-08470/1723/19482_
22.05921688256400.07.4875.94
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1727/19484_
22.05631786377950.07.3576.36
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt76tHU

0-08470/1685/19370_
22.051068579776950.07.1675.26
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgX

0-08470/1684/18876_
22.05861679687020.07.2472.67
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-08470/1718/19336_
22.0553425880689530.07.2475.59
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpC

1-065310/768/17296_
8.27382681830510.03.2067.45
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/702/18690_
8.261221688179750.02.9772.42
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/619/19112_
8.2781773930210.02.5674.70
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0653124/605/17192W
8.2800728781834.42.1866.02
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /server-status HTTP/1.1

1-065310/496/17750_
8.261180583420540.02.2068.50
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-065310/455/17834_
8.27261673483530.01.8469.30
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/611/19547_
8.26107328987639120.02.4876.56
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCfpD

1-065310/628/18590_
8.26741675048620.02.5872.52
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/691/18510_
8.261041575496180.03.1872.59
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-065310/716/19854_
8.261014480481990.03.1677.60
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCehK

1-065310/524/17895_
8.26113440185528830.02.3270.25
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-065310/644/18978_
8.27451103074977550.02.5374.04
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-065310/576/19569_
8.2666123764334590.02.5075.93
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMcus

1-065310/605/19177_
8.275021581214550.02.5775.42
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/497/17708_
8.26621684779000.02.0168.53
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/624/18336_
8.26788688622710.02.4672.38
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-065310/626/18841_
8.27321681230660.02.6773.60
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-065310/786/18705_
8.2712527374886170.03.3772.49
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-065310/787/18161_
8.27435378691560.03.3270.65
127.0.0.1http/1.1ip-10-1-110-214.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-065310/705/18610_
8.26956684150320.02.9871

Found on 2025-10-24 16:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c640b32af4

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 20-Nov-2024 23:14:47 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  112 days 13 hours 4 minutes 54 seconds
Server load: 0.78 1.92 2.45
Total accesses: 2921862 - Total Traffic: 11.2 GB - Total Duration: 1997178668
CPU Usage: u102.09 s167.6 cu941.97 cs528.68 - .0179% CPU load
.3 requests/sec - 1238 B/second - 4122 B/request - 683.529 ms/request
1 requests currently being processed, 49 idle workers
___W______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-019480/469/58146_
7.38384400064680.01.87227.15
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/494/55132_
7.371203392869060.02.06215.50
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/502/59043_
7.2955160043431264550.02.06229.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-019485/519/56987W
7.38004050728111.22.18223.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

0-019480/507/57353_
7.361787383450740.02.10225.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/487/58492_
7.343750394395300.01.96229.00
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-019480/587/56934_
7.381292390167520.02.56222.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-019480/602/57730_
7.2861682375143640.02.71225.45
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-019480/542/56919_
7.361422414029390.02.46222.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e982fed58eddf

0-019480/472/56262_
7.38696386691640.02.10218.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-019480/393/56606_
7.2861460062355986210.01.47222.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-019480/468/57678_
7.315285395676830.02.05227.54
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-019480/472/57975_
7.295673397532120.01.75226.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/483/59110_
7.32440761405303220.02.02231.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-019480/566/58155_
7.285991288374426060.02.61229.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

0-019480/463/55872_
7.352612419655400.01.92219.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_11b86480c4f42

0-019480/459/56101_
7.314610414364360.02.11221.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-019480/544/56715_
7.343175389600600.02.33221.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/497/55572_
7.315212381580450.02.00217.82
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65a9cb8620956

0-019480/501/56713_
7.342882394561600.02.03223.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9ac0f20017616

0-019480/665/56264_
7.343683372674220.02.99220.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_646c05ca66bf5

0-019480/465/57652_
7.352416385561650.02.03225.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-019480/439/57623_
7.361993374201090.01.74224.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-019480/658/57891_
7.371044392647340.02.87228.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-019480/372/55340_
7.362216372536560.01.51217.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0257780/808/54514_
11.182827125379903590.03.20213.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0257780/789/55639_
11.192370372874670.03.19218.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0257780/660/56092_
11.1355470369484240.02.48218.15
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0257780/991/57250_
11.126790379044890.04.39224.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257780/868/55221_
11.1259533364517610.03.48215.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0257780/746/57069_
11.181136377383730480.03.05227.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0257780/752/56915_
11.135762812394699550.03.06222.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0257780/722/56845_
11.1262395411355130.02.92221.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0257780/655/56746_
11.172750388663210.02.73223.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257780/701/55069_
11.135321411387740.02.94215.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0257780/862/56638_
11.144807386926210.03.48220.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0257780/825/54964_
11.1725046390870170.03.55217.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0257780/796/53526_
11.144520379418000.03.54211.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257780/861/55658_
11.154006385473850.03.86218.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0257780/854/55521_
11.172964370436480.03.68216.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0257780/793/57248_
11.154314377743180.03.25224.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0257780/689/57360_
11.181687357579820.02.68224.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0257780/769/56705_
11.182140358970620.02.98222.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0257780/730/53796_
11.182286374074830.02.97209.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0257780/757/56681_
11.181932365424200.03.30222.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core

Found on 2024-11-20 23:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c64ff0c109

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 18-Nov-2024 21:25:41 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  110 days 11 hours 14 minutes 58 seconds
Server load: 1.24 1.32 1.28
Total accesses: 2880313 - Total Traffic: 11.1 GB - Total Duration: 1942391837
CPU Usage: u85.86 s156.23 cu899.6 cs510.78 - .0173% CPU load
.302 requests/sec - 1243 B/second - 4120 B/request - 674.368 ms/request
1 requests currently being processed, 49 idle workers
__W______________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-091840/441/55589_
3.90101200370371690.01.66217.60
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBbsIwEER%2FJfIdx3Y

0-091840/482/55915_
3.891391374721730.02.09218.45
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-091846/356/56623W
3.93003987082410.01.20223.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-091840/310/57631_
3.90529377133600.01.11225.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091840/293/58490_
3.909212377264320.01.23230.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e0bf87cae71d

0-091840/363/55107_
3.865624302398552170.01.41216.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/250/58052_
3.89125456392351390.00.95227.45
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBTsMwEEWvEnlfx3baJ

0-091840/305/56885_
3.9221691388746100.01.27222.59
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-091840/255/55901_
3.865281109357782650.00.92219.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEP5Xlr6zrgNBG

0-091840/231/57111_
3.86529986358664340.00.87223.36
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFP4rS99Z3ZyID

0-091840/271/56190_
3.86538557378134070.01.01220.07
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/271/56920_
3.865079781372804970.01.00224.57
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/225/58149_
3.8746227650387025310.00.98226.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/269/56538_
3.864992414389370880.01.10221.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/387/55750_
3.87452366362107970.01.53223.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-091840/344/56794_
3.884030380194380.01.47223.39
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-091840/217/56917_
3.874241787390340350.00.95223.16
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-091840/228/55838_
3.893280364343410.00.82218.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-091840/222/56294_
3.88368208382552130.00.90220.15
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHNTsMwEIRfJfK9jp3%2

0-091840/276/55527_
3.883610365682250.01.10219.87
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-091840/325/56223_
3.893000385519810.01.27220.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-091840/374/58694_
3.89255199395549720.01.48231.16
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeyZL%2

0-091840/345/54731_
3.89194366382280990.01.27215.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVLLbsIwEPyVyPfYsQsUL

0-091840/261/55986_
3.892310390539360.00.95220.51
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-091840/321/56068_
3.90757367938970.01.38220.68
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/48820.
0.00706492496332281560.00.00194.14
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/48395.
0.00706494340155530.00.00191.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0-0/0/46173.
0.0070649280332565630.00.00181.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZJba9wwEEb%2FilGfbd2

1-0-0/0/45862.
0.007064928227331594070.00.00179.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/46518.
0.00706494343595920.00.00185.56
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/accountinfo/complete.php HTTP/1.1

1-0-0/0/48258.
0.007064927447331381540.00.00189.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/48008.
0.0070649104325168180.00.00191.53
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/47474.
0.00706491322790320.00.00187.72
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/46735.
0.00706493311293150.00.00183.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_be1f24737653d

1-0-0/0/46428.
0.00706495324475030.00.00181.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/46942.
0.00706494319897190.00.00185.18
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/47876.
0.00706494317161940.00.00191.57
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/47827.
0.00706494887333376980.00.00188.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/48948.
0.007064953328010150.00.00194.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/47442.
0.007064939432329548410.00.00188.58
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/47948.
0.00706491548334079100.00.00188.07
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/46485.
0.00706495319533440.00.00183.42
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0-0/0/47713.
0.00706492481334486890.00.00189.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/48847.
0.00706494747341841920.00.00198.29
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/47102.
0.00706498339691890.00.00186.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0-0/0/49780<

Found on 2024-11-18 21:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6a6517921

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 19:36:10 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  108 days 9 hours 25 minutes 28 seconds
Server load: 1.64 1.38 1.17
Total accesses: 2791388 - Total Traffic: 10.7 GB - Total Duration: 1891991211
CPU Usage: u90.53 s157.71 cu868.31 cs492.22 - .0172% CPU load
.298 requests/sec - 1229 B/second - 4126 B/request - 677.796 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-011810/696/53559_
8.773373361266600.02.82209.92
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/564/54179_
8.756127366838780.02.00211.64
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-011810/612/54863_
8.762105387862730.02.30216.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_800a2a285a91d

0-011810/542/55713_
8.77726367528350.02.09218.76
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-011810/601/56752_
8.7712585368777820.02.22223.36
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/752/53508_
8.7526939466388183790.03.10210.61
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/639/56013_
8.755529383376010.02.49219.65
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-011810/668/54932_
8.77120378823220.02.53215.14
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-011810/575/54402_
8.775463351492570.02.12213.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/572/54971_
8.75370465349459940.02.08215.39
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-011810/612/54401_
8.755763369668060.02.21213.52
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab485a2614e53

0-011810/645/55669_
8.754581410361935230.02.48220.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-011810/613/56263_
8.756645374321310.02.25219.78
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-011810/630/55350_
8.753265478378936630.02.53217.34
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/705/53813_
8.754086351037710.02.74216.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-011810/631/54762_
8.755105369552490.02.48215.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-011810/556/55051_
8.7527027516382289910.02.16216.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/633/54000_
8.753511362354098560.02.47212.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/638/54577_
8.753373258370675940.02.58213.74
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/605/53778_
8.76186140352593540.02.34213.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/798/54647_
8.7529519507375795180.03.14214.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/608/57118_
8.753159810386013670.02.37225.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/510/52542_
8.779170373633590.01.90206.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/604/54184_
8.75253258381514560.02.23214.02
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-011810/681/54384_
8.7522656796356476340.02.73214.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/672/47177_
9.16201223325193740.02.62187.99
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/702/46877_
9.153167134334026040.02.94186.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/628/44683_
9.153452657324206260.02.27176.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/728/44909_
9.154304323660630.02.84176.45
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-012280/685/45305_
9.1528913619336509280.02.61181.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/674/46743_
9.1525539552324502200.02.83184.14
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/616/46375_
9.16170105318559500.02.35185.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/545/45785_
9.153245185316002230.01.99181.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/626/45325_
9.16221142303289100.02.40177.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/725/44808_
9.162364785318225490.02.86175.41
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/576/45433_
9.1726292315617580.02.02179.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-012280/590/46593_
9.178570313059880.02.43186.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/676/46088_
9.14567447326013200.02.64181.96
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/624/47529_
9.174887323535870.02.53189.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/666/45948_
9.153343076324112290.02.62182.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/675/46504_
9.136394325789750.02.66182.79
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-012280/850/45396_
9.153102121312934900.03.37179.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/597/46693_
9.14538431329100860.02.30185.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-012280/536/46849_
9.17663334085520.02.12190.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_97cae2d7e5b75

1-012280/778/45420_
9.15355636329704650.03.25180.72
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-012280/73

Found on 2024-11-16 19:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c68aaa90d5

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 17:17:58 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  106 days 7 hours 8 minutes 6 seconds
Server load: 1.22 1.73 2.00
Total accesses: 2759100 - Total Traffic: 10.6 GB - Total Duration: 1874379453
CPU Usage: u96.65 s157.78 cu887.35 cs497.61 - .0179% CPU load
.3 requests/sec - 1239 B/second - 4126 B/request - 679.344 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0192070/402/54636_
6.14512373089380.01.65213.69
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3119aaa672200

0-0192070/430/51676_
6.14993368462130.01.93202.35
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d271b304c11a

0-0192070/452/55724_
6.142441396952860.01.88216.34
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0192070/377/53635_
6.141753379807000.01.55210.35
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/359/54100_
6.142014357361730.01.51213.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/442/55067_
6.138623369275450.01.79216.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3be3c30c98591

0-0192070/439/53136_
6.13399424367546330.01.95208.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/500/54152_
6.143034348415450.02.10211.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/470/53510_
6.135016387265460.02.14209.07
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0192070/435/53090_
6.143553362924730.01.60206.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/394/53423_
6.133753338014480.01.71210.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/361/54434_
6.134534363595950.01.57214.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/414/55097_
6.141353373798430.01.65215.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c9be9af6d9534

0-0192070/375/55502_
6.14122379876910.01.52217.85
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56951dac37077

0-0192070/447/54683_
6.138242348979450.01.80216.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3dd7f9fed83c5

0-0192070/398/52819_
6.138441392773910.01.78207.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0192070/478/53246_
6.137845383777640.02.17210.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0192070/354/53591_
6.137630368148650.01.43209.29
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0192070/378/52373_
6.139046356097320.01.57205.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0192070/461/53608_
6.13614406370040990.01.96211.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/427/52792_
6.137234347291200.01.75206.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/347/54375_
6.13677418366306950.01.38212.80
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/345/54380_
6.136534352755100.01.39212.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/345/54627_
6.135864371154840.01.41215.25
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0192070/379/52564_
6.135445353288940.01.59206.83
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-041910/786/51072_
11.581841358771120.03.50200.08
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-041910/738/52313_
11.582784349655580.03.24205.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/844/52912_
11.58303350106640.03.71205.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_392a07884ce2d

1-041910/730/53835_
11.583893354286490.02.90210.36
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_284b8e0ab92c3

1-041910/747/51730_
11.575283340396390.03.03202.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/827/54319_
11.583647360370820.03.52216.78
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-041910/760/53946_
11.581592372658490.03.28211.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-041915/826/53502W
11.5800385142097.43.39209.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-041910/766/53511_
11.578872359172450.03.16210.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_49fc16b4d5cd5

1-041910/762/51991_
11.57480426386408950.03.39203.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/914/53359_
11.577004358109960.04.02208.21
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/777/51757_
11.57743423364091120.03.21205.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/937/50608_
11.576045353502480.03.95199.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-041910/896/52397_
11.58232290364026480.03.91205.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/755/52508_
11.58324301344934110.03.08204.88
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/710/53884_
11.581204352482020.03.11211.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bb3bd7dc64a29

1-041910/699/54365_
11.57835490338214460.02.97213.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/653/53691_
11.576646336130540.02.59210.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-041910/747/50534_
11.576324353700150.03.32197.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-041910/723/53116_
11.5864634413310

Found on 2024-11-14 17:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6c6e6fea9

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 20:03:05 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  104 days 9 hours 53 minutes 12 seconds
Server load: 2.59 2.87 2.17
Total accesses: 2723658 - Total Traffic: 10.5 GB - Total Duration: 1825841611
CPU Usage: u93.38 s154.08 cu874.96 cs491.26 - .0179% CPU load
.302 requests/sec - 1244 B/second - 4122 B/request - 670.364 ms/request
2 requests currently being processed, 48 idle workers
____________________W_____________________K_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-010440/992/53928_
14.46334366003360.04.14210.72
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_67a1a61455d20

0-010440/969/51034_
14.442004356506830.03.94199.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d48d8b1670591

0-010440/1066/55026_
14.394705387306690.04.27213.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_037c819daa6b1

0-010440/966/52996_
14.394861370482000.04.27207.63
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-010440/923/53475_
14.432145349606520.03.64210.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/1049/54309_
14.3955436357593410.04.24213.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-010440/918/52353_
14.395798359023090.03.70204.66
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-010440/891/53328_
14.45904199334441890.03.71208.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-010440/837/52799_
14.404154377038540.03.37205.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cc7407a11ea7f

0-010440/905/52408_
14.404033352478490.03.52203.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_138226ff81f7e

0-010440/895/52746_
14.404449326945630.03.61207.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-010440/833/53732_
14.404375355114860.03.35211.85
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-010440/952/54367_
14.4234610322365741170.03.89212.68
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-010440/992/54798_
14.43283198369860620.04.03214.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9CpS

0-010440/855/53925_
14.441607723341408330.03.54212.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-010440/961/52158_
14.423204383806050.03.93205.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=hVJNT%2BMwEL2vxH%2Bw

0-010440/923/52547_
14.455017372038660.03.94206.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-010440/913/52932_
14.395231358563510.03.97206.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-010440/1017/51661_
14.4236246347663870.04.47202.69
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-010440/1064/52860_
14.458898360667190.04.53208.43
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f05f8397c262

0-0104412/937/52069W
14.46003374622633.93.92203.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

0-010440/1009/53775_
14.43261210360383520.04.31210.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bj

0-010440/1049/53746_
14.395104343463200.04.20209.68
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-010440/970/53979_
14.44165104360159330.04.19212.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ba8f5530f8f3b

0-010440/1089/51928_
14.441170344474550.04.71204.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-041910/45/50331_
0.57386230349778250.00.16196.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-041910/44/51619_
0.573771342415330.00.16202.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-041910/61/52129_
0.5734344341883220.00.19202.47
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-041910/50/53155_
0.574234777344677100.00.16207.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-041910/33/51016_
0.574056596333550790.00.11199.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-041910/39/53531_
0.572081346002580.00.13213.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-041910/52/53238_
0.572724364800050.00.16208.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9ac8551b02c44

1-041910/46/52722_
0.591420373905150.00.14205.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-041910/42/52787_
0.573300350552610.00.13207.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-041910/48/51277_
0.545645371720410.00.16200.10
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-041910/63/52508_
0.61494347536840.00.23204.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2d1e233c8e1e8

1-041910/51/51031_
0.55500184355321040.00.17202.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bj

1-041910/46/49717_
0.61180342749380.00.15195.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-041910/40/51541_
0.554914352090780.00.13201.76
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cd6db45c8312b

1-041910/36/51789_
0.5547838336272230.00.15201.95
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-041910/77/53251_
0.61621344126240.00.31208.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-041910/44/53710_
0.591065326701770.00.15210.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-041911/68/53106K
0.6100326873861.00.22208.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /v2/_catalog HTTP/1.1

1-041910/61/49848_
0.61426343976960.00.23194.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-041910/39/52432_
0.591526334677210.00.142

Found on 2024-11-12 20:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6d580ac35

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 17:25:04 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  102 days 7 hours 15 minutes 12 seconds
Server load: 1.33 1.10 1.30
Total accesses: 2680759 - Total Traffic: 10.3 GB - Total Duration: 1775874759
CPU Usage: u86.15 s148.14 cu863.27 cs485.21 - .0179% CPU load
.303 requests/sec - 1249 B/second - 4118 B/request - 662.452 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-010440/99/53035_
1.802664358837390.00.40206.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4eeccc5e6471c

0-010440/102/50167_
1.783446350025150.00.42196.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/163/54123_
1.78391485376207650.00.73209.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/103/52133_
1.785895356945030.00.44203.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fd2c5055b6648

0-010440/151/52703_
1.784774343016200.00.52207.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6dd6d25a2885d

0-010440/133/53393_
1.783059345967560.00.56209.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-010440/142/51577_
1.802459351837490.00.53201.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-010440/110/52547_
1.802076324895320.00.39204.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/104/52066_
1.801347366249190.00.36202.83
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/119/51622_
1.80180432341508000.00.42200.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/103/51954_
1.80106415319046060.00.38204.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/84/52983_
1.80651344425330.00.30208.80
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-010440/99/53514_
1.8034419358137750.00.38209.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-010440/145/53951_
1.786714360722920.00.54211.34
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_240a0656cc18a

0-010440/108/53178_
1.777314329726050.00.42209.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9c2264842e36d

0-010440/143/51340_
1.777075374665920.00.56201.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d411637bf52fd

0-010440/107/51731_
1.785034361031150.00.37203.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7c3ef33b25e4c

0-010440/136/52155_
1.8028310349248900.00.56203.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-010440/93/50737_
1.777794337049040.00.37198.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0a30670e7ec09

0-010440/80/51876_
1.8058347913420.00.39204.29
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-010440/112/51244_
1.777954330021490.00.44199.69
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2ca343d65425

0-010440/183/52949_
1.786116351805270.00.81206.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0067ad94e9165

0-010440/143/52840_
1.784497333643070.00.59206.07
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLTtwwFN0j9R8s7%2FO

0-010440/135/53144_
1.785452349935010.00.51208.95
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-010440/120/50959_
1.784252333787970.00.59200.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0266610/358/49446_
5.112286332374620.01.39193.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/451/50880_
5.114581613336021290.01.57199.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZFRa8IwEID%2FSsl72qb

1-0266610/327/51322_
5.106659329477910.01.11199.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0266610/333/52178_
5.11137336833530.01.14203.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/378/50163_
5.107853326699060.01.41196.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0266610/383/52789_
5.115634333558150.01.36210.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/325/52205_
5.107634353512020.01.31203.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_657647b9bb3d6

1-0266610/320/51977_
5.11847362191270.01.04202.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/344/51806_
5.111576340815970.01.35203.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/338/50437_
5.112954355230980.01.28196.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_85ba263b39bb1

1-0266614/413/51606W
5.1100335936834.71.59200.82
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0266610/361/50089_
5.106884344240290.01.28198.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_85276d75667f8

1-0266610/334/48966_
5.106057335111900.01.21192.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0266610/397/50585_
5.105274337804360.01.34197.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_68ed019f8d668

1-0266610/314/50929_
5.107258327695020.01.04198.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0266610/382/52303_
5.105604332645460.01.41204.34
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c1ec9f39c7ffe

1-0266610/390/52898_
5.114385320314700.01.45206.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/349/52113_
5.1141424316558960.01.31204.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/338/48958_
5.11322475330368650.01.24190.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0266610/410/51397_
5.10485

Found on 2024-11-10 17:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c69e79b304

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 18:03:05 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  100 days 7 hours 52 minutes 23 seconds
Server load: 1.26 1.41 1.09
Total accesses: 2616937 - Total Traffic: 10.1 GB - Total Duration: 1718810773
CPU Usage: u85.19 s147.78 cu807.51 cs456.89 - .0173% CPU load
.302 requests/sec - 1245 B/second - 4126 B/request - 656.802 ms/request
2 requests currently being processed, 48 idle workers
__________________W_________K_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0108140/1117/50134_
10.301279457331140550.03.88196.32
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0108140/839/50529_
10.06946169332276450.03.05197.54
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/921/51353_
10.11807372349646180.03.39203.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1264/52075_
10.31132324434160.04.53204.25
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c247f6b505cd

0-0108140/1000/53317_
10.31293332760770.03.58209.54
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0108140/955/50000_
10.282703354237290.03.40196.35
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0108140/832/52227_
10.224412344334380.02.91204.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0108140/854/51273_
10.137451806343901060.02.97200.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1060/51116_
10.049956599321164250.03.86201.16
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1498/51721_
10.2916178318941040.05.45202.69
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-0108140/556/51257_
10.156556628334532410.01.96201.43
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1481/52323_
10.243415327976500.05.29207.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0108140/1483/52666_
10.301315340799300.05.33205.58
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0108140/1175/51986_
10.31762338778340.04.24203.91
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_813779f462a09

0-0108140/792/50078_
10.118542895323161250.02.89201.92
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1118/51431_
10.156493336624110.03.97202.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0108140/951/51330_
10.176094661346078230.03.38201.49
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/695/50275_
10.1753524322076830.02.43197.42
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-0108145/711/50796W
10.32003274405511.62.60198.54
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0108140/948/50421_
10.175583316504560.03.25200.06
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0108140/637/51124_
10.224102342090700.02.30200.76
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6bdbd7bf716a7

0-0108140/874/53636_
10.156675350890770.03.11211.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0108140/851/49806_
10.108693123341602480.03.07196.29
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1251/51032_
10.12773407350444610.04.54202.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0108140/1311/50868_
10.301282322657190.04.71200.05
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0108760/1000/43714_
10.204024282232320.03.59174.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

1-0108760/1441/43370_
10.2792465295352150.05.21172.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/827/41713_
10.241309512287512270.02.99164.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-01087618/888/41365K
10.27232940979061.83.03162.76
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0108760/831/41730_
10.176462474309631860.02.90166.69
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/1050/43166_
10.241275291309310.03.67170.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0108760/1034/43035_
10.119739277288665740.03.76172.10
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/950/42645_
10.203724284769990.03.45169.43
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0108760/872/42182_
10.195766606269915620.03.17165.33
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/768/41498_
10.176641814284512600.02.66162.36
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/720/42007_
10.205252279961380.02.62166.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_de4c9f10e28a6

1-0108760/947/43254_
10.1670512398279091500.03.41173.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/1072/42629_
10.17654270293536900.03.78168.22
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

1-0108760/1289/43833_
10.27231652287493760.04.56174.40
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/1414/42110_
10.241853286476820.05.01167.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0108760/975/42870_
10.157514692292204580.03.47168.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/670/41389_
10.119102240275050720.02.46163.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/960/43000_
10.275412603289027910.03.42170.68
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/1169/43745_
10.14823371299543080.04.12178.77
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0108760/1101/41578_

Found on 2024-11-08 18:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6ee9f7adc

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 19:53:30 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  98 days 9 hours 43 minutes 37 seconds
Server load: 0.69 1.04 1.23
Total accesses: 2533733 - Total Traffic: 9.7 GB - Total Duration: 1672512964
CPU Usage: u93.74 s148.4 cu808.53 cs452.14 - .0177% CPU load
.298 requests/sec - 1230 B/second - 4130 B/request - 660.098 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0290330/1422/50095_
21.245834338189430.05.69196.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0290330/1544/47921_
21.264883332424420.06.20187.48
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a9c307a1c8aba

0-0290330/1353/50573_
21.2812831353246440.05.68196.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0290330/1504/49594_
21.2631923335248020.06.38194.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f8f5fe5ddf2c9

0-0290330/1460/49966_
21.26382416327503470.06.17197.40
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/1426/50428_
21.27174203319151230.05.69198.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNbsIwEIRfJfIdx07In

0-0290330/1639/49166_
21.255583329156470.06.87192.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_95decf49b8fa4

0-0290330/1281/49400_
21.25525663308074940.05.02193.13
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Wij

0-0290330/1261/48964_
21.2949211341772050.05.27191.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bt

0-0290330/1293/48937_
21.271528321272260.05.21190.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/1274/48924_
21.272834300963390.05.37193.13
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_556ca6cda17f4

0-0290330/1630/50063_
21.295643324639340.06.91197.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0290330/1633/50512_
21.2634825336192480.06.78197.80
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0290330/1491/50588_
21.2723610337933680.06.17198.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_29d7885b3c2ef

0-0290330/1359/49777_
21.264527312434780.05.66196.95
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/1379/48699_
21.29793347186740.05.64191.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cf1ed0060374a

0-0290330/1597/48765_
21.2465429338102260.06.57192.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0290330/1718/48768_
21.27264253325816730.07.31190.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNTsMwEIRfJfK9Tuyk%

0-0290330/1416/47899_
21.246064317153500.05.67187.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3e69e37a91893

0-0290330/1275/48709_
21.29928329794660.05.40192.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/1236/48182_
21.2991791312728450.04.97188.36
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0290330/1483/49911_
21.29134330704370.06.05195.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0290330/1475/50353_
21.27190198312324880.06.10196.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFLT4NAFIX%2FCpl950G

0-0290330/1378/50303_
21.263020325182770.05.77198.51
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0290330/1317/48603_
21.263921312381390.05.32190.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0122630/137/46677_
2.252717310702010.00.56182.82
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0122630/138/48201_
2.253580319909670.00.58189.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0122630/134/48340_
2.25166223313218980.00.44188.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2BT

1-0122630/167/49105_
2.2524239319600490.00.66191.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0122630/141/47348_
2.253284304478230.00.57185.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_99412baaef5f6

1-0122630/141/49630_
2.235988305014760.00.51198.50
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0122630/132/48586_
2.261434328188340.00.55190.51
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5465b57d513e3

1-0122630/161/48932_
2.253100342276260.00.71191.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0122630/140/48245_
2.23542204322354580.00.57190.29
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBboMwEEWvgryPbRyHg

1-0122630/157/47560_
2.252117333891090.00.61185.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0122635/154/48601W
2.27003145264920.40.56189.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0122630/177/47723_
2.26859323979270.00.71189.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0122630/139/46206_
2.2611932316893570.00.57182.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0122630/167/48018_
2.26703314005360.00.68188.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_962869e75d0a9

1-0122630/151/48091_
2.2691824308303680.00.63187.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0122630/131/49081_
2.23631352315223490.00.50192.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0122630/140/49323_
2.235728304504870.00.57193.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0122630/171/49252_
2.253814727297517770.00.71193.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0122630/165/46394_
2.2728583312580870.00.76181.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBb8IwDIX%2FSpU7aZO

1-0122630/148/48124_

Found on 2024-11-06 19:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6883a019c

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 17:07:43 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  96 days 6 hours 57 minutes 50 seconds
Server load: 1.01 1.99 1.79
Total accesses: 2489956 - Total Traffic: 9.6 GB - Total Duration: 1596866088
CPU Usage: u88.93 s143.41 cu794.27 cs444.52 - .0177% CPU load
.299 requests/sec - 1234 B/second - 4125 B/request - 641.323 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0290330/523/49196_
7.5911641004324085330.02.02192.34
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVJdT9swFH1H2n%2Bw%2F

0-0290330/585/46962_
7.59571160317708310.02.22183.50
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/535/49755_
7.591059336313940.02.21193.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/550/48640_
7.5928510316036450.02.17190.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/550/49056_
7.59458311762750.02.21193.45
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290334/664/49666W
7.5900298185364.72.47195.00
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

0-0290330/595/48122_
7.572493657310726160.02.39188.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLbtswELwX6D8QvOtlG

0-0290330/474/48593_
7.5726956696293760700.01.64189.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/346/48049_
7.5723662186326607320.01.35187.47
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/489/48133_
7.5730415309418500.01.92187.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0290330/517/48167_
7.572758411290695380.02.05189.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/601/49034_
7.58223919333309399580.02.53193.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/663/49542_
7.58199837322276210.02.64193.66
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0290330/504/49601_
7.5822829112324981890.02.06194.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/457/48875_
7.58195613349296017770.01.80193.10
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/534/47854_
7.5817422439332136780.02.07188.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/521/47689_
7.5821817243324550050.02.05187.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/598/47648_
7.5820096786305200050.02.42185.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/583/47066_
7.5812264304801720.02.29184.54
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0290330/453/47887_
7.582149775317392790.01.86189.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/436/47382_
7.5821132673302746900.01.77185.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/506/48934_
7.5813167172319496560.02.08191.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVJNb9QwEL0j8R8s35Nsl

0-0290330/542/49420_
7.592259295135500.02.28192.95
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0290330/521/49446_
7.598502457310407000.02.13194.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0290330/482/47768_
7.593458297729130.02.02187.61
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0198090/787/45693_
11.2525440294527560.03.03178.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /robots.txt HTTP/1.1

1-0198090/1046/47507_
11.2619764302915750.04.32186.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0198090/829/47492_
11.2527383417298372490.03.14184.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/734/48247_
11.2623294477299829220.02.83188.25
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/633/46598_
11.253377201287714000.02.35182.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/726/48851_
11.27551868294712790.02.84195.25
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/765/47619_
11.2527761841312110810.02.95186.13
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/851/48028_
11.2621301985325564340.03.26187.45
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/758/47468_
11.26226113120307146410.02.89186.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/817/46686_
11.2620046780320267420.03.03181.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/767/47738_
11.2617745329296376290.02.99186.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/766/46819_
11.2621581305266890.03.19185.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0198090/746/45472_
11.2620774808303624130.03.00179.02
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/806/47021_
11.26220811007296231930.03.09184.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/886/47169_
11.27119359294939350.03.34184.36
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8964851f91fa7

1-0198090/788/48105_
11.27954371300351500.03.10188.49
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/855/48470_
11.2616984692288374170.03.25190.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0198090/920/48394_
11.274052283917250.03.38190.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0198090/800/45565_
11.27684419298607220.03.08177.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLTsMwELwj8Q%2BW70m

1-0198090/815/47396_
11.2732884290473300.03.15185.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a3e8e5cdab72

1-019809

Found on 2024-11-04 17:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6927428aa

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 16:29:15 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  94 days 6 hours 19 minutes 22 seconds
Server load: 0.65 0.70 0.88
Total accesses: 2448324 - Total Traffic: 9.4 GB - Total Duration: 1569991720
CPU Usage: u103.39 s150.92 cu762.88 cs426.05 - .0177% CPU load
.301 requests/sec - 1240 B/second - 4126 B/request - 641.252 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268970/1004/48386_
13.44394135317984230.03.72189.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/990/46017_
13.442986311570300.03.73179.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0268976/1108/48889W
13.46003284929310.74.29189.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

0-0268970/785/47825_
13.46205311413090.02.75187.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d12d2ab5fede1

0-0268970/953/48235_
13.452315307324230.03.62190.21
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/1159/48703_
13.451805293780630.04.47191.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/974/47171_
13.451022498304652620.03.48184.40
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/1217/47802_
13.45210426288891960.04.49186.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/790/47433_
13.443414320120720.03.01185.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_99bcfa80cc2ea

0-0268970/973/47371_
13.451475305136450.03.39184.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e9e9f533234e

0-0268970/1054/47333_
13.451195285306050.03.88186.54
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_594e1e9b9edfa

0-0268970/1010/48080_
13.46684304608080.03.82189.82
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_91fce91b8d660

0-0268970/1162/48540_
13.451345317971590.04.23189.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/855/48745_
13.444545319299640.03.18191.26
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/1221/48108_
13.44478270289429720.04.62190.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0268970/934/46974_
13.444385326945210.03.65184.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/1223/46908_
13.46494318778420.04.50184.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e0d334375c490

0-0268970/1259/46668_
13.44416278298539120.04.75181.88
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/974/46211_
13.463437299609830.03.77181.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_206ac77e9692f

0-0268970/904/47108_
13.445026312759060.03.36186.03
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/1180/46544_
13.45258270297609420.04.43181.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/989/48074_
13.442866315013270.03.65188.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_33c9aeb9e238c

0-0268970/875/48517_
13.443666290550640.03.10189.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/887/48519_
13.45876305645230.03.27191.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/3794/47021_
13.443234291590390.014.62184.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_455d909130ba8

1-068140/2521/44901_
32.0260433288801890.09.27175.48
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2530/46454_
32.02127360296453300.09.82182.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2406/46655_
32.021615292451630.09.13181.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2839/47507_
32.023985293625420.010.88185.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2590/45960_
32.02824284041740.09.73180.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7c3ff02eefd4d

1-068140/2933/48119_
32.02193280289213330.011.12192.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2681/46849_
32.024264307781730.010.23183.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_440c2ffa1a5c0

1-068140/2842/47172_
32.024655319640580.011.03184.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2476/46706_
32.03126301012980.09.35183.96
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2530/45864_
32.03445312247740.09.43178.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2734/46962_
32.025174290741330.010.54183.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_14562374771b0

1-068140/2598/46045_
32.023474299314080.09.95182.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_27fd54f29b584

1-068140/2562/44716_
32.023115298870020.09.32175.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2603/46207_
32.024885290853320.010.07181.02
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-068140/2483/46279_
32.03229391289886310.09.12181.00
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-068140/2470/47312_
32.022935294995770.09.36185.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2809/47607_
32.022684282714200.010.31186.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_25fea73f81dc4

1-068140/2727/47469_
32.023325278548890.010.17186.71
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-068140/2914/44755_
32.02247529442087

Found on 2024-11-02 16:29

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6bdb098f7

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 08:37:44 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  92 days 22 hours 27 minutes 51 seconds
Server load: 1.55 2.14 1.98
Total accesses: 2430455 - Total Traffic: 9.3 GB - Total Duration: 1555698250
CPU Usage: u96.31 s145.22 cu762.88 cs426.05 - .0178% CPU load
.303 requests/sec - 1250 B/second - 4130 B/request - 640.085 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268970/617/47999_
8.6064710315057060.02.24187.76
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/593/45620_
8.5762931307892260.02.19178.36
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0268970/755/48536_
8.582134325790960.03.10188.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5f4e5b9f0f473

0-0268970/471/47511_
8.591719308808200.01.76186.15
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-0268970/595/47877_
8.574859306080760.02.32188.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268970/811/48355_
8.575294708290791900.03.20190.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/620/46817_
8.583489785303214450.02.27183.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268970/877/47462_
8.575136593286394040.03.38185.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/468/47111_
8.57604408317917770.01.89184.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/633/47031_
8.574549302111740.02.31183.68
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f1d4ac173cdbc

0-0268970/702/46981_
8.58408368284350880.02.61185.26
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268970/597/47667_
8.583204302655120.02.44188.43
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d6ca1d37e403a

0-0268970/771/48149_
8.583884434315762450.02.86188.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268970/486/48376_
8.5919690314326290.01.88189.96
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268970/861/47748_
8.59123426286692970.03.40188.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0268970/535/46575_
8.60735324184470.02.17183.38
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/873/46558_
8.583264314272100.03.31183.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e23907f26db0b

0-0268970/883/46292_
8.59985295474680.03.39180.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/586/45823_
8.582458296630230.02.45179.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268970/548/46752_
8.58280532307541160.02.14184.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0268970/811/46175_
8.575452294258400.03.23180.71
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0268970/658/47743_
8.575702458312637980.02.62186.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0268970/513/48155_
8.57677256286612400.01.91188.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0268970/579/48211_
8.5825060061304083860.02.16190.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268970/3420/46647_
8.60392469287904020.013.26183.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-068140/2161/44541_
27.2533238286168240.08.12174.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-068140/2237/46161_
27.2544212294767180.08.78181.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-068140/2042/46291_
27.245244290740280.07.93180.45
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_562e4af05c1b4

1-068140/2503/47171_
27.271526291627740.09.73184.26
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/accountinfo/check.php?username=bpupo82%40gmail.

1-068140/2250/45620_
27.253658281491700.08.50178.96
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068140/2522/47708_
27.236195284852980.09.65190.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-068140/2311/46479_
27.272275303950910.08.93181.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-068140/2480/46810_
27.2526933315370510.09.77182.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-068140/2146/46376_
27.253057297561230.08.21182.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068140/2172/45506_
27.254675306945680.08.17177.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_189009eb0fb5d

1-068140/2343/46571_
27.25253325288208980.09.12181.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBbsIwDIZfpcqdNE1b6

1-068140/2234/45681_
27.27939297433300.08.60180.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6acbce381b585

1-068140/2223/44377_
27.236659297138600.08.22174.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-068140/2267/45871_
27.27207114288328290.08.92179.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-068140/2090/45886_
27.253744286492060.07.86179.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f1ea4f0eeeb4d

1-068140/2139/46981_
27.27213357292974130.08.22184.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-068140/2474/47272_
27.235584280966680.09.26185.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f391fac58c269

1-068140/2388/47130_
27.27514816277054140.09.08185.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-068140/2572/44413_
27.235354292395900.09.70173.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8d31835d3172b

1-06814

Found on 2024-11-01 08:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c63cc537c4

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 07:15:56 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  90 days 21 hours 5 minutes 14 seconds
Server load: 0.95 0.95 1.01
Total accesses: 2310884 - Total Traffic: 8.9 GB - Total Duration: 1445998216
CPU Usage: u72.8 s129.98 cu717.38 cs406.29 - .0169% CPU load
.294 requests/sec - 1216 B/second - 4134 B/request - 625.734 ms/request
1 requests currently being processed, 49 idle workers
_______________W__________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0192880/404/44239_
5.644186272035700.01.60174.18
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0192880/315/43849_
5.663587274575520.01.20171.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0192880/388/45659_
5.6630621296248000.01.62181.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/391/45058_
5.662784270031020.01.54177.17
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/469/46409_
5.68101278269378180.01.98182.13
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/273/43498_
5.661620293808980.01.18171.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0192880/379/46147_
5.662504285235090.01.58181.42
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3657631212f32

0-0192880/426/45117_
5.68833288294880.01.70177.18
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6247c9271da5f

0-0192880/484/44796_
5.661384265036490.02.05176.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/318/45048_
5.662144274952950.01.32177.25
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/452/45751_
5.661954284737410.01.88179.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/477/45664_
5.6820269275111780.01.84181.52
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0192880/332/46041_
5.68586280269220.01.34179.88
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0192880/486/45011_
5.68192416287763510.01.89176.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVLJbtswEL0X6D8IvGtzW

0-0192880/403/44200_
5.635213268129590.01.56179.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf65ed19e1756

0-0192886/335/45359W
5.6800282742717.71.28179.53
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0192880/477/44983_
5.645044287900440.01.89177.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0192880/532/44893_
5.6354735272210470.02.13176.35
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8ef2256914db

0-0192880/444/44694_
5.644343271539510.01.82174.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2282dcb33eeb6

0-0192880/531/44728_
5.653933262000770.02.26177.96
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b3c802a8d447c

0-0192880/359/45121_
5.6447742287619090.01.48177.55
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0192880/385/48019_
5.663284295495220.01.58189.43
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7eb48f9c3875

0-0192880/377/44185_
5.663833287920060.01.33174.55
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15d1f1cebd02e

0-0192880/670/45015_
5.66297100290187150.02.92178.49
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0192880/423/44583_
5.66227995273728690.01.69175.60
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0193370/419/37488_
5.56310232043020.01.75149.78
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0193370/458/37062_
5.564534240656870.01.85147.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e59c8e41919d5

1-0193370/385/35751_
5.56673236416740.01.56141.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9cc75f846dfbe

1-0193370/388/35628_
5.561323238525180.01.48140.99
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1dcd927545a15

1-0193370/335/35982_
5.55156196251068690.01.28144.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJbsIwEP2VyHdiJ6QCL

1-0193370/435/36838_
5.542987233573380.01.67145.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0193370/425/37295_
5.56890232281150.01.63150.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0193370/450/36753_
5.525571097231237970.01.90146.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0193370/430/36111_
5.5251328211508980.01.82141.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0193370/442/35425_
5.525343229908750.01.85139.25
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57ee24d96e1e7

1-0193370/314/36524_
5.56103222709800.01.23145.16
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1deef3f5c45b

1-0193370/366/37563_
5.552870229398150.01.54151.51
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0193370/376/36646_
5.534265236776800.01.52145.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0193370/413/37816_
5.534031233333700.01.63151.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0193370/437/35619_
5.534103239253600.01.65142.74
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_104e7b4472c2f

1-0193370/444/36688_
5.534453232354440.01.77144.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c62610d5010c3

1-0193370/436/35430_
5.52484241226338280.01.72140.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0193370/491/37118_
5.54318271236419220.02.04148.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0193370/546/37303_
5.543698240741630.02.22153.18
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-019337

Found on 2024-10-30 07:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c676dc7ae6

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 28-Oct-2024 01:41:18 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  88 days 15 hours 31 minutes 25 seconds
Server load: 0.91 1.49 1.57
Total accesses: 2261908 - Total Traffic: 8.7 GB - Total Duration: 1432568831
CPU Usage: u82.4 s132.1 cu718.45 cs400.91 - .0174% CPU load
.295 requests/sec - 1219 B/second - 4129 B/request - 633.345 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267340/1145/44512_
13.942233294405420.04.23174.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0267340/971/42422_
13.94574282987040.03.41165.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53726276b3aef

0-0267340/906/44325_
13.94409297666780.03.03172.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0267340/1245/44405_
13.905205287001370.04.90173.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0267340/1209/44843_
13.92147784280815380.04.78176.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0267340/991/45364_
13.903772194268389120.03.57178.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1033/43458_
13.921410277181840.03.75169.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0267340/1052/43933_
13.921251841264416270.03.90171.85
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1137/43641_
13.913530294248800.04.29170.35
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0267340/1084/43773_
13.895680273310340.04.02171.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0267340/1043/43291_
13.904035263850340.03.67170.88
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0267340/1205/44233_
13.905354277330230.04.76174.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c77c3496a3951

0-0267340/894/44593_
13.945132292145780.03.22174.43
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f5d78042f1e91

0-0267340/1191/45000_
13.912254678293701040.04.51176.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1231/44296_
13.91319417262711900.04.68174.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0267340/1073/43249_
13.904734300906200.04.01170.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1f4a3ad0a9de0

0-0267340/1135/43454_
13.913375289110740.04.32171.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0267340/1156/42509_
13.90390426270259820.04.31165.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0267340/1359/42738_
13.904954275410050.05.53167.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_82d465355366e

0-0267340/1088/43639_
13.9120012936282405030.04.07172.72
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1126/42684_
13.9128413106263638410.04.18166.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1087/44579_
13.9043547287661960.04.07174.47
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0267340/1001/44865_
13.9125918826264378100.03.82175.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0267340/1165/45110_
13.91186226280113580.04.66177.97
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLbtswELwXyD8QvOvlp

0-0267340/1013/43157_
13.912508262194200.03.78169.70
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162880/370/41400_
4.973695264200460.01.35162.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0162880/349/42904_
4.96412273266457230.01.54168.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFdT4MwFIb%2FCun9Ci2

1-0162880/403/43177_
4.973845266128080.01.62168.00
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0162880/355/43533_
4.9734514267123060.01.38169.78
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0162880/362/42226_
4.96424214260238480.01.57165.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=studentcafe_01&RelaySt

1-01628814/524/43983W
5.01002590872733.42.35176.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0162880/395/43024_
4.973264274670830.01.60168.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d621d0bf88f37

1-0162880/379/43269_
4.99227219291262360.01.50168.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bz

1-0162880/458/42810_
4.9921565272063220.01.91168.37
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0162880/365/42021_
4.973019277278341280.01.56163.72
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0162880/317/42984_
4.982599259545680.01.17167.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0162880/389/42299_
4.9916413353276294280.01.42167.42
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0162880/429/41009_
4.972781272085780.01.62161.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0162880/330/42514_
4.992036265020260.01.32166.47
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZHfa8IwEID/lZD3tLH%2

1-0162880/397/42737_
4.9914136255802580.01.48167.45
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c73fba72bdea2

1-0162880/327/43652_
4.9915254266483400.01.26171.08
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0162880/522/43871_
4.99990259260440.02.16172.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0162880/379/43695_
5.00246696256023840.01.88172.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0162880/292/40899_
4.99399669265522710.01.14159.68
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0162880/338/42917_
4.9973

Found on 2024-10-28 01:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c61b50b5a6

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 08:06:24 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  86 days 21 hours 55 minutes 42 seconds
Server load: 1.57 2.05 1.74
Total accesses: 2221473 - Total Traffic: 8.5 GB - Total Duration: 1382670500
CPU Usage: u106.57 s147.52 cu649.75 cs365.85 - .0169% CPU load
.296 requests/sec - 1222 B/second - 4132 B/request - 622.412 ms/request
1 requests currently being processed, 49 idle workers
___________________W______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0134710/3076/42499_
35.8420685258885230.011.80167.17
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134710/2948/42098_
35.86903261409010.011.19164.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ea3da8c1c52f9

0-0134710/2846/43811_
35.851443282697580.010.76173.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f865e1a19278c

0-0134710/3301/43356_
35.833883258449440.012.55170.55
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbeeb75e8b9b5

0-0134710/3489/44648_
35.834024255647430.013.70175.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_23d83ea8e1ac6

0-0134710/2859/41935_
35.841913281178400.011.01164.59
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_739c03d876fb9

0-0134710/2907/44373_
35.842711275099670.011.26173.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-0134710/2872/43188_
35.86573353273539300.010.95169.34
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0134710/3140/42830_
35.842334253586770.012.25168.52
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_28d7c2e4339a4

0-0134710/3177/43460_
35.834624263306880.012.14170.99
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_89b198ca51ff2

0-0134710/2854/43899_
35.86725542274011140.010.98172.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0134710/3227/43823_
35.843567261737400.012.41174.45
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0134710/2925/44360_
35.843127001267951760.011.27173.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0134710/3277/43297_
35.842974278015870.012.77170.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6da0f8c6a5ab4

0-0134710/3181/42635_
35.833765000257788250.012.22172.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0134710/2547/43535_
35.8517766270126040.09.57172.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134710/3595/43175_
35.8510633274642790.013.98170.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0134710/3052/42827_
35.851245258112220.012.08168.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0134710/2799/43046_
35.8425711260569240.010.62168.41
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_595de3eb1fba8

0-0134714/3302/42724W
35.8600247634294.912.93169.80
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0134710/3381/43247_
35.86193273897190.013.17169.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65e306665345c

0-0134710/3529/46234_
35.834214282146100.014.07182.39
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f11d445d93e0

0-0134710/2701/42501_
35.834376274664270.010.22167.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0134710/2643/42729_
35.86402478278586560.010.49168.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0134710/3054/42723_
35.843293255470870.011.85168.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77a16316fe610

1-0135770/3194/35651_
35.343394218866540.012.32142.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02ea71235eaa6

1-0135770/4000/35309_
35.3482444228323270.015.48140.81
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/3180/33993_
35.334713222545150.012.17134.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb477ca4d0903

1-0135770/2965/33815_
35.35264227370950.011.26134.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/2828/34095_
35.343640235237220.011.05136.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0135770/3032/35196_
35.342015218450160.011.89139.33
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_390a34e4b25c2

1-0135770/3225/35310_
35.342433362216002280.012.40142.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0135770/2640/35078_
35.3553362220189540.010.14139.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0135770/3151/34461_
35.341306199721240.011.99135.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0135770/2900/33659_
35.3418431217293550.011.25132.22
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/3466/34964_
35.33415387212929800.013.26138.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0135770/2894/35892_
35.343177818216337660.011.20144.73
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0135770/3187/34709_
35.341175223754080.012.52137.63
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_310e1b482cd12

1-0135770/3171/36077_
35.343033218026580.012.27144.43
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a2c3659c253fb

1-0135770/2928/33791_
35.34695227559810.011.69135.29
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/2956/34903_
35.342855219733780.011.46137.51
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/2734/33545_
35.34495212923070.010.61132.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/3054/35283_
35.342214224605960.011.73140.63
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b964c62d64344

1-0135770/2637/35589_
35.334303230633800.09.99146.34
127.0.0.1http/1.1ip-10-1-89-105

Found on 2024-10-26 08:06

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c63baa0ad5

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 00:50:54 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  84 days 14 hours 40 minutes 11 seconds
Server load: 1.44 1.51 1.44
Total accesses: 2188298 - Total Traffic: 8.4 GB - Total Duration: 1340465365
CPU Usage: u92.95 s137.94 cu649.75 cs365.85 - .0171% CPU load
.299 requests/sec - 1236 B/second - 4131 B/request - 612.561 ms/request
1 requests currently being processed, 49 idle workers
_____________________W____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0134710/2485/41908_
26.64351211247657130.09.50164.87
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJbsIwEP2VyHfikIbNI

0-0134710/2297/41447_
26.6610230252138310.08.62162.26
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134710/2177/43142_
26.63493843274284760.08.19171.14
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0134710/2541/42596_
26.651761252279580.09.50167.50
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-0134710/2831/43990_
26.661098249782230.011.11172.49
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0134710/2180/41256_
26.615924273866350.08.28161.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d09cdc2284a34

0-0134710/2293/43759_
26.642830266540050.08.90171.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0134710/2209/42525_
26.634664266267080.08.37166.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0134710/2479/42169_
26.65145241245444460.09.49165.76
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEP5Xlr6zjjFwa

0-0134710/2554/42837_
26.63532263254659090.09.66168.51
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0134710/2254/43299_
26.663213264590940.08.47169.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0134710/2515/43111_
26.642103254957760.09.63171.68
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?spentityid=studentcafe_01&RelayS

0-0134710/2281/43716_
26.616083259472200.08.51170.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6546772d7a88

0-0134710/2570/42590_
26.644240265493220.09.96167.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0134710/2523/41977_
26.64237476246420010.09.57170.22
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJbsIwEP2VyHfiNGGrR

0-0134710/1937/42925_
26.643246264846890.07.35170.05
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLfT4MwEP5XSN9HAZmLz

0-0134710/2934/42514_
26.616567266506820.011.16167.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134710/2342/42117_
26.6661191246660680.09.10165.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFP4rS99ZRx2ID

0-0134710/2124/42371_
26.6674219251769870.07.96165.76
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBTsMwEEWvEnlfx3Vsk

0-0134710/2619/42041_
26.6255648239952550.010.21167.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134710/2700/42566_
26.642233269299540.010.45166.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a306fe506d1d0

0-01347117/2697/45402W
26.67002750912371.510.48178.80
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0134710/2052/41852_
26.615750264803250.07.66165.29
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0134710/1963/42049_
26.6440332267940050.07.74166.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_47f6301f4c658

0-0134710/2437/42106_
26.66420247764360.09.32165.66
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0135770/2541/34998_
26.176014212800830.09.82139.98
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0135770/3276/34585_
26.26128791218770970.012.39137.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0135770/2480/33293_
26.185674212026100.09.26131.40
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94bfb43476474

1-0135770/2354/33204_
26.195020218638610.08.84131.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0135770/2217/33484_
26.204402206227822430.08.62134.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0135770/2378/34542_
26.27680212067520.09.41136.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0135770/2634/34719_
26.28543205656570.09.97139.88
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_98fd2c4e400be

1-0135770/1836/34274_
26.261897214236600.06.94136.63
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0135770/2495/33805_
26.262087190797900.09.41132.70
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cHEAD /module.php/core/loginuserpass.php HTTP/1.1

1-0135770/2228/32987_
26.2337036209863100.08.46129.43
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0135770/2817/34315_
26.2794202205562300.010.71136.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEP5Xlr6zbnMQ1

1-0135770/2208/35206_
26.28116207463830.08.43141.96
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0135770/2536/34058_
26.2820201216952810.09.91135.02
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nZFBT8MwDIXvSPsPVe5ru

1-0135770/2523/35429_
26.17669214208557820.09.67141.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBboMwEER%2FBfke2xg

1-0135770/2244/33107_
26.175843217203930.08.76132.36
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cccd94bf44cae

1-0135770/2212/34159_
26.233601210008570.08.35134.40
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0135770/2035/32846_
26.2616824203839530.07.85130.07
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0135770/2347/34576_
26.261121213991940.08.84137.74
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0135770/2033/34985_
26.252968222233290.07.73144.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135770/1982/33316_
26.26235

Found on 2024-10-24 00:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c60fff6638

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 22:09:32 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  81 days 11 hours 59 minutes 40 seconds
Server load: 1.07 2.47 2.87
Total accesses: 2041191 - Total Traffic: 7.9 GB - Total Duration: 1312961616
CPU Usage: u78.47 s122.37 cu645.56 cs359.98 - .0171% CPU load
.29 requests/sec - 1197 B/second - 4129 B/request - 643.233 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0197320/1104/39909_
15.841920268475180.04.26155.83
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0197320/1205/38392_
15.887249259277300.04.74149.75
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/1061/40117_
15.86861270002940.03.95156.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0197320/948/39807_
15.832988257210320.03.57155.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0197320/1277/40156_
15.84264244252842800.04.94158.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/1127/41034_
15.81344455246948240.04.16160.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBbsIwEER%2FJfIdJzh

0-0197320/1209/38957_
15.841773249079280.04.94152.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/1231/39501_
15.725301240309430.04.78154.14
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0197320/1052/39415_
15.69595775271001320.04.03153.82
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0197320/1123/39482_
15.72522502253098150.04.27154.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0197320/1097/39270_
15.842090241799900.04.22155.61
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0197320/1092/39767_
15.89282255867200.04.40156.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0197320/1298/40465_
15.774502421269887340.04.87158.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0197320/1287/40391_
15.70546142269277870.04.76158.97
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/948/39557_
15.735141236558430.03.48156.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0197320/1219/38672_
15.774490270320250.04.81152.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0197320/1146/39046_
15.783980261907560.04.42153.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0197320/1107/38159_
15.72523200244858390.03.93148.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/993/38238_
15.8232410254957380.03.74148.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0197320/1220/39569_
15.784421072255460550.04.80156.54
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNTsMwEIRfJfK9duI0P

0-0197320/1108/38488_
15.842450238598850.04.47150.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0197320/1160/39998_
15.79362989260161350.04.85156.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0197320/1121/40961_
15.8428574242411890.04.21159.76
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0197320/1192/40626_
15.76461868254964700.04.76159.97
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nZFBT8MwDIXvk%2FYfqtz

0-0197320/1092/39194_
15.8330359239508850.04.13153.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0117350/282/36784_
5.073161239415410.01.00144.48
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0117350/280/38229_
5.073074245120000.01.03149.52
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0117350/431/38951_
5.122211247023740.01.79151.40
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0117350/350/39220_
5.092568243630960.01.37152.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0117350/210/37729_
5.064011240702960.00.80147.67
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0117350/443/39391_
5.073721235566260.01.87155.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0117350/397/38346_
5.171852308248286990.01.62149.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0117350/304/38586_
5.1813935271084430.01.20150.56
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0117350/547/38324_
5.181300247339660.02.22150.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0117350/357/37696_
5.1619815256918430.01.44146.22
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0117350/491/38820_
5.181081237193630.01.90151.25
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-01173519/415/37855W
5.200025194733104.31.60150.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0117350/370/36730_
5.18730244922990.01.42145.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0117350/286/38027_
5.015560246009810.00.98148.78
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0117350/313/38665_
5.015552687236210510.01.23151.76
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0117350/438/39191_
5.015381538240303680.01.72153.43
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_549c83a4139a4

1-0117350/393/38894_
5.015161236782500.01.62153.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0117350/486/39050_
5.03475223231267320.01.95153.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0117350/433/36451_
5.015371238083160.01.48142.33
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0117350/361/38453_
5.034930241720680.01.41150.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/p

Found on 2024-10-20 22:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c661e5caf3

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 19-Oct-2024 00:23:00 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  79 days 14 hours 12 minutes 17 seconds
Server load: 0.73 0.80 0.98
Total accesses: 2006975 - Total Traffic: 7.7 GB - Total Duration: 1279273541
CPU Usage: u57.14 s110.18 cu627.25 cs353.85 - .0167% CPU load
.292 requests/sec - 1205 B/second - 4131 B/request - 637.414 ms/request
1 requests currently being processed, 49 idle workers
__________W_______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-03790/11/38136_
0.151064237147400.00.03149.78
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-03790/12/38003_
0.1515032239653250.00.05148.92
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03790/9/39718_
0.143391263418000.00.03156.26
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-03790/4/38796_
0.143018240739180.00.02152.88
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03790/4/39944_
0.14258406236651900.00.02156.39
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVLBboJAFPwVsnd2F1ALG

0-03790/10/37793_
0.142427259826920.00.03148.30
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03790/20/40141_
0.151787253732500.00.08157.34
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-03790/8/39005_
0.151215540253169330.00.03152.89
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-03790/39/38554_
0.15626232763130.00.24151.49
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03790/26/39002_
0.117070242357670.00.11153.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-03796/9/39713W
0.1700250914549.70.02156.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-03790/24/39383_
0.17187244746820.00.09157.29
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-03790/8/40342_
0.107570247794960.00.02157.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-03790/18/38775_
0.126180254076300.00.08152.17
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-03790/4/38083_
0.125997236361290.00.02155.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-03790/6/39903_
0.144005252115790.00.06156.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-03790/10/38397_
0.125603253547480.00.06151.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f5d83e94ee359

0-03790/14/38589_
0.144228234551810.00.08151.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03790/4/39154_
0.134686240113480.00.01153.55
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_413d628634ecc

0-03790/30/38152_
0.144104226567590.00.12151.70
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-03790/2/38758_
0.1348746257909500.00.00152.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03790/6/41353_
0.14365635264990110.00.03162.92
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-03790/15/38536_
0.144386946255769920.00.04152.41
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-03790/7/38749_
0.135421255482420.00.02152.88
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-03790/3/38292_
0.135235235144490.00.01150.12
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

1-04780/2/31151_
0.0977345198263680.00.01124.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-04780/3/30103_
0.16107206653280.00.01120.25
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-04780/2/29610_
0.16415198977760.00.01117.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-04780/7/29646_
0.1680730204025100.00.03118.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-04780/7/30041_
0.16120706215344330.00.03120.33
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-04780/21/30988_
0.1613447201603900.00.16122.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-04780/8/30796_
0.0974233194687420.00.03124.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-04780/43/31053_
0.126465201218780.00.20124.15
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-04780/10/29955_
0.126085180312200.00.04117.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

1-04780/20/29517_
0.125885196887850.00.06116.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22159b9194373

1-04780/10/30076_
0.125474193027350.00.07120.16
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a84df56a73702

1-04780/5/31797_
0.125300195271890.00.02128.60
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-04780/19/30147_
0.124937203262750.00.13119.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-04780/6/31750_
0.134774197770290.00.02127.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-04780/2/29770_
0.13454105206084070.00.01119.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-04780/3/30675_
0.134211598199470790.00.01121.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLTsMwEEV%2FJfK%2Bf

1-04780/4/29589_
0.134106188958930.00.02117.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVJNT%2BMwEL0j7X%2Bwf

1-04780/15/31020_
0.143998200733630.00.09124.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-04780/15/31797_
0.143850210015520.00.05131.42
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-04780/5/30129_
0.143495427200511060.00.03119.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

1-04780/19/3

Found on 2024-10-19 00:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6b0ee6b12

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 17-Oct-2024 03:02:34 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  77 days 16 hours 51 minutes 52 seconds
Server load: 2.50 2.16 1.50
Total accesses: 1977542 - Total Traffic: 7.6 GB - Total Duration: 1254054299
CPU Usage: u66.96 s112.97 cu604.82 cs341.78 - .0168% CPU load
.295 requests/sec - 1217 B/second - 4132 B/request - 634.148 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0201260/485/37509_
8.39810234535200.01.91147.17
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0201260/444/37429_
8.391199735236728080.01.95146.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-0201260/482/39184_
8.392993259264680.01.94154.10
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c621e25c397ba

0-0201260/607/38233_
8.40259502238311510.02.36150.57
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0201260/548/39324_
8.392104228746650.02.38154.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d71b0284d302d

0-0201260/475/37308_
8.3931351252134100.01.90146.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0201260/576/39539_
8.40430248563130.02.33155.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0201260/601/38433_
8.374986250864480.02.44150.54
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_182d1ee98ca58

0-0201260/605/37987_
8.391103767228024620.02.53149.26
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0201260/581/38219_
8.3562933238779330.02.46151.13
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_395d8d772f8f4

0-0201260/516/39124_
8.391567247429160.02.19153.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0201260/479/38796_
8.39176766240595980.01.88155.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0201260/674/39777_
8.356855244054420.02.87155.35
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0201260/503/38107_
8.374512250635780.02.17149.56
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0201260/670/37443_
8.3925052232143360.02.76152.69
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0201260/515/39309_
8.3843010245264670.02.12153.77
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0201260/551/37734_
8.392151824246581220.02.24148.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0201260/516/37921_
8.384130229061720.02.12149.04
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0201260/509/38549_
8.356580235723410.02.19151.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0201260/511/37579_
8.3654952224121620.02.27149.56
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0201260/596/38180_
8.383361253863080.02.43149.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-0201260/570/40784_
8.356033256642050.02.34160.60
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4b8927e727d9

0-0201260/526/37965_
8.357020253483090.02.19150.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0201260/615/38165_
8.383593245550480.02.63150.60
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a0e4bbff322f

0-0201260/607/37705_
8.383834227598020.02.56147.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/604/30447_
9.0938854191746260.02.53122.06
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0201760/516/29566_
9.075444200554400.02.10118.14
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/568/29034_
9.07437466194002860.02.34114.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0201760/677/29071_
9.11756199900670.02.73115.89
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/680/29493_
9.102295210560330.02.77118.18
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/563/30351_
9.093253196714100.02.31120.25
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fd6c79a6d4eb9

1-0201760/590/30257_
9.093699191084530.02.40122.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0201760/619/30475_
9.076205194514380.02.51122.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/601/29413_
9.074755175827220.02.51115.66
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/577/28952_
9.10189621194539900.02.38113.71
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLboMwEEV%2FBXkfg3k

1-0201760/678/29486_
9.093473188132730.02.81117.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf23314fcc482

1-0201760/538/31254_
9.111390189477930.02.38126.42
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0201760/550/29522_
9.102684197127900.02.30116.61
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/592/31130_
9.11915190854160.02.56124.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/549/29223_
9.102167198859440.02.14116.80
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0201760/727/30058_
9.093075194151520.03.06118.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-0201760/659/29021_
9.07568663181254800.02.71115.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHfT4MwEMf%2FFdL3lVJ

1-0201760/604/30513_
9.076753197377420.02.40122.10
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26045314be138

1-0201760/583/31258_
9.076956205623360.02.48129.34
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-0201760/603/29559_
9.11623192968600.02.48

Found on 2024-10-17 03:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6a4fb52b8

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 15-Oct-2024 01:50:20 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  75 days 15 hours 40 minutes 27 seconds
Server load: 0.82 1.60 1.92
Total accesses: 1936355 - Total Traffic: 7.4 GB - Total Duration: 1197811233
CPU Usage: u88.72 s125.35 cu590.89 cs328.77 - .0173% CPU load
.296 requests/sec - 1222 B/second - 4128 B/request - 618.591 ms/request
1 requests currently being processed, 49 idle workers
_______________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0276670/2789/37943_
22.011613164246716420.011.00148.16
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0276670/1814/36300_
22.002234716233717060.07.16141.23
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0276670/1995/38135_
22.028893248239430.07.84148.54
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0276670/1641/37981_
22.03340234683070.06.70148.72
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0276670/1793/37886_
22.00370239228609920.07.19149.13
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLLbtswELwH6D8QvOtlO

0-0276670/2391/38922_
21.984700226182390.09.44152.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0276670/2074/36815_
22.03503227041340.08.22143.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_26d626b763b9a

0-0276670/1317/37394_
22.0113252220907120.05.00145.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0276670/1916/37451_
22.00309650248052940.07.60146.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0276670/1762/37423_
22.03126226504440.07.06146.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0276670/1911/37155_
22.002453591215548330.07.59147.08
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0276670/1859/37645_
21.985228228088210.07.35148.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0276670/1865/38029_
22.011802423247646190.07.54149.35
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0276670/1840/38230_
22.001913237573050.07.37150.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dcce388028c91

0-0276670/2037/37631_
21.993825211734570.08.18148.61
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0276670/1939/36641_
21.984027238899680.07.65144.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0276670/2087/36882_
21.984840240363450.08.25145.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0276670/1903/36056_
22.002743224378010.07.85141.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_13b44c06e8517

0-0276670/1876/36298_
21.965934236110700.07.18141.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-0276670/1772/37375_
22.00332254235467850.07.13147.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEP5Xlr6zbmMIa

0-0276670/1699/36468_
22.002596217737980.06.81142.29
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0276670/1498/37890_
21.966120235354430.05.88147.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0276670/1732/38910_
21.96634510219048140.06.88151.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-0276670/1984/38287_
21.975493239537620.08.10150.61
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_99eee59cc4ff2

0-0276670/2100/37034_
22.002180219918460.08.36145.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0191910/1974/34760_
25.1316213188220442960.07.76136.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0191910/1708/36175_
25.122408222841670.06.65141.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0191910/2595/36708_
25.132026901217018930.010.04141.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0191910/2372/36928_
25.14981218938980.09.42144.02
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0191910/1890/35827_
25.122133220153070.07.29140.09
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0191910/2601/37291_
25.14591213993150.010.67147.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0191918/1632/36282W
25.14002262313619.06.43141.72
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0191910/1787/36643_
25.113709131243704040.06.99142.77
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0191910/2110/36038_
25.1231252226520060.08.69141.50
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0191910/2010/35652_
25.114150227881850.07.93138.10
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0191910/1676/36414_
25.1234849210297710.06.70141.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0191910/1459/35842_
25.074840233607260.05.71142.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0191910/2008/34732_
25.11388224221344920.08.05137.29
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT4NAEP4rZO9lAfHRT

1-0191910/2349/36028_
25.12250997229326610.09.23141.15
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZJbT8IwFMe%2FytL3rVu

1-0191910/2449/36690_
25.075740215437880.09.52143.89
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0191910/2494/36954_
25.14192218507320.09.96144.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0191910/2200/36859_
25.14810215698440.08.80144.98
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0191910/2122/36695_
25.0750636211941800.08.34144.12
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4e32473bdcbf4

1-0191910/2081/34355_
25.122828382217114970.08.34134.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVLJTsMwEL0j8Q%2BW79k

1-0191910/2623/36119_
25.066266218862140.010.70141.51
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.

Found on 2024-10-15 01:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6dae75089

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 19:25:22 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  73 days 9 hours 14 minutes 40 seconds
Server load: 0.80 0.79 0.86
Total accesses: 1827408 - Total Traffic: 7.0 GB - Total Duration: 1127248721
CPU Usage: u55.6 s102.63 cu566.53 cs317.25 - .0164% CPU load
.288 requests/sec - 1189 B/second - 4127 B/request - 616.857 ms/request
1 requests currently being processed, 49 idle workers
___________________________________________W______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-093280/224/34893_
2.76117425215173190.00.92136.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-093280/317/34821_
2.76442212228180.01.18136.28
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a63e1aeb7f22

0-093280/412/36297_
2.765396666230182160.01.28142.31
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/190/35151_
2.746735208258060.00.63138.57
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-093280/226/36283_
2.767432198271220.00.79141.65
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-093280/241/34499_
2.76113229868270.00.82135.40
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-093280/300/36431_
2.764466224518360.01.21142.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-093280/300/35870_
2.755674760222181260.01.11140.27
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/286/35241_
2.765073205534830.01.11138.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-093280/213/35492_
2.764734523215186940.00.78140.03
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/198/36386_
2.7461424225524400.00.69143.17
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-093280/216/35232_
2.764192215984030.00.81140.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_24abe5e249faf

0-093280/206/36435_
2.763493218033230.00.72141.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-093280/183/35508_
2.762462220338750.00.55138.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-093280/187/34359_
2.763745204425860.00.57140.34
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-093280/183/35940_
2.762846603224262530.00.61140.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/183/35048_
2.761722226759850.00.59138.13
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cfc3f14a34016

0-093280/198/34959_
2.76359390207648290.00.68137.22
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

0-093280/196/35541_
2.763253418206922060.00.71139.05
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/195/34890_
2.763004695200291580.00.68138.61
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-093280/180/34574_
2.762264229000280.00.65135.54
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVJNb9QwEL0j8R8s3%2FM

0-093280/215/37345_
2.761013231220150.00.81147.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsentral.

0-093280/215/34937_
2.761943226129430.00.79138.36
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

0-093280/290/35285_
2.745872224804240.01.07138.86
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e56f2145a624

0-093280/213/34780_
2.761341205507980.00.70136.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

1-093710/218/26960_
2.8336428165808880.00.75107.81
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-093710/216/26708_
2.82183108166176390.00.73106.81
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/191/25954_
2.8312568169743270.00.71102.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/215/26268_
2.823312172963550.00.76104.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b30e25c6ac1e2

1-093710/194/26296_
2.814893178552670.00.60105.80
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-093710/288/27531_
2.8143228171656160.01.09108.99
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-093710/238/27430_
2.822541164368540.00.80110.91
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

1-093710/177/27103_
2.8223466171737580.00.62108.59
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/175/26659_
2.823487749152292280.00.53104.77
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/219/26308_
2.8314880167506870.00.71103.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/220/26012_
2.8224356276167077690.00.78103.59
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/255/27903_
2.815959238163721040.00.92112.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

1-093710/319/27028_
2.835874172748560.01.18106.65
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-093710/226/28415_
2.815540163406230.00.82114.19
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET / HTTP/1.1

1-093710/203/26385_
2.822052172549450.00.76105.61
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3788b09f9ff69

1-093710/291/27024_
2.8165132170154710.01.20106.67
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4f8c1400e32c5

1-093710/212/26114_
2.831102154775880.00.77103.11
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5cf36bf9ba83b

1-093710/215/27374_
2.814683167425120.00.85109.95
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fshibbole

1-093715/277/28449W
2.8300174287759.11.01118.09
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

1-093710/427/26584_
2.815792165878060.01.38105.82
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_728fbf05ea9c9

Found on 2024-10-12 19:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6ccd28e92

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 05:50:18 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  70 days 19 hours 40 minutes 25 seconds
Server load: 0.93 1.08 1.13
Total accesses: 1801789 - Total Traffic: 6.9 GB - Total Duration: 1086081568
CPU Usage: u105.02 s134.11 cu529.99 cs288.22 - .0173% CPU load
.294 requests/sec - 1216 B/second - 4132 B/request - 602.78 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0189900/6710/34253_
76.7739518834224448040.024.30133.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6426/33762_
76.774876214979500.023.38131.50
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0189900/6635/35387_
76.765504433225634690.024.60138.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/7198/35577_
76.76803360209074380.026.17139.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6557/35310_
76.766451553205104560.023.95139.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6467/35786_
76.79601207771040.023.14140.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0189900/6476/33965_
76.766046359206271890.023.32132.71
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/7087/35308_
76.765852200295350.025.99138.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0189900/6505/34807_
76.768791224248690.023.64136.11
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0189900/7432/34869_
76.7831689204226290.026.73136.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6130/34457_
76.78349122192764950.022.48136.71
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0189900/7466/34931_
76.769392206165660.027.29137.91
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0189900/6967/35314_
76.76683216220075520.025.15138.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/7850/35615_
76.766992222743050.028.36140.86
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0189900/7004/34803_
76.767597191233580.025.73137.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0189900/6677/33854_
76.765797209306290.024.43133.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0189900/6953/33926_
76.7915432217237690.025.58133.35
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVJdT9swFH2ftP9g%2Bb1

0-0189900/6399/33327_
76.781591197243600.023.10130.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0189900/7302/33680_
76.766232204212439640.026.51131.30
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6880/34827_
76.77392227213926960.024.79137.57
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0189900/6062/34023_
76.7821779196524590.022.08132.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8cd8dc25e5b83

0-0189900/7346/35479_
76.7741813158214594300.026.57138.24
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

0-0189900/6784/36392_
76.781160199781160.024.47141.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0189900/7778/35502_
76.765197213645920.028.26139.43
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0189900/6865/34179_
76.7746557201431770.024.87134.04
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0232380/628/32262_
6.06692754200051850.02.05127.26
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFPS8NAEMW%2FSti7%2B

1-0232380/581/33923_
6.068192205276020.02.03132.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0232380/346/33585_
6.067681799186002400.01.24130.03
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232384/446/34036W
6.0800200940414.71.53132.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0232380/381/33264_
6.06884298198526430.01.25130.10
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0232380/455/34159_
6.08964186947720.01.61134.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0232380/601/34062_
6.067323380203348290.02.07133.19
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/663/34316_
6.066681591210700150.02.10133.69
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/411/33427_
6.066398200150070.01.55131.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232380/530/32944_
6.066160204361130.01.78127.55
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/script.js HTTP/1.1

1-0232380/568/34103_
6.065832248191955070.01.68132.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/506/33747_
6.066011593206142140.01.83134.18
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/514/32214_
6.065693108199336560.01.79127.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/506/33059_
6.065236392208225240.01.84129.79
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0232380/528/33604_
6.064878195810870.01.77131.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0232380/637/33810_
6.064818194857940.02.13132.53
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0232380/524/34133_
6.074211194114690.01.76134.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0232380/422/33933_
6.064598186823900.01.44133.68
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232380/618/31699_
6.073999201646640.02.07124.17
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232380/368/32919_
6.073398203109460.01.28128.65
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232380/468/34371_
6.072678536194479970.01.55

Found on 2024-10-10 05:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c607cf764b

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 08-Oct-2024 05:20:06 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 19 hours 9 minutes 24 seconds
Server load: 0.74 1.03 1.15
Total accesses: 1734907 - Total Traffic: 6.7 GB - Total Duration: 1058232030
CPU Usage: u102.39 s130.22 cu490.29 cs266.44 - .0166% CPU load
.292 requests/sec - 1213 B/second - 4156 B/request - 609.965 ms/request
1 requests currently being processed, 49 idle workers
______W__________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325010/4110/32803_
44.7050277202407170.014.99129.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0325010/4182/33010_
44.652332195607270.015.03129.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_97276583eafa5

0-0325010/4451/34445_
44.3516092216193990.016.26136.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_596d9e89fd932

0-0325010/4417/33478_
44.4910644191994240.015.91132.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4152/34386_
44.65230106186669590.015.02135.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8cf418cc8bba6

0-0325010/3743/32652_
44.652313214538240.013.58129.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-03250150/4367/34620W
44.710021107160122.615.79136.45
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0325010/4173/33762_
44.4811432207792930.014.99133.23
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f89e719d24e7

0-0325010/4523/33136_
44.2519562191575150.016.36130.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0325010/4195/33775_
44.3915113201116150.015.19134.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0325010/4506/34151_
44.2520006211054620.016.43135.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0325010/3801/33290_
44.4812303201293610.013.81133.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/5112/34590_
44.70513201646830.018.58135.74
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4261/33961_
44.2519992583202760630.015.49133.58
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0325010/4415/32546_
44.2518212192642220.016.06134.11
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0325010/4813/33840_
44.548493209942340.017.24133.26
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4511/33329_
44.586586212848680.016.11132.23
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0325010/4521/33242_
44.4812012193710150.016.11131.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a057b562b142a

0-0325010/4262/33691_
44.586333195416770.015.32132.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0325010/3777/33400_
44.2917042191729440.013.72133.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0325010/3978/32939_
44.4811092216144320.014.30130.13
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8bd14610c23e3

0-0325010/4431/35563_
44.643873213899560.016.19140.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/3367/33268_
44.2518862216101160.012.20132.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847203d0a382b

0-0325010/4250/33444_
44.4811474208612020.015.31132.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0325010/4335/33278_
44.4413192195286280.015.59130.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26742.
0.002368943161295680.00.00107.06
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/26492.
0.002368942163627630.00.00106.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8abee2a3aea68

1-0-0/0/25763.
0.002368944167211870.00.00101.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a43e45788a9ba

1-0-0/0/26053.
0.002368943170157370.00.00103.70
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26102.
0.002368945175542730.00.00105.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/27243.
0.002368942168012790.00.00107.90
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3491a7c037fc2

1-0-0/0/27192.
0.002368944157652290.00.00110.10
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0-0/0/26926.
0.002368942164668600.00.00107.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0-0/0/26484.
0.002368946148206510.00.00104.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/helpers/sounds/sfx_swooshing.ogg HTTP/1.1

1-0-0/0/26089.
0.002368941577160865920.00.00102.53
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/25792.
0.002368946158221720.00.00102.81
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/helpers/sounds/sfx_point.ogg HTTP/1.1

1-0-0/0/27648.
0.002368944160064860.00.00112.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2acfead04e78d

1-0-0/0/26709.
0.002368942170371290.00.00105.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/28189.
0.002368943162119180.00.00113.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26182.
0.002368945169776170.00.00104.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-0-0/0/26733.
0.002368942165036000.00.00105.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0402a3ce86fb5

1-0-0/0/25902.
0.002368943153862760.00.00102.33
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/27159.
0.002368944164770350.00.00109.11
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/28172.
0.002368942170715430.00.00117.08

Found on 2024-10-08 05:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c6bad54fbc

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 08-Oct-2024 05:20:02 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 19 hours 10 minutes 10 seconds
Server load: 2.17 2.98 3.13
Total accesses: 1734905 - Total Traffic: 6.7 GB - Total Duration: 1072535019
CPU Usage: u129 s149.98 cu486.21 cs258.28 - .0172% CPU load
.292 requests/sec - 1212 B/second - 4155 B/request - 618.21 ms/request
1 requests currently being processed, 49 idle workers
__________________________W_______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0189900/5182/32725_
61.7011163220748870.019.14128.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a228fcae7be24

0-0189900/5201/32537_
61.6613275212516840.019.29127.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0189900/5337/34089_
61.5717013222279780.020.12133.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5bee24c97dea

0-0189900/5666/34045_
61.95784207092480.021.04134.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5533/34286_
61.4520573202151680.020.49135.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5158/34477_
61.902885205985060.018.80136.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5238/32727_
61.5218193202465260.019.24128.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5850/34071_
61.6911553197750320.021.78133.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_12c9888241ff4

0-0189900/5201/33503_
61.9211419221215790.019.27131.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/6032/33469_
61.7789116201324240.021.99131.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/4734/33061_
61.7210701176189623530.017.72131.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVLLTsMwEPyVyPfYrpPSY

0-0189900/5869/33334_
61.855625203809040.021.85132.48
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_01&RelayS

0-0189900/5463/33810_
61.5018724217701420.020.03133.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/6394/34159_
61.4719740220688140.023.82136.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-0189900/5645/33444_
61.43214255189204750.021.24133.25
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0189900/5742/32919_
61.5118375206108380.021.18130.07
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5457/32430_
61.902514214405450.020.49128.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ca39feda51c38

0-0189900/5322/32250_
61.817464195220310.019.50126.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0189900/5701/32079_
61.4719815209808440.021.20125.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5419/33366_
61.7793911210298210.019.87132.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/4780/32741_
61.865473193829400.017.75128.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a9ef7eb158da8

0-0189900/5807/33940_
61.68119483211184580.021.39133.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0189900/5338/34946_
61.902487566197872630.019.63136.97
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0189900/6482/34206_
61.6115185208370210.023.85135.02
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5612/32926_
61.7210603199354720.020.76129.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/5670/30837_
65.141834196943040.021.14122.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b01c94a6490e

1-01110592/5853/32419W
65.190020298678307.321.74127.85
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0111050/6529/32439_
65.026541182580540.024.09125.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0111050/6087/32864_
65.093834198537130.022.70128.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/6150/31996_
64.931053493195579320.022.78125.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZJNT4QwEIbvJv4H0jsfS

1-0111050/5999/32849_
64.9012343184817160.022.13130.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bea22ae8af2c5

1-0111050/6389/32634_
65.151596200512260.023.48128.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-0111050/6404/32702_
64.7619995208325840.023.99128.51
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5561/32129_
65.112485198551690.020.68126.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5187/31487_
65.0647622201352830.019.05122.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/5562/33000_
64.7619514188418730.020.47129.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5902/32592_
64.7618599203665700.022.01130.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0111050/5332/31195_
64.8614204196286210.019.59123.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5061/31743_
64.7521300203757100.018.93125.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0111050/5674/32315_
64.9311574193550370.020.90127.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_532ce01f003c0

1-0111050/5285/32343_
64.9311534192879430.019.52127.66
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5404/32741_
64.8116073190887970.019.84129.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/6096/32512_
64.7619283184419540.022.71128.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_88b56031de1f8

1-0111050/5043/30298_

Found on 2024-10-08 05:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c64904dec3

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 08-Oct-2024 05:20:08 UTC
Restart Time: Wednesday, 31-Jul-2024 10:10:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 19 hours 9 minutes 26 seconds
Server load: 0.68 1.01 1.14
Total accesses: 1734914 - Total Traffic: 6.7 GB - Total Duration: 1058232051
CPU Usage: u102.4 s130.23 cu490.29 cs266.44 - .0166% CPU load
.292 requests/sec - 1213 B/second - 4156 B/request - 609.962 ms/request
1 requests currently being processed, 49 idle workers
______W__________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325010/4110/32803_
44.7052277202407170.014.99129.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0325010/4182/33010_
44.652342195607270.015.03129.94
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_97276583eafa5

0-0325010/4451/34445_
44.3516112216193990.016.26136.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_596d9e89fd932

0-0325010/4417/33478_
44.4910664191994240.015.91132.83
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4152/34386_
44.65232106186669590.015.02135.21
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8cf418cc8bba6

0-0325010/3743/32652_
44.652333214538240.013.58129.00
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-03250157/4374/34627W
44.730021107180138.415.80136.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /server-status HTTP/1.1

0-0325010/4173/33762_
44.4811442207792930.014.99133.23
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f89e719d24e7

0-0325010/4523/33136_
44.2519572191575150.016.36130.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0325010/4195/33775_
44.3915123201116150.015.19134.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0325010/4506/34151_
44.2520016211054620.016.43135.46
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0325010/3801/33290_
44.4812323201293610.013.81133.84
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/5112/34590_
44.70523201646830.018.58135.74
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4261/33961_
44.2520002583202760630.015.49133.58
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0325010/4415/32546_
44.2518222192642220.016.06134.11
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0325010/4813/33840_
44.548513209942340.017.24133.26
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/4511/33329_
44.586606212848680.016.11132.23
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0325010/4521/33242_
44.4812022193710150.016.11131.44
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a057b562b142a

0-0325010/4262/33691_
44.586343195416770.015.32132.62
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0325010/3777/33400_
44.2917052191729440.013.72133.38
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0325010/3978/32939_
44.4811102216144320.014.30130.13
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8bd14610c23e3

0-0325010/4431/35563_
44.643883213899560.016.19140.93
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0325010/3367/33268_
44.2518882216101160.012.20132.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847203d0a382b

0-0325010/4250/33444_
44.4811484208612020.015.31132.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0325010/4335/33278_
44.4413202195286280.015.59130.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26742.
0.002368963161295680.00.00107.06
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/26492.
0.002368962163627630.00.00106.08
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8abee2a3aea68

1-0-0/0/25763.
0.002368964167211870.00.00101.75
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a43e45788a9ba

1-0-0/0/26053.
0.002368963170157370.00.00103.70
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26102.
0.002368965175542730.00.00105.20
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/27243.
0.002368962168012790.00.00107.90
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3491a7c037fc2

1-0-0/0/27192.
0.002368964157652290.00.00110.10
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0-0/0/26926.
0.002368962164668600.00.00107.97
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0-0/0/26484.
0.002368966148206510.00.00104.24
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/helpers/sounds/sfx_swooshing.ogg HTTP/1.1

1-0-0/0/26089.
0.002368961577160865920.00.00102.53
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/25792.
0.002368966158221720.00.00102.81
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/helpers/sounds/sfx_point.ogg HTTP/1.1

1-0-0/0/27648.
0.002368964160064860.00.00112.01
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2acfead04e78d

1-0-0/0/26709.
0.002368962170371290.00.00105.48
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/28189.
0.002368963162119180.00.00113.37
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/26182.
0.002368965169776170.00.00104.85
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-0-0/0/26733.
0.002368962165036000.00.00105.47
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0402a3ce86fb5

1-0-0/0/25902.
0.002368963153862760.00.00102.33
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

1-0-0/0/27159.
0.002368964164770350.00.00109.11
127.0.0.1http/1.1ip-10-1-89-105.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0-0/0/28172.
0.002368962170715430.00.00117.08

Found on 2024-10-08 05:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31fd4f66c6fd4f66c670463809

Apache Status

Apache Server Status for oakhill-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 08-Oct-2024 05:20:07 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 19 hours 10 minutes 14 seconds
Server load: 2.07 2.95 3.11
Total accesses: 1734925 - Total Traffic: 6.7 GB - Total Duration: 1072535082
CPU Usage: u129.01 s149.98 cu486.21 cs258.28 - .0172% CPU load
.292 requests/sec - 1212 B/second - 4155 B/request - 618.203 ms/request
2 requests currently being processed, 48 idle workers
______________W_______________________W___________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0189900/5182/32725_
61.7011213220748870.019.14128.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a228fcae7be24

0-0189900/5201/32537_
61.6613325212516840.019.29127.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0189900/5337/34089_
61.5717063222279780.020.12133.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5bee24c97dea

0-0189900/5666/34045_
61.95834207092480.021.04134.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5533/34286_
61.4520623202151680.020.49135.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5158/34477_
61.902935205985060.018.80136.28
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5238/32727_
61.5218243202465260.019.24128.62
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/5850/34071_
61.6911603197750320.021.78133.84
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_12c9888241ff4

0-0189900/5201/33503_
61.9211919221215790.019.27131.74
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/6032/33469_
61.7789616201324240.021.99131.90
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/4734/33061_
61.7210751176189623530.017.72131.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVLLTsMwEPyVyPfYrpPSY

0-0189900/5869/33334_
61.855675203809040.021.85132.48
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_01&RelayS

0-0189900/5463/33810_
61.5018774217701420.020.03133.46
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

0-0189900/6394/34159_
61.4719790220688140.023.82136.32
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

0-01899011/5656/33455W
61.95001892050322.421.26133.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0189900/5742/32919_
61.5118415206108380.021.18130.07
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5457/32430_
61.902554214405450.020.49128.27
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ca39feda51c38

0-0189900/5322/32250_
61.817514195220310.019.50126.41
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Foakhi

0-0189900/5701/32079_
61.4719865209808440.021.20125.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5419/33366_
61.7794411210298210.019.87132.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/4780/32741_
61.865523193829400.017.75128.31
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a9ef7eb158da8

0-0189900/5807/33940_
61.68119983211184580.021.39133.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foaklife.

0-0189900/5338/34946_
61.902527566197872630.019.63136.97
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

0-0189900/6482/34206_
61.6115235208370210.023.85135.02
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

0-0189900/5612/32926_
61.7210653199354720.020.76129.93
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/5670/30837_
65.141884196943040.021.14122.58
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5b01c94a6490e

1-0111050/5862/32428_
65.2030202987130.021.76127.87
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /about HTTP/1.1

1-0111050/6529/32439_
65.026591182580540.024.09125.99
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET / HTTP/1.1

1-0111050/6087/32864_
65.093884198537130.022.70128.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/6150/31996_
64.931057493195579320.022.78125.81
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZJNT4QwEIbvJv4H0jsfS

1-0111050/5999/32849_
64.9012393184817160.022.13130.06
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bea22ae8af2c5

1-0111050/6389/32634_
65.151646200512260.023.48128.39
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Foakhill-

1-0111050/6404/32702_
64.7620045208325840.023.99128.51
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5561/32129_
65.112525198551690.020.68126.59
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5187/31487_
65.0648122201352830.019.05122.73
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/5562/33000_
64.7619564188418730.020.47129.20
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5902/32592_
64.7618649203665700.022.01130.01
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0111050/5332/31195_
64.8614254196286210.019.59123.94
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5061/31743W
64.7500203757100.018.93125.05
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /server-status HTTP/1.1

1-0111050/5674/32315_
64.9311624193550370.020.90127.64
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_532ce01f003c0

1-0111050/5285/32343_
64.9311584192879430.019.52127.66
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Foakhi

1-0111050/5404/32741_
64.8116123190887970.019.84129.60
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=kiosk_01&RelayState=%7

1-0111050/6096/32512_
64.7619333184419540.022.71128.92
127.0.0.1http/1.1ip-10-1-110-203.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_88b56031de1f8

1-0111050/5043/30298_
64.93<

Found on 2024-10-08 05:19

Create report

Open service 3.171.214.81:80 · d14ifmitnnddok.amplifyapp.com

2026-02-09 04:08

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 09 Feb 2026 04:08:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://d14ifmitnnddok.amplifyapp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 248e05f803b9ec4139b6bc53e3088d18.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: fqCFhWGab6ThyBeNwQfGC5qhPPd-QAh-m0N9EGw9OGO-syipNmSTSw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-02-09 by HttpPlugin

Host 3.171.214.81

United States

Software information

Apache server-status page is publicly available

*.d22k47b3f5h63z.amplifyapp.comd22k47b3f5h63z.amplifyapp.com

*.electropartesespana.com.arelectropartesespana.com.ar

wifizapp.online

my-wedding-flower-ideas.comwww.my-wedding-flower-ideas.com

chillguyclicker.infowww.chillguyclicker.info

tonow.co

liedcentertickets.com*.liedcentertickets.com

*.eflightinsured.comeflightinsured.com

Domain summary