LeakIX - Host 65.9.95.46

Host 65.9.95.46

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443

CloudFront

tcp/443 tcp/80

nginx nginx 1.29.4

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.35.58.79
Domain: www.interop.pagopa.it
Port: 443
URL: https://www.interop.pagopa.it

First seen 2023-02-20 23:35
Last seen 2026-02-02 08:11
Open for 1077 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0fe5b874f1b1500e05300e26506b1f38f
```
Found 13 files trough .DS_Store spidering:

/data
/favicon-32x32.png
/favicon.svg
/fonts
/icons
/manifest.webmanifest
/robots.txt
/static
/static/docs
/static/icons
/static/images
/static/local_scripts
/static/logo
```
  Found on 2026-02-02 08:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176428b8bb33bba11c316ba11c316ba11c316
```
Found 2 files trough .DS_Store spidering:

/static
/static/docs
```
  Found on 2025-11-16 15:23
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc6c04092b4e6690e115def5eeaf54cd1e
```
Found 4 files trough .DS_Store spidering:

/data
/data/mock.json
/static
/static/local_scripts
```
  Found on 2025-02-02 10:38
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a080ecf96bc6eec3d82adf8f1e96170136
```
Found 13 files trough .DS_Store spidering:

/icons
/static
/static/icons
/static/icons/goals_1_once_only.svg
/static/icons/goals_2_safety.svg
/static/icons/goals_3_unique.svg
/static/icons/goals_4_history.svg
/static/icons/login.svg
/static/icons/vantaggi_1_unica.svg
/static/images
/static/oneTrust_production
/static/oneTrust_production/consent
/static/oneTrust_production/scripttemplates
```
  Found on 2023-02-20 23:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.46
Domain: assa.computer
Port: 443
URL: https://assa.computer

First seen 2024-10-09 04:55
Last seen 2026-01-16 09:12
Open for 464 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b423ae5e9db06c1aad225f0795769cc61
```
Found 14 files trough .DS_Store spidering:

/downloads
/fonts
/imgs
/imgs/alpha
/imgs/alpha/hero
/imgs/alpha/layout
/imgs/alpha/pick
/imgs/alpha/placeholders
/imgs/alpha/splash
/imgs/alpha/stats
/imgs/alpha/why
/imgs/bravo
/imgs/charlie
/imgs/delta
```
  Found on 2026-01-16 09:12
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.45
Domain: www.rolandma.com
Port: 443
URL: https://www.rolandma.com

First seen 2023-02-03 01:54
Last seen 2026-01-16 02:53
Open for 1078 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b047788ec749afb265b8790a953e0cbb5d9

Found 53 files trough .DS_Store spidering:

/.sass-cache
/about.html
/blog.html
/contact.html
/css
/css/animate.css
/css/bootstrap.css
/css/bootstrap.css.map
/css/flexslider.css
/css/icomoon.css
/css/owl.carousel.min.css
/css/owl.theme.default.min.css
/css/style.css
/css/style.css.map
/fonts
/fonts/.DS_Store
/fonts/bootstrap
/fonts/icomoon
/fonts/icomoon/icomoon.eot
/fonts/icomoon/icomoon.svg
/fonts/icomoon/icomoon.ttf
/fonts/icomoon/icomoon.woff
/images
/images/.DS_Store
/images/img_bg_1.jpg
/images/img_bg_2.jpg
/images/img_bg_3.jpg
/images/loc.png
/index.html
/js
/js/.DS_Store
/js/bootstrap.min.js
/js/google_map.js
/js/jquery.countTo.js
/js/jquery.easing.1.3.js
/js/jquery.flexslider-min.js
/js/jquery.min.js
/js/jquery.waypoints.min.js
/js/main.js
/js/modernizr-2.6.2.min.js
/js/owl.carousel.min.js
/js/respond.min.js
/js/sticky-kit.min.js
/prepros-6.config
/sass
/sass/.DS_Store
/sass/_bootstrap-compass.scss
/sass/_bootstrap-mincer.scss
/sass/_bootstrap-sprockets.scss
/sass/bootstrap
/services.html
/work-single.html
/work.html

Found on 2026-01-16 02:53

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cacb6a9a6fc2e27ffb3deb4a65b4e723b30

Found 48 files trough .DS_Store spidering:

/.sass-cache
/about.html
/blog.html
/contact.html
/css
/css/animate.css
/css/bootstrap.css
/css/bootstrap.css.map
/css/flexslider.css
/css/icomoon.css
/css/owl.carousel.min.css
/css/owl.theme.default.min.css
/css/style.css
/css/style.css.map
/fonts
/fonts/.DS_Store
/fonts/bootstrap
/fonts/icomoon
/fonts/icomoon/icomoon.eot
/fonts/icomoon/icomoon.svg
/fonts/icomoon/icomoon.ttf
/fonts/icomoon/icomoon.woff
/images
/images/.DS_Store
/images/img_bg_1.jpg
/images/img_bg_2.jpg
/images/img_bg_3.jpg
/images/loc.png
/index.html
/js
/js/.DS_Store
/js/bootstrap.min.js
/js/google_map.js
/js/jquery.countTo.js
/js/jquery.easing.1.3.js
/js/jquery.flexslider-min.js
/js/jquery.min.js
/js/jquery.waypoints.min.js
/js/main.js
/js/modernizr-2.6.2.min.js
/js/owl.carousel.min.js
/js/respond.min.js
/js/sticky-kit.min.js
/prepros-6.config
/sass
/services.html
/work-single.html
/work.html

Found on 2025-11-05 01:09

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d40478240ac448145fa4737b92bfb3f3545c2b91

Found 35 files trough .DS_Store spidering:

/.sass-cache
/about.html
/blog.html
/contact.html
/css
/css/animate.css
/css/bootstrap.css
/css/bootstrap.css.map
/css/flexslider.css
/css/icomoon.css
/css/owl.carousel.min.css
/css/owl.theme.default.min.css
/css/style.css
/css/style.css.map
/fonts
/fonts/.DS_Store
/fonts/bootstrap
/fonts/icomoon
/fonts/icomoon/icomoon.eot
/fonts/icomoon/icomoon.svg
/fonts/icomoon/icomoon.ttf
/fonts/icomoon/icomoon.woff
/images
/images/.DS_Store
/images/img_bg_1.jpg
/images/img_bg_2.jpg
/images/img_bg_3.jpg
/images/loc.png
/index.html
/js
/prepros-6.config
/sass
/services.html
/work-single.html
/work.html

Found on 2024-06-08 01:14

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.46
Domain: registro-laboral.com
Port: 443
URL: https://registro-laboral.com

First seen 2023-02-03 02:26
Last seen 2026-01-02 03:02
Open for 1064 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf14e6769346b8897a76b8897a7
```
Found 3 files trough .DS_Store spidering:

/assets
/assets/fonts
/assets/icons
```
  Found on 2026-01-02 03:02
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.58
Domain: trlismore-login.cloudworkengine.net
Port: 443
URL: https://trlismore-login.cloudworkengine.net

First seen 2024-10-09 04:11
Last seen 2025-12-20 21:24
Open for 437 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a94e799f15

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Dec-2025 21:24:34 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 14 hours 42 minutes 29 seconds
Server load: 0.80 0.91 0.82
Total accesses: 138457 - Total Traffic: 478.6 MB - Total Duration: 15047773
CPU Usage: u6.49 s7.08 cu29.37 cs17.45 - .0152% CPU load
.347 requests/sec - 1259 B/second - 3624 B/request - 108.682 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0134560/278/2517_
2.2541932807610.01.078.87
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e514c9a666d2

0-0134560/225/2830_
2.2545133009360.00.749.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9d8149a8a51a0

0-0134560/209/2471_
2.285032890500.00.688.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2723d0c49d038

0-0134560/195/2589_
2.2549832727210.00.579.37
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_23d0d3d173713

0-0134560/309/2898_
2.2546753539470.01.279.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUjYE

0-0134560/220/2814_
2.282793612760.00.649.64
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/247/2685_
2.2543433319860.00.889.44
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bdb27eaa548bc

0-0134560/273/2966_
2.2639763314970.00.9110.51
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0134560/278/2624_
2.2728172867970.01.028.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/267/3032_
2.2635533570470.00.9410.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ffe865252c0dd

0-0134560/211/2477_
2.2637762613250.00.829.10
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/233/2823_
2.2630632823850.00.829.66
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d376fc9c6121d

0-0134560/208/3068_
2.263252023094540.00.6410.40
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/247/2629_
2.272521853231220.00.818.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/198/2561_
2.2726642591960.00.619.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/241/3563_
2.2722153451550.00.7112.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/291/2726_
2.2723333609820.01.119.21
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b1361a1b01f9a

0-0134560/302/2884_
2.2715433829970.01.029.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7343519064827

0-0134560/223/2863_
2.2719432668100.00.699.86
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1009ad662e786

0-0134560/240/3283_
2.2714652854820.00.8711.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0134560/212/2713_
2.271862003089940.00.719.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDemB

0-0134560/273/3043_
2.285852570900.00.9810.48
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0134560/242/2806_
2.2712742645620.00.8010.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0134560/254/2652_
2.2885342550190.00.919.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/253/3292_
2.2810733210550.00.9711.60
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_584edf0bfd818

1-0134920/235/3165_
2.2020453787460.00.7910.93
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/270/2713_
2.201862102369030.01.029.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/265/2811_
2.2018042917230.00.949.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8a190597ac31c

1-0134920/229/3192_
2.2016822813110.00.7810.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2afdaa09a1267

1-0134920/235/2577_
2.219433269390.00.728.74
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_63a83d788fbad

1-0134920/226/2707_
2.2013962538530.00.779.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e8553609fc285

1-0134920/217/2810_
2.1931733058110.00.749.49
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a084e25e9da66

1-0134920/230/2631_
2.2025942810940.00.819.14
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2e0d62973af0d

1-0134920/219/2865_
2.2029132672280.00.709.53
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d7486e4ca24ec

1-0134920/232/2796_
2.2022843234160.00.879.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/244/2646_
2.2024142674780.00.799.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/258/2623_
2.2012132609420.00.748.79
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d785f3f70f84d

1-0134920/281/2319_
2.215742950550.01.008.09
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/239/2868_
2.217732638540.00.899.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e19bcf822199b

1-0134920/253/2437_
2.213622724580.01.038.68
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_517b7f92dc110

1-01349230/281/2614W
2.210029602044.11.139.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

1-0134920/212/2541_
2.1945733037360.00.688.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/225/2387_
2.1942732257900.00.928.25
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0134920/248/2801_
2.1848743553010.00.919.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcOY

1-0134920/237/2995_
<

Found on 2025-12-20 21:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a95b637e87

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 15:41:30 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 8 hours 59 minutes 25 seconds
Server load: 0.69 0.58 0.60
Total accesses: 105242 - Total Traffic: 360.1 MB - Total Duration: 11027558
CPU Usage: u26.11 s17.25 cu0 cs0 - .0211% CPU load
.513 requests/sec - 1840 B/second - 3588 B/request - 104.783 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0330/1808/1808_
19.985472105280.06.286.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0330/2110/2110_
19.9777982168540.07.177.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0330/1832/1832_
19.9780272077460.06.356.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/1883/1883_
19.9838261586140.06.696.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0330/2158/2158_
19.989772723600.07.117.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2151/2151_
19.985921962862350.07.547.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpW

0-0330/1959/1959_
19.9864842491050.06.716.71
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/2303/2303_
19.985022082589530.08.218.21
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0330/1983/1983_
19.9769771881190.06.606.60
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2327/2327_
19.9856272543530.08.398.39
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-0330/1844/1844_
19.9814471787420.06.346.34
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0330/2201/2201_
19.9845782021640.07.457.45
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2417/2417_
19.9851782173250.08.118.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03326/1954/1954W
19.990023590832.56.586.58
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0330/1955/1955_
19.9830481957510.07.027.02
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2897/2897_
19.9862252691790.010.0110.01
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0330/2034/2034_
19.9786062693950.06.696.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduC

0-0330/2155/2155_
19.981741942459590.07.057.05
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0330/2179/2179_
19.9781771909740.07.577.57
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2599/2599_
19.9823462213710.08.738.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0330/2009/2009_
19.9820262111580.06.976.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2324/2324_
19.977482002027910.07.907.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0330/2137/2137_
19.9827771911920.07.647.64
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1995/1995_
19.9833781781760.06.976.97
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2677/2677_
19.984131782587530.09.289.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0340/2474/2474_
18.6580262707530.08.468.46
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/2018/2018_
18.6647251813700.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0340/2158/2158_
18.6629452046300.07.427.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0340/2550/2550_
18.6653262092930.08.548.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNiOp

1-0340/2026/2026_
18.663522722686480.06.866.86
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wth

1-0340/2114/2114_
18.6639772120780.07.137.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2234/2234_
18.662642002467910.07.527.52
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/1969/1969_
18.6657772114700.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2217/2217_
18.668471961600.07.327.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

1-0340/2107/2107_
18.6568110392211170.07.327.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/2016/2016_
18.6632261814120.06.886.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

1-0340/1963/1963_
18.6575771690820.06.806.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1611/1611_
18.6663772217460.05.425.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2235/2235_
18.6620261866620.07.777.77
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/1786/1786_
18.66442342112430.06.166.16
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0340/1979/1979_
18.6571291989150.06.916.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0340/1969/1969_
18.6615772363180.06.846.84
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1681/1681_
18.6650261590540.05.595.59
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/2141/2141_
18.663772658380.07.187.18
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2159/2159_
18.6621771686040.07.297.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1958/1958_

Found on 2025-12-18 15:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e6f12933

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 16:06:36 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 hours 24 minutes 31 seconds
Server load: 0.63 0.69 0.59
Total accesses: 38258 - Total Traffic: 122.7 MB - Total Duration: 2187752
CPU Usage: u7.97 s5.58 cu0 cs0 - .04% CPU load
1.13 requests/sec - 3799 B/second - 3363 B/request - 57.1842 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0330/601/601_
6.168574389140.01.981.98
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e243abc017bb2

0-0330/552/552_
6.139565251800.01.731.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/700/700_
6.168325573380.02.242.24
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/617/617_
6.0811615140160.01.921.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/703/703_
6.0811326370350.02.172.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/562/562_
6.284243231140.01.901.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9e8f951b70e6b

0-0330/641/641_
6.21662202322230.02.042.04
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0330/760/760_
6.342329717830.02.832.83
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/808/808_
6.313553589070.02.532.53
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/796/796_
6.313755606330.02.522.52
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/585/585_
6.371037229060.01.891.89
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/804/804_
6.313604471930.02.482.48
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/925/925_
6.371824417840.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0330/667/667_
6.0910544299240.02.072.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_66295156c1d5e

0-0330/586/586_
6.371637400050.01.961.96
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1053/1053_
6.235703460210.03.283.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_190198c693ef8

0-0330/1000/1000_
6.216963655050.03.073.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_240885106ce3b

0-03326/1026/1026W
6.38004717153.33.183.18
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0330/1035/1035_
6.2353210694850.03.623.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/968/968_
6.0413434635500.03.063.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/399/399_
6.0512633305950.01.281.28
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_62fad5fe65907

0-0330/872/872_
6.1875230487230.02.822.82
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0330/783/783_
6.37573203570.02.422.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24d9f85667a2d

0-0330/639/639_
6.0811466504950.02.142.14
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0330/889/889_
6.264734472840.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bd040b4e64d6

1-0340/1076/1076_
6.1411328686700.03.613.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/944/944_
6.276143656310.03.033.03
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2f541bb6a0787

1-0340/976/976_
6.305223725190.03.253.25
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ced4baafc602d

1-0340/1078/1078_
6.295327542110.03.353.35
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/642/642_
6.313787405870.02.042.04
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0340/754/754_
6.371214731780.02.412.41
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/857/857_
6.304774577270.02.902.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/618/618_
6.304454477460.02.122.12
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3652a2f38b99d

1-0340/938/938_
6.333194264880.02.942.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40c515bfbc4d0

1-0340/833/833_
6.238328483330.02.612.61
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/734/734_
6.352325160350.02.422.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/890/890_
6.219084335800.02.882.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_61ef3f0643105

1-0340/612/612_
6.248085341580.01.881.88
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/690/690_
6.3526724436070.02.112.11
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b2070a6ac1fc1

1-0340/541/541_
6.24737192186960.01.721.72
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0340/961/961_
6.37968569910.03.003.00
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0340/469/469_
6.351765573150.01.471.47
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0340/624/624_
6.246705144040.01.911.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1ed05f76be502

1-0340/966/966_
6.1112853693790.03.133.13
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f96dc7215efb5

1-0340/542/542_
6.40174168300.01.711.71
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_95121a38b17a5

1-0340/462/462_
6.0813933430830.01.541.54
127.0

Found on 2025-12-16 16:06

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a99cb89ce3

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 14-Dec-2025 10:52:08 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 13 hours 41 minutes 23 seconds
Server load: 0.38 0.55 0.55
Total accesses: 1651312 - Total Traffic: 6.4 GB - Total Duration: 443559879
CPU Usage: u50.75 s75.72 cu454.44 cs283.11 - .021% CPU load
.402 requests/sec - 1675 B/second - 4169 B/request - 268.611 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/1329/30665_
15.70518877396280.04.99120.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/1333/29521_
15.7047965781637330.04.92117.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0291810/1116/28953_
15.7410937277953190.04.16114.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0291810/1400/30830_
15.71375880506020.05.79122.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1208/30388_
15.74140577497070.04.56118.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0291810/1407/30207_
15.73155483123350.05.49121.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0291810/1197/31647_
15.72237679851480.04.55125.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

0-0291810/1084/31237_
15.722094681824000.04.12123.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/1244/29268_
15.6970941478770690.04.72116.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/1569/31901_
15.7575784060280.06.23124.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1583/31676_
15.69756085420590.06.14124.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291810/1122/30287_
15.71351180864610.04.03119.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0291810/1409/31348_
15.70555782486750.05.75124.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1119/30709_
15.70615885573090.04.33121.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1371/30020_
15.71340878385570.05.46119.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1513/31450_
15.71435783239610.06.21123.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1285/31223_
15.72283372380823150.05.10124.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0291810/1324/30429_
15.72255777746410.05.54121.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1087/29662_
15.713986180354350.04.34116.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/1514/30148_
15.7550681644520.05.62120.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/1312/31167_
15.74149188445520.05.49125.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0291810/1438/31149_
15.7219936675021870.05.75121.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCch2

0-0291810/1166/30028_
15.71315781061940.04.43119.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1252/29926_
15.67243083593870.04.62119.17
127.0.0.1http/1.1

0-0291810/1356/30384_
15.69665184230020.05.11121.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0286900/116/24453_
1.08261564866600.00.5096.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0286900/73/24833_
1.08307668451480.00.2698.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

1-0286900/57/24602_
1.08315168775670.00.2196.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/73/23872_
1.08338166585550.00.2995.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0286900/196/24252_
1.073506666268190.00.7495.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286900/77/24420_
1.06491767916450.00.2997.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0286900/147/25516_
1.08238168463400.00.55100.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0286900/169/24505_
1.08238169538730.00.6497.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/98/24658_
1.082303169739630.00.3498.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwFIX%2Fyt761HU

1-0286900/156/24985_
1.09195858241370.00.60100.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/59/24392_
1.09150168365120.00.3096.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/66/24647_
1.09170569666240.00.2697.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

1-0286900/46/24518_
1.09155165001250.00.1996.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/101/26483_
1.09135767779740.00.34106.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/84/24930_
1.10894570382200.00.2697.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286900/44/24561_
1.1060563213420.00.1797.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-02869029/114/25043W
1.1100650838142.10.4498.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0286900/66/24726_
1.06735766491250.00.2798.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/88/25395_
1.06675866019780.00.3598.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/59/24857_
1.06650764496080.00.2499.24
127.0.0.1http/1.1ip-10-1-10

Found on 2025-12-14 10:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a966463f38

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 13-Dec-2025 17:48:53 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 20 hours 38 minutes 8 seconds
Server load: 0.20 0.38 0.51
Total accesses: 1638402 - Total Traffic: 6.4 GB - Total Duration: 439972786
CPU Usage: u55.84 s78.91 cu444.87 cs276.42 - .0211% CPU load
.405 requests/sec - 1687 B/second - 4170 B/request - 268.538 ms/request
1 requests currently being processed, 49 idle workers
______________W___________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/999/30335_
12.60257876466130.03.66119.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/990/29178_
12.6060881067370.03.64116.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/918/28755_
12.59587877435070.03.41113.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhOt

0-0291810/1153/30583_
12.602274079895000.04.84121.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/987/30167_
12.60540776715030.03.73117.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1142/29942_
12.59699682683770.04.43120.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/939/31389_
12.598273379333150.03.50124.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/865/31018_
12.597373481411290.03.39122.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0291810/929/28953_
12.60399877923990.03.52115.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1337/31669_
12.60497583324180.05.27123.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuIwEIZfJTefHCcBg

0-0291810/1350/31443_
12.6046743184315530.05.29123.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpu

0-0291810/915/30080_
12.5997661880292680.03.17118.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxoxEIb%2Fyt588no

0-0291810/1190/31129_
12.601674281844700.04.95123.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291810/886/30476_
12.60347684914600.03.37120.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNf

0-02918128/1059/29708W
12.6000776447238.84.25118.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291810/1258/31195_
12.6099682467130.05.17122.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1029/30967_
12.59896780174760.04.12123.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/959/30064_
12.59857876385210.04.19119.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291810/865/29440_
12.60120879853920.03.44115.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1164/29798_
12.60420880712020.04.37118.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1057/30912_
12.59617787688380.04.44124.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

0-0291810/1193/30904_
12.59660774341330.04.84120.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/893/29755_
12.59948579918220.03.40118.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdJW

0-0291810/1038/29712_
12.59781783223930.03.90118.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1053/30081_
12.60296883377800.03.99119.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1085/24155_
14.29437763986870.03.8895.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0249080/1261/24628_
14.2948667901510.04.7297.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0249080/1262/24403_
14.28677668305890.04.4496.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1370/23633_
14.28600865997530.05.3694.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1054/23885_
14.279183765276080.04.0593.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1425/24187_
14.2955741867378310.05.2496.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOo

1-0249080/1115/25236_
14.2788747368013450.04.1899.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

1-0249080/1176/24159_
14.2864539968588960.04.4495.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0249080/1274/24352_
14.2935838368812210.04.6497.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpq

1-0249080/1364/24605_
14.294035557079460.05.3198.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1122/24162_
14.29240867695130.04.7695.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1221/24468_
14.28767669232510.05.1397.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0249080/1252/24340_
14.2779737964519180.04.9596.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNfJU

1-0249080/1144/26249_
14.295271667105710.04.58105.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1320/24663_
14.2978669568880.05.0596.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9owEIb%2FSm4%2BO

1-0249080/1121/24298_
14.2928739562462550.04.5696.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1184/24692_
14.293173564465240.04.4397.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsR

1-0249080/1192/24532_
14.29180865855820.04.6497.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1127/25161_
14.27840765277010.04.1897.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1152/24638_

Found on 2025-12-13 17:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a96e18033d

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 20:22:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 23 hours 11 minutes 35 seconds
Server load: 0.93 0.82 0.88
Total accesses: 1625006 - Total Traffic: 6.3 GB - Total Duration: 437200248
CPU Usage: u51.72 s75.03 cu444.87 cs276.42 - .0214% CPU load
.409 requests/sec - 1707 B/second - 4172 B/request - 269.045 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/734/30070_
9.5753941575869980.02.53117.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0291810/807/28995_
9.57267780458750.03.01115.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/694/28531_
9.57394677124120.02.60112.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/872/30302_
9.57364679221940.03.29120.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/750/29930_
9.57453576095010.02.83117.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHDdpK

0-0291810/854/29654_
9.57487581929930.03.21118.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0291810/683/31133_
9.5887778938680.02.54123.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/651/30804_
9.57621780902610.02.60122.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/668/28692_
9.57634577463540.02.75114.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0291810/955/31287_
9.57573682794780.04.02122.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHCdpK

0-0291810/974/31067_
9.57423683817160.03.60122.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0291810/650/29815_
9.58154679530860.02.15117.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGGwnV

0-0291810/950/30889_
9.57327781222610.04.10122.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/622/30212_
9.576211084565460.02.42119.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/771/29420_
9.58207777142470.03.15117.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1027/30964_
9.57302681983430.04.27121.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0291810/764/30702_
9.57241679320150.03.07122.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/744/29849_
9.5822016375824690.02.81118.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPbahsxEP0Vofe92evgC

0-0291810/609/29184_
9.573211079304440.02.40114.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/780/29414_
9.58213479920450.03.26117.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/746/30601_
9.5834587245690.03.16123.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzqt

0-0291810/903/30614_
9.58213873900040.03.74119.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/667/29529_
9.58122579526170.02.59117.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNbtswEIRfRTeeKEryT

0-0291810/821/29495_
9.5767041882635410.03.13117.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLdbuMgEIVfxXdcYWzi%

0-0291810/790/29818_
9.57554082824350.03.18119.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0249080/773/23843_
11.43627763436370.02.9394.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/978/24345_
11.43661567291040.03.6296.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYLdZ

1-0249080/911/24052_
11.43503767885500.03.3595.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1058/23321_
11.43554465398500.04.1292.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0249080/819/23650_
11.43687864513810.03.0992.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1055/23817_
11.44405311766883480.04.0595.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdZ2

1-0249080/861/24982_
11.4360439167712910.03.1898.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDduF

1-0249080/978/23961_
11.44332113467859600.03.7495.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/978/24056_
11.44387768309920.03.6596.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1148/24389_
11.443211056439370.04.5097.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/881/23921_
11.45231067110160.03.8494.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0249080/984/24231_
11.44321568593240.04.2496.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/926/24014_
11.44447863749170.03.7795.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/799/25904_
11.4347139966641490.03.27104.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1118/24461_
11.45213569022160.04.3096.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/841/24018_
11.452476161879150.03.5695.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/970/24478_
11.44274564043430.03.6696.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/909/24249_
11.459340565046320.03.6096.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLfT8IwEMf%2Flb31qSs

1-0249080/893/24927_
11.4527764711640.03.3696.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/911/24397_
11.45147863308490.03.3997.48

Found on 2025-12-12 20:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a941b43a5c

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 11-Dec-2025 06:52:50 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  44 days 9 hours 42 minutes 5 seconds
Server load: 0.98 0.77 0.81
Total accesses: 1579446 - Total Traffic: 6.1 GB - Total Duration: 427399484
CPU Usage: u50.81 s72.2 cu431.29 cs267.71 - .0214% CPU load
.412 requests/sec - 1719 B/second - 4175 B/request - 270.601 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046020/1543/29200_
20.39344474152460.06.30114.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_642486f3bd645

0-046020/1669/28068_
20.4187478235520.07.59112.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_26b249ee8fc07

0-046020/1665/27670_
20.39326475636860.07.01109.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f05e1d7721053

0-046020/1676/29243_
20.39308476659140.07.42116.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6878a5d065398

0-046020/1637/29029_
20.40257474046650.06.78113.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1536/28611_
20.39409580041090.06.63114.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-046020/1696/30292_
20.40271677122440.07.24120.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1596/30001_
20.40211578535390.06.79118.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1421/27862_
20.40166675807820.06.60111.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1584/30160_
20.41443980153600.06.42117.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1528/29911_
20.4015138681965960.07.12117.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1586/28936_
20.40194977459270.06.74114.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-046020/1815/29780_
20.38451478941450.07.45118.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_113d465bb33e9

0-046020/1646/29420_
20.40101483244050.07.26116.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0019256efe39e

0-046020/1770/28493_
20.4022640975621730.07.36113.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1669/29762_
20.40132579554690.07.31116.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b8ad679f70783

0-046020/1549/29785_
20.4165177394880.06.45118.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-046020/1758/28945_
20.39437473315970.07.80114.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_37f86090624c3

0-046020/1425/28396_
20.40116377435760.05.91111.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5123ba65ab6fc

0-046020/1714/28475_
20.39397577932420.07.99113.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1684/29690_
20.4130585944250.07.41119.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1569/29534_
20.39357772001360.06.59114.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046020/1637/28698_
20.39287578076730.06.96114.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-046020/1590/28496_
20.38466480240900.06.69113.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b9035a761b6e

0-046020/1718/28872_
20.39375480456930.08.32115.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed8db3d06aca0

1-0249080/69/23139_
0.76220462103230.00.3692.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dca27c402e9d8

1-0249080/49/23416_
0.76125565005440.00.1992.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/64/23205_
0.76158466214880.00.2391.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_40bcee4fe7b17

1-0249080/58/22321_
0.76188462766250.00.1888.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3fe915984eb67

1-0249080/56/22887_
0.76199562662660.00.2090.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/50/22812_
0.76137563674170.00.1791.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/74/24195_
0.76108566061990.00.2696.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/106/23089_
0.7679666160840.00.4491.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-0249080/70/23148_
0.7750666515200.00.2593.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/60/23301_
0.7695554476280.00.2293.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/50/23090_
0.754601265874620.00.2090.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/87/23334_
0.77354366502140.00.4492.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-02490834/94/23182W
0.7800616169659.90.2791.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0249080/57/25162_
0.75445765291700.00.19100.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/59/23402_
0.754274166635310.00.1891.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/59/23236_
0.75404460589860.00.2492.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_05f4501e23f43

1-0249080/45/23553_
0.75389462480130.00.2093.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9593b18b335b3

1-0249080/60/23400_
0.753663462738850.00.2093.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0249080/48/24082_
0.75349662904180.00.1593.60
127.0.0.1http/1.1ip-10-1-102-142.ap-sou

Found on 2025-12-11 06:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9b2e681b7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 01-Dec-2025 10:18:33 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  34 days 13 hours 7 minutes 48 seconds
Server load: 0.73 0.96 1.13
Total accesses: 1071729 - Total Traffic: 4.3 GB - Total Duration: 334431647
CPU Usage: u45.29 s57.57 cu289.65 cs174.19 - .019% CPU load
.359 requests/sec - 1557 B/second - 4338 B/request - 312.049 ms/request
1 requests currently being processed, 49 idle workers
______W__________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/1765/19364_
20.8550055398060.06.6979.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-056400/1589/18182_
20.8320958457670150.06.6474.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7vCiva

0-056400/1711/18087_
20.82538655871260.07.4774.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/2068/20092_
20.82453158604150.08.4782.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-056400/1564/18490_
20.82571659842520.06.6275.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-056400/1503/18313_
20.83400659248030.06.4276.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0564026/1853/19339W
20.8600569890339.77.2780.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-056400/1760/19434_
20.83374060845370.07.2980.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-056400/1815/18009_
20.83238858380220.07.7374.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1753/19762_
20.8341619061296140.07.4981.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfM%

0-056400/1928/18926_
20.8413119162168060.08.1478.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1700/18691_
20.83381458545870.07.0576.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/1780/19117_
20.83276758277250.07.6280.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1840/18756_
20.83231664657830.07.3077.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1898/18810_
20.8343417657287380.07.5177.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJHG6h

0-056400/1762/19440_
20.84120444359979210.07.2579.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1630/19642_
20.84100661572050.06.3382.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1874/18989_
20.82580658212540.07.9379.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1809/18416_
20.82520660382830.07.2575.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1772/18900_
20.8419035161338070.07.4778.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1874/18963_
20.83340664819650.07.9079.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1613/19322_
20.84173653024830.06.4477.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNt

0-056400/1757/18725_
20.833095558550560.07.4177.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1889/19359_
20.82545562981520.08.5280.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduW

0-056400/1738/18984_
20.8247343963413380.06.8877.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgFIX%2Fit94wth

1-0-0/0/15950.
0.0039718451227500.00.0066.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDspZ

1-0-0/0/15849.
0.0039718653996500.00.0067.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/15860.
0.003971836454763030.00.0067.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCRA3

1-0-0/0/14863.
0.0039718161050000620.00.0063.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15656.
0.0039718050344840.00.0064.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15753.
0.0039718051820140.00.0067.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15908.
0.0039718453901850.00.0067.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0-0/0/16061.
0.003971874054311010.00.0067.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15627.
0.0039718153358930.00.0067.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/15622.
0.0039718143314310.00.0066.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/15359.
0.0039718052574000.00.0063.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15461.
0.0039718055903900.00.0065.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15562.
0.0039718650438500.00.0065.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16546.
0.0039718454160340.00.0071.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJL

1-0-0/0/15843.
0.003971875555612390.00.0066.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15980.
0.0039718149423390.00.0067.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15802.
0.003971817950204960.00.0065.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j8R8i3%2

1-0-0/0/15806.
0.00397183952434090.00.0066.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/16408.
0.0039718551390660.00.0067.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0-0/0/16120.
0.0039718750975730.00.0068.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16532.
0.003971833573845

Found on 2025-12-01 10:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9bda1299e

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 29-Nov-2025 04:42:22 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  32 days 7 hours 31 minutes 37 seconds
Server load: 0.80 0.97 1.10
Total accesses: 1018221 - Total Traffic: 4.1 GB - Total Duration: 315132586
CPU Usage: u39.37 s52.71 cu277.87 cs166.62 - .0192% CPU load
.365 requests/sec - 1582 B/second - 4338 B/request - 309.493 ms/request
1 requests currently being processed, 49 idle workers
_____________________W____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/787/18386_
8.16795952243180.02.9575.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/610/17203_
8.19613355059800.02.2470.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/707/17083_
8.16740552755370.02.9269.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-056400/812/18836_
8.166488954952460.03.9177.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-056400/734/17660_
8.16689657665870.03.2772.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/511/17321_
8.18269554423390.02.2472.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/714/18200_
8.16569554114110.03.0175.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/711/18385_
8.165193556871730.03.1276.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/698/16892_
8.1748519454631560.02.9469.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUhUA

0-056400/776/18785_
8.18389658224580.03.2877.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/699/17697_
8.17465456325710.03.1073.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdp0

0-056400/761/17752_
8.18185754720860.03.4372.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/615/17952_
8.18410453519810.02.6375.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-056400/622/17538_
8.18350560393980.02.5772.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpW

0-056400/650/17562_
8.18320453271040.02.8172.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-056400/514/18192_
8.18228456114590.02.1574.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpW

0-056400/631/18643_
8.18130057707990.02.5878.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-056400/742/17857_
8.1675739653745180.03.5374.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-056400/742/17349_
8.1686040756872700.02.8271.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-056400/713/17841_
8.1929557786590.02.9573.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/633/17722_
8.1819442360035720.02.8074.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0564025/576/18285W
8.2000499132129.22.2773.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-056400/608/17576_
8.1910339352686690.02.6173.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdOE

0-056400/775/18245_
8.16614308759176130.03.4475.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-056400/687/17933_
8.16830558593180.03.0174.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0295180/1066/15243_
10.84869549125310.04.0263.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/883/15042_
10.87209551739950.04.0464.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/742/15118_
10.871837951884670.02.9664.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0295180/829/14156_
10.84809547922950.03.2760.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/1054/14944_
10.87169548162420.04.0661.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLd

1-0295180/860/15029_
10.86449549042070.03.6164.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/849/15169_
10.8628742751753950.03.5064.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0295180/914/15348_
10.87259451951190.03.7464.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0295180/807/14783_
10.85749550761450.03.1363.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/833/14922_
10.84786641462600.03.7463.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/897/14695_
10.8750450171540.03.7561.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJF

1-0295180/1050/14791_
10.86399553844230.04.3162.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0295180/1008/14783_
10.85700528447519920.04.6362.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/903/15603_
10.85629550565040.03.5767.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/947/15137_
10.8484218853320430.04.2563.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5Acc

1-0295180/974/15306_
10.85678199347136540.03.8064.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dh

1-0295180/994/15019_
10.86560447627800.04.1962.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHEMID

1-0295180/721/15087_
10.86486849652070.03.2063.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/878/15725_
10.86505949487130.03.7864.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/903/15433_
10.86580386249312100.03.9465.71
127.0.0.1h

Found on 2025-11-29 04:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9bcd2394a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 27-Nov-2025 07:05:53 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  30 days 9 hours 55 minutes 8 seconds
Server load: 1.54 1.05 0.91
Total accesses: 976477 - Total Traffic: 3.9 GB - Total Duration: 302058323
CPU Usage: u39.75 s51.66 cu263.3 cs157.22 - .0195% CPU load
.372 requests/sec - 1611 B/second - 4337 B/request - 309.335 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-031070/1920/17379_
21.773714149856340.08.4571.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1780/16479_
21.766944452925040.07.9567.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1883/16084_
21.7666917450273240.08.2465.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCFAW

0-031070/1961/17883_
21.78180552831360.08.2473.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1748/16711_
21.77360554628800.07.3967.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1721/16669_
21.7660939452385210.07.5569.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-031070/1830/17350_
21.747513251861020.07.8172.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1541/17548_
21.76480553714780.06.9772.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1720/16077_
21.781291051932810.06.8866.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-031070/1736/17762_
21.76715055380390.07.6273.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-031070/1584/16691_
21.764284353359530.07.0969.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-031070/1924/16767_
21.76660751426220.08.3468.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1749/17175_
21.76530051188770.07.7771.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-031070/1725/16760_
21.782202058005340.07.6969.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOcHC

0-031070/1633/16804_
21.77240550662710.07.1569.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1449/17477_
21.76506454045290.06.4371.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-031070/1749/17862_
21.77253454858130.07.2575.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-031070/1940/16923_
21.78163451331020.08.5070.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-031070/1827/16465_
21.77282554151100.07.6867.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-031070/1811/16924_
21.77306263454481270.07.7770.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1835/16783_
21.76683056986070.07.8970.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon-precomposed.png HTTP/1.1

0-031070/1816/17602_
21.783441347524870.07.6970.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1902/16843_
21.76582450690230.08.2370.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-031070/1720/17335_
21.7810243555549290.07.0271.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-031070/1963/17055_
21.7872456237040.08.2570.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemJ

1-02951828/131/14308W
1.1000466936038.90.6160.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0295180/92/14251_
1.08116649019510.00.5660.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/93/14469_
1.0968049472880.00.4061.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0295180/85/13412_
1.08143644442310.00.3357.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0295180/116/14006_
1.0721217444680370.00.5057.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7Epze8

1-0295180/101/14270_
1.0637239746428220.00.4461.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iA8i

1-0295180/62/14382_
1.0960749087750.00.2861.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/76/14510_
1.05729849668550.00.3361.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/54/14030_
1.05717648046460.00.2160.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0295180/100/14189_
1.05683039690950.00.5260.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-0295180/71/13869_
1.056814347710490.00.3157.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0295180/139/13880_
1.05641650810560.00.4859.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCeGh

1-0295180/65/13840_
1.05673444910140.00.3258.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0295180/99/14799_
1.06520448138830.00.3864.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85pWm

1-0295180/63/14253_
1.06540550508830.00.2459.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/88/14420_
1.05600544529020.00.3261.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/103/14128_
1.06492645135580.00.4658.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0295180/66/14432_
1.0646240847342480.00.3461.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0295180/54/14901_
1.06333546363620.00.2261.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpQ

1-0295180/107/14637_
1.06403447072030.00.5462.31
127.0.0.1http/1.1ip-10-1-102-142.ap

Found on 2025-11-27 07:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a935902123

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 23-Nov-2025 09:21:14 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  26 days 12 hours 10 minutes 29 seconds
Server load: 0.79 0.62 0.69
Total accesses: 851361 - Total Traffic: 3.4 GB - Total Duration: 261021130
CPU Usage: u39.13 s47.76 cu221.51 cs131.19 - .0192% CPU load
.372 requests/sec - 1597 B/second - 4297 B/request - 306.593 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0144450/967/14754_
12.15469142456420.03.8759.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/1076/13928_
12.17141744693770.04.5556.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/1113/13520_
12.1872742407740.04.6654.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0144450/1224/15293_
12.17161545016940.04.7462.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDemh

0-0144450/869/14241_
12.15482345375910.03.7257.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0144450/1175/14257_
12.14552143592490.04.6859.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0144450/1135/14874_
12.145783043805080.04.8761.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/1002/15151_
12.16285145953140.04.2862.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/955/13578_
12.17191542148530.04.0256.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/997/15236_
12.18112147089330.04.0561.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/924/14260_
12.14590044979450.04.0258.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0144450/998/14343_
12.183917143692170.04.0457.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78rqPg

0-0144450/1216/14740_
12.12621742600590.04.9461.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/989/14390_
12.1265416449445900.03.9259.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7vOAGu

0-0144450/979/14563_
12.15381742249970.04.0959.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/1105/15186_
12.15480647389590.04.7462.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/1177/15432_
12.14508548141110.05.2164.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/951/14398_
12.18102642179240.04.1859.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/1060/14013_
12.15431545926190.04.4257.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0144450/1079/14255_
12.15401543056340.04.4958.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/910/14229_
12.14539047753690.03.5859.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0144450/896/15050_
12.16306140125470.03.5459.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0144450/975/14254_
12.17218543309650.04.1558.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0144450/1017/14784_
12.15337376748194290.03.7660.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0144450/865/14404_
12.17269547065550.03.7858.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-058420/1260/11518_
15.60321738381550.05.2548.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1250/11637_
15.60285439790370.05.5449.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-058420/1332/11838_
15.62251541024510.05.6949.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-058420/1302/11164_
15.62180635693980.05.5147.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-058420/1390/11504_
15.6213016437025630.05.6246.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJDGwX

1-058420/1256/11666_
15.59457038466800.05.1549.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/1366/11995_
15.62113141184280.05.6450.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-058420/1258/11938_
15.6219876241088590.04.9249.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLb9swDL7nVxi%2B27K

1-058420/1271/11661_
15.57641540787890.05.2249.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dj

1-058420/1285/11743_
15.62249411431924100.05.2749.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-058420/1212/11636_
15.6215319241082610.05.1647.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW90m

1-058420/1325/11374_
15.58482343837680.05.1747.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cad187209a930

1-058420/1410/11639_
15.57611638285510.05.5148.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-058420/1452/12349_
15.57596139683230.05.8652.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-058420/1322/11442_
15.57528842047800.05.6347.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/1351/11880_
15.6281736791070.05.7550.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1145/11522_
15.57539036784880.04.4247.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0584227/1405/11819W
15.6200388650237.15.7049.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-058420/1349/12482_
15.6253138414340.05.5851.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

1-058420/1256/11989_
15.57561737065110.05.6750.82
127.0.0.1http/1.1

Found on 2025-11-23 09:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e7f396b5

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 21-Nov-2025 04:14:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 7 hours 3 minutes 35 seconds
Server load: 1.12 0.85 0.84
Total accesses: 812559 - Total Traffic: 3.3 GB - Total Duration: 250853510
CPU Usage: u26.67 s37.12 cu221.51 cs131.19 - .0198% CPU load
.387 requests/sec - 1665 B/second - 4302 B/request - 308.72 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0144450/225/14012_
3.4622540151510.00.9457.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/346/13198_
3.42567842496160.01.5353.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/283/12690_
3.41638339864120.01.4651.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0144450/387/14456_
3.425534243221120.01.6258.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/132/13504_
3.461705343303370.00.5954.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/331/13413_
3.44387741403100.01.3756.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/339/14078_
3.4350241841987660.01.6058.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0144450/214/14363_
3.41702644113900.00.9758.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0144450/284/12907_
3.42613840060760.01.4053.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTsMwEER%2FJTefHCe

0-0144450/279/14518_
3.42533645135690.01.1159.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/222/13558_
3.43443542960120.01.0255.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/232/13577_
3.43472741053320.01.1554.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0144450/288/13812_
3.43422140808990.01.2357.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0144450/272/13673_
3.4434817047085040.01.2556.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyY3br

0-0144450/246/13830_
3.46163640747080.01.0956.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0144450/300/14381_
3.44253745655820.01.4258.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/303/14558_
3.44260145455690.01.3160.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0144450/253/13700_
3.44292840425860.01.3256.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/321/13274_
3.4419689544246960.01.3754.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0144450/264/13440_
3.4611237940422300.01.1555.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcub

0-0144450/188/13507_
3.44233545510880.00.9756.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMduI

0-0144450/293/14447_
3.416732839036830.01.1657.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDshQ

0-0144450/193/13472_
3.41715141444400.00.9255.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0144450/246/14013_
3.416644646028560.01.0058.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0144450/153/13692_
3.4653745123410.00.7555.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/571/10829_
6.594103835797850.02.5445.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/466/10853_
6.5852517538281700.02.3645.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BYS

1-058420/449/10955_
6.5846116738812560.02.0146.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQpu

1-058420/479/10341_
6.585463133091990.02.0043.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-058420/489/10603_
6.585024535375150.02.0543.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/452/10862_
6.57687936774200.02.0246.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/570/11199_
6.59398038431190.02.5947.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-058420/523/11203_
6.59364539260000.02.0046.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-058420/549/10939_
6.59278038782720.02.2846.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/572/11030_
6.59323630227410.02.4446.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-058420/519/10943_
6.61239139332780.02.3845.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0584227/559/10608W
6.6200408609140.62.2744.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-058420/493/10722_
6.6118417736023090.02.1745.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLc9sgEL77V2h0lxCya

1-058420/645/11542_
6.59260037757750.02.5749.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-058420/505/10625_
6.61143740244320.02.3143.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-058420/488/11017_
6.6142135502550.02.2746.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

1-058420/384/10761_
6.61171134939490.01.5744.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-058420/531/10945_
6.61202035844150.02.1545.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-058420/500/11633_
6.6183836272350.02.0147.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-058420/463/11196_
6.56710131335485470.02.1147.26
127.0.0.1http/1.1

Found on 2025-11-21 04:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a939711553

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 19:20:05 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  19 days 22 hours 9 minutes 20 seconds
Server load: 1.06 0.69 0.61
Total accesses: 611394 - Total Traffic: 2.5 GB - Total Duration: 200695566
CPU Usage: u33.06 s36.53 cu153.73 cs88.25 - .0181% CPU load
.355 requests/sec - 1547 B/second - 4356 B/request - 328.259 ms/request
2 requests currently being processed, 48 idle workers
_________________K____________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/1405/10267_
15.70284431603730.05.9842.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYoze

0-064260/1564/9722_
15.68718035419500.05.9339.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-064260/1121/9102_
15.7212832167950.04.2937.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1540/10296_
15.69640733766860.06.3242.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1510/10094_
15.70552733904770.06.2641.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1248/9872_
15.696584431861070.05.0141.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-064260/1721/10093_
15.70509033078670.07.2442.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-064260/1631/10499_
15.6960073934550870.06.5943.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-064260/1533/9516_
15.68700032147840.06.0440.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /.git/config HTTP/1.1

0-064260/1407/9984_
15.70440533770900.05.5641.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yYq

0-064260/1606/9883_
15.7040938333554140.06.2741.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/1387/9610_
15.6961937531276180.05.4639.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzIsFB

0-064260/1458/10327_
15.70372732631210.05.8543.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1614/9783_
15.72200438397870.06.6740.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-064260/1553/9734_
15.70492631302520.06.2640.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1436/10110_
15.7216744135222410.06.0741.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMe

0-064260/1475/10374_
15.70340532743850.06.2544.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064261/1688/10281K
15.721032446701.16.9342.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /.vscode/sftp.json HTTP/1.1

0-064260/1251/9837_
15.70319535292120.05.1440.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-064260/1544/9655_
15.72125031634150.06.1840.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HT

0-064260/1612/9623_
15.728039233028030.06.5641.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-064260/1493/10318_
15.7254730382550.06.1241.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1250/9927_
15.70252631837560.04.8041.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1684/10294_
15.7240534459130.06.9943.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1411/9608_
15.68679534976790.06.0840.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0235490/887/9526_
10.46710432490590.03.1839.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0235490/993/9704_
10.46619435047410.03.8140.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d90a69b16897

1-0235490/1178/9868_
10.46672634867730.04.6341.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/915/9268_
10.4847430760620.03.7239.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/905/9524_
10.46732532570720.03.4438.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1065/9821_
10.48109433161660.04.1041.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0235490/1013/10015_
10.48469433945250.04.4141.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/1035/10004_
10.48499735659450.04.2142.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpI

1-0235490/980/9642_
10.475645134794640.03.9141.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0235490/872/9811_
10.47612626918290.03.4941.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1078/9602_
10.48432634685220.04.1739.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/1010/9316_
10.48511244634527500.03.9439.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0235490/894/9626_
10.48330631224300.03.6440.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/1073/10286_
10.48354733855670.04.4243.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/930/9364_
10.48380534683050.03.7038.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJt

1-0235490/976/9818_
10.4831019630179780.03.9841.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJAQCC

1-0235490/1103/9782_
10.4825893431522480.04.5640.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCchr

1-0235490/1075/9572_
10.48140832414170.04.1540.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/1076/10535_
10.48227633609270.04.1242.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0235490/933/10013_
10.4872731843420.03.6241.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /m

Found on 2025-11-16 19:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a960505672

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 11:46:46 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 14 hours 36 minutes 1 second
Server load: 0.40 0.45 0.55
Total accesses: 572174 - Total Traffic: 2.3 GB - Total Duration: 190904753
CPU Usage: u20.99 s27.25 cu153.73 cs88.25 - .0191% CPU load
.376 requests/sec - 1646 B/second - 4379 B/request - 333.648 ms/request
1 requests currently being processed, 49 idle workers
_W________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/654/9516_
7.5531638930008700.02.8439.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0642625/670/8828W
7.5600330501533.12.6936.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-064260/496/8477_
7.5472638030413880.01.9634.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgFIX%2Fit94whj

0-064260/797/9553_
7.54593732124810.03.5539.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/681/9265_
7.54757531261570.03.0137.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whj

0-064260/506/9130_
7.546983329725790.02.2238.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/941/9313_
7.54533731352940.04.2639.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/697/9565_
7.546593131770790.03.1240.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-064260/672/8655_
7.54611130261820.02.8836.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-064260/634/9211_
7.545593132138740.02.7038.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNduq

0-064260/740/9017_
7.54513631453290.02.8737.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/776/8999_
7.54648029523270.03.1837.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-064260/707/9576_
7.54479530796900.03.0640.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-064260/799/8968_
7.55166636955740.03.4637.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/874/9055_
7.54443529317220.03.7237.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkh

0-064260/680/9354_
7.5541137933780700.02.8238.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-064260/750/9649_
7.54466630682610.03.4941.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/808/9401_
7.5521142030115710.03.5039.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-064260/568/9154_
7.55363633196050.02.5238.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-064260/769/8880_
7.5597729898580.03.3538.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-064260/809/8820_
7.5514939530868580.03.3038.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZFmJu

0-064260/696/9521_
7.552781728346260.03.1338.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/534/9211_
7.55124529818760.02.2439.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-064260/817/9427_
7.5553732034660.03.6540.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/607/8804_
7.53772733002380.02.9137.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/190/8829_
2.22713730490350.00.6736.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/252/8963_
2.236664733127040.00.9837.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0235490/293/8983_
2.22750532779790.01.2838.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/264/8617_
2.2438629119290.01.1636.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/118/8737_
2.22766730550090.00.5635.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/260/9016_
2.24196631497440.01.1539.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761NV

1-0235490/177/9179_
2.236202531645680.00.8638.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-0235490/271/9240_
2.24605633889700.01.2039.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0235490/256/8918_
2.23644032734540.01.0738.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0235490/194/9133_
2.2457336325426860.00.8738.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMchl

1-0235490/245/8769_
2.24548532896060.00.8836.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0235490/166/8472_
2.2448842232346880.00.6335.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0235490/191/8923_
2.24473729369490.00.9137.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/246/9459_
2.24519532049120.01.0940.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lh

1-0235490/164/8598_
2.24450532673400.00.6335.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/188/9030_
2.24351728561740.00.8538.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehp

1-0235490/184/8863_
2.243943229455780.00.8036.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4db1a94601c94

1-0235490/111/8608_
2.2443517029557290.00.4736.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EsIjA

1-0235490/144/9603_
2.24293731776670.00.6339.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/230/9310_
2.24233830362950.01.0139.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /m

Found on 2025-11-14 11:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9f9724bf6

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 09:45:04 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  15 days 12 hours 34 minutes 19 seconds
Server load: 0.99 0.70 0.66
Total accesses: 495279 - Total Traffic: 2.0 GB - Total Duration: 164725933
CPU Usage: u29.7 s30.49 cu122.43 cs70.34 - .0189% CPU load
.369 requests/sec - 1608 B/second - 4356 B/request - 332.592 ms/request
1 requests currently being processed, 49 idle workers
.........................________W______________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/8862.
0.006036528496100.00.0036.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8158.
0.006036730880000.00.0033.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dg

0-0-0/0/7981.
0.006036728129330.00.0032.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8756.
0.006036630523170.00.0036.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-0-0/0/8584.
0.006036829562850.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8624.
0.006036027846180.00.0036.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0-0/0/8372.
0.006036028973350.00.0034.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8868.
0.00603616029896960.00.0037.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uKig

0-0-0/0/7983.
0.006036528847950.00.0033.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0-0/0/8577.
0.006036730523790.00.0035.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp2

0-0-0/0/8277.
0.006036163128854690.00.0035.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8223.
0.006036627998050.00.0033.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0-0/0/8869.
0.006036729046450.00.0037.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8169.
0.00603640232637840.00.0034.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0-0/0/8181.
0.006036727553950.00.0033.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8674.
0.00603644530384510.00.0035.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PCkUL

0-0-0/0/8899.
0.0060364628929760.00.0038.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8593.
0.006036528255890.00.0035.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0-0/0/8586.
0.00603639330726750.00.0035.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0-0/0/8111.
0.0060364827973110.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8011.
0.006036828691360.00.0034.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8825.
0.006036207926322560.00.0035.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8677.
0.006036027845580.00.0036.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8610.
0.006036730023690.00.0036.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8197.
0.006036730650310.00.0034.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-096830/1362/7862_
15.138037825828750.05.7032.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcJi

1-096830/1353/7974_
15.09431828921200.05.8833.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1251/7931_
15.094603229390290.05.5733.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/1376/7623_
15.11231526145650.06.1632.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-096830/1388/7769_
15.0938116425956110.05.7931.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCQhP

1-096830/1132/7947_
15.132816327966710.04.7134.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSB9

1-096830/1388/8010_
15.121695129117560.05.8132.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/1430/8184_
15.139916129739720.06.7334.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzGshC

1-0968329/1394/7796W
15.1400290679744.16.1932.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-096830/1561/8163_
15.0947717022375760.06.5634.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdrxohEH33V5h9d1e2s

1-096830/1463/7694_
15.13131728776770.06.4331.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1332/7313_
15.111893326872880.05.6731.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-096830/1218/7953_
15.08611726294130.05.5333.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1510/8218_
15.10256381427526570.06.7535.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096830/1455/7687_
15.08557528902370.06.3231.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-096830/1286/8088_
15.08594824205490.05.6033.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-096830/1370/7779_
15.0933416526506880.06.4031.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL37KwTdJWqxI

1-096830/1326/7725_
15.0940419725927480.05.6332.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSEF

1-096830/1502/8455_
15.1121936427826770.06.8834.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-096830/1324/8171_
15.10305325626660920.06.2534.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

Found on 2025-11-12 09:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a960d99ca0

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 12:43:17 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 days 15 hours 32 minutes 32 seconds
Server load: 0.43 0.40 0.50
Total accesses: 432257 - Total Traffic: 1.7 GB - Total Duration: 145309708
CPU Usage: u23.88 s25.56 cu109.11 cs62.94 - .0188% CPU load
.367 requests/sec - 1583 B/second - 4318 B/request - 336.165 ms/request
1 requests currently being processed, 74 idle workers
____W___________________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/1211/7988_
11.65960526084530.04.8832.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/1082/7408_
11.66505828858360.04.5130.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1046/7279_
11.66443525843970.04.0829.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdpQ

0-0291140/1094/7788_
11.65112039327753430.04.7631.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-02911425/1029/7721W
11.6700270563928.04.0731.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291140/1267/7712_
11.651011624953490.05.2832.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/970/7457_
11.662383026018580.04.0230.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/1438/7976_
11.66579627251370.06.2233.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/1060/7137_
11.66632726112400.04.7629.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0291140/918/7844_
11.6635236428394180.03.8032.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpF

0-0291140/1122/7595_
11.651393526360620.04.3932.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0291140/1018/7569_
11.6612636325082650.04.1830.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/1021/7931_
11.66298526749020.04.4933.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0291140/1119/7497_
11.66662630136770.04.4131.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/937/7372_
11.6784724708600.03.4930.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1032/7699_
11.6588935827015980.04.2031.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNTwMhEIb%2Fyt44sXR

0-0291140/1242/7941_
11.65124939426262380.05.4233.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduC

0-0291140/1164/7782_
11.65853625352270.04.6131.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0291140/1084/7722_
11.66745727597380.04.7131.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1051/7569_
11.651303625790510.04.2732.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-0291140/981/7128_
11.651359925769060.04.0530.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0291140/1250/7903_
11.651206823825940.05.4331.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/1242/7646_
11.651085525149310.05.2732.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/1335/7799_
11.66178727928110.05.3433.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/994/7360_
11.651450628258910.04.1230.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096830/514/7014_
6.1425722592370.02.1929.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/533/7154_
6.13804826596800.02.3629.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/428/7108_
6.13969626821480.02.0530.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-096830/562/6809_
6.1312738423656550.02.4528.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/548/6929_
6.13680189723925440.02.2828.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/428/7243_
6.131220525718950.01.9231.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/494/7116_
6.12139958325649080.02.0029.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/590/7344_
6.1213671127389540.02.6330.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-096830/577/6979_
6.1313113226538790.02.6729.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_eef799aec14b8

1-096830/590/7192_
6.139063120239200.02.4730.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096830/534/6765_
6.121464725351670.02.3427.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/610/6591_
6.13265824006960.02.7428.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/518/7253_
6.131279624724040.02.2930.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/649/7357_
6.13379524781180.02.8531.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-096830/576/6808_
6.131162726700870.02.3327.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096830/507/7309_
6.131044722267650.02.2730.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/546/6955_
6.134642924161020.02.3727.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-096830/544/6943_
6.13643623942170.02.2929.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/681/7634_
6.1318936024763580.03.2030.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdps

1-096830/625/7472_
6.13306824249750

Found on 2025-11-10 12:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a98e16b1fe

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 08:40:19 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 11 hours 29 minutes 34 seconds
Server load: 0.47 0.76 0.78
Total accesses: 379703 - Total Traffic: 1.5 GB - Total Duration: 126847772
CPU Usage: u22.32 s23.6 cu94.62 cs53.91 - .0196% CPU load
.383 requests/sec - 1648 B/second - 4306 B/request - 334.071 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/98/6875_
1.03298522818290.00.3928.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUjYU

0-0291140/92/6418_
1.03286624645490.00.3225.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0291140/215/6448_
1.04245723534880.00.6326.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0291140/108/6802_
1.04206724839480.00.5427.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/87/6779_
1.04177023744330.00.3127.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291140/75/6520_
1.05156821102590.00.2527.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/98/6585_
1.05130723883800.00.3827.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/161/6699_
1.0575623243170.00.6627.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0291140/92/6169_
1.0510538222995040.00.4625.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

0-0291140/98/7024_
1.0536125555770.00.4229.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0291140/114/6587_
1.0520322207680.00.4428.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_362f7368895c1

0-0291140/79/6630_
1.02730621117380.00.3627.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/115/7025_
1.02706623951000.00.5429.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/107/6485_
1.0265741726263820.00.3627.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/107/6542_
1.02626722321740.00.4327.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/87/6754_
1.02577805223953350.00.3427.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291140/130/6829_
1.02563022181680.00.4428.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-0291140/90/6708_
1.02525921077680.00.3827.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0291140/79/6717_
1.02495108223389730.00.3127.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwn0

0-0291140/69/6587_
1.024561221421850.00.2428.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/69/6216_
1.02435721688450.00.2826.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0291140/138/6791_
1.02421720998180.00.5226.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/105/6509_
1.03384922235510.00.4327.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/108/6572_
1.03315923604900.00.4628.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCeBb

0-0291140/106/6472_
1.0333340825291650.00.4326.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RX

1-0-0/0/6500.
0.0026235421257000.00.0027.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/6621.
0.002623537125032180.00.0027.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

1-0-0/0/6680.
0.0026235724638250.00.0027.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6247.
0.0026235622177560.00.0026.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6381.
0.002623515421970260.00.0025.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PHhEl

1-0-0/0/6815.
0.0026235724278590.00.0029.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6622.
0.0026235524279430.00.0027.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpa

1-0-0/0/6754.
0.0026235025846100.00.0027.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6402.
0.0026235624644470.00.0026.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/6602.
0.0026235518568950.00.0027.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCduc

1-0-0/0/6231.
0.0026235523473450.00.0025.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/5981.
0.0026235303521882640.00.0025.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0-0/0/6735.
0.0026235522929210.00.0028.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itml

1-0-0/0/6708.
0.0026235722734140.00.0028.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/6232.
0.002623542523968350.00.0025.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/6802.
0.0026235720204160.00.0028.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6409.
0.00262352122031570.00.0025.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0-0/0/6399.
0.0026235522164880.00.0027.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0-0/0/6953.
0.0026235522697880.00.0027.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/6847.
0.0026235721518310.00.0028.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6604.
0.00</

Found on 2025-11-08 08:39

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9497168a1

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 06-Nov-2025 17:13:04 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 20 hours 2 minutes 19 seconds
Server load: 0.93 0.67 0.65
Total accesses: 307076 - Total Traffic: 1.3 GB - Total Duration: 112268521
CPU Usage: u39.12 s31.01 cu59.37 cs33.34 - .0192% CPU load
.361 requests/sec - 1589 B/second - 4398 B/request - 365.605 ms/request
2 requests currently being processed, 73 idle workers
_W_________________________________________________W____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/1692/5803_
19.356561620801380.06.7824.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1607/5456W
19.130022471030.06.7522.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/1940/5492_
19.28908321543120.07.8222.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/2012/5870_
19.337193022918000.07.9124.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1870/5856_
19.49312321637720.07.6824.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1393/5715_
19.221245219044030.05.8824.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_abc42fb10a412

0-049600/1854/5612_
19.161618322455500.07.7023.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_53b547e99ee52

0-049600/2053/5716_
19.221288421100430.08.4824.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1855/5277_
19.39596420359610.07.3021.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/2034/6018_
19.43498323972570.08.1825.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5a2eba97d3898

0-049600/2131/5816_
19.43489420193750.09.1625.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/2074/5639_
19.201493319668620.08.4423.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5ef67ddae8c61

0-049600/2130/6161_
19.32760322315530.08.9726.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_126649b8938ae

0-049600/1751/5362_
19.30831324177490.07.1622.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3c8774ba90026

0-049600/1651/5712_
19.47425220588660.06.9123.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_41b2fc3573afd

0-049600/1884/5464_
19.15168336520328180.07.7522.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1724/5490_
19.261091419537590.07.0823.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1871/5782_
19.53127419315120.07.8924.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1693/5691_
19.5495421070030.06.4123.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1825/5724_
19.261056319468560.07.6525.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e57f8989b6240

0-049600/1912/5309_
19.261027419202990.08.2823.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-049600/1603/5623_
19.32747419243480.06.1822.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/1966/5681_
19.53214321133730.08.1624.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/1800/5578_
19.221367621479690.08.4224.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1792/5427_
19.49371323327350.07.6323.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1650/5677_
19.45711419887290.06.9024.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpK

1-048880/1859/5765_
19.381000223676580.07.4624.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34e5ed0c49e2a

1-048880/1794/5758_
19.45484621461730.07.6824.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1802/5362_
19.161746220692620.07.4122.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3f61119a8dcd3

1-048880/1768/5499_
19.48339720626470.06.9922.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1970/6118_
19.45792322910160.08.7927.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1899/5702_
19.351174222121790.08.0023.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3d668bba1201f

1-048880/1871/5805_
19.261452322073270.07.5324.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1645/5576_
19.45621423512390.07.0023.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1729/5611_
19.39969316873620.07.2523.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_394fbfbbb523c

1-048880/1844/5336_
19.1916425121749950.07.4122.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-048880/1818/5415_
19.231585420667780.07.6223.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/2202/5941_
19.52167521187100.09.2225.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/2185/6214_
19.5635221159460.08.9626.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6d5b1ca1fcf74

1-048880/1704/5461_
19.281331521977540.06.8022.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1743/5874_
19.43862318695110.07.0024.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_87b08664edc98

1-048880/1846/5391_
19.52122420632970.07.4121.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/1744/5748_
19.45685321238680.07.1824.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_633817a07ab08

1-048880/1738/5972_
19.02768621347600.07.2724.31
127.0.0.1http/1.1

1-04888

Found on 2025-11-06 17:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a99f4e7c5f

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 05-Nov-2025 03:33:15 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 6 hours 22 minutes 30 seconds
Server load: 1.66 1.96 1.56
Total accesses: 243346 - Total Traffic: 1.0 GB - Total Duration: 95108303
CPU Usage: u21.87 s19.5 cu59.37 cs33.34 - .0188% CPU load
.341 requests/sec - 1530 B/second - 4490 B/request - 390.836 ms/request
1 requests currently being processed, 74 idle workers
___W____________________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/951/5062_
10.92862718212200.04.1121.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/873/4722_
10.93560719596830.03.8819.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1042/4594_
10.9412648519718780.04.3319.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3A6%

0-0496025/1260/5118W
10.9600204045828.95.0421.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/1032/5018_
10.93463620023470.04.5920.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/778/5100_
10.9482617580110.03.6522.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/919/4677_
10.94373520066380.04.0020.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-049600/1179/4842_
10.942103119587410.04.8020.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/1018/4440_
10.9210325017942160.04.1518.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1023/5007_
10.9427420776840.04.4121.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-049600/1118/4803_
10.92922618395620.05.0921.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/888/4453_
10.94322517399490.03.9218.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1076/5107_
10.921055792819803150.04.4621.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-049600/815/4426_
10.945822321677340.03.4719.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL0X6D8QvGtzE

0-049600/858/4919_
10.9367239319139690.04.0021.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcpp

0-049600/1047/4627_
10.93508317667310.04.5119.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2304422ca3f60

0-049600/958/4724_
10.94262717444870.04.2820.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/952/4863_
10.937533216455950.04.3520.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/863/4861_
10.93622617999650.03.4620.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1012/4911_
10.94158491116884020.04.5221.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-049600/1138/4535_
10.9471017052630.05.2920.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-049600/957/4977_
10.9297299517738390.03.6320.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOr

0-049600/963/4678_
10.92792418077200.04.4520.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-049600/916/4694_
10.9343242719269530.04.5820.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-049600/992/4627_
10.9372718820856620.04.3219.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJHEoW

1-048880/934/4961_
11.07223417779710.03.8521.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94orT

1-048880/953/4859_
11.07442520944740.04.1420.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/949/4913_
11.0771018919610.04.0321.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-048880/1005/4565_
11.068823117947370.04.3719.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-048880/919/4650_
11.061042918562180.03.9319.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1114/5262_
11.07132521206410.05.1023.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

1-048880/926/4729_
11.07492519794010.04.0419.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94onR

1-048880/1098/5032_
11.0752251420291530.04.7221.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOp

1-048880/1049/4980_
11.075822521713330.04.6921.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL0X6D8QvGtzE

1-048880/866/4748_
11.0734242315070510.03.9920.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-048880/955/4447_
11.06732518879110.03.9218.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-048880/904/4501_
11.07583518633830.04.2219.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-048880/1318/5057_
11.06982619107830.05.9321.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1184/5213_
11.0680944919303120.05.3823.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-048880/910/4667_
11.07682819214580.03.8919.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/970/5101_
11.072823216726430.04.0321.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-048880/1065/4610_
11.06785417875310.04.5819.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_352b7f8e3ded4

1-048880/1025/5029_
11.077287319844420.04.4321.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0j8Q%2BW93k

1-048880/921/5155_
11.07197619257350.04.0221.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/911/4828_
11.077287318329340.0

Found on 2025-11-05 03:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a21d0021

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 18:24:27 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 21 hours 13 minutes 42 seconds
Server load: 0.48 0.41 0.45
Total accesses: 191794 - Total Traffic: 817.3 MB - Total Duration: 75316003
CPU Usage: u5.8 s9.75 cu59.37 cs33.34 - .0182% CPU load
.322 requests/sec - 1440 B/second - 4468 B/request - 392.692 ms/request
1 requests currently being processed, 49 idle workers
_____________________W____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/0/4111_
0.00579614381220.00.0017.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3849_
0.00579715587330.00.0015.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/0/3552_
0.00579615733090.00.0014.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3858_
0.0057938916203520.00.0016.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-049600/0/3986_
0.0057937316241150.00.0016.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-049600/0/4322_
0.00579514658720.00.0018.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1/3759_
0.00529321916643620.00.0016.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJW

0-049600/1/3664_
0.00503715713400.00.0015.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-049600/2/3424_
0.00454614282960.00.0114.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/3985_
0.00413617343730.00.0017.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-049600/1/3686_
0.003832813658280.00.0016.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-049600/3/3568_
0.00334714547230.00.0114.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/4032_
0.003212815569860.00.0017.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/1/3612_
0.00283718725450.00.0015.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/2/4063_
0.00274615712090.00.0117.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1/3581_
0.002263114365810.00.0014.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-049600/1/3767_
0.00203614289420.00.0016.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpU

0-049600/1/3912_
0.0014238413012180.00.0016.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

0-049600/1/3999_
0.00104514939820.00.0017.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-049600/1/3900_
0.0082712519080.00.0017.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-049600/4/3401_
0.0032611635500.00.0114.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0496029/29/4049W
0.0100144616543.10.0416.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-049600/0/3715_
0.00579614443260.00.0015.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/0/3778_
0.005792815769410.00.0016.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/0/3635_
0.00579616416730.00.0015.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/4030_
0.01514614823130.00.0117.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3909_
0.014724417126720.00.0116.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-048880/2/3966_
0.0144258615099480.00.0117.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDfpt

1-048880/3/3563_
0.01394613583140.00.0115.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/5/3736_
0.0135241715143830.00.0215.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHJOEo

1-048880/3/4151_
0.02293516903610.00.0118.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-048880/2/3805_
0.02283615568240.00.0015.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/2/3936_
0.02328615015050.00.0016.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp0

1-048880/2/3933_
0.0226337517038210.00.0116.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-048880/4/3886_
0.02214612616970.00.0116.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3495_
0.02154615615580.00.0114.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/3/3600_
0.02112614087600.00.0115.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-048880/3/3742_
0.0294613866360.00.0115.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/2/4031_
0.00874615247850.00.0117.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/2/3759_
0.0214715182090.00.0015.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-048880/2/4133_
0.025242413439790.00.0117.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-048880/1/3546_
0.00828513325030.00.0014.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjpswEIZfhZtPxhiyT

1-048880/1/4005_
0.007983016347670.00.0017.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XX

1-048880/2/4236_
0.01754615613410.00.0117.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/10/3927_
0.01712412858290.00.0616.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-04888

Found on 2025-11-03 18:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9315e582a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 02-Nov-2025 08:04:20 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 10 hours 53 minutes 34 seconds
Server load: 0.87 1.00 0.81
Total accesses: 149122 - Total Traffic: 639.4 MB - Total Duration: 60951655
CPU Usage: u15.75 s14.19 cu34.95 cs18.38 - .0177% CPU load
.316 requests/sec - 1422 B/second - 4496 B/request - 408.737 ms/request
2 requests currently being processed, 48 idle workers
_______W____________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0187730/836/3149_
9.098083210641190.03.1713.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0187730/758/2892_
9.09333011363780.03.0011.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/769/2713_
9.093233412869060.02.9111.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/887/3067_
9.09207513350050.03.4912.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/751/3035_
9.0838336912458790.02.9312.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0187730/928/3343_
9.09291511784030.04.0414.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/666/2860_
9.091089213592280.02.4512.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/824/2933W
9.050012129410.03.1812.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0187730/677/2646_
9.1067112025830.02.5911.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0187730/791/3057_
9.091467814539900.03.2813.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/724/2959_
9.05635210661450.03.1212.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0187730/871/2733_
9.1055411609070.03.2811.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0187730/739/3250_
9.066044012348710.02.9614.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/739/2920_
9.06591715707260.02.9112.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/786/3025_
9.102124512975750.03.2913.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4fu

0-0187730/841/2843_
9.07507511217820.03.1411.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/952/3008_
9.07560012007740.04.0113.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/800/3125_
9.05642010962360.03.0313.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/797/3169_
9.0925443712556910.03.2713.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0187730/819/2934_
9.08474249112650.03.3812.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCeBh

0-0187730/711/2568_
9.0562569181230.02.7911.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/789/2979_
9.08374011293000.03.0212.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0187730/592/2822_
9.09347811549360.02.1112.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/991/2952_
9.09164806813322300.03.7812.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcuV

0-0187730/754/2903_
9.08414713770320.02.9912.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0187040/843/3094_
8.69604111079800.03.0813.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0187040/703/3017_
8.72338313422160.02.7613.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0187040/688/3243_
8.7369612660720.02.8214.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-01870425/771/2603W
8.740099760628.92.9511.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehh

1-0187040/716/2865_
8.69591811817020.02.9212.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0187040/833/3326_
8.713702814282540.03.1415.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_72a45e6808665

1-0187040/805/2921_
8.69635312439530.03.1312.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0187040/872/2941_
8.7044436412405790.03.3112.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

1-0187040/976/3152_
8.70512341213592800.03.6413.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/827/3107_
8.70501610212750.03.2113.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0187040/645/2638_
8.72317344613113650.02.4611.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/722/2859_
8.72338211941250.02.8612.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0187040/557/2786_
8.70391111375170.02.3011.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0187040/754/2980_
8.73135252212493520.03.0413.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/649/3099_
8.72267613270790.02.3512.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0187040/837/3264_
8.7216372910966940.03.5314.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcuV

1-0187040/868/2753_
8.7387610755890.02.8511.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0187040/748/3327_
8.72229613993000.03.0414.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDu

1-0187040/776/3362_
8.72199413217760.03.2313.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0187040/682/3003_
8.73463410028910.02.6712.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

Found on 2025-11-02 08:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9b3f3ae5a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 29-Oct-2025 07:32:50 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 10 hours 22 minutes 5 seconds
Server load: 1.90 2.79 2.19
Total accesses: 51966 - Total Traffic: 225.6 MB - Total Duration: 23414971
CPU Usage: u18.24 s10.78 cu0 cs0 - .0235% CPU load
.42 requests/sec - 1912 B/second - 4552 B/request - 450.583 ms/request
2 requests currently being processed, 48 idle workers
____________________________________________W___K_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/983/983_
12.581537083435080.04.654.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCGQR

0-0360/877/877_
12.5739064257970.03.773.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0360/909/909_
12.566401845095490.03.713.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecyEst

0-0360/906/906_
12.5677774297650.03.763.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/1331/1331_
12.567351694999740.05.475.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5GsXt

0-0360/919/919_
12.5819163335950.03.883.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0360/1209/1209_
12.582731535978730.05.255.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnctUeW4I

0-0360/1129/1129_
12.5753515245347970.05.115.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/945/945_
12.5658354900960.03.993.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94onS

0-0360/1128/1128_
12.56610348032900.05.045.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1067/1067_
12.566894723960770.04.724.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpp

0-0360/706/706_
12.582794534116860.03.123.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1059/1059_
12.5751083946120.04.554.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/1165/1165_
12.5812968050110.05.125.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0360/1058/1058_
12.591305262440.04.384.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-0360/987/987_
12.5747763987660.04.034.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/904/904_
12.56548353523900.03.923.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1088/1088_
12.5735862962940.04.444.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/983/983_
12.599054289260.04.414.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcOo

0-0360/1043/1043_
12.5831803128930.04.534.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/975/975_
12.5823764136000.04.044.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/918/918_
12.5824873360530.03.863.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1085/1085_
12.59512533652650.04.734.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uJRs

0-0360/871/871_
12.592953228370.04.444.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0360/1054/1054_
12.58310105898020.04.494.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/1005/1005_
13.2529764225230.04.284.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1142/1142_
13.2617864547270.05.105.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1352/1352_
13.2171875438440.05.685.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/846/846_
13.2613482673783850.03.373.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uLyq

1-0370/940/940_
13.226331644439450.04.044.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5ItSi

1-0370/1150/1150_
13.265765858210.05.935.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0370/1077/1077_
13.2527905068430.04.484.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0370/999/999_
13.254061754959160.04.454.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Isiw

1-0370/994/994_
13.2256844724910.04.284.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1140/1140_
13.2524874330210.04.864.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/929/929_
13.2526074402870.03.743.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0370/979/979_
13.2353674407510.04.154.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/1100/1100_
13.252081765350550.04.564.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78qpow

1-0370/1136/1136_
13.2531914812940.05.365.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0370/1100/1100_
13.2175055966370.04.604.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/1194/1194_
13.225901674429110.05.245.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwX6D8QvOthA

1-0370/956/956_
13.216542113743200.04.264.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oKUi

1-0370/1172/1172_
13.264405514290.05.215.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

1-0370/1166/1166_
13.2541505196810.04.594.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-03740/1157/1157W
13.2800430933121.85.015.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0370/964/964_
13.253702136998810.04.244.24
127.0.0.1http/1.1i

Found on 2025-10-29 07:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a1cd6425

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 27-Oct-2025 05:56:15 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  109 days 22 hours 50 minutes 15 seconds
Server load: 1.20 0.97 1.04
Total accesses: 3671114 - Total Traffic: 14.8 GB - Total Duration: 1235300115
CPU Usage: u118.06 s169.75 cu1121.52 cs648.27 - .0217% CPU load
.386 requests/sec - 1671 B/second - 4326 B/request - 336.492 ms/request
2 requests currently being processed, 48 idle workers
__K____________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/1800/69590_
21.974156238535950.07.41284.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1864/70561_
21.97322336234202420.07.47294.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdq6O

0-0176541/1745/69866K
21.9920224639051.17.44287.66
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /api/swagger.json HTTP/1.1

0-0176540/1736/71092_
21.9816328241481140.07.30291.34
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40b6749be3ca1

0-0176540/1800/69456_
21.965564238115890.07.43287.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0176540/1743/69697_
21.9744248234100200.07.18290.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/1753/71308_
21.973766248022080.07.41292.94
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

0-0176540/1838/70210_
21.9740519059235635290.08.28289.69
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0176540/1817/72881_
21.983050245477270.08.26299.78
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1605/72047_
21.96579480242467750.06.86297.74
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1Du%2BdQ

0-0176540/1857/70319_
21.981975240801810.07.99288.81
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqy

0-0176540/1833/71064_
21.982626234339610.08.21291.47
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/1734/72199_
21.965266230773700.07.17298.70
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

0-0176540/1756/72908_
21.981464245324870.07.78301.75
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0176540/1744/67479_
21.98761228823930.07.38279.30
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0176540/1979/70623_
21.982040252654080.07.99288.04
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0176540/1876/70258_
21.98836231467900.07.85292.67
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/1754/71158_
21.99295229874370.07.35292.46
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0176540/1895/71761_
21.9817833238640430.07.74294.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1784/70953_
21.99410241457190.08.03294.85
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1703/70407_
21.99134233096930.07.25289.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7kpA24

0-0176540/1793/71311_
21.96475202242950640.08.07294.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUiAV

0-0176540/1949/69658_
21.96495366232099580.08.47287.71
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KmV

0-0176540/1787/71748_
21.9823810238511330.07.77299.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0176540/1815/70414_
21.966236223335270.07.32291.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1794/65054_
21.386000217548530.07.22267.40
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /manager/assets/modext/core/modx.js HTTP/1.1

1-0234880/1613/66239_
21.41236220431050.07.08271.60
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1658/66607_
21.392245213053190.07.33273.62
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKfZt

1-0234880/1675/64719_
21.401290217142050.07.02266.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0234880/1667/66134_
21.3939245216419160.06.30270.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1533/65409_
21.394440204251510.06.72269.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-02348828/2038/66990W
21.42002224916746.97.99271.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-0234880/1468/65590_
21.3946842209415920.05.79268.15
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1754/64807_
21.392955212310370.07.72268.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0234880/1680/66569_
21.3917835215865870.06.96270.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/1525/66034_
21.392524216440840.06.00274.45
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0234880/1879/65312_
21.3947811209984430.08.10268.64
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/1915/67975_
21.386365214986370.07.87275.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9MwEMe%2FSt785Dh

1-0234880/2003/65884_
21.41715213682920.08.41269.44
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/1731/66329_
21.39173451211459430.07.02271.97
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0234880/1878/65612_
21.41610214698710.08.77271.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0234880/1820/66729_
21.3854011219059760.08.26276.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/2242/65511_
21.393226217895960.09.04270.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/1856/65748_
21.3936644219559830.07.67270.16
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/1679/65941_
21.41374214392520.06.83273.75
127.0.0.1http/1.1

Found on 2025-10-27 05:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a998b14e60

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 24-Oct-2025 23:27:33 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  107 days 16 hours 21 minutes 32 seconds
Server load: 0.77 1.17 1.29
Total accesses: 3604666 - Total Traffic: 14.5 GB - Total Duration: 1212978556
CPU Usage: u96.09 s155.39 cu1121.52 cs648.27 - .0217% CPU load
.387 requests/sec - 1676 B/second - 4325 B/request - 336.502 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/642/68432_
6.666194233628010.02.59279.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0176540/426/69123_
6.69324230878750.01.69288.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/467/68588_
6.691314220293900.01.98282.21
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-0176540/442/69798_
6.681764237532060.02.21286.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/510/68166_
6.681607232763820.02.34281.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/450/68404_
6.682807228780050.01.89284.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/480/70035_
6.69674244162240.01.95287.48
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/449/68821_
6.657294231789190.02.65284.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpu

0-0176540/466/71530_
6.708202239567260.02.15293.67
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb9QwEL0j8R8s35NsA

0-0176540/424/70866_
6.691006239085110.02.38293.26
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/607/69069_
6.681985237383880.03.05283.87
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0176540/577/69808_
6.676021231215730.02.59285.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0176540/438/70903_
6.657062429227862040.01.83293.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1

0-0176540/424/71576_
6.6665768240095100.01.76295.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/538/66273_
6.68498349224185450.02.86274.77
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-0176540/583/69227_
6.6758410246537780.02.26282.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/490/68872_
6.67573279226677640.02.18287.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5DQg

0-0176540/527/69931_
6.6752731224568290.02.29287.41
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpW

0-0176540/585/70451_
6.666765234587730.02.41288.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/445/69614_
6.684606235920320.02.40289.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/435/69139_
6.68256485229297810.02.21284.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyQU2C

0-0176540/529/70047_
6.684006239271250.02.25288.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/515/68224_
6.683406227449490.01.99281.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/529/70490_
6.666764234832960.02.46293.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/611/69210_
6.6829840219172430.02.50286.42
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/449/63709_
5.205806212440590.01.83262.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/316/64942_
5.21409331215894520.01.36265.88
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/370/65319_
5.213794208983580.01.67267.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

1-0234880/336/63380_
5.2231444211969110.01.28260.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/282/64749_
5.214695211390130.01.10265.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0234880/386/64262_
5.2228430200896800.01.93265.16
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/433/65385_
5.221773215610920.01.98264.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/427/64549_
5.222894204863450.01.83264.19
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0234880/331/63384_
5.222141207694430.01.91263.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0234880/360/65249_
5.241470212487870.01.36265.13
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0234880/304/64813_
5.231655212200800.01.05269.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-02348825/494/63927W
5.25002058121228.82.44262.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-0234880/417/66477_
5.24724210725960.01.72269.50
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/516/64397_
5.20686179209176150.02.17263.20
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/495/65093_
5.24109303206906050.02.08267.04
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0234880/370/64104_
5.24523210851840.01.68264.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/480/65389_
5.206406214807870.02.09270.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/486/63755_
5.207006213588530.02.04263.54
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0234880/476/64368_
5.25154215058650.01.87264.37
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

Found on 2025-10-24 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9f48fe86f

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 23-Oct-2025 02:48:33 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  105 days 19 hours 42 minutes 32 seconds
Server load: 1.85 1.83 1.71
Total accesses: 3553394 - Total Traffic: 14.3 GB - Total Duration: 1195626487
CPU Usage: u114.77 s163.08 cu1081.81 cs629.26 - .0218% CPU load
.389 requests/sec - 1677 B/second - 4317 B/request - 336.475 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326840/1867/67378_
22.2091229062740.08.68275.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0326840/1808/68184_
22.205528227448830.08.73283.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6ebe15d0f7bb5

0-0326840/1744/67638_
22.201024217123840.07.89277.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b61037bd61c68

0-0326840/1495/68839_
22.201301233900650.07.15281.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0326840/1722/67137_
22.172955228468840.08.05277.34
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86ybK

0-0326840/1944/67335_
22.155641224668100.09.56279.88
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0326840/1674/69089_
22.154606241309050.07.82283.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1715/67989_
22.18215157227889160.08.29278.61
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXctVaQ6J

0-0326840/2105/70637_
22.164157236691800.010.03289.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0326840/1854/69895_
22.14574493236490720.08.45288.15
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itmu

0-0326840/1772/68043_
22.155151234904850.08.16279.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0326840/1603/68816_
22.1736610226604600.07.73280.90
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1522/69937_
22.20668224866210.07.41288.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1517/70732_
22.173790236936710.07.61292.06
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/1789/65237_
22.182811220368400.08.24269.32
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0326840/1704/68243_
22.1547531243348620.08.03277.79
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0326840/1870/67877_
22.20407223717780.09.07281.82
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1732/68960_
22.17346200220370400.07.78283.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCG8F

0-0326840/1625/69441_
22.155348231541100.07.26283.48
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdxg

0-0326840/1512/68843_
22.15445343233426860.07.15284.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0326840/1840/68300_
22.17321150226397440.08.60279.55
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7POHqI

0-0326840/1818/69047_
22.1820415235709440.08.91284.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0326840/1613/67230_
22.164006224119870.07.55277.02
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/1796/69367_
22.191510232222630.08.32288.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0326840/1657/68133_
22.2011462215831640.07.87281.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-056070/1492/62729_
20.065140209347770.07.52256.90
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-056070/1655/64132_
20.09795212853080.07.72262.23
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDtpu

1-056070/1467/64235_
20.0636611204282520.06.82262.92
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1496/62406_
20.07306527208823970.07.04256.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPLbtswEPwVgXdJjOwID

1-056070/1814/63788_
20.081661208720870.08.84261.14
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-056070/1474/63269_
20.0638516197319300.06.61260.58
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-056070/1788/64170_
20.06503154211317090.08.02259.37
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu95EGgJF

1-056070/1576/63325_
20.07354178200526880.07.72258.95
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EggJF

1-056070/1638/62469_
20.09554204098910.07.99258.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-056070/1445/64121_
20.09667207821850.06.25259.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1550/63778_
20.091024208741380.07.26263.79
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-056070/1642/62801_
20.081447202135210.07.62257.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-056070/1768/65341_
20.091289207647820.08.12264.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1303/63278_
20.1090205541440.06.10258.61
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-056070/1321/63769_
20.091023202837880.05.92261.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-056070/3740/63140_
20.091006207255800.016.84259.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1525/64082_
20.073397210286520.07.30264.51
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1640/62608_
20.064700210244210.07.84257.84
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-056070/1444/63117_
20.0642819211552730.06.52259.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0560737/1559/63591W
20.110

Found on 2025-10-23 02:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92432543b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 20-Nov-2024 17:38:20 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 20 hours 18 minutes 37 seconds
Server load: 0.84 1.15 1.22
Total accesses: 1029614 - Total Traffic: 4.3 GB - Total Duration: 449301323
CPU Usage: u37.3 s65.61 cu352.58 cs192.9 - .0209% CPU load
.332 requests/sec - 1496 B/second - 4500 B/request - 436.378 ms/request
1 requests currently being processed, 74 idle workers
__________________________W_____________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163760/392/18918_
7.39156665885264150.01.8079.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0163760/530/19084_
7.40814581809270.03.1983.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0163760/498/18704_
7.40344782397410.02.5681.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/453/18991_
7.39140941077988450.01.9679.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0163760/497/18471_
7.39165540378299560.02.2678.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0163760/553/19739_
7.4096445089803660.03.0584.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/417/18953_
7.40118761987129220.01.7982.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0163760/411/18921_
7.39174539491116920.02.1880.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0163760/495/20388_
7.40662592881780.02.3388.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0163760/512/18902_
7.40424579885540.02.3180.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0163760/383/18815_
7.40515586995520.01.7678.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/552/19251_
7.40755587979500.02.6682.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgX

0-0163760/639/19507_
7.402041586303980.02.8283.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/630/19657_
7.391897485057770.02.9385.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0163760/619/19442_
7.40111442884555790.03.1684.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBb%2BMgEIX%2Fim%2B

0-0163760/551/18732_
7.401753188008860.02.4881.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/642/19532_
7.39183642278778520.03.3284.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCcBB

0-0163760/370/19188_
7.401247786396750.01.5282.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/445/18732_
7.40935579461780.01.9782.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0163760/413/19740_
7.40606588520090.02.1883.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgW

0-0163760/574/20088_
7.4024563274573310.02.4886.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0163760/578/19287_
7.409543479686820.02.8082.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0163760/445/18855_
7.40105242185544540.02.0082.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpo

0-0163760/644/18915_
7.391506485592760.03.5182.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0163760/503/19025_
7.391326484705630.02.2179.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/395/14432_
6.941080564886180.01.7561.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJtE9

1-0154068/461/14640W
6.950066437539.71.9162.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0154060/594/14197_
6.9547764475000.03.9462.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/475/14466_
6.95365563182550.02.0263.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/485/14258_
6.9530691664120240.02.2261.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0154060/474/13925_
6.95456764745900.02.1060.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

1-0154060/469/13856_
6.941145559358030.02.1860.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0154060/553/14023_
6.95696460684010.02.4759.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzqJ

1-0154060/452/13342_
6.949953267621280.02.3757.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a2beeca686030

1-0154060/487/13497_
6.95775664653270.02.5157.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/471/14294_
6.95126557953400.02.3462.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0154060/369/13381_
6.94843557481970.01.8758.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0154060/629/14421_
6.931446567252050.03.2262.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0154060/502/14214_
6.9318473168775880.02.3960.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/338/13878_
6.9316862659477570.01.4656.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMehS

1-0154060/524/13474_
6.95545561196640.02.2555.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMf

1-0154060/545/14596_
6.941263138964792400.02.3161.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/471/14025_
6.95187760350680.02.3760.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/446/13780_
6.931535763269340.01.8460.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-0154060/530/14179<

Found on 2024-11-20 17:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a91ddafd8a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 18-Nov-2024 17:22:17 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 20 hours 2 minutes 34 seconds
Server load: 0.99 1.35 1.59
Total accesses: 969971 - Total Traffic: 4.0 GB - Total Duration: 419664778
CPU Usage: u44.92 s66.6 cu319.1 cs177.84 - .0208% CPU load
.332 requests/sec - 1482 B/second - 4469 B/request - 432.657 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/891/17990_
15.0880343479808360.03.8675.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1092/18032_
15.082613176189450.05.4078.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1017/17652_
15.08381777405580.05.0276.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/1189/18108_
15.0813641973526820.05.1675.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNf

0-0157970/1033/17466_
15.0881575062950.05.2874.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMch7

0-0157970/1090/18580_
15.08182581859320.05.2278.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdtu

0-0157970/1062/17934_
15.081301311780274580.04.5277.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BIwEIb%2FSm4%2

0-0157970/1128/17945_
15.08862586638620.05.8275.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZNlO0

0-0157970/983/19241_
15.08501686528780.04.2483.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/1077/17736_
15.081196773723590.04.6475.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/867/17966_
15.0815581439810.04.3274.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0157970/1010/18190_
15.083515781656190.04.5977.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1031/18253_
15.08952580846350.04.7277.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157970/903/18513_
15.08105547679949770.04.2380.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/1003/18294_
15.081344679365050.04.4478.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/1032/17694_
15.081003583354850.04.8876.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

0-0157970/950/18384_
15.088984173552260.05.7478.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/926/18356_
15.0871038881882990.04.9378.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0157970/1113/17809_
15.08114865373253730.06.0178.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0157970/816/18873_
15.081226118884477370.03.6378.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0157970/1057/18959_
15.08651569429250.04.5181.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0157970/1014/18136_
15.0842613576218110.04.4376.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/3252/17854_
15.0856041379841030.014.4976.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/927/17581_
15.08596680394080.04.2575.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/881/18080_
15.08298779032010.03.7376.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/1274/13566_
16.89375558919020.06.8758.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0148380/1246/13693_
16.898332861700510.05.7658.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMe

1-0148380/1153/13086_
16.8989244258629740.04.8556.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0148380/1161/13413_
16.89402443159136620.06.2858.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/1250/13370_
16.90112559074710.06.7857.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHNehV

1-0148380/1080/12946_
16.895312260393420.04.8355.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/985/12853_
16.9019955154682900.05.1255.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHJM

1-0148380/1029/12950_
16.891179556165990.04.0754.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdug

1-0148380/1150/12368_
16.8947143961947480.05.2952.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0148380/903/12348_
16.8932064158858880.04.0551.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94woS

1-0148380/1230/13290_
16.89102614554241140.05.1756.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/893/12415_
16.891282653239920.04.8253.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/1085/13136_
16.897582661019040.04.3454.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96so2I

1-0148380/1125/13141_
16.89590464657050.04.6255.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0148380/1025/13022_
16.896823055260560.04.2152.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0148380/1001/12434_
16.891212656494850.04.1451.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0148380/1106/13414_
16.891119558039920.04.9156.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-01483810/1017/13107W
16.9100552248411.35.0456.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0148380/1251/12853_
16.8997945357993930.07.3056.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.

Found on 2024-11-18 17:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a902e87138

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 19:15:04 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 21 hours 55 minutes 21 seconds
Server load: 1.26 1.14 1.38
Total accesses: 929463 - Total Traffic: 3.8 GB - Total Duration: 397987670
CPU Usage: u25.89 s55.79 cu319.1 cs177.84 - .021% CPU load
.337 requests/sec - 1496 B/second - 4438 B/request - 428.191 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/166/17265_
2.726053276801430.00.5972.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/183/17123_
2.72502572410950.00.7673.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0157970/216/16851_
2.7244142672847790.00.8972.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpa

0-0157970/200/17119_
2.72366569173560.00.8071.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/241/16674_
2.72322671270180.00.9369.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/221/17711_
2.72412476054370.01.0474.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0157970/270/17142_
2.7219941874877690.00.9674.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkb

0-0157970/207/17024_
2.7211450681289160.00.8370.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0157970/303/18561_
2.7353582962240.00.8980.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/244/16903_
2.7365568841660.00.8871.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0157970/191/17290_
2.721283576317200.00.8171.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/199/17379_
2.721246478080540.00.8573.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

0-0157970/224/17446_
2.72113942277057250.00.6973.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-0157970/177/17787_
2.721205973010010.00.6876.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/196/17487_
2.721080874899200.00.8075.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/242/16904_
2.7210141078420910.01.4773.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0157970/219/17653_
2.72989568003150.00.7273.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/139/17569_
2.72893169678930550.00.4673.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157970/290/16986_
2.72862669999020.01.3173.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0157970/156/18213_
2.72925580581050.00.6375.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0157970/179/18081_
2.72796415765497990.00.7677.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpS

0-0157970/191/17313_
2.7277212172473510.00.7473.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/2436/17038_
2.7271161476966450.010.6572.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/184/16838_
2.7266098977532760.00.6671.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157970/168/17367_
2.7263839674865880.00.7373.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

1-0148380/306/12598_
3.75420554988240.01.5852.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0148380/315/12762_
3.731021455784160.01.1053.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDclb

1-0148380/267/12200_
3.75667054625600.00.9652.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0148380/349/12601_
3.7552344755523170.01.3953.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

1-0148380/285/12405_
3.75340553877470.01.4552.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0148380/301/12167_
3.75480856531940.01.1352.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/241/12109_
3.741000650570870.00.9351.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0148388/284/12205W
3.750050518989.71.0551.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0148380/265/11483_
3.731261556354620.00.9648.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0148380/237/11682_
3.7555556175740.00.8248.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0148380/363/12423_
3.7496042249395910.01.4653.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNehv

1-0148380/229/11751_
3.749165049492240.00.8049.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_05fba87cfbb3a

1-0148380/291/12342_
3.75743757142600.01.0151.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0148380/256/12272_
3.75622560550750.01.0152.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

1-0148380/250/12247_
3.75779851087140.00.8249.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/265/11698_
3.748802352949630.00.8647.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

1-0148380/261/12569_
3.758335253434800.00.8552.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/210/12300_
3.731171551167400.00.7352.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0148380/267/11869_
3.73113941152600100.01.0650.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0148380/247/12406_
3.75651

Found on 2024-11-16 19:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92fe53fca

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 17:32:30 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 20 hours 12 minutes 47 seconds
Server load: 2.12 2.32 1.71
Total accesses: 874682 - Total Traffic: 3.6 GB - Total Duration: 380994742
CPU Usage: u48.7 s64.01 cu277.18 cs156.19 - .0212% CPU load
.339 requests/sec - 1515 B/second - 4467 B/request - 435.581 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/1387/16218_
20.21759773292940.06.7168.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1331/16076_
20.2473169060470.06.4068.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0318150/1400/15857_
20.2434468984150.06.8068.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_945da34339ab0

0-0318150/1187/16042_
20.24180665261930.05.9967.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

0-0318150/1371/15521_
20.24204467292500.06.4365.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0318150/1420/16455_
20.22601572474630.06.6369.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHOMkV

0-0318150/1307/16153_
20.22631672440170.06.1570.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/1303/16051_
20.22491879119480.05.9666.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1482/17309_
20.21734579961720.07.7675.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1510/15779_
20.21809865789360.07.3567.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1223/16077_
20.22408573970180.05.7866.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1577/16207_
20.21846573980170.07.1868.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1425/16475_
20.21687573572330.07.0669.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318158/1464/16764W
20.240069091149.77.1672.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0318150/1350/16340_
20.2445670887370.06.5570.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJ2

0-0318150/1363/15936_
20.24270675079940.07.1669.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDduQ

0-0318150/1429/16547_
20.218823465182800.06.4569.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1469/16556_
20.2458675358470.06.8070.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpy

0-0318150/1296/16028_
20.21661567474460.06.3769.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdOG

0-0318150/1476/17344_
20.24233576213040.06.5472.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1403/16853_
20.22453562290450.06.4072.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHOPQ3

0-0318150/1354/16314_
20.22348570520780.06.4469.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1256/15858_
20.22321572952030.06.3468.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1304/15793_
20.24291573608580.07.3167.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0318150/1288/16273_
20.22540572095290.06.1168.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcmU

1-0267270/1368/11433_
21.89621552304040.06.8748.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1674/11662_
21.91201550471660.07.7649.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1311/11032_
21.9363050569450.06.7748.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/1552/11402_
21.902773752038550.07.5549.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_675a75c58808a

1-0267270/1289/11111_
21.88667550610810.06.3147.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1552/11168_
21.917013853006430.07.2448.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0267270/1377/10906_
21.88781547766030.07.0347.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0267270/1597/11051_
21.8936142746000160.07.3746.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/1539/10389_
21.89511552205950.06.9444.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpU

1-0267270/1454/10716_
21.90331652453540.06.8444.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0267270/1486/11320_
21.90256645587000.07.0348.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0267270/1423/10697_
21.9251046119360.06.4146.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0267270/1357/11325_
21.91187553479800.06.4747.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1759/11167_
21.87904355588430.08.0547.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ec8f90e83de34

1-0267270/1389/11226_
21.9332547914310.06.4445.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1456/10680_
21.89561549993710.06.9044.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1585/11276_
21.89652650628030.07.4547.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0267270/1377/11159_
21.90301849067700.06.3847.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0267270/1457/11020_
21.87839649846150.06.9347.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwE

Found on 2024-11-14 17:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9828298c6

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 18:21:35 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  27 days 21 hours 1 minute 53 seconds
Server load: 0.41 1.03 1.31
Total accesses: 819611 - Total Traffic: 3.4 GB - Total Duration: 352787005
CPU Usage: u25.62 s50.16 cu277.18 cs156.19 - .0211% CPU load
.34 requests/sec - 1508 B/second - 4432 B/request - 430.432 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/215/15046_
4.2440443768059450.01.0262.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86ybL

0-0318150/315/15060_
4.237863264081660.01.4964.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-0318150/389/14846_
4.23840763639230.01.9063.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/170/15025_
4.221054760075650.00.8662.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/265/14415_
4.2299747261469780.01.3460.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpK

0-0318150/312/15347_
4.24366666004530.01.5564.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0318150/232/15078_
4.22874967422250.01.1265.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/253/15001_
4.2436673309550.01.2161.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0318150/333/16160_
4.23769774783710.02.0770.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/302/14571_
4.2463846158565320.01.4861.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0318150/233/15087_
4.2211134467220550.01.0862.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_899396351dfcd

0-0318150/215/14845_
4.2293342768375990.01.0262.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0318150/283/15333_
4.2448744466922710.01.5563.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0318150/291/15591_
4.23739663456830.01.2966.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/317/15307_
4.221257764006740.01.5865.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0318150/285/14858_
4.2457646067804630.01.6463.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHOOQI

0-0318150/280/15398_
4.24558660493670.01.3164.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTR

0-0318150/320/15407_
4.237095570482540.01.5364.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0318150/274/15006_
4.241862762510800.01.4064.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNixF

0-0318150/298/16166_
4.2459671637710.01.4367.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/286/15736_
4.24301321757155970.01.3467.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0318150/273/15233_
4.24240862934200.01.2864.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/265/14867_
4.24156766395250.01.2663.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0318150/287/14776_
4.242626368709170.01.8062.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_111da46a89381

0-0318150/236/15221_
4.2211716866699210.01.2764.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/437/10502_
5.62728547206710.02.0443.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yYq

1-0267270/377/10365_
5.621148100543631650.01.8243.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcmb

1-0267270/366/10087_
5.62816646099540.01.8743.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0267270/424/10274_
5.63464246213120.01.9843.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_361a33dcd736a

1-0267270/331/10153_
5.63571945111250.01.4842.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/354/9970_
5.621231542147073590.01.6942.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/399/9928_
5.63399643443310.02.1342.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcmp

1-0267270/527/9981_
5.636446240533070.02.3641.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94ooy

1-0267270/554/9404_
5.63215548286350.02.3839.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZX

1-0267270/472/9734_
5.63454746042790.02.0440.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/322/10156_
5.63246740609900.01.6343.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

1-0267270/429/9703_
5.627773941414270.02.0941.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c8473448a1e24

1-0267270/325/10293_
5.63331748117130.01.4242.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/413/9821_
5.63169948955410.02.0341.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/366/10203_
5.621038542780680.01.7140.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0267270/306/9530_
5.62968644375450.01.3838.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchp

1-02672710/328/10019W
5.6400438586816.41.6542.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0267270/311/10093_
5.62108744342581270.01.4242.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

1-0267270/373/9936_
5.63632645908920.01.6641.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0267270/377/10023_
5.63277645487760.02.0642.90

Found on 2024-11-12 18:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c884386b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 01:33:29 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 4 hours 13 minutes 46 seconds
Server load: 1.31 2.05 1.76
Total accesses: 755478 - Total Traffic: 3.1 GB - Total Duration: 312829764
CPU Usage: u30.5 s49.86 cu243.47 cs139.64 - .0213% CPU load
.347 requests/sec - 1521 B/second - 4379 B/request - 414.082 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/669/13838_
9.806594661859650.03.0357.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/713/13775_
9.79895556897380.03.4757.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0249240/525/13594_
9.79940126053864040.02.2157.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0249240/480/13809_
9.8226941451413990.02.0956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0249240/724/12916_
9.79846654259480.03.2953.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/577/14136_
9.82332158358880.02.3457.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpg

0-0249240/610/13899_
9.81590059706820.03.1759.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/703/13768_
9.79789665990190.02.8156.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMchK

0-0249240/755/14757_
9.82393764625850.03.3463.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0249240/689/13360_
9.81614052271630.03.1055.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/697/13942_
9.791054660461910.03.7056.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/717/13710_
9.822131159864510.02.8557.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0249240/628/14064_
9.79997660840880.02.8657.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-0249240/571/14110_
9.79723656691190.02.8359.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0249240/590/13820_
9.82502052048350.02.8758.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/686/13445_
9.8245340958988480.03.8257.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdrOT

0-0249240/579/14157_
9.81559253616020.02.9758.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/750/14132_
9.82152862561180.03.0358.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpu

0-0249240/644/13708_
9.82106953797920.02.9058.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/628/14821_
9.7910229261769370.02.8960.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/678/14314_
9.8233341348208750.03.5360.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0249240/708/13847_
9.79679154348630.03.2357.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/699/13650_
9.7969343058982190.03.1357.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0249249/798/13613W
9.8300584283413.03.5756.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0249240/651/13937_
9.7910721087560391320.02.8357.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/759/9236_
11.01904739608750.03.1937.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/903/9008_
11.011009034819980.04.1237.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0222820/693/8700_
11.01102825439017800.03.1736.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/821/8926_
11.026784636688200.04.0437.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/780/8903_
11.031215834773210.03.2035.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0222820/742/8620_
11.03301536420100.03.4836.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0222820/731/8800_
11.01108931437304430.03.4236.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/749/8411_
11.03244633543590.03.8334.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/747/7952_
11.02663140094990.03.4632.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0222820/707/8225_
11.02750037381180.03.0333.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0222820/766/8876_
11.0352259833679980.03.4435.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iLkF

1-0222820/762/8356_
11.03648033864820.03.6335.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0222820/653/9066_
11.03573640279910.03.0036.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/738/8513_
11.02814537104370.02.7134.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0222820/709/9028_
11.03603635329630.03.1135.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0222820/715/8478_
11.03176748835730030.03.2934.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561bU

1-0222820/665/8851_
11.0313634318280.03.1036.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMchh

1-0222820/813/8914_
11.01967736116100.03.7436.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNchC

1-0222820/711/8777_
11.02706639628080.03.0936.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/723/8763_
11.02890038047210.03.2037.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css

Found on 2024-11-10 01:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c0b140f3

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 03:05:29 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 5 hours 45 minutes 46 seconds
Server load: 2.24 2.43 1.93
Total accesses: 736636 - Total Traffic: 3.0 GB - Total Duration: 304069416
CPU Usage: u22.18 s42.58 cu243.47 cs139.64 - .0223% CPU load
.367 requests/sec - 1604 B/second - 4374 B/request - 412.781 ms/request
2 requests currently being processed, 48 idle workers
_____________________________WK___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/336/13505_
4.34340460182170.01.5455.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a7d912b5a5b0

0-0249240/214/13276_
4.33460054237310.01.1755.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0249240/204/13273_
4.325153652481960.00.9856.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/178/13507_
4.351233650280530.00.7355.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dcc14d4159d4b

0-0249240/380/12572_
4.32615052297920.01.6851.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/231/13790_
4.3785255982080.00.9956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0249240/249/13538_
4.343403658405900.01.4057.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6adf00e31a0cf

0-0249240/303/13368_
4.3349322263071330.01.3454.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9MwEP0rke%2F57na

0-0249240/392/14394_
4.3530498563375200.01.8561.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/296/12967_
4.3434047850290100.01.4654.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCEEW

0-0249240/347/13592_
4.31623159398790.01.8654.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/411/13404_
4.35143258876710.01.7656.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/181/13617_
4.3260717959421740.00.9255.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu95EJFsZ

0-0249240/210/13749_
4.33437554217380.00.8957.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

0-0249240/220/13450_
4.3529820150405420.01.2456.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0249240/321/13080_
4.3520442857623200.01.4654.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uBVs

0-0249240/223/13801_
4.3522383252508670.01.5057.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4sd

0-0249240/408/13790_
4.3744160695190.01.6257.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/270/13334_
4.3758852292790.01.3857.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/275/14468_
4.375060559480.01.3358.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /login.action HTTP/1.1

0-0249240/375/14011_
4.3515543146872840.01.8359.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3e1G

0-0249240/341/13480_
4.35282752363780.01.6356.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=elizabeth.waters

0-0249240/344/13295_
4.34397755319110.01.8556.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=54322&method=ema

0-0249240/395/13210_
4.37205157042420.01.8955.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/289/13575_
4.3254545358291190.01.2856.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0222820/408/8885_
5.394364737787900.01.7736.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/463/8568_
5.394804733104280.02.2435.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/333/8340_
5.39526737894980.01.5235.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/411/8516_
5.404233832860570.01.9235.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10b9b079a42e0

1-02228232/409/8532W
5.4600334165270.31.6434.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0222822/403/8281K
5.461035294722.11.9034.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /debug/default/view?panel=config HTTP/1.1

1-0222820/371/8440_
5.39587635974500.01.8234.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDsJK

1-0222820/356/8018_
5.44175232026490.01.9832.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/382/7587_
5.413304838235540.02.0431.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/283/7801_
5.41340534457560.01.5431.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_786c37762a412

1-0222820/382/8492_
5.41250358232258000.01.7734.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/416/8010_
5.41310231996470.02.0633.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0222820/349/8762_
5.4210170839017700.01.7135.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu7%2BjON

1-0222820/276/8051_
5.403724634017970.01.1533.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/294/8613_
5.41214633688410.01.4033.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/291/8054_
5.411952434146130.01.3732.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/304/8490_
5.39615632807810.01.3435.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0222820/399/8500_
5.395054934340500.01.9834.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/281/8347_
5.41290278337960340.01.1334.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/403/8443_
5.4134073643771<

Found on 2024-11-08 03:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c05a4801

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 22:14:13 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 54 minutes 31 seconds
Server load: 1.07 1.79 2.14
Total accesses: 698893 - Total Traffic: 2.8 GB - Total Duration: 283216122
CPU Usage: u50.33 s58.89 cu199.97 cs113.46 - .0222% CPU load
.367 requests/sec - 1591 B/second - 4336 B/request - 405.235 ms/request
2 requests currently being processed, 48 idle workers
______________________W__.........................______________
_______K___.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/2587/12728_
28.351443355810820.09.4752.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_926c038982a5a

0-0157180/2267/12550_
28.35119150922390.08.7551.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2110/12662_
28.3219718149235290.08.2353.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KuQC

0-0157180/2127/13020_
28.2931470647683510.08.2352.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_c8c4136db61b

0-0157180/2264/11707_
28.264796647572600.08.7547.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2339/13030_
28.292573552698950.08.6952.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d50441e6c01d

0-0157180/2224/12747_
28.2838822953672670.08.9853.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0157180/2508/12597_
28.29323557964740.09.4651.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehD

0-0157180/2551/13239_
28.33189057711790.010.1555.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2352/12249_
28.3510219347325010.09.6450.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQb2

0-0157180/2144/12572_
28.3543053392810.07.8949.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2437/12562_
28.35130154962640.09.8052.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2365/13020_
28.2645324755182470.09.2252.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVLLbtswEPwVgXdJtvyQQ

0-0157180/2185/13036_
28.3524549075550.08.1054.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0157180/2104/12823_
28.33190047154740.08.2453.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/2051/12353_
28.3415464253695310.08.1351.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0157180/2197/13150_
28.3560649362580.08.5254.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0157180/2400/12989_
28.2839591952720110.09.3453.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157180/2203/12650_
28.26441148447900.08.8053.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2111/13770_
28.31227154617060.08.3455.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0157180/2245/13149_
28.274343943269490.09.0654.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2302/12647_
28.27441149084530.08.8352.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-01571819/2098/12531W
28.3600508064385.37.7752.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157180/2177/12410_
28.2935121653253710.08.6951.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78hKUW

0-0157180/2031/12781_
28.293303253925890.08.2852.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/8477.
0.00203105635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.00203105730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.00203105535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.00203105530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.002031054131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.0020310543033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.00203105533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.00203105830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.00203105735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.00203105533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.0020310541530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.0020310542829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.00203105537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.0020310543231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.00203105732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.002031051332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.0020310542230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.0020310545932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.00203105635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.00203105633768430.00.0033.92
127.0.0.1http/1.1ip-10-1-103-

Found on 2024-11-06 22:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e9b51bd7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 22:11:09 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 days 51 minutes 26 seconds
Server load: 0.74 1.63 1.77
Total accesses: 594314 - Total Traffic: 2.4 GB - Total Duration: 253121846
CPU Usage: u16.86 s35.27 cu199.97 cs113.46 - .0211% CPU load
.343 requests/sec - 1505 B/second - 4385 B/request - 425.906 ms/request
1 requests currently being processed, 49 idle workers
_W_______________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/133/10274_
1.952724245683200.00.6343.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-01571896/207/10490W
2.09004645981303.90.7543.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157180/118/10670_
2.05453843328050.00.4946.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_289df415266ad

0-0157180/160/11053_
2.00162141706460.00.8045.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/192/9635_
2.00161142802880.00.8239.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/205/10896_
1.982434147074120.00.8344.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/117/10640_
1.93290147524060.00.5445.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/161/10250_
1.913754750806290.00.7442.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/198/10886_
1.93289351161200.00.7146.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/108/10005_
1.91448040270230.00.4641.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10556_
1.96254148533660.00.4542.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/186/10311_
1.99222048168850.00.8743.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0157180/104/10759_
2.0276449408300.00.3843.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0157180/147/10998_
1.922968444009090.00.6246.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/83/10802_
1.91315141412890.00.4645.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/173/10475_
2.0821448513340.00.7843.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dd731959b908e

0-0157180/245/11198_
2.055121443916260.00.9546.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iJAa

0-0157180/119/10708_
1.89545046041540.00.5344.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10575_
1.895676643599660.00.4845.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/145/11804_
1.89535047854760.00.6547.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/113/11017_
1.90516538124600.00.4646.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCem7

0-0157180/161/10506_
1.91398542575640.00.6843.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157180/93/10526_
1.90487845241120.00.3644.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpK

0-0157180/119/10352_
1.91462145860160.00.5243.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/169/10919_
1.91332146895040.01.0345.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/8477.
0.0030120635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.0030120730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.0030120535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.0030120530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.00301204131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.003012043033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.0030120533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.0030120830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.0030120735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.0030120533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.003012041530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.003012042829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.0030120537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.003012043231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.0030120732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.00301201332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.003012042230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.003012045932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.0030120635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.0030120633768430.00.0033.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

Found on 2024-11-04 22:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a91c425097

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 21:12:19 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 23 hours 52 minutes 36 seconds
Server load: 1.28 1.10 1.30
Total accesses: 523244 - Total Traffic: 2.1 GB - Total Duration: 231176528
CPU Usage: u24.09 s38.31 cu167.86 cs93.21 - .0208% CPU load
.337 requests/sec - 1484 B/second - 4411 B/request - 441.814 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/726/8930_
10.73561441478910.02.8737.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_172d0ceb38711

0-0267300/961/9202_
10.73518343426620.03.6438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4fe1e2b446090

0-0267300/779/9352_
10.72670438751910.03.3740.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d7ac11031a93

0-0267300/690/9523_
10.71741737525420.02.5239.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/733/8196_
10.68964637982350.02.8234.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0267300/860/9018_
10.71694802841281270.03.0836.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

0-0267300/851/9384_
10.77304542728690.03.2540.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/892/9036_
10.7544486846878080.03.3837.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0267300/819/9332_
10.73539447394550.02.9240.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc73261de04b2

0-0267300/735/8755_
10.7357310436357120.02.6036.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0267300/796/9011_
10.78193443424820.03.1336.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef8b28809ca33

0-0267300/947/8821_
10.79161642571940.03.6137.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-0267300/829/9413_
10.76415445162940.03.1338.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_283e587569a45

0-0267300/862/9679_
10.76389539665900.03.2641.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/956/9405_
10.74482536942990.03.4939.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/831/8935_
10.7972442628380.03.2837.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_953567a137a2b

0-0267300/915/9737_
10.681010441164790.03.3241.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_da489534dac3c

0-0267300/847/9369_
10.7999542373390.03.0339.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/783/9297_
10.68989439958550.03.2640.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_714a7f82fd8ab

0-0267300/872/10098_
10.68913543681780.03.1540.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLsJo

0-0267300/796/9641_
10.804143134140760.02.9240.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/924/9193_
10.71814739489810.03.5838.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_4a2d851a581

0-0267300/929/9202_
10.726123541775440.03.5039.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbhshEIZfZW%2BcWMz

0-0267308/778/9007W
10.800040754049.73.0437.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/894/9260_
10.70823641383080.03.2538.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04a7adbfc4dd9

1-0314230/759/7234_
9.15558432973180.02.6029.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fed5d23081d25

1-0314230/741/6866_
9.101004627359770.02.6327.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/787/6773_
9.13685632186450.02.9228.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/870/7060_
9.1991526887780.03.3228.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/680/6831_
9.10970428091760.02.4327.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a441468bd1146

1-0314230/703/6580_
9.17188629844010.02.6127.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/679/6728_
9.12759429194620.02.5827.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3235527322972

1-0314230/644/6320_
9.11942426135660.02.2726.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4218c95b64ce8

1-0314230/650/6045_
9.11884631681380.02.3424.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/706/6391_
9.13585430181300.02.4225.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5652a674db267

1-0314230/825/6902_
9.13694624949990.02.8228.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0314230/750/6310_
9.15551626830060.02.6926.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTN

1-0314230/696/7105_
9.11831433451860.02.5128.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b7d90cfc81b0

1-0314230/692/6456_
9.15525628639090.02.5726.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

1-0314230/798/6965_
9.15451529256380.02.8926.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/762/6562_
9.153723327816460.02.7926.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/654/6909_
9.155073328170940.02.1928.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/694/6943_
9.13664528863170.02.4128.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/726/6750_
9.154734830607130.02.7028.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webaut

Found on 2024-11-02 21:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9959208a7

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 15:56:20 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 18 hours 36 minutes 37 seconds
Server load: 0.64 0.62 0.65
Total accesses: 496480 - Total Traffic: 2.1 GB - Total Duration: 225561463
CPU Usage: u16.11 s30.79 cu167.86 cs93.21 - .0212% CPU load
.343 requests/sec - 1527 B/second - 4460 B/request - 454.321 ms/request
1 requests currently being processed, 49 idle workers
_______________W__________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/267/8471_
4.5469343239813100.01.2635.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/366/8607_
4.544513042392800.01.7237.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/315/8888_
4.54754637488740.01.8839.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/197/9030_
4.53813636269950.00.9437.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/224/7687_
4.531023736810000.01.0932.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0267300/316/8474_
4.539282740028790.01.2735.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

0-0267300/308/8841_
4.55149441027640.01.3438.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5d5608a5236a

0-0267300/382/8526_
4.55275645895940.01.7136.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/304/8817_
4.5451442946467030.01.2738.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0267300/212/8232_
4.54634634945010.00.9134.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0267300/284/8499_
4.5595642384580.01.3634.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0267300/320/8194_
4.55194541816890.01.4835.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/286/8870_
4.543903543490610.01.3736.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/305/9122_
4.55245638348170.01.4439.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdquS

0-0267300/413/8862_
4.55304835844580.01.7838.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HV

0-02673010/328/8432W
4.5600418137516.61.5836.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/463/9285_
4.531085840467140.01.8239.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0267300/342/8864_
4.5614140803880.01.4337.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0267300/300/8814_
4.531175738304230.01.6938.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/293/9519_
4.531121742393770.01.2838.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/298/9143_
4.531240633436950.01.2438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d2dbf593e2113

0-0267300/290/8559_
4.5396142737933030.01.3036.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0267300/313/8586_
4.54551840898170.01.4137.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/240/8469_
4.531204739635630.01.0935.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJC

0-0267300/328/8694_
4.5387140440203340.01.4036.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/175/6650_
2.83485932274130.00.7327.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpy

1-0314230/229/6354_
2.82953526287620.00.9426.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/275/6261_
2.82724931365820.01.3227.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMclV

1-0314230/275/6465_
2.821116625904210.01.3926.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0314230/190/6341_
2.821051726939930.00.8626.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/208/6085_
2.835629140370.00.9025.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0314230/192/6241_
2.8278443427560700.00.9325.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

1-0314230/146/5822_
2.829903125393890.00.6324.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/172/5567_
2.82662930788130.00.7323.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp2

1-0314230/212/5897_
2.82543629312130.00.8323.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/183/6260_
2.82902623166700.00.7525.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpo

1-0314230/215/5775_
2.83425625565390.00.9824.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/193/6602_
2.828433832133870.00.8226.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85pVm

1-0314230/172/5936_
2.8336346827916150.00.7424.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0314230/187/6354_
2.83256527928250.00.8324.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/231/6031_
2.8312339426732710.01.0124.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdNW

1-0314230/144/6399_
2.8329242426923520.00.5927.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0314230/228/6477_
2.8260343727975870.00.9126.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/149/6173_
2.8321345329624620.00.7026.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

1-031423

Found on 2024-11-01 15:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a911289d8d

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 18:46:33 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  14 days 21 hours 26 minutes 50 seconds
Server load: 0.98 1.21 1.55
Total accesses: 447389 - Total Traffic: 1.8 GB - Total Duration: 197399717
CPU Usage: u39.98 s40.48 cu124.55 cs70.29 - .0214% CPU load
.348 requests/sec - 1540 B/second - 4429 B/request - 441.226 ms/request
2 requests currently being processed, 48 idle workers
_____W___________________.........................________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136670/1612/7526_
24.87277635470590.07.8631.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0136670/2050/7629_
24.8798435514480.08.8132.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f49e3dbc3fe20

0-0136670/1681/7897_
24.87331632063950.07.0634.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0136670/1934/8200_
24.8635342131681820.07.7433.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1365/6767_
24.87831230760360.05.6528.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bf2d8bdf9a11

0-0136678/2073/7577W
24.8800335701111.78.2831.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1905/7802_
24.872652435107170.08.6833.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1836/7442_
24.87151537417000.07.8831.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1876/7967_
24.8766809840621930.08.1434.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1577/7447_
24.85411431172450.07.0831.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bcb3d3cca525a

0-0136670/1634/7571_
24.8843435950830.06.7130.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6deffa430a99e

0-0136670/1674/7189_
24.87183534473760.08.0730.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpl

0-0136670/1780/7893_
24.87109536385440.06.9932.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b476c2c6d31ac

0-0136670/1992/8131_
24.85387533764710.09.1735.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGGJ7l

0-0136670/1946/7692_
24.87132529565270.08.2532.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1565/7398_
24.85438536690510.07.0731.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1912/8193_
24.8838435669610.07.8735.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_979d9206d0998

0-0136670/1735/7724_
24.86370037069990.08.0332.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0136670/1884/7837_
24.87165432781410.08.7134.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_58bfed6e730a6

0-0136670/2241/8566_
24.87297637764210.09.4134.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/2106/8072_
24.8816429897600.09.3634.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_70afc14286b59

0-0136670/1643/7582_
24.85449431963210.07.0031.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_de99a602d86c3

0-0136670/1639/7452_
24.8722331332955540.07.3632.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5JPug

0-0136670/1680/7630_
24.87202433990510.07.1331.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10ad82ff5aae3

0-0136670/1653/7739_
24.87247534748190.07.2532.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6475.
0.00161114430248640.00.0027.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6125.
0.0016111444524784200.00.0025.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/select.php?StateId=_6b7ebf7f3

1-0-0/0/5986.
0.00161114130320660.00.0025.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6190.
0.00161114124952470.00.0025.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6151.
0.00161114425963170.00.0025.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5877.
0.00161114128265090.00.0024.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/6049.
0.00161114426416860.00.0024.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5676.
0.001611143124179070.00.0023.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_6b7ebf7f

1-0-0/0/5395.
0.001611146490028897560.00.0022.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/5685.
0.00161114027089400.00.0023.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6077.
0.001611144722232930.00.0025.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/5560.
0.001611144324793810.00.0023.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6409.
0.001611142931199540.00.0025.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73f79ca20b9f2

1-0-0/0/5764.
0.00161114526092010.00.0024.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6167.
0.00161114026774030.00.0023.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/5800.
0.0016111426025709010.00.0023.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJISPs

1-0-0/0/6255.
0.00161114125839730.00.0026.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6249.
0.00161114127135540.00.0026.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6024.
0.001611143728632330.00.0025.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_db6370f7cd4c7

1-0-0/0/6113.
0.00161114

Found on 2024-10-30 18:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9e96e4652

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 23:42:03 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 2 hours 22 minutes 20 seconds
Server load: 2.06 1.49 1.57
Total accesses: 303810 - Total Traffic: 1.2 GB - Total Duration: 139003567
CPU Usage: u14.62 s22.94 cu94.47 cs53.18 - .0193% CPU load
.317 requests/sec - 1388 B/second - 4382 B/request - 457.535 ms/request
2 requests currently being processed, 48 idle workers
_______W________________________________K_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0259750/581/4706_
6.86679321821790.02.2719.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f4017308dc3f

0-0259750/586/4340_
6.86670523425320.02.2717.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/565/4983_
6.86556141822329890.02.3620.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0259750/520/5145_
6.8916021616860.02.0821.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0259750/452/4242_
6.8664714220011840.01.8417.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0259750/483/4449_
6.8661311620498360.02.2318.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0259750/493/4827_
6.8917325223576260.02.2920.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259758/587/4385W
6.890024123739.62.6818.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0259750/614/4966_
6.86678027461770.02.5521.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0259750/547/4624_
6.87198622248000.02.1919.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RX

0-0259750/568/4728_
6.86595725508460.02.5318.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/618/4448_
6.86318322344510.02.3318.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b59d0a813ab99

0-0259750/588/4907_
6.86479122187840.02.5320.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0259750/477/4954_
6.864412922820630.01.9320.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0259750/490/4549_
6.865084120010450.02.1918.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/543/4742_
6.872912826364980.02.2219.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/394/5063_
6.863773324976200.01.4720.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0259750/404/5043_
6.87261623908170.01.7621.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0259750/567/5043_
6.871392120365160.02.5121.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0259750/557/4875_
6.8918326222476280.02.1119.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259750/478/4938_
6.8839520277530.01.9920.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0259750/520/4923_
6.87227020711620.01.9220.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0259750/534/4568_
6.87107522646990.02.0919.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0259750/550/4587_
6.8919413119006530.02.1919.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0259750/382/4836_
6.8754122813390.01.5419.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0312120/367/5044_
4.71408424660340.01.3821.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0312120/302/4944_
4.71465420299910.01.0420.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0312120/426/4677_
4.72283824371020.01.6820.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0312120/380/4891_
4.713503020629610.01.5520.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0312120/364/4719_
4.72306021154280.01.5719.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /.git/config HTTP/1.1

1-0312120/447/4556_
4.72252122129820.01.9518.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0312120/373/4665_
4.7321278119871210.01.2919.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/338/4475_
4.7316740020619310.01.3418.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxshEIb%2Fyt44sex

1-0312120/438/4339_
4.738038222551920.01.8218.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdpS

1-0312120/443/4384_
4.73121621830070.01.7517.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduS

1-0312120/359/4939_
4.74414517098520.01.5520.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/363/4219_
4.74314419116650.01.3617.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/361/4986_
4.7417326524752310.01.4420.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/301/4539_
4.7415520352590.01.1319.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_26ca4b8a5499d

1-0312120/390/4823_
4.7067921521155730.01.5318.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312121/370/4264K
4.740020136591.01.4717.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /v2/_catalog HTTP/1.1

1-0312120/361/4743_
4.7417322720653040.01.3619.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/323/5011_
4.7418375621692660.01.2920.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/388/4755_
4.70668023727270.01.7820.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0312120/363/4709_
4.7062123621034440.01.3819.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

Found on 2024-10-26 23:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9c4fde5f8

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 23:37:42 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 2 hours 17 minutes 59 seconds
Server load: 1.44 2.26 2.36
Total accesses: 277396 - Total Traffic: 1.1 GB - Total Duration: 126462078
CPU Usage: u73.62 s52.42 cu25.7 cs15.08 - .0212% CPU load
.353 requests/sec - 1548 B/second - 4387 B/request - 455.89 ms/request
10 requests currently being processed, 65 idle workers
_____W__W___W_________K____W____W______W___________________W____
___KW______.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/2618/4105_
35.53498519127960.010.9116.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0306740/2332/3726_
35.58230520569110.010.0015.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtj

0-0306740/2986/4403_
35.591883220082190.012.7618.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/3228/4600_
35.5356717419217550.013.7319.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCHQl

0-0306740/2536/3772_
35.536045017380210.010.7515.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306743/2532/3942W
35.624018183509.711.0616.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2777/4305_
35.60131110121625300.012.4318.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2331/3791_
35.53412721353540.09.9015.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306744/2819/4317W
35.6290252129722.312.9718.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2548/4069_
35.6185219887390.011.4217.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/2907/4108_
35.58269123332880.011.3716.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/2367/3809_
35.62343219744750.010.0516.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2806/4314W
35.523018980160.011.4817.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/3145/4464_
35.52654121057830.012.8618.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/2610/4046_
35.60110617841690.010.8316.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761BX

0-0306740/2779/4188_
35.52736023290740.011.3516.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/3205/4628_
35.58305022848880.013.9119.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0306740/3059/4616_
35.57325021252590.012.9619.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/3053/4469_
35.62614018115280.013.3819.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec4WAs

0-0306740/2877/4311_
35.5354019518904850.011.3117.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLT%2BMwEL73V0S5J05

0-0306740/2986/4457_
35.53437017805740.012.7418.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/2993/4387_
35.527133818751660.012.3718.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306746/2602/4031K
35.6210207235915.511.3817.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /about HTTP/1.1

0-0306740/2694/4019_
35.53465116814960.011.6717.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/3100/4425_
35.56348402121150940.012.8218.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/3099/4655_
35.84465023395960.013.4619.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0307110/3168/4618_
35.82638619277890.013.5319.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0307114/2861/4238W
35.870023066398.512.7418.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0307110/3143/4487_
35.86787019166570.013.5819.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/3132/4346_
35.8451625919941390.013.5718.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iKlY

1-0307110/2506/4104_
35.85188120311780.010.3516.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0307110/2875/4283_
35.861484517555990.012.3218.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d70093f120588

1-0307110/2869/4127W
35.823018219650.011.9316.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2559/3898_
35.83593113021145450.010.9116.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2622/3917_
35.8535169219747810.010.9115.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTAp

1-0307110/3034/4576_
35.8274820515808500.012.9019.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62VcdrU

1-0307110/2402/3842_
35.83555517475070.09.9015.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0307110/3285/4609_
35.8610118122642730.013.6018.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJBC%2

1-0307110/2698/4205_
35.85295018697650.011.9918.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.HEAD /trinitylismore-logincloudworkenginenet.tar HTTP/1.1

1-0307113/2850/4390W
35.8740188199612.611.2016.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2535/3890_
35.8536117918736210.010.7615.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ab83206f7fbb

1-0307110/2995/4356_
35.8654019030240.012.5318.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/3045/4677_
35.8277021019162010.012.6919.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0307110/3025/4322_
35.84479422501840.013.4218.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fb5a0a9320139

1-0307110/3011/4342_
35.85223819107800.012.7617.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.<

Found on 2024-10-24 23:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a959d87e55

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 22:33:27 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 1 hour 13 minutes 45 seconds
Server load: 3.55 3.81 2.81
Total accesses: 219668 - Total Traffic: 889.7 MB - Total Duration: 90267784
CPU Usage: u50.5 s38.04 cu25.7 cs15.08 - .0212% CPU load
.361 requests/sec - 1531 B/second - 4246 B/request - 410.928 ms/request
2 requests currently being processed, 73 idle workers
______________________K________________________________W________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/1804/3291_
24.3145622014099170.07.2212.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EpIGd

0-0306740/1625/3019_
24.344001415415979030.06.8012.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2320/3737_
24.3534814916156120.09.4514.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnctlpS4J

0-0306740/2421/3793_
24.29677014429190.09.7815.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/1895/3131_
24.3148017313592200.07.6012.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCEsd

0-0306740/1724/3134_
24.31524514100320.07.1212.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0306740/1996/3524_
24.36305616951790.08.6414.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306740/1579/3039_
24.3440572614611190.06.0711.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2033/3531_
24.37138820319685450.08.7714.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-0306740/1677/3198_
24.372443015711280.06.9212.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4cccf9a9453c7

0-0306740/2099/3300_
24.3439717217247300.07.9912.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78rqBF

0-0306740/1636/3078_
24.344011394013517030.06.6412.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2104/3612_
24.36274113574090.08.5414.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/2342/3661_
24.389519815166520.09.1114.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJMTwI

0-0306740/1875/3311_
24.3722247513794730.07.3413.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCemW

0-0306740/1990/3399_
24.371731118903880.08.0913.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0306740/2324/3747_
24.3839717558880.08.9214.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_32724dca256

0-0306740/2215/3772_
24.3155332314876610.08.8115.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3A3e

0-0306740/2124/3540_
24.306345614574820.09.2115.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2181/3615_
24.305663814124720.08.2414.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2257/3728_
24.344021383113589170.09.2815.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2041/3435_
24.3868235714380850.07.9614.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke9JwEDYW

0-0306741/1786/3215K
24.383014973731.97.5213.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-0306740/1903/3228_
24.343971607513913130.08.2013.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2411/3736_
24.344091375615661290.09.6514.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2267/3823_
25.13635416645730.09.6516.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0307110/2367/3817_
25.164484413580350.09.9815.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/2195/3572_
25.21108117217190.09.7015.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2376/3720_
25.2186297514359440.09.7715.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2342/3556_
25.2336915724470.09.6714.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

1-0307110/1648/3246_
25.20293715007280.06.4813.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0307110/2168/3576_
25.2120720314093360.08.8214.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCELC

1-0307110/2202/3460_
25.16455337014951290.08.5813.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/1866/3205_
25.14608117097370.07.5513.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0307110/1927/3222_
25.235154814293210.07.7512.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8JwH3O

1-0307110/2152/3694_
25.14536011498870.08.7014.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1746/3186_
25.14508113227600.06.7812.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2394/3718_
25.19314017476400.09.2314.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1989/3496_
25.173983114647430.08.6614.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/2041/3581_
25.1456186215015240.07.7213.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/1832/3187_
25.164051373512278740.07.7012.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2390/3751_
25.20255113161100.09.6515.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2168/3800_
25.12699114757940.08.5415.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0307110/2225/3522_
25.173981544117704620.09.6114.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2253/3584_
25.16399015791460.09.1014.25
127.0.0.1http/1

Found on 2024-10-22 22:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a98d0a5b

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 22:44:12 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 1 hour 24 minutes 30 seconds
Server load: 1.72 1.93 2.02
Total accesses: 149636 - Total Traffic: 547.9 MB - Total Duration: 57486813
CPU Usage: u24.19 s22.2 cu25.7 cs15.08 - .0199% CPU load
.342 requests/sec - 1314 B/second - 3839 B/request - 384.178 ms/request
1 requests currently being processed, 74 idle workers
_____________W__________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/1123/2610_
11.75235111899330.03.799.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/873/2267_
11.7526873112746960.02.868.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1098/2515_
11.75251410217910.03.549.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

0-0306740/1431/2803_
11.71378010370090.04.7810.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0306740/959/2195_
11.7140309658180.03.018.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/879/2289_
11.66486010461950.02.968.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/1031/2559_
11.82142511035910.03.579.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/864/2324_
11.75297010476060.02.818.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/1054/2552_
11.80191313618390.03.979.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/836/2357_
11.87396911103700.03.028.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1289/2490_
11.82118211033550.04.028.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/952/2394_
11.8018159221450.03.309.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1018/2526_
11.8781458618090.03.409.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03067472/1258/2577W
11.91001054763275.54.159.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0306740/1026/2462_
11.61588510366230.03.369.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/972/2381_
11.87834212006600.03.258.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1377/2800_
11.61608512370480.04.6310.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1249/2806_
11.6158320510776020.04.2410.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1123/2539_
11.9013779302900.03.719.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1170/2604_
11.6452988969950.03.799.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_143082af934ea

0-0306740/1217/2688_
11.752927539898810.04.3610.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1203/2597_
11.66504410682450.03.939.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8eed684421737

0-0306740/889/2318_
11.655176510622890.02.978.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b792c8adc08ae

0-0306740/819/2144_
11.71358549618040.03.208.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1454/2779_
11.714033412384930.05.0210.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_091b34f3c7076

1-0307110/1134/2690_
11.9862512657040.03.7310.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0307110/1271/2721_
11.76557510723190.04.179.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1233/2610_
11.987520712460870.04.179.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62U89OO

1-0307110/1474/2818_
11.97118359272840.05.2710.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1026/2240_
11.9221859180030.03.288.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/817/2415_
11.89243611176450.02.739.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0307110/1134/2542_
11.96141310000120.03.709.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_415d64cdaad8b

1-0307110/930/2188_
11.765506210797080.02.948.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1067/2406_
11.76570414421470.04.049.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1070/2365_
11.9828110160200.03.538.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0307110/1174/2716_
11.78541928059270.03.8110.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/971/2411_
11.990010844050.03.169.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /config.json HTTP/1.1

1-0307110/1350/2674_
11.843074613350870.04.629.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1225/2732_
11.8145622011386060.03.949.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzDNaE

1-0307110/1090/2630_
11.78532411867750.03.479.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/929/2284_
11.8047914748622710.03.008.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1285/2646_
11.961531928286460.04.119.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5MPQ3

1-0307110/1269/2901_
11.981043310485840.04.1311.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_98b728fcbdf1a

1-0307110/1140/2437_
11.82372012591420.03.859.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1281/2612_
11.814446710288920.04.299.45

Found on 2024-10-20 22:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a975d11910

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 19-Oct-2024 00:36:54 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 3 hours 17 minutes 11 seconds
Server load: 2.20 2.34 2.05
Total accesses: 61761 - Total Traffic: 252.4 MB - Total Duration: 38735397
CPU Usage: u25.11 s19.11 cu0 cs0 - .0163% CPU load
.228 requests/sec - 976 B/second - 4285 B/request - 627.182 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1292/1292_
18.01825118518850.05.145.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1222/1222_
18.099559569790.04.964.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/1248/1248_
18.0184367199570.04.794.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-0360/1216/1216_
18.0857486117970.04.994.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0360/1057/1057_
18.08180597379450.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1222/1222_
18.08346145288647840.04.774.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1346/1346_
18.0828187787750.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1276/1276_
18.0193368630020.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/1333/1333_
18.08664610079420.05.445.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

0-0360/1334/1334_
18.09354278337640.05.225.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0360/1019/1019_
18.0773597660250.04.134.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1256/1256_
18.0824386439190.05.365.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1319/1319_
18.09161115977080.05.545.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1157/1157_
18.0775197843020.05.185.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1293/1293_
18.0179497009550.05.305.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1217/1217_
18.08399689593820.04.804.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1225/1225_
18.0771669313540.04.764.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1384/1384_
18.0188178195060.05.985.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1211/1211_
18.0852357227530.05.055.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0360/1248/1248_
18.0770176476570.05.205.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1261/1261_
18.0863556649770.05.175.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDu

0-0360/1143/1143_
18.0848067597790.05.125.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0369/1274/1274W
18.100076493711.45.155.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0360/1131/1131_
18.0830986078300.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1075/1075_
18.0181098384080.04.464.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/1422/1422_
18.2235069319350.05.995.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKcJ3

1-0370/1296/1296_
18.2075117698340.05.265.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-0370/1212/1212_
18.214254629067910.05.025.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/1187/1187_
18.2070706122680.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0370/1054/1054_
18.22302566703520.04.244.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1402/1402_
18.1990067858330.05.925.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0370/1214/1214_
18.2355377703280.05.085.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1057/1057_
18.2235652657857500.04.294.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wmD

1-0370/1197/1197_
18.207736410943630.05.005.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1153/1153_
18.23557695630.04.454.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0370/1385/1385_
18.216054275756970.05.705.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-0370/1254/1254_
18.216508458123470.05.255.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/1149/1149_
18.206744878878530.04.604.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0370/1283/1283_
18.1987458104810.05.245.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1407/1407_
18.1982619715810.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/1198/1198_
18.20810465902170.04.654.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1211/1211_
18.2078655866150.04.974.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1431/1431_
18.2218867799690.06.176.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/1115/1115_
18.2314658813140.04.554.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0370/1205/1205_
18.199934497013160.04.714.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2

Found on 2024-10-19 00:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a94ebb6dac

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 17-Oct-2024 02:51:30 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 5 hours 31 minutes 47 seconds
Server load: 1.04 1.29 1.78
Total accesses: 26421 - Total Traffic: 109.8 MB - Total Duration: 18045797
CPU Usage: u11.03 s8.69 cu0 cs0 - .0186% CPU load
.249 requests/sec - 1083 B/second - 4359 B/request - 683.01 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/537/537_
8.115547144325310.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PEjgc

0-0360/493/493_
8.1616474028760.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/495/495_
8.1071862993730.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0360/556/556_
8.16281122344490.02.432.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/394/394_
8.107414563110500.01.671.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcO0

0-0360/488/488_
8.16219764510890.01.921.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/599/599_
8.116382353660930.02.272.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVJdT%2BMwEPwrkd%2Fz0

0-0360/601/601_
8.12517115049200.02.392.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/503/503_
8.115294495084090.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcml

0-0360/694/694_
8.1541464071710.02.652.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBs

0-0360/529/529_
8.1450104844540.02.242.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/484/484_
8.1168072816240.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/466/466_
8.168061992210.01.981.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/532/532_
8.1448843082740.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1037943160b61

0-0360/530/530_
8.1531810933236750.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/498/498_
8.1625105072720.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/516/516_
8.115852124540550.02.102.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJMGwq

0-0360/643/643_
8.161096024198680.02.872.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/459/459_
8.161949083354420.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJAFCl

0-0360/534/534_
8.144402092817680.02.252.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNNj9owEP0rke%2f5gAa

0-0360/596/596_
8.153847353156480.02.452.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCZLC

0-0360/486/486_
8.1530063335390.02.322.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

0-0360/596/596_
8.16389182812320.02.332.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyW23i

0-0360/459/459_
8.1448162773430.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0360/412/412_
8.1160114519130.01.841.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/619/619_
8.2551814165470.02.642.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/639/639_
8.2549363270950.02.682.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-0370/494/494_
8.264515423699900.01.991.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHLdJu

1-0370/533/533_
8.2560112839340.02.282.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0370/513/513_
8.2640442951370.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b9bcb3c1d2d2f

1-0370/654/654_
8.2821263938660.02.742.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/523/523_
8.282294224217450.02.352.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oDk0

1-0370/388/388_
8.2550203287450.01.621.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0370/515/515_
8.272697106051130.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCG7w

1-0370/468/468_
8.2642762663740.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_21b8ffbfd1eff

1-0370/549/549_
8.2632982140430.02.222.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0370/579/579_
8.2469463458800.02.572.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/519/519_
8.246594444848850.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0370/634/634_
8.281728803114290.02.582.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

1-0370/590/590_
8.289144428750.02.312.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dc4aff3af092c

1-0370/511/511_
8.286262235250.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/436/436_
8.2814962697480.01.771.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

1-0370/615/615_
8.2630663983240.03.043.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/428/428_
8.272624774899970.01.761.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PAUNW

1-0370/500/500_
8.2551813655920.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/597/5

Found on 2024-10-17 02:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a96945e9d9

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 15-Oct-2024 02:13:56 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 4 hours 38 minutes 11 seconds
Server load: 1.27 1.29 1.29
Total accesses: 290509 - Total Traffic: 995.3 MB - Total Duration: 47934740
CPU Usage: u18.9 s15.49 cu62.4 cs41.08 - .0258% CPU load
.543 requests/sec - 1950 B/second - 3592 B/request - 165.003 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-029130/719/5515_
10.324061332011444800.04.0719.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/714/6004_
10.2950309498510.03.8021.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-029130/807/5769_
10.33380010397350.04.3820.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-029130/604/6208_
10.361263110765940.03.0321.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_276a2b5a836d0

0-029130/694/6153_
10.3520549411071070.03.7120.78
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL0j9T9YvudTI

0-029130/740/5416_
10.333451728827220.03.9618.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0jzT9Y3udVw

0-029130/717/6083_
10.39311607794550.03.4219.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5IuGd

0-029130/795/5756_
10.3429747673900.05.1520.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-029130/736/6392_
10.388307244990.04.2822.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-029130/581/5619_
10.33317369252530.02.8618.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/823/6099_
10.32397190879021300.04.0120.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/908/5840_
10.304623279428230.04.3819.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJAFSC

0-029130/881/5578_
10.3523217611339880.04.4018.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTl0

0-029130/870/6118_
10.352232049027910.05.1821.39
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecwX2Y

0-029130/873/5643_
10.38464111158600.04.8519.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/748/5824_
10.37981688874170.03.8619.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec2WBX

0-029130/827/6063_
10.352616811948730.04.1920.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/662/5611_
10.352903982110051900.03.4719.26
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/775/5905_
10.3241318984960.03.8719.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-029130/931/6222_
10.352937508810200.04.6321.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/906/6477_
10.361691979114830.04.5621.85
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5JLS

0-029130/870/5730_
10.31431419700410.04.3919.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/540/5379_
10.391418855000.03.7219.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-029130/668/5611_
10.3528419610071990.03.3818.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78mq4U

0-029130/754/5773_
10.2853118710102600.04.0520.32
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUwKW

1-029610/758/5553_
10.473273969010531690.03.9918.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/783/5663_
10.48242810202240.03.9318.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-029610/781/5860_
10.4730318508330.03.8720.37
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/767/5569_
10.4638519378960.04.1819.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/844/5457_
10.49342037551130.04.4219.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJOQDd

1-029610/697/5763_
10.463954628716920.04.0719.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iTQW

1-029610/715/5393_
10.48267109010363030.03.7318.42
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/741/5936_
10.4344519220540.04.0420.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/673/5971_
10.4639608985070.04.2920.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/791/6213_
10.472903980910905330.03.7420.71
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/870/5654_
10.4732607537200.04.2719.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/819/5652_
10.4964410260980.05.4220.43
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8QgEIX%2FSt94ovS

1-029610/542/5803_
10.482141629021370.02.7318.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7kjg8S

1-029610/687/6033_
10.491181789058620.03.4820.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwX6D8QvOuJB

1-029610/826/5788_
10.473234210045380.04.3320.00
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0296132/613/5466W
10.5100837281153.03.0717.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-029610/872/5430_
10.49152010478590.04.6819.35
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-029610/700/4818_
10.4988111249270.03.9817.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/801/6468_
10.481881799502950.04.4121.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itlt

1-029610/849/6666_
10.4952410114770.04.2222.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2

Found on 2024-10-15 02:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a95ada6a06

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 23:28:03 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 1 hour 52 minutes 17 seconds
Server load: 0.46 0.73 0.90
Total accesses: 201849 - Total Traffic: 616.9 MB - Total Duration: 18458272
CPU Usage: u52.12 s38.37 cu0 cs0 - .0257% CPU load
.573 requests/sec - 1835 B/second - 3204 B/request - 91.4459 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/3635/3635_
41.2852264371910.011.2111.21
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/4153/4153_
41.2936143200370.012.7412.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_564e27308bf84

0-0340/4103/4103_
41.3022343657680.012.8712.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/4488/4488_
41.2946153437090.013.6713.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOC

0-0340/4368/4368_
41.2932973731580.013.4413.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/3920/3920_
41.292823313224180.011.9611.96
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BwgEIX%2FSt94o

0-0340/4402/4402_
41.285094853356980.013.1413.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnetcZGIs

0-0340/4009/4009_
41.2871443744410.011.9111.91
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0340/4399/4399_
41.2861443227410.013.3413.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/4024/4024_
41.2948803184810.012.3312.33
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4333/4333_
41.301943533719280.013.2013.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0340/4090/4090_
41.3111413628040.012.6612.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0340/3689/3689_
41.2940644055940.011.1411.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpS

0-0340/4413/4413_
41.3115003661130.013.3613.36
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/3729/3729_
41.319344003070.011.4411.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

0-0340/4385/4385_
41.2924443267130.013.2713.27
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/4187/4187_
41.2938144165050.012.7612.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/3781/3781_
41.288022304681080.011.7711.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3k00

0-0340/4063/4063_
41.335003829090.012.3412.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4012/4012_
41.3112303974340.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0340/4547/4547_
41.294707424127610.013.9013.90
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0340/3895/3895_
41.286427843824350.011.9511.95
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/3884/3884_
41.28575303772910.011.8111.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_76e67acb68b0e

0-0340/3744/3744_
41.2855933340460.011.2911.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15e82728c25b2

0-0340/3789/3789_
41.2947313869250.012.0312.03
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/3668/3668_
40.3520053366240.011.2511.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7b218aa52e31

1-0350/4265/4265_
40.3266343643790.012.7512.75
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4123/4123_
40.37106463471300.012.7912.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3902/3902_
40.32784432843610.011.8011.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3523/3523_
40.3440063003570.010.8310.83
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-03513/4009/4009W
40.370033643120.912.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/3700/3700_
40.343443223729620.011.4111.41
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4139/4139_
40.3425443356260.012.6012.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzir

1-0350/4460/4460_
40.3437344013550.013.5513.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3979/3979_
40.3431443742520.012.0912.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3802/3802_
40.35243423036500.011.5711.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3946/3946_
40.3615743820710.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/4299/4299_
40.3451673797350.013.1213.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/3987/3987_
40.3356903462760.012.2912.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0350/4044/4044_
40.328173034613880.012.4912.49
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=173&StateId=

1-0350/3966/3966_
40.3447313936490.011.7911.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/3736/3736_
40.3711413839320.011.4511.45
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/3229/3229_
40.3260134406340.010.1110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52f2da9cdf228

1-0350/4740/4740_
40.3283644051790.014.6314.63
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/4611/4611_
40.3443343488550.014.1414.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2

Found on 2024-10-12 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9a5b75903

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 22:40:06 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 1 hour 4 minutes 21 seconds
Server load: 0.79 1.13 1.26
Total accesses: 8942 - Total Traffic: 33.9 MB - Total Duration: 4780335
CPU Usage: u4.67 s4.69 cu0 cs0 - .0053% CPU load
.0506 requests/sec - 201 B/second - 3973 B/request - 534.594 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/202/202_
2.434029791420.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/172/172_
2.443845904700.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzbX

0-0340/170/170_
2.453115918620.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/165/165_
2.4436951034750.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0340/241/241_
2.452690813920.00.840.84
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/192/192_
2.4340311014390.00.720.72
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/199/199_
2.436367713500.00.700.70
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/147/147_
2.43649339912640.00.540.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDehX

0-0340/179/179_
2.435395543840.00.690.69
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/161/161_
2.434865768890.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/164/164_
2.452218584040.00.680.68
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzit

0-0340/206/206_
2.45212361176610.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4c884b1046f8

0-0340/165/165_
2.4521231345600.00.580.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee61f085397d1

0-0340/173/173_
2.4519851023050.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLsb

0-0340/188/188_
2.451693711075780.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/192/192_
2.451085633160.00.730.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBj9owEIX%2FSm4%2BO

0-0340/168/168_
2.45528681160.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/186/186_
2.461561264000.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-03424/175/175W
2.46008983139.20.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/155/155_
2.43907341019620.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/167/167_
2.4388251107240.00.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdTyMhFIb%2FytxxxTA

0-0340/166/166_
2.4380041250330.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0340/159/159_
2.438565709710.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKduA

0-0340/175/175_
2.437403541114210.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTtswFIZfJXe%2Bcpy

0-0340/147/147_
2.4360641530470.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyaL

1-0350/157/157_
2.482493501217010.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcm7

1-0350/168/168_
2.472829532580.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/195/195_
2.473448746420.00.770.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

1-0350/150/150_
2.469095583250.00.570.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/156/156_
2.46829383947320.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/150/150_
2.473760730930.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /.git/config HTTP/1.1

1-0350/145/145_
2.4689991183090.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/177/177_
2.4764271190340.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/157/157_
2.468772221437730.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-0350/145/145_
2.467085880990.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/179/179_
2.476174952480.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/239/239_
2.482071972760.00.940.94
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0350/164/164_
2.467705670920.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0350/196/196_
2.482112600420.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/207/207_
2.4821121650470.00.790.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0350/173/173_
2.4758124301033500.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGBu78

1-0350/175/175_
2.4918981027200.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/152/152_
2.4751343131539510.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWycb

1-0350/220/220_
2.474031771950.00.860.86
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/268/268_
2.4957340679160.01.071.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT%2BQgFIb%2FSu%2B

1-0350/198/198_
2.4738801189560.00.690.69
127.0.0.1http/1.1ip-10-

Found on 2024-10-10 22:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9840245ca

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:52 UTC
Restart Time: Tuesday, 08-Oct-2024 21:42:46 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 29 minutes 6 seconds
Server load: 0.43 0.84 1.07
Total accesses: 1645 - Total Traffic: 6.9 MB - Total Duration: 1111230
CPU Usage: u.91 s.69 cu0 cs0 - .00685% CPU load
.0705 requests/sec - 310 B/second - 4401 B/request - 675.52 ms/request
2 requests currently being processed, 48 idle workers
_____________________K_________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/39/39_
0.4613444692830.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/19/19_
0.45138742735650.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNtxq

0-0370/20/20_
0.461286870900.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0370/39/39_
0.4612054262660.00.200.20
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8657d40d5d437

0-0370/44/44_
0.461138218274530.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0370/50/50_
0.46868404793600.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfM%

0-0370/36/36_
0.461051240231570.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/22/22_
0.46961203129880.00.070.07
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/33/33_
0.467864206670.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24b9a4926b35e

0-0370/24/24_
0.4663811296040.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0370/43/43_
0.46714547130.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbd60c7d65ebb

0-0370/34/34_
0.465850420610.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0370/28/28_
0.465492171510.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a42a5c1f51fd5

0-0370/25/25_
0.474574429060.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/24/24_
0.4738758353340.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XX

0-0370/24/24_
0.4728036945900.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLtNg

0-0370/32/32_
0.47224332630.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0370/36/36_
0.47183424175770.00.180.18
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0370/38/38_
0.471236135580.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/48/48_
0.475974154490.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/30/30_
0.47113858550.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0373/35/35K
0.4700114533.20.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /config.json HTTP/1.1

0-0370/34/34_
0.45157216379470.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/22/22_
0.4515222174400.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c102bb42e6bb0

0-0370/21/21_
0.4514286348080.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/27/27_
0.48130143448530.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/47/47_
0.481376371010.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/35/35_
0.48141812127880.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0380/27/27_
0.48147681065640.00.220.22
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/41/41_
0.4812544242480.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0380/27/27_
0.48117341235870.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0380/39/39_
0.481099215184240.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71l

1-0380/25/25_
0.4899731107790.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

1-0380/34/34_
0.4890628477510.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/40/40_
0.4883932512950.00.170.17
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0380/25/25_
0.4966241103280.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/24/24_
0.497543277520.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0380/28/28_
0.496314303040.00.130.13
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-0380/21/21_
0.495771278193030.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXdJjO14I

1-0380/51/51_
0.495033387175750.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0380/25/25_
0.494165107070.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_744c0d02a84f9

1-0380/38/38_
0.493360200250.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0380/27/27_
0.492574145730.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2daa0148e5209

1-0380/36/36_
0.492001154470.00.140.14
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0380/28/28_
0.49157769320.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0380/37/37_
0.4986427166590.00.150.15
127.0.0.1http/

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a93327da7a

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:50 UTC
Restart Time: Monday, 09-Sep-2024 06:19:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 52 minutes 21 seconds
Server load: 1.56 2.14 2.47
Total accesses: 1031205 - Total Traffic: 3.9 GB - Total Duration: 292096829
CPU Usage: u29.41 s45.98 cu294.73 cs165.4 - .0207% CPU load
.399 requests/sec - 1613 B/second - 4043 B/request - 283.258 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/420/19095_
6.4575142355305020.01.5971.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/408/20079_
6.46476556390920.01.7374.47
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0716e312c8dc4

0-065990/429/20016_
6.456701310654956340.01.6475.31
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEN0L5D8Q3CXRR

0-065990/434/18062_
6.4640624751710050.02.3970.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PKChg

0-065990/405/20112_
6.45943553380780.01.7074.39
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7568d4336e259

0-065990/524/18256_
6.46657747996200.02.2268.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/483/18811_
6.46628448879140.02.3070.76
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4953280e84e3

0-065990/499/17590_
6.46549955687790.01.9766.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_5951107b30816fcbc

0-065990/476/19674_
6.46582052063230.02.0073.26
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/437/18833_
6.471975555555080.02.2272.53
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/416/18770_
6.47331749291090.01.9171.33
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c827b5df88de6

0-065990/546/18411_
6.47247653123860.02.3369.54
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKdp2

0-065990/544/18929_
6.471513346849140.02.1468.67
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/432/18013_
6.47832847927120.01.9966.34
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/614/19865_
6.451405449421060.03.0573.87
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3e52884237cb

0-065990/564/19508_
6.472621353153460.02.3972.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-065990/500/20311_
6.451455549489850.02.1576.93
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c375feffbc8d2

0-065990/425/19051_
6.45136423650356710.01.9671.96
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW93m

0-065990/460/19827_
6.45133636752959070.01.9675.18
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/479/18165_
6.45124542752894090.02.2169.56
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/546/18974_
6.4512864552667160.02.4671.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/600/18594_
6.45111335049468150.02.5470.66
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-065990/440/18368_
6.451171151956680.01.9969.17
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-065990/430/18392_
6.45102433251846630.01.6469.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-065990/490/18726_
6.45860648043580.02.1070.92
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_371172ee691e0

1-0136090/267/18433_
3.6589436745303850.01.2969.60
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0136090/307/19043_
3.64992747371320.01.3171.00
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/262/19285_
3.641161448806150.01.0972.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59e4b17f70bab

1-0136090/281/17442_
3.6582542048351730.01.3966.25
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/227/17884_
3.641082654912920.00.8765.48
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0136090/234/17985_
3.641293750179140.00.9367.57
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/243/17514_
3.65672647102950.00.9868.45
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0136090/429/17621_
3.655871441647806360.01.6366.21
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/254/16730_
3.6563549853025170.01.0663.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136090/253/18464_
3.65719950471000.01.3369.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/244/18873_
3.65448293847187290.01.0570.98
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/243/17903_
3.65572650608040.01.0369.38
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/257/18727_
3.65513358250158320.01.0971.73
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/249/18712_
3.6526564647980600.01.0069.88
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

1-0136090/280/17740_
3.65209750459770.01.1365.72
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumW

1-0136090/245/18111_
3.6536927847729870.00.9867.43
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/250/20063_
3.659240448725900.01.1375.61
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/303/19236_
3.65170447616490.01.2874.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09ca8a5cac1cb

1-0136090/286/20016_
3.64141779548104140.01.1574.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a92c6a04e4

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:49 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 36 minutes 4 seconds
Server load: 1.05 1.14 1.27
Total accesses: 1632 - Total Traffic: 6.7 MB - Total Duration: 1168667
CPU Usage: u.78 s.79 cu0 cs0 - .00661% CPU load
.0687 requests/sec - 296 B/second - 4311 B/request - 716.095 ms/request
2 requests currently being processed, 48 idle workers
_______________K____________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/36/36_
0.4655711571308570.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKchB

0-0340/34/34_
0.4651263191730.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

0-0340/40/40_
0.463401088200680.00.190.19
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/32/32_
0.4641752218280.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzb7

0-0340/40/40_
0.46288548430.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/28/28_
0.465820132640.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0340/27/27_
0.45928338118330.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/18/18_
0.458554042220.00.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/34/34_
0.4568310693400.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/33/33_
0.46635818390.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/28/28_
0.4623422258540.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0340/37/37_
0.461544487170.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/26/26_
0.4685411512890.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0340/32/32_
0.46571103370.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0340/32/32_
0.46103088610.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cHEAD /saml2/idp/metadata.php HTTP/1.1

0-0343/23/23K
0.470029387.40.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/36/36_
0.441416119106730.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_daa053c3b7ff6

0-0340/44/44_
0.44137346405470.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/23/23_
0.4413418102570.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/24/24_
0.4412868387380.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/35/35_
0.4412305332410.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-0340/39/39_
0.4511704670990.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0340/28/28_
0.4511024253730.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9c9130d94597

0-0340/26/26_
0.4510245160770.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_faef4587504c8

0-0340/27/27_
0.45751230890120.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0350/29/29_
0.482553891120.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/23/23_
0.473330102750.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0350/57/57_
0.4739210282310.00.280.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/22/22_
0.4613353105780.00.070.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3077a9b850d5

1-0350/32/32_
0.4611366522350.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/30/30_
0.474681892111380.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

1-0350/33/33_
0.4612595406900.00.150.15
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0350/47/47_
0.468725600520.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0350/23/23_
0.461194256248540.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/21/21_
0.46989388184800.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.46813314210450.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBl

1-0350/38/38_
0.481969108770.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/41/41_
0.461058566291660.00.230.23
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.481264200870.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06ad13838ad68

1-0350/25/25_
0.48654167460.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_535c4fb62e15a

1-0350/29/29_
0.467175493900.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKf

1-0350/34/34_
0.4831496070.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c62949131ffe5

1-0350/26/26_
0.4664321683832020.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0350/23/23_
0.46609248228920.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-03521/79/79W
0.48001184232.20.270.27
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/43/43_
0.4656511616311910.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOServ

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31847a78a9847a78a9db17e0fc

Apache Status

Apache Server Status for trlismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:49 UTC
Restart Time: Monday, 09-Sep-2024 06:19:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 52 minutes 20 seconds
Server load: 1.56 2.14 2.47
Total accesses: 1031198 - Total Traffic: 3.9 GB - Total Duration: 292096825
CPU Usage: u29.41 s45.98 cu294.73 cs165.4 - .0207% CPU load
.399 requests/sec - 1613 B/second - 4043 B/request - 283.26 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/420/19095_
6.4575142355305020.01.5971.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/408/20079_
6.46475556390920.01.7374.47
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0716e312c8dc4

0-065990/429/20016_
6.456701310654956340.01.6475.31
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEN0L5D8Q3CXRR

0-065990/434/18062_
6.4640524751710050.02.3970.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PKChg

0-065990/405/20112_
6.45942553380780.01.7074.39
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7568d4336e259

0-065990/524/18256_
6.46656747996200.02.2268.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/483/18811_
6.46627448879140.02.3070.76
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4953280e84e3

0-065990/499/17590_
6.46549955687790.01.9766.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_5951107b30816fcbc

0-065990/476/19674_
6.46581052063230.02.0073.26
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/437/18833_
6.471965555555080.02.2272.53
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/416/18770_
6.47331749291090.01.9171.33
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c827b5df88de6

0-065990/546/18411_
6.47246653123860.02.3369.54
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKdp2

0-065990/544/18929_
6.471513346849140.02.1468.67
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/432/18013_
6.47822847927120.01.9966.34
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/614/19865_
6.451404449421060.03.0573.87
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3e52884237cb

0-065990/564/19508_
6.472521353153460.02.3972.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-065990/500/20311_
6.451454549489850.02.1576.93
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c375feffbc8d2

0-065990/425/19051_
6.45136323650356710.01.9671.96
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW93m

0-065990/460/19827_
6.45133636752959070.01.9675.18
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/479/18165_
6.45124442752894090.02.2169.56
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/546/18974_
6.4512854552667160.02.4671.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/600/18594_
6.45111335049468150.02.5470.66
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-065990/440/18368_
6.451170151956680.01.9969.17
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-065990/430/18392_
6.45102433251846630.01.6469.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-065990/490/18726_
6.45859648043580.02.1070.92
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_371172ee691e0

1-0136090/267/18433_
3.6589336745303850.01.2969.60
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0136090/307/19043_
3.64991747371320.01.3171.00
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/262/19285_
3.641161448806150.01.0972.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59e4b17f70bab

1-0136090/281/17442_
3.6582442048351730.01.3966.25
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/227/17884_
3.641081654912920.00.8765.48
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0136090/234/17985_
3.641292750179140.00.9367.57
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/243/17514_
3.65671647102950.00.9868.45
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0136090/429/17621_
3.655861441647806360.01.6366.21
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/254/16730_
3.6563449853025170.01.0663.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136090/253/18464_
3.65718950471000.01.3369.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/244/18873_
3.65447293847187290.01.0570.98
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/243/17903_
3.65571650608040.01.0369.38
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/257/18727_
3.65512358250158320.01.0971.73
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/249/18712_
3.6526464647980600.01.0069.88
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

1-0136090/280/17740_
3.65208750459770.01.1365.72
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumW

1-0136090/245/18111_
3.6536827847729870.00.9867.43
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/250/20063_
3.659140448725900.01.1375.61
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/303/19236_
3.65170447616490.01.2874.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09ca8a5cac1cb

1-0136090/286/20016_
3.64141679548104140.01.1574.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxsxEL0j8

Found on 2024-10-09 04:11

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.58
Domain: trinitylismore-login.cloudworkengine.net
Port: 443
URL: https://trinitylismore-login.cloudworkengine.net

First seen 2024-10-09 04:11
Last seen 2025-12-20 05:33
Open for 437 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12abe6861c

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Dec-2025 05:33:55 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 22 hours 51 minutes 50 seconds
Server load: 0.45 0.88 0.91
Total accesses: 127814 - Total Traffic: 442.3 MB - Total Duration: 14081858
CPU Usage: u3.58 s4.77 cu29.37 cs17.45 - .0162% CPU load
.374 requests/sec - 1358 B/second - 3628 B/request - 110.175 ms/request
1 requests currently being processed, 49 idle workers
_______W__________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0134560/42/2281_
0.3027342551890.00.157.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0134560/30/2635_
0.304002902720.00.119.05
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0134560/27/2289_
0.3076382737840.00.098.03
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=block.stac

0-0134560/28/2422_
0.309090922646590.00.098.89
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0134560/31/2620_
0.3015243315570.00.168.81
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0134560/23/2617_
0.2918263435980.00.109.10
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/51/2489_
0.2352743086650.00.198.75
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT8MgFMe%2FSm%2BcK

0-01345628/56/2749W
0.310030823741.50.139.72
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0134560/38/2384_
0.24497372581740.00.248.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/29/2794_
0.24478383334050.00.0810.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/32/2298_
0.24456372438820.00.168.44
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/49/2639_
0.2542412436720.00.269.10
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0134560/27/2887_
0.26414332998430.00.119.87
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=tammyrcurr

0-0134560/25/2407_
0.2640043005880.00.098.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0134560/26/2389_
0.26384372432500.00.098.54
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/24/3346_
0.2736263311800.00.0711.69
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0134560/30/2465_
0.2636413284030.00.138.23
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0134560/56/2638_
0.28287393569340.00.208.72
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0134560/46/2686_
0.2832762570040.00.169.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0134560/36/3079_
0.2827942609080.00.1510.46
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0134560/24/2525_
0.29257472991940.00.118.75
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=block.stac

0-0134560/30/2800_
0.2923432468570.00.129.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0134560/33/2597_
0.292342612325230.00.139.39
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCRbW

0-0134560/17/2415_
0.2921482383770.00.058.47
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0134560/27/3066_
0.2923412980420.00.1710.80
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0134920/33/2963_
0.20269323620670.00.1110.24
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=block.stac

1-0134920/21/2464_
0.2024262179210.00.078.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0134920/39/2585_
0.2123302611360.00.269.04
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0134920/18/2981_
0.202342582508940.00.0710.05
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCSQL

1-0134920/15/2357_
0.22188793133910.00.048.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/check.php?code=4186929115&username=

1-0134920/38/2519_
0.222261682424050.00.158.56
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0134920/21/2614_
0.2036402949050.00.078.83
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0134920/20/2421_
0.203692092736460.00.078.39
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0134920/23/2669_
0.20345542514280.00.088.91
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/check.php?code=4186929115&username=

1-0134920/14/2578_
0.2031142929970.00.079.00
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0134920/21/2423_
0.2032772595030.00.108.45
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0134920/48/2413_
0.2215242406840.00.158.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0134920/29/2067_
0.22109352742040.00.087.17
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0134920/25/2654_
0.239262393190.00.089.16
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0134920/27/2211_
0.236262593460.00.097.74
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0134920/22/2355_
0.2327342719730.00.108.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0134920/26/2355_
0.2327322881710.00.088.20
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0134920/26/2188_
0.23202021770.00.147.47
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /actuator/env HTTP/1.1

1-0134920/22/2575_
0.2051963253400.00.078.77
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0134920/15/2773_
0.2048942386690.00.079.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0134920/38/2361_
0.20</

Found on 2025-12-20 05:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12537a3e3d

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 07:48:48 UTC
Restart Time: Tuesday, 16-Dec-2025 06:42:05 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 1 hour 6 minutes 43 seconds
Server load: 1.40 0.96 0.89
Total accesses: 100709 - Total Traffic: 343.9 MB - Total Duration: 10362608
CPU Usage: u24.55 s16.21 cu0 cs0 - .0231% CPU load
.57 requests/sec - 2039 B/second - 3580 B/request - 102.897 ms/request
1 requests currently being processed, 49 idle workers
___________________W______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0330/1728/1728_
18.9553571995410.06.006.00
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2027/2027_
18.9535582117210.06.936.93
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1724/1724_
18.9541571955870.05.955.95
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1822/1822_
18.9761481469160.06.506.50
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0330/2045/2045_
18.955571302600090.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnctVuJFh

0-0330/2050/2050_
18.9624852731440.07.207.20
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduQ

0-0330/1872/1872_
18.95345362308300.06.416.41
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2220/2220_
18.9617572393890.07.947.94
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/1903/1903_
18.95290401842370.06.326.32
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0330/2233/2233_
18.9621882401760.07.687.68
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0330/1769/1769_
18.9460871702120.06.076.07
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0330/2124/2124_
18.96142351965830.07.217.21
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2276/2276_
18.9620762060220.07.737.73
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUhE6

0-0330/1858/1858_
18.95576452119670.06.296.29
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0330/1886/1886_
18.9788441842510.06.766.76
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0330/2817/2817_
18.953271672587350.09.719.71
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0330/1925/1925_
18.9547572553210.06.236.23
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2067/2067_
18.9465562320100.06.726.72
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0330/2076/2076_
18.9550291801130.07.207.20
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/loginuserpass.php HTTP/1.1

0-03327/2506/2506W
18.970021425838.18.448.44
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /server-status HTTP/1.1

0-0330/1912/1912_
18.946351542012490.06.606.60
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNNb9swDP0rgu621SxeU

0-0330/2250/2250_
18.95398111898060.07.627.62
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0330/2026/2026_
18.9745101713220.07.247.24
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/1846/1846_
18.9745111515470.06.366.36
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0330/2595/2595_
18.9611572529830.08.998.99
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2390/2390_
17.7236752587060.08.198.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RU

1-0340/1926/1926_
17.7315791746310.06.456.45
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

1-0340/2058/2058_
17.7438101851170.07.067.06
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0340/2450/2450_
17.731875561931850.08.198.19
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99Kh0

1-0340/1940/1940_
17.744582478360.06.556.55
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/2007/2007_
17.7468322050690.06.746.74
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0340/2140/2140_
17.74802268680.07.207.20
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /v2/api-docs HTTP/1.1

1-0340/1871/1871_
17.7320741950700.06.466.46
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0340/2115/2115_
17.7259571781200.07.007.00
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2035/2035_
17.7230662118550.07.097.09
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0340/1951/1951_
17.745571655250.06.676.67
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/1901/1901_
17.72345231648470.06.586.58
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/1529/1529_
17.7223572077700.05.155.15
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0340/2125/2125_
17.7264561687290.07.337.33
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/1703/1703_
17.74972151973750.05.905.90
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKEr

1-0340/1899/1899_
17.72345541921400.06.306.30
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0340/1872/1872_
17.7261302257370.06.506.50
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0340/1618/1618_
17.73127421478510.05.425.42
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0340/2056/2056_
17.725181772612680.06.926.92
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0340/2067/2067_
17.7256501617860.06.986.98
127.0.0.1http/1.1ip-10-1-111-196.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0340/1884/1884_
17.724061912130740.06.476.47
127.0.0.1http/1.1

Found on 2025-12-18 07:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12446a2762

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 05:22:31 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  49 days 8 hours 11 minutes 46 seconds
Server load: 0.15 0.40 0.60
Total accesses: 1843656 - Total Traffic: 7.0 GB - Total Duration: 462337336
CPU Usage: u88.34 s104.73 cu465.89 cs290.5 - .0223% CPU load
.432 requests/sec - 1772 B/second - 4098 B/request - 250.772 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069670/3657/34585_
36.96292782630720.012.21133.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-069670/2755/32575_
36.90548185196310.09.25127.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-069670/3687/32826_
37.001424882039130.012.30126.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069670/3863/35012_
36.934079083937800.012.55136.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

0-069670/4126/34732_
36.94371482589660.013.52133.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-069670/3785/34162_
36.9058737187030270.012.31134.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpQ

0-069670/3353/35218_
36.9819337783676840.010.93137.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGOM01

0-069670/3787/35246_
36.982444685817460.012.71137.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069670/2879/32409_
36.98201481631850.09.38127.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-069670/3440/35624_
36.9533439387520640.011.46137.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNNbxoxEP0rlu%2f7AQ0

0-069670/3516/35371_
37.032721689257810.011.62136.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQky

0-069670/3280/33888_
36.96302085777460.010.78131.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-069670/3438/35048_
36.8863616086148560.011.16136.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu9JSICCL

0-069670/3781/34661_
36.90538489624800.012.21134.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-069670/3311/33589_
36.9535228181609940.010.92131.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9MwEP4rlu9J2vRBa

0-069670/3583/35315_
37.0091486887340.011.74136.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-069670/3624/35028_
36.90565483798330.011.89136.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-069670/3377/34094_
36.98236181311860.011.21133.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-069670/3970/33899_
36.90592883098200.012.95130.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-069670/3972/34326_
36.90511585485420.012.56133.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDchu

0-069670/3459/34876_
36.93429593355550.011.74138.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-069670/3696/35058_
36.93460478429390.012.78134.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-069670/3220/33630_
37.032084258770.010.39131.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /actuator/env HTTP/1.1

0-069670/3182/33453_
36.93445187234420.010.32130.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-069670/4100/34724_
36.93435184087632500.013.10135.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0286900/4440/28777_
42.03491468133830.014.84111.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0286900/3594/28354_
42.02536070980020.011.89109.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-02869031/3575/28120W
42.1200731557453.411.85108.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0286900/3922/27721_
42.10157469662100.013.22107.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0286900/3953/28009_
42.025384169882880.012.87107.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286900/4048/28391_
42.0252743471459280.013.33110.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0286900/4237/29606_
42.0062716271085330.013.98114.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJDg8o

1-0286900/3641/27977_
42.053452674460530.012.10108.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

1-0286900/4034/28594_
42.09210074764400.013.58111.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/script.js HTTP/1.1

1-0286900/3777/28606_
42.0443537761373380.012.55112.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0286900/3944/28277_
42.07266372620030.013.20109.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3e474b343c6c6

1-0286900/3390/27971_
42.04418073733180.011.32109.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /robots.txt HTTP/1.1

1-0286900/4108/28580_
42.09218668854990.014.06110.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0286900/4031/30413_
42.05376172244660.013.82119.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0286900/4252/29098_
42.1077476214760.014.59112.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0286900/4016/28533_
42.00647466796840.013.41111.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0286900/3716/28645_
42.05310068330630.012.45110.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286900/3814/28474_
42.10128469806900.013.13111.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0286900/3506/28813_
42.06281169279420.011.66109.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0286900/4595/29393_
42.

Found on 2025-12-16 05:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b128b901483

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 14-Dec-2025 04:24:28 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 7 hours 13 minutes 42 seconds
Server load: 0.94 0.75 0.70
Total accesses: 1645263 - Total Traffic: 6.4 GB - Total Duration: 441622641
CPU Usage: u58.23 s80.89 cu444.87 cs276.42 - .0211% CPU load
.403 requests/sec - 1678 B/second - 4169 B/request - 268.421 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/1145/30481_
14.25610204676942740.04.31119.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0291810/1130/29318_
14.25547681239360.04.19116.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchR

0-0291810/1023/28860_
14.23886977635850.03.82113.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0291810/1260/30690_
14.25513880114890.05.25122.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lg

0-0291810/1107/30287_
14.23858177063580.04.17118.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0291810/1251/30051_
14.22995782873490.04.87120.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1068/31518_
14.27104579583960.04.08124.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0291810/970/31123_
14.271081745580.03.76123.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server HTTP/1.1

0-0291810/1134/29158_
14.24732878449020.04.29116.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1442/31774_
14.23847683400040.05.68124.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpK

0-0291810/1451/31544_
14.23817784629330.05.64124.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0291810/1016/30181_
14.25275980637700.03.57118.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1340/31279_
14.25572082248180.05.52124.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291810/1028/30618_
14.24630885275760.03.98121.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1246/29895_
14.25335877974510.04.98118.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1381/31318_
14.25449582842540.05.66123.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpu

0-0291810/1141/31079_
14.25155880376140.04.50123.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1163/30268_
14.2795877156630.04.92120.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/992/29567_
14.25395880075890.03.92116.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1434/30068_
14.24755881335940.05.37119.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1200/31055_
14.23919088001350.05.06125.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291810/1333/31044_
14.2296739874851460.05.36120.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

0-0291810/1009/29871_
14.25215780477760.03.81118.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/1166/29840_
14.2730783345710.04.35118.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/1217/30245_
14.24695983855770.04.69120.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1234/24304_
15.88875764362730.04.4496.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1371/24738_
15.903671168138830.05.1597.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHa

1-0249080/1379/24520_
15.881027568485180.04.9296.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

1-0249080/1498/23761_
15.889874566112220.05.7994.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/1197/24028_
15.90305965497660.04.6394.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0249080/1541/24303_
15.88950067598430.05.6597.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/ssoservice.php?redacted HTTP/1.1

1-0249080/1223/25344_
15.9017540968204850.04.58100.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-02490828/1303/24286W
15.9100688177243.14.8696.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0249080/1457/24535_
15.887872969274040.05.2698.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDs

1-0249080/1542/24783_
15.88815857375320.05.9899.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1266/24306_
15.896243668221950.05.3495.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3527470cb4d9a

1-0249080/1302/24549_
15.90127569453260.05.4097.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0249080/1375/24463_
15.90107564809440.05.3796.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTA7

1-0249080/1253/26358_
15.88908567291410.05.02105.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0249080/1466/24809_
15.904883169795260.05.7697.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1323/24500_
15.887394962955010.05.3197.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/1398/24906_
15.897253264763930.05.1097.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0249080/1298/24638_
15.8966737666210070.05.0297.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0249080/1243/25277_
15.9024642665600340.04.6598.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/1264/24750_
15.8960240264134170.04.7398.82

Found on 2025-12-14 04:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1208cc0e8f

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 19:58:27 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 22 hours 47 minutes 42 seconds
Server load: 0.67 0.89 0.95
Total accesses: 1624805 - Total Traffic: 6.3 GB - Total Duration: 437167172
CPU Usage: u51.67 s74.97 cu444.87 cs276.42 - .0214% CPU load
.409 requests/sec - 1707 B/second - 4172 B/request - 269.058 ms/request
1 requests currently being processed, 49 idle workers
_______________________________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/731/30067_
9.52744975821040.02.52117.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/804/28992_
9.54444880458410.03.00115.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWxiL

0-0291810/692/28529_
9.52594577112230.02.60112.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUba6b

0-0291810/869/30299_
9.5256145479221620.03.28120.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtowFIZfJXe%2Bckx

0-0291810/747/29927_
9.52685576094700.02.82117.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291810/849/29649_
9.52694781929390.03.19118.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/680/31130_
9.54269878937920.02.53123.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/650/30803_
9.5534780902470.02.60122.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/667/28691_
9.5594077463420.02.75114.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

0-0291810/952/31284_
9.52814982794490.04.01122.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/972/31065_
9.52634783816180.03.60122.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/647/29812_
9.54334779527220.02.13117.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/947/30886_
9.52528081222310.04.09122.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0291810/621/30211_
9.558220084565250.02.41119.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeSUi4Z

0-0291810/768/29417_
9.54381577142140.03.14117.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0291810/1025/30962_
9.544554781983160.04.27121.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/761/30699_
9.54394779319850.03.06122.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/741/29846_
9.5438817175821180.02.79118.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCFl2

0-0291810/607/29182_
9.524965679304140.02.39114.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291810/773/29407_
9.55154779915940.03.24117.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/744/30599_
9.54234787237530.03.15123.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWwnX

0-0291810/899/30610_
9.5520341373899030.03.73119.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/664/29526_
9.54294579525890.02.58117.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/820/29494_
9.5511241182627050.03.13117.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/778/29806_
9.52773782818780.03.11119.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgFIX%2Fit94wsR

1-0249080/771/23841_
11.4089863436180.02.9294.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/977/24344_
11.4089967290920.03.6196.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/905/24046_
11.30711227367884850.03.3395.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0249080/1049/23312_
11.307541065397090.04.0992.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/817/23648_
11.40144764513590.03.0892.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWynz

1-0249080/1053/23815_
11.30654966820320.04.0595.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-02490826/848/24969W
11.4100677048732.93.1598.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0249080/976/23959_
11.35507167828320.03.7494.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0249080/975/24053_
11.30574768309620.03.6496.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/1144/24385_
11.364953356438820.04.4997.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_928ca201ac83e

1-0249080/877/23917_
11.39389867095750.03.8394.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/982/24229_
11.394734368585080.04.2496.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/923/24011_
11.3062351163748430.03.7695.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0249080/797/25902_
11.30689966633380.03.27104.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1111/24454_
11.39389669012570.04.2895.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/831/24008_
11.3941341361852480.03.5095.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/965/24473_
11.394544564042990.03.6496.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0249080/905/24245_
11.40284765028650.03.5896.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0249080/890/24924_
11.40214864703980.03.3596.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/908/24394_
11.39315763308130.03.3897.47
127.0.0.1<

Found on 2025-12-12 19:58

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12db65e38f

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 17:41:30 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 20 hours 30 minutes 45 seconds
Server load: 0.66 0.90 1.06
Total accesses: 1623661 - Total Traffic: 6.3 GB - Total Duration: 436971697
CPU Usage: u51.23 s74.63 cu444.87 cs276.42 - .0214% CPU load
.41 requests/sec - 1710 B/second - 4172 B/request - 269.127 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291810/718/30054_
9.31327675773360.02.48117.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKdJC

0-0291810/787/28975_
9.29866680447200.02.96115.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdZu1

0-0291810/674/28511_
9.312073877092670.02.51112.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/841/30271_
9.31157779193050.03.16120.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/732/29912_
9.312733776085030.02.78116.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/836/29636_
9.312732981905630.03.15118.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/668/31118_
9.30665213478914900.02.48123.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8351ede3cb0d8

0-0291810/633/30786_
9.31477680882040.02.55122.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/649/28673_
9.31517977417180.02.69114.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/938/31270_
9.3134342982701730.03.96122.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWon2

0-0291810/930/31023_
9.31237683759010.03.45121.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/629/29794_
9.30732579508980.02.08117.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0291810/932/30871_
9.319538281211890.04.01122.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0291810/600/30190_
9.31448584493700.02.33119.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdbWO

0-0291810/755/29404_
9.29757777120340.03.10117.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/984/30921_
9.322737981962430.04.09121.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291810/738/30676_
9.29817879307440.02.99121.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/725/29830_
9.2977340475782530.02.74118.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291810/585/29160_
9.3150679283140.02.23114.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8QgEIX%2FSt94ovT

0-0291810/753/29387_
9.31573679838340.03.19117.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291810/716/30571_
9.30637887108150.03.06123.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291810/874/30585_
9.30595673803160.03.64119.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcJu

0-0291810/648/29510_
9.30693579500280.02.54117.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0291810/806/29480_
9.31564114482548840.03.09117.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0291810/764/29792_
9.31397782761890.03.07119.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/757/23827_
11.0849862863434270.02.8994.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTsMwEIRfJTefHLdJg

1-0249080/955/24322_
11.08535667262810.03.5596.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/892/24033_
11.09298667821150.03.2995.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0249080/1034/23297_
11.09337765373240.04.0492.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/799/23630_
11.08573664480330.03.0392.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1020/23782_
11.0926738166803330.03.9595.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWJnj

1-0249080/812/24933_
11.0841742267692550.03.0998.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0249080/961/23944_
11.09573367809280.03.6694.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJt

1-0249080/949/24027_
11.091475068290380.03.5096.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLH3

1-0249080/1026/24267_
11.0917438056351300.03.8297.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/853/23893_
11.078031267067910.03.7094.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGJskj

1-0249080/911/24158_
11.0937868537030.03.8495.95
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/903/23991_
11.09217863726380.03.6795.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0249080/781/25886_
11.092733166614470.03.22103.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0249080/1094/24437_
11.07744568989320.04.2295.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcpo

1-02490825/802/23979W
11.1000618172729.63.4495.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0249080/950/24458_
11.0783541264030170.03.6096.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0249080/887/24227_
11.07687565005330.03.5296.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94oqy

1-0249080/869/24903_
11.08626159064668550.03.2996.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0249080/889/243

Found on 2025-12-12 17:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12ff7e59dc

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 01-Dec-2025 01:10:17 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  34 days 3 hours 59 minutes 32 seconds
Server load: 0.49 1.07 1.17
Total accesses: 1061463 - Total Traffic: 4.3 GB - Total Duration: 330212243
CPU Usage: u41.39 s55.27 cu289.65 cs174.19 - .019% CPU load
.36 requests/sec - 1557 B/second - 4331 B/request - 311.092 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
_____W_____.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/1639/19238_
18.28462555089460.06.2478.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/1435/18028_
18.26178057282880.05.9474.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-056400/1551/17927_
18.164051991755471100.06.7473.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1755/19779_
18.17318253257973820.07.2080.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1384/18310_
18.284059407940.05.6774.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /v3/api-docs HTTP/1.1

0-056400/1354/18164_
18.182506054958978320.05.8076.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1654/19140_
18.286316156582300.06.4379.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iqoY

0-056400/1470/19144_
18.16337159703090.06.2979.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-056400/1645/17839_
18.18280057802670.06.8273.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-056400/1560/19569_
18.18304151460736090.06.4780.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1627/18625_
18.182432961090580.06.7177.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9531e97693eea

0-056400/1571/18562_
18.18303150157579550.06.4575.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1547/18884_
18.182939957500260.06.4378.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1632/18548_
18.211862764158590.06.3476.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1654/18566_
18.18304132056739000.06.6976.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1542/19220_
18.27114059410450.06.1278.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-056400/1471/19483_
18.278212560930720.05.5981.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1714/18829_
18.2826157126760.07.2678.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-056400/1566/18173_
18.164051896459737030.06.0374.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/1575/18703_
18.261554260664240.06.6277.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1636/18725_
18.18264663815700.06.7278.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/1378/19087_
18.192304052441620.05.5176.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/1501/18469_
18.1641215855353000.06.1576.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCR8L

0-056400/1656/19126_
18.1637916662242850.07.4379.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BfI

0-056400/1559/18805_
18.1635618562617460.06.0477.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUjKh

1-0-0/0/15950.
0.006823451227500.00.0066.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDspZ

1-0-0/0/15849.
0.006823653996500.00.0067.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/15860.
0.00682336454763030.00.0067.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCRA3

1-0-0/0/14863.
0.006823161050000620.00.0063.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15656.
0.006823050344840.00.0064.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15753.
0.006823051820140.00.0067.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15908.
0.006823453901850.00.0067.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0-0/0/16061.
0.00682374054311010.00.0067.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15627.
0.006823153358930.00.0067.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/15622.
0.006823143314310.00.0066.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/15359.
0.006823052574000.00.0063.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15461.
0.006823055903900.00.0065.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/15562.
0.006823650438500.00.0065.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16546.
0.006823454160340.00.0071.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcJL

1-0-0/0/15843.
0.00682375555612390.00.0066.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/15980.
0.006823149423390.00.0067.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/15802.
0.00682317950204960.00.0065.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL0j8R8i3%2

1-0-0/0/15806.
0.0068233952434090.00.0066.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/16408.
0.006823551390660.00.0067.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0-0/0/16120.
0.006823750975730.00.0068.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/16532.
0.0068233357384500.00.0068.25
127.0.0.1</

Found on 2025-12-01 01:09

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1297c722ab

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 28-Nov-2025 22:36:08 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  32 days 1 hour 25 minutes 23 seconds
Server load: 2.87 2.00 1.53
Total accesses: 1014017 - Total Traffic: 4.1 GB - Total Duration: 313773620
CPU Usage: u37.95 s51.4 cu277.87 cs166.62 - .0193% CPU load
.366 requests/sec - 1588 B/second - 4339 B/request - 309.436 ms/request
1 requests currently being processed, 49 idle workers
____W_____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-056400/612/18211_
7.141094051867480.02.5974.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9cd9c41266cf7

0-056400/521/17114_
7.13222754792770.01.9170.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-056400/634/17010_
7.14683152412590.02.6969.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a6d3feb0c9807

0-056400/715/18739_
7.12682054805230.03.4077.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0564032/645/17571W
7.1500575120757.02.9471.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-056400/406/17216_
7.12400354089530.01.7972.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XV

0-056400/637/18123_
7.12568053922780.02.7675.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-056400/613/18287_
7.12621456720200.02.6476.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lh

0-056400/627/16821_
7.1258939354054380.02.6969.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-056400/679/18688_
7.12494357748550.02.8876.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZNlys

0-056400/597/17595_
7.12561455804620.02.6773.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDduK

0-056400/689/17680_
7.13286233954500540.03.1872.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/533/17870_
7.1251839753119640.02.3474.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDeml

0-056400/552/17468_
7.124242860219970.02.3372.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-056400/556/17468_
7.12470452871900.02.3272.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHBOX%

0-056400/455/18133_
7.12375555938530.01.9374.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/560/18572_
7.13240971757343090.02.3378.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/662/17777_
7.13141453427950.03.0874.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWKcT

0-056400/680/17287_
7.13195556656260.02.5471.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-056400/626/17754_
7.132132796657523460.02.6373.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/558/17647_
7.1234524159546690.02.5274.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-056400/476/18185_
7.132132798049740520.01.9873.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/531/17499_
7.1323711552562930.02.1872.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-056400/703/18173_
7.1267036158996550.03.1775.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDduS

0-056400/592/17838_
7.13171158517000.02.5973.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0295180/914/15091_
9.801506148895350.03.7163.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/822/14981_
9.80283301751703020.03.8264.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/678/15054_
9.80161401451771290.02.7063.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/748/14075_
9.8274347864110.02.8659.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0295180/990/14880_
9.802401003348006870.03.8061.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0295180/783/14952_
9.78435548916510.03.3364.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/730/15050_
9.80368151410540.03.1064.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0295180/811/15245_
9.80315551686810.03.3764.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/736/14712_
9.77684050452250.02.9363.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0295180/754/14843_
9.823742941103690.03.3663.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqy

1-0295180/823/14621_
9.80201449889300.03.5361.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHBM

1-0295180/982/14723_
9.784862853514420.03.9962.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_abfe11137dcd4

1-0295180/893/14668_
9.77684047115060.03.7961.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0295180/830/15530_
9.776423450414620.03.2567.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0295180/837/15027_
9.81106052694650.03.7862.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0295180/876/15208_
9.77615546822690.03.4464.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0295180/910/14935_
9.77575047518040.03.8262.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0295180/678/15044_
9.785132749423470.03.0663.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_900bf300193a1

1-0295180/816/15663_
9.775544149031930.03.5164.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0295180/821/15351_
9.77568048874250.03.6965.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.j

Found on 2025-11-28 22:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12b23456b6

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 26-Nov-2025 15:21:54 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 18 hours 11 minutes 9 seconds
Server load: 0.32 0.50 0.64
Total accesses: 951030 - Total Traffic: 3.8 GB - Total Duration: 292542612
CPU Usage: u47.51 s55.8 cu247.37 cs147.45 - .0194% CPU load
.37 requests/sec - 1602 B/second - 4331 B/request - 307.606 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-031070/1401/16860_
15.70251248140120.06.2569.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ff7ea35cc5a69

0-031070/1290/15989_
15.70343350910750.05.9165.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1389/15590_
15.7035646447916520.06.0363.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1370/17292_
15.7070450747620.05.8270.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1373/16336_
15.70151253143970.05.8066.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_365587d667d09

0-031070/1189/16137_
15.70328349431920.05.0867.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1274/16794_
15.69396449804530.05.4170.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1088/17095_
15.70269352126300.04.9170.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c348dc5bd7c9c

0-031070/1351/15708_
15.714144250595330.05.3064.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1097/17123_
15.69382452768200.05.0470.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/975/16082_
15.70218451172800.04.4266.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-031070/1433/16276_
15.70236250198600.06.1566.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_20582af6ca17d

0-031070/1090/16516_
15.70315448955520.04.8068.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-031070/1085/16120_
15.70177254879790.04.9466.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7460a3d04fa00

0-031070/1135/16306_
15.70165248199640.05.1167.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_824992508fce6

0-031070/1044/17072_
15.70285252501990.04.5470.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cc2e55b73e1eb

0-031070/1309/17422_
15.7092353574460.05.5673.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8e4dd1e6aa5a1

0-031070/1401/16384_
15.69430249530120.06.0168.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7fdf15e5f907c

0-031070/1351/15989_
15.70109252940500.05.7165.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e3f647d5362fc

0-031070/1144/16257_
15.70136251583460.04.7667.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_74c7704513363

0-031070/1473/16421_
15.70301555538260.06.3769.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-031070/1351/17137_
15.69415246232430.05.4568.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_958de1a345aca

0-031070/1486/16427_
15.70205349743360.06.4968.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d3719e431dce0

0-031070/1298/16913_
15.7126354400700.05.3169.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-031070/1386/16478_
15.69454353592080.05.9968.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1626/13586_
20.55445344289840.06.8057.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_779a017d7187b

1-0232090/1698/13646_
20.55388247003810.07.4357.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_723181793b5a3

1-0232090/1698/13936_
20.5734247229450.07.4959.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bac4714975692

1-0232090/1289/12891_
20.561722742619300.06.0355.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1494/13382_
20.55421642793060.06.7555.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232090/1497/13769_
20.56191344532060.06.6159.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f0ac766a52e87

1-0232090/1609/13895_
20.56350247249960.07.0859.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_82c059462ef6a

1-0232090/1638/14013_
20.56276347503930.07.2658.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1541/13639_
20.55404446465070.07.1859.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLHc

1-0232090/1444/13754_
20.57100337887890.06.4058.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1433/13429_
20.5761546368420.06.4655.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232090/1634/13371_
20.553753449129450.07.9857.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDeBZ

1-0232090/1476/13485_
20.563102743839150.06.3556.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1613/14286_
20.56158346091290.07.8161.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1705/13726_
20.56261348171910.07.3757.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1745/13952_
20.5629440342501340.07.6159.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1716/13573_
20.5622543943127040.07.4356.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1633/13858_
20.57117345994890.07.3758.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0232090/1633/14580_
20.56241545102160.07.0460.1

Found on 2025-11-26 15:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12b82f8d94

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 22-Nov-2025 16:40:56 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 19 hours 30 minutes 11 seconds
Server load: 0.49 1.01 1.14
Total accesses: 838381 - Total Traffic: 3.4 GB - Total Duration: 256792846
CPU Usage: u34.89 s44.28 cu221.51 cs131.19 - .0194% CPU load
.376 requests/sec - 1616 B/second - 4301 B/request - 306.296 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0144450/709/14496_
9.19783841412210.02.8758.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/853/13705_
9.194194044025990.03.5455.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/794/13201_
9.19363741338740.03.4153.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/966/15035_
9.1946951844388680.03.8061.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT%2BwgEIb%2FSu%2B

0-0144450/607/13979_
9.19850844402220.02.5556.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/944/14026_
9.2163742700150.03.8458.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0144450/882/14621_
9.20109542982660.03.7960.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/736/14885_
9.19525845114980.03.2361.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdTyshEIb%2Fyt5xxVJ

0-0144450/673/13296_
9.194913741217720.02.9955.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/739/14978_
9.19229646379770.02.9360.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0144450/616/13952_
9.19250744191390.02.5456.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/749/14094_
9.19296742674350.03.1756.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/989/14513_
9.2016739541879080.04.1060.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0144450/715/14116_
9.201912848356600.03.0358.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/746/14330_
9.19800741503190.03.0958.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcOL

0-0144450/889/14970_
9.19896746794780.03.9061.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/874/15129_
9.1991840047173010.03.8963.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-0144450/700/14147_
9.1931338541316110.03.1458.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0144450/818/13771_
9.1982138445451730.03.5456.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0144450/802/13978_
9.1973940941953050.03.3057.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/696/14015_
9.21492746809450.02.7658.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

0-0144450/679/14833_
9.19618739841110.02.6158.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0144450/722/14001_
9.19596842728670.03.1457.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0144450/695/14462_
9.197013747240470.02.7259.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0144450/644/14183_
9.19663846195720.03.0158.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/998/11256_
12.54680737438790.04.1447.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-058420/1011/11398_
12.54603939111570.04.7248.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1062/11568_
12.545431939843440.04.6748.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1071/10933_
12.563224834739770.04.6546.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-058420/1044/11158_
12.56302536604620.04.4745.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-058420/951/11361_
12.54809937407750.03.9848.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-058420/1062/11691_
12.56483939859900.04.4349.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1022/11702_
12.54500740538000.03.9748.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHBMnQ

1-058420/1035/11425_
12.56123739942860.04.2948.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1017/11475_
12.56440631004330.04.1648.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTuwgEIZfpXdcUWy7V

1-058420/1038/11462_
12.56378640514080.04.4947.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-058420/1063/11112_
12.549031042533750.04.1646.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1126/11355_
12.5624237937165340.04.6647.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-058420/1263/12160_
12.567939638804740.05.1852.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdpW

1-058420/1035/11155_
12.548593741342510.04.6046.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-058420/1063/11592_
12.56199636122280.04.6249.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

1-0584229/907/11284W
12.5700359500439.13.6446.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-058420/1075/11489_
12.562563437441880.04.4748.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNpxK

1-058420/1090/12223_
12.56183737633150.04.5250.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-058420/1019/11752_
12.5655136362300.04.8950.03
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-

Found on 2025-11-22 16:39

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b126c863ca9

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 20-Nov-2025 21:03:25 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 23 hours 52 minutes 40 seconds
Server load: 0.91 0.96 0.82
Total accesses: 796212 - Total Traffic: 3.2 GB - Total Duration: 245511522
CPU Usage: u43.01 s48.38 cu199.49 cs116.31 - .0196% CPU load
.384 requests/sec - 1649 B/second - 4295 B/request - 308.349 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-091240/3025/13665_
35.98341439046350.011.6255.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-091240/2764/12782_
35.98247141365300.010.4651.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-091240/2896/12356_
36.01104113138943100.010.9949.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL37KwTdJUqyp

0-091240/3352/14038_
35.96436442069080.012.7257.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-091240/2863/13327_
36.01824042220290.011.0353.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091240/2696/13024_
35.98208640234550.010.4954.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-091240/3082/13649_
35.983672641039590.012.1356.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_9bcf2638

0-091240/3099/14069_
35.96418543115880.011.7057.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-091240/2717/12546_
35.9358716638879880.010.3151.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJHHYs

0-091240/3537/14172_
36.014044288430.013.3257.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-091240/2965/13300_
35.98341142105690.010.7554.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091240/3287/13295_
36.00167140207200.012.4353.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-091240/2793/13460_
35.9355432239759820.010.8555.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5AtCw

0-091240/3144/13282_
35.96436546268140.012.3754.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-091240/3262/13515_
36.011157739961090.012.6155.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-091240/3480/14026_
35.98271544656680.013.5057.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KvLA

0-091240/3280/14204_
35.9547716944431250.012.4659.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KtkW

0-091240/2790/13377_
36.00156039441400.010.8554.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-091240/2563/12792_
35.983592543060500.09.7652.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_9bcf2638

0-091240/2988/13098_
35.98190839538290.010.4853.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-091240/3146/13267_
36.0127744285560.012.0055.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-091240/3366/14086_
36.0159137528910.012.0355.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-091240/2875/13236_
35.93589540417400.010.9654.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-091240/2991/13730_
36.00127183744024840.011.0356.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-091240/3444/13494_
35.93531044420280.012.7655.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/177/10435_
2.29372035036740.00.6843.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-058420/170/10557_
2.274713537715020.01.1044.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e06c47b190475

1-058420/255/10761_
2.27428038400840.01.0345.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/233/10095_
2.2744321332525750.01.1142.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5EsEs

1-058420/243/10357_
2.275004834644340.00.9441.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/143/10553_
2.4143035686230.00.5644.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-058420/244/10873_
2.323362537260540.01.1046.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_9bcf2638

1-058420/164/10844_
2.34302437963670.00.6145.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-058420/267/10657_
2.35270537742360.00.9145.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-058420/208/10666_
2.303492529119150.00.9145.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_9bcf2638

1-058420/210/10634_
2.36238538242560.00.7943.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-058420/153/10202_
2.407155239787380.00.5743.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_c3c1d5a1950f

1-058420/116/10345_
2.37202734893870.00.4643.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-058420/181/11078_
2.37217036232790.00.6747.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/141/10261_
2.381776838139510.00.5842.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/164/10693_
2.39127034216580.00.7145.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-058420/177/10554_
2.381639633567820.00.7343.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/156/10570_
2.381436234732130.00.6544.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-058420/212/11345_
2.38127134135651190.00.8646.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-058420/185/10918_
2.4158534364210.00.7645.91
127.0.0.1htt

Found on 2025-11-20 21:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1255ef8357

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 12:47:47 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  19 days 15 hours 37 minutes 2 seconds
Server load: 0.30 0.56 0.66
Total accesses: 608511 - Total Traffic: 2.5 GB - Total Duration: 200164880
CPU Usage: u32.11 s35.78 cu153.73 cs88.25 - .0183% CPU load
.358 requests/sec - 1562 B/second - 4360 B/request - 328.942 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/1336/10198_
15.14214031446130.05.6941.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-064260/1501/9659_
15.1273640735264640.05.6739.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whi

0-064260/1073/9054_
15.1280637532133840.04.1437.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-064260/1486/10242_
15.12621433600820.06.1642.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/1464/10048_
15.1351938133835810.06.1240.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/1181/9805_
15.12639531804890.04.7641.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-064260/1671/10043_
15.13474632976140.07.0841.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1568/10436_
15.13546534469670.06.3643.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-064260/1471/9454_
15.12702532012050.05.8439.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-064260/1361/9938_
15.13414633749410.05.4241.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1562/9839_
15.13364633503740.06.1341.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNeho

0-064260/1335/9558_
15.12594731181740.05.3039.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1405/10274_
15.13329632549620.05.6943.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdu2

0-064260/1547/9716_
15.14128538192270.06.4640.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-064260/1487/9668_
15.13381731206820.06.0539.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1382/10056_
15.15113435140240.05.9041.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDf

0-064260/1422/10321_
15.13294732569140.06.0844.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1629/10222_
15.12774632349230.06.7642.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1203/9789_
15.13233535146190.05.0040.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1429/9540_
15.1580731483210.05.9040.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/1564/9575_
15.1560532973760.06.4141.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgW

0-064260/1447/10272_
15.1541630306050.05.9941.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/1199/9876_
15.14174631724340.04.6541.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0642625/1624/10234W
15.1500343285829.76.8243.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-064260/1355/9552_
15.1266340134839670.05.8839.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJS

1-0235490/844/9483_
9.91714632313670.03.0439.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/942/9653_
9.91611434892680.03.6539.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNcJB

1-0235490/1136/9826_
9.91654634796910.04.5241.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/881/9234_
9.92313830698740.03.6139.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0235490/849/9468_
9.91767432524930.03.2338.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdus

1-0235490/1020/9776_
9.9174433093320.03.9641.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0235490/967/9969_
9.91391633898130.04.2641.46
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/995/9964_
9.91464435558260.04.0942.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0235490/938/9600_
9.91534634740310.03.7541.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/827/9766_
9.91583426864320.03.3541.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtswDIZfxTedZEWOm

1-0235490/1023/9547_
9.91372534591720.04.0039.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

1-0235490/948/9254_
9.91507734317980.03.7239.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/838/9570_
9.9125138631162440.03.4640.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0235490/1021/10234_
9.91309433633240.04.2643.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

1-0235490/876/9310_
9.91351434566950.03.4938.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-0235490/927/9769_
9.91221530112740.03.8341.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZW

1-0235490/1029/9708_
9.91207631371490.04.3240.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/940/9437_
9.9186432267280.03.6539.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpm

1-0235490/985/10444_
9.9116440233497670.03.8042.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0235490/874/9954_
9.9152531800490.03.46

Found on 2025-11-16 12:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12c69ee67f

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 15:05:33 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 17 hours 54 minutes 48 seconds
Server load: 0.88 0.64 0.58
Total accesses: 573614 - Total Traffic: 2.3 GB - Total Duration: 191085307
CPU Usage: u21.48 s27.65 cu153.73 cs88.25 - .019% CPU load
.374 requests/sec - 1637 B/second - 4377 B/request - 333.125 ms/request
1 requests currently being processed, 49 idle workers
________W_________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-064260/678/9540_
7.84580730034470.02.9539.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/709/8867_
7.84280733061790.02.7936.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/517/8498_
7.8413741930458060.02.0234.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/816/9572_
7.83937532148300.03.6139.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/712/9296_
7.84168531279590.03.1137.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94orT

0-064260/535/9159_
7.84981029745010.02.3738.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/980/9352_
7.83858631373600.04.3839.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/720/9588_
7.8475531816660.03.1940.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0642625/736/8719W
7.8500303079931.33.0137.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-064260/657/9234_
7.8388841232178140.02.7738.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMehu

0-064260/774/9051_
7.83796631465390.02.9838.05
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-064260/799/9022_
7.844837129556470.03.2537.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-064260/734/9603_
7.83760730832610.03.1340.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/819/8988_
7.84460736990620.03.5237.63
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-064260/911/9092_
7.83675629346980.03.8837.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/711/9385_
7.83648533799300.02.9638.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-064260/769/9668_
7.83699730719540.03.5641.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/837/9430_
7.84498630168440.03.6039.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/594/9180_
7.8461841533239480.02.6138.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/801/8912_
7.84348529920450.03.4638.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHJM0V

0-064260/834/8845_
7.8440540930923090.03.4038.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whg

0-064260/721/9546_
7.84526628365110.03.2238.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-064260/558/9235_
7.84391829847910.02.3139.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-064260/840/9450_
7.8431839532074900.03.7240.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-064260/635/8832_
7.84220733046780.03.0137.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/216/8855_
2.54108530542190.00.7837.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

1-0235490/282/8993_
2.5491633252070.01.0737.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/319/9009_
2.54160732813230.01.3638.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/282/8635_
2.54288529150650.01.2136.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpk

1-0235490/148/8767_
2.54198530740650.00.6535.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0235490/291/9047_
2.5446740231528460.01.2539.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0235490/200/9202_
2.5540731659150.00.9338.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/295/9264_
2.5395139333916040.01.2639.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgX

1-0235490/298/8960_
2.5554132751530.01.2638.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET / HTTP/1.1

1-0235490/234/9173_
2.53918725471150.01.0638.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0235490/275/8799_
2.53880732919350.01.0036.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/201/8507_
2.53768532376540.00.8036.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/218/8950_
2.53706529404850.01.0137.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNepu

1-0235490/278/9491_
2.5381540332091410.01.2240.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPb%2BIwEMW%2FSm4%2

1-0235490/191/8625_
2.53691732696850.00.7135.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0235490/229/9071_
2.5455644128594620.01.0938.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wgT

1-0235490/216/8895_
2.54640729474580.00.9536.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0235490/154/8651_
2.54659529649830.00.6836.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://trinitylism

1-0235490/165/9624_
2.54588631817050.00.7139.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0235490/259/9339_
2.54520730375820.01.1039.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welco

Found on 2025-11-14 15:04

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b127e8e6bf7

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 19:18:01 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  15 days 22 hours 7 minutes 16 seconds
Server load: 0.64 0.75 0.80
Total accesses: 507424 - Total Traffic: 2.1 GB - Total Duration: 166623737
CPU Usage: u32.51 s32.77 cu122.43 cs70.34 - .0188% CPU load
.369 requests/sec - 1605 B/second - 4352 B/request - 328.372 ms/request
1 requests currently being processed, 49 idle workers
.........................___________________________W___________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/8862.
0.0040413528496100.00.0036.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8158.
0.0040413730880000.00.0033.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dg

0-0-0/0/7981.
0.0040413728129330.00.0032.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8756.
0.0040413630523170.00.0036.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JW

0-0-0/0/8584.
0.0040413829562850.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8624.
0.0040413027846180.00.0036.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0-0/0/8372.
0.0040413028973350.00.0034.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8868.
0.004041316029896960.00.0037.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uKig

0-0-0/0/7983.
0.0040413528847950.00.0033.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0-0/0/8577.
0.0040413730523790.00.0035.83
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdp2

0-0-0/0/8277.
0.0040413163128854690.00.0035.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8223.
0.0040413627998050.00.0033.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0-0/0/8869.
0.0040413729046450.00.0037.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8169.
0.004041340232637840.00.0034.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0-0/0/8181.
0.0040413727553950.00.0033.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8674.
0.004041344530384510.00.0035.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PCkUL

0-0-0/0/8899.
0.00404134628929760.00.0038.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8593.
0.0040413528255890.00.0035.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0-0/0/8586.
0.004041339330726750.00.0035.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0-0/0/8111.
0.00404134827973110.00.0034.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/8011.
0.0040413828691360.00.0034.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0-0/0/8825.
0.0040413207926322560.00.0035.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0-0/0/8677.
0.0040413027845580.00.0036.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0-0/0/8610.
0.0040413730023690.00.0036.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0-0/0/8197.
0.0040413730650310.00.0034.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-096830/1443/7943_
17.254344326014800.05.9633.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-096830/1545/8166_
17.22465129297380.06.6734.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-096830/1394/8074_
17.22548729756070.06.2234.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1613/7860_
17.24284526658590.07.1733.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNc

1-096830/1542/7923_
17.22408626299930.06.3432.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94ooy

1-096830/1412/8227_
17.201088728279460.05.8135.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1757/8379_
17.201037629417250.07.3034.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-096830/1653/8407_
17.25107030262720.07.6035.09
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-096830/1675/8077_
17.20943427729607500.07.3434.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-096830/1744/8346_
17.20888722515280.07.3735.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096830/1698/7929_
17.2574629131090.07.3532.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-096830/1662/7643_
17.24128727241730.06.9132.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-096830/1392/8127_
17.22554526523200.06.1234.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/mfa/rejected.php?StateId=_4f7f94b

1-096830/1861/8569_
17.2422439028887690.08.1736.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMemu

1-096830/1646/7878_
17.20858629111950.07.1832.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-096830/1445/8247_
17.22499724389180.06.2834.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-096830/1648/8057_
17.2232116926854340.07.4532.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJbtswEL37KwTdJZqyE

1-096830/1557/7956_
17.22439526261550.06.4933.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

1-096830/1894/8847_
17.20100910328072850.08.4736.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

1-096830/1595/8442_
17.24299126984310.07.3035.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwor

Found on 2025-11-12 19:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b124174588d

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 20:44:09 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  13 days 23 hours 33 minutes 24 seconds
Server load: 0.56 0.72 0.78
Total accesses: 437340 - Total Traffic: 1.8 GB - Total Duration: 146960298
CPU Usage: u25.45 s26.8 cu109.11 cs62.94 - .0186% CPU load
.362 requests/sec - 1562 B/second - 4314 B/request - 336.032 ms/request
2 requests currently being processed, 73 idle workers
_____W__________________________________________________________
_________K_.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/1291/8068_
12.34690026406780.05.1632.96
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291140/1142/7468_
12.36507029154910.04.7030.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0291140/1137/7370_
12.36436726105330.04.5930.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1207/7901_
12.41214228046560.05.1432.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291140/1096/7788_
12.38256727134680.04.2831.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02911439/1354/7799W
12.4200253126672.75.5332.87
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291140/1022/7509_
12.3636037926211110.04.1931.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0291140/1527/8065_
12.345394627628300.06.5133.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291140/1121/7198_
12.345903626292400.04.9530.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_918befb33ee6e

0-0291140/990/7916_
12.3646718628721110.04.0532.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5ZBN

0-0291140/1217/7690_
12.38203026879240.04.7632.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0291140/1113/7664_
12.37296395225353010.04.6031.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0291140/1069/7979_
12.36397626871510.04.6533.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/1209/7587_
12.345654130406750.04.8031.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0291140/1019/7454_
12.38277024982540.03.8230.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0291140/1109/7776_
12.34676727275980.04.4731.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/1295/7994_
12.39127626354850.05.6233.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDdpU

0-0291140/1212/7830_
12.34648025429990.04.7731.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0291140/1131/7769_
12.34628727627290.04.8832.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/1109/7627_
12.3918016025966060.04.4832.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyW2XS

0-0291140/1068/7215_
12.391523126178100.04.4230.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a3a7e3bcf620a

0-0291140/1371/8024_
12.40813224252940.05.8932.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7e060b9d8f504

0-0291140/1317/7721_
12.4128025569100.05.5532.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0291140/1383/7847_
12.36342328025400.05.5033.48
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_278f4e4b6fd5f

0-0291140/1049/7415_
12.3822716328484520.04.2930.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KsQw

1-096830/581/7081_
6.782695022808470.02.4129.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/584/7205_
6.75627150426772280.02.5529.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096830/472/7152_
6.747063826849450.02.2230.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fce5bf778c150

1-096830/604/6851_
6.77328623761830.02.5828.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-096830/626/7007_
6.75564336624061100.02.5428.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096830/514/7329_
6.8010336626015940.02.2431.99
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PCkIL

1-096830/534/7156_
6.78212525808840.02.1629.33
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-096830/697/7451_
6.79135027946010.03.0530.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-096830/642/7044_
6.78180026857320.02.9129.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-096830/650/7252_
6.74679120364210.02.6930.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-096830/607/6838_
6.7824316525448260.02.7228.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BaR

1-096830/646/6627_
6.77410024085500.02.8828.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-096830/564/7299_
6.79136024899340.02.4930.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-096830/764/7472_
6.7742419025029430.03.3231.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJIRs2

1-096830/644/6876_
6.81513426963050.02.5827.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-096830/554/7356_
6.81143422305320.02.4230.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-096830/630/7039_
6.75507024375850.02.7128.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-096830/580/6979_
6.75609024021680.02.4029.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-096830/750/7703_
6.77352024939480.03.4431.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-096830/709/7556_
6.77376724581920.03.2331.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0</

Found on 2025-11-10 20:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12d574e9ae

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 20:30:22 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 23 hours 19 minutes 37 seconds
Server load: 1.59 0.81 0.62
Total accesses: 385687 - Total Traffic: 1.5 GB - Total Duration: 128419816
CPU Usage: u24.25 s25.11 cu94.62 cs53.91 - .0191% CPU load
.373 requests/sec - 1601 B/second - 4295 B/request - 332.964 ms/request
1 requests currently being processed, 49 idle workers
_________________W_______.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0291140/210/6987_
2.256042923197100.00.7828.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcOr

0-0291140/177/6503_
2.25565524987120.00.6326.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0291140/300/6533_
2.255342623714750.00.9126.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/216/6910_
2.26427625071250.00.8728.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/167/6859_
2.2550335423890370.00.5427.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0291140/287/6732_
2.26380521425110.01.0028.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpi

0-0291140/194/6681_
2.26449723940140.00.6927.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/251/6789_
2.2732439723356350.01.0028.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/180/6257_
2.2640639223171730.00.7625.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0291140/186/7112_
2.27294525746330.00.7129.54
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOGJs20

0-0291140/223/6696_
2.27244722585140.00.7928.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.HEAD /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/243/6794_
2.27175521721020.00.9227.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZV

0-0291140/314/7224_
2.27217024510640.01.2830.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /wp-admin/ HTTP/1.1

0-0291140/195/6573_
2.27127626657200.00.6427.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0291140/235/6670_
2.2774422584740.00.8327.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1451f8d72d5ee

0-0291140/277/6944_
2.278236224363760.01.0428.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0291140/260/6959_
2.27984122634040.00.8529.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-02911425/296/6914W
2.2700218250629.31.0428.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

0-0291140/159/6797_
2.2729723665180.00.5527.81
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0291140/181/6699_
2.25816521862180.00.5928.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCdpS

0-0291140/184/6331_
2.25791621949260.00.7127.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0291140/345/6998_
2.256853021191060.01.4127.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbuMgEIZfxTdOmNhJF

0-0291140/191/6595_
2.2573722622391700.00.6827.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7JAQaH

0-0291140/231/6695_
2.25650523803050.00.8728.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCemr

0-0291140/229/6595_
2.25720625612290.00.8327.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6500.
0.0068838421257000.00.0027.23
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/6621.
0.006883837125032180.00.0027.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

1-0-0/0/6680.
0.0068838724638250.00.0027.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6247.
0.0068838622177560.00.0026.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6381.
0.006883815421970260.00.0025.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PHhEl

1-0-0/0/6815.
0.0068838724278590.00.0029.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/6622.
0.0068838524279430.00.0027.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpa

1-0-0/0/6754.
0.0068838025846100.00.0027.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6402.
0.0068838624644470.00.0026.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/6602.
0.0068838518568950.00.0027.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCduc

1-0-0/0/6231.
0.0068838523473450.00.0025.35
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/5981.
0.0068838303521882640.00.0025.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0-0/0/6735.
0.0068838522929210.00.0028.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itml

1-0-0/0/6708.
0.0068838722734140.00.0028.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/6232.
0.006883842523968350.00.0025.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/6802.
0.0068838720204160.00.0028.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6409.
0.00688382122031570.00.0025.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0-0/0/6399.
0.0068838522164880.00.0027.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0-0/0/6953.
0.0068838522697880.00.0027.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/6847.
0.0068838721518310.00.0028.27
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /modul

Found on 2025-11-08 20:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12b600a410

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 07-Nov-2025 03:49:10 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 6 hours 38 minutes 25 seconds
Server load: 1.26 1.66 1.46
Total accesses: 359320 - Total Traffic: 1.4 GB - Total Duration: 121859547
CPU Usage: u51.58 s39.26 cu59.37 cs33.34 - .0207% CPU load
.405 requests/sec - 1749 B/second - 4323 B/request - 339.139 ms/request
1 requests currently being processed, 74 idle workers
_____________________________W__________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/2414/6525_
25.88317622316930.09.3726.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/2218/6067_
25.81769124254890.08.9624.66
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-049600/2522/6074_
25.8635816822971740.09.9824.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecyNk6

0-049600/2672/6530_
25.8551716724050100.010.3626.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Asou

0-049600/2547/6533_
25.8181329422939080.010.0926.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSBw

0-049600/1953/6275_
25.84572220319995510.08.1026.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-049600/2454/6212_
25.818512023262250.09.7525.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-049600/2651/6314_
25.83642722055400.010.8226.42
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-049600/2439/5861_
25.882448921891260.09.8524.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/2732/6716_
25.88195124539900.010.6128.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-049600/2640/6325_
25.88323021134330.011.1127.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-049600/2790/6355_
25.84604020616390.011.0626.00
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-049600/2635/6666_
25.88161119223274990.010.8028.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-049600/2563/6174_
25.85472125515130.010.4326.12
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-049600/2181/6242_
25.8969621605100.08.8825.91
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpQ

0-049600/2920/6500_
25.82696323282600.011.7226.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4eca00b8ee312

0-049600/2615/6381_
25.85495621095260.010.4226.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-049600/2472/6383_
25.8184226220614820.010.0526.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4so

0-049600/2461/6459_
25.83677622641690.09.3626.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/2482/6381_
25.864294220775520.010.1327.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/2520/5917_
25.882094820879660.010.7625.58
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-049600/2478/6498_
25.8828136520367060.09.1125.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/2506/6221_
25.88124421797550.010.5026.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-049600/2525/6303_
25.84557622417460.011.2227.41
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/2495/6130_
25.8982524580310.010.1925.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/2302/6329_
25.81136220860620.09.3726.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_709cf46d1983d

1-048880/2458/6364_
25.78315024729580.09.6026.37
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-048880/2576/6540_
25.75729024169660.010.4127.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-048880/2511/6071_
25.77540721826910.010.0525.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0488829/2338/6069W
25.8200213724845.18.9924.75
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-048880/2418/6566_
25.78394023898410.010.5028.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-048880/2578/6381_
25.792512323987710.010.3526.26
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOe

1-048880/2544/6478_
25.8021173625482860.09.7726.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJITPY

1-048880/2225/6156_
25.81101524100230.09.1025.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-048880/2529/6411_
25.78335018168080.010.3227.04
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-048880/2593/6085_
25.75563522616710.010.1324.77
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-048880/2263/5860_
25.75572021401560.09.3424.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-048880/2822/6561_
25.73821522610900.011.5427.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuswEEV%2FJTuvHDc

1-048880/2550/6579_
25.75633122145540.010.3828.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-048880/2307/6064_
25.77484023506830.09.1724.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-048880/2449/6580_
25.79291419733630.09.5527.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-048880/2660/6205_
25.75683021539310.010.1724.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-048880/2273/6277_
25.8118113421778250.09.3226.85
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-048880/2567/6801_
25.811725422341300.010.1727.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-048880/2722/6639_
25.7385529321214500.010.5727.43
127.0.0.1http/1.1

Found on 2025-11-07 03:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12aaefe136

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 05-Nov-2025 10:49:37 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 13 hours 38 minutes 52 seconds
Server load: 0.48 0.64 0.74
Total accesses: 249837 - Total Traffic: 1.0 GB - Total Duration: 97898984
CPU Usage: u23.85 s21.01 cu59.37 cs33.34 - .0186% CPU load
.337 requests/sec - 1517 B/second - 4495 B/request - 391.851 ms/request
2 requests currently being processed, 73 idle workers
___________________K____________________________________________
__________W.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-049600/1012/5123_
11.96624418726400.04.3821.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-049600/955/4804_
11.96396419893460.04.2319.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-049600/1155/4707_
11.95102147020086720.04.8719.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5AuxB

0-049600/1371/5229_
11.96876620571830.05.5821.82
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-049600/1109/5095_
11.962763220415920.04.9521.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/883/5205_
11.951108125717867570.04.0622.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5ANKl

0-049600/1011/4769_
11.96207236020390400.04.4020.47
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCdpq

0-049600/1290/4953_
11.9644619886550.05.3220.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-049600/1081/4503_
11.96846518017360.04.4318.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpk

0-049600/1101/5085_
11.95928621078290.04.7522.24
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1198/4883_
11.9667652818601090.05.4821.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJDEou

0-049600/1013/4578_
11.96161017842080.04.6619.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-049600/1163/5194_
11.96783520090420.04.8422.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-049600/942/4553_
11.95966622134530.04.0319.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-049600/939/5000_
11.964853119387960.04.4821.52
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-049600/1155/4735_
11.96328618213980.05.0119.88
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1013/4779_
11.967924618141350.04.5221.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BSI

0-049600/1058/4969_
11.96552417026690.04.7820.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BQL

0-049600/918/4916_
11.96442418737060.03.7220.86
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0496019/1111/5010K
11.97432171510043.75.0022.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_232a0fec07865

0-049600/1184/4581_
11.951061017554390.05.5220.34
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-049600/1028/5048_
11.9675336617977520.03.9320.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcpa

0-049600/1022/4737_
11.96576718678940.04.6520.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-049600/1017/4795_
11.96252019745860.05.4321.61
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /xmlrpc.php HTTP/1.1

0-049600/1076/4711_
11.96544021519670.04.6520.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /robots.txt HTTP/1.1

1-048880/1015/5042_
11.91104618246700.04.2221.38
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1021/4927_
11.903433521647120.04.4321.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-048880/1008/4972_
11.881055719183000.04.2621.28
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-048880/1093/4653_
11.8975337018319490.04.7020.10
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-048880/999/4730_
11.88884718745970.04.2620.01
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1275/5423_
11.91662921570630.05.8324.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wti

1-048880/1008/4811_
11.90403121420393860.04.4120.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-048880/1152/5086_
11.8945560120668700.04.9121.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJHEgf

1-048880/1120/5051_
11.88995111622082150.04.9421.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchW

1-048880/966/4848_
11.90270815711410.04.4921.21
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-048880/1025/4517_
11.89584619512410.04.1518.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/995/4592_
11.89516418960350.04.6520.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-048880/1390/5129_
11.89857309219328730.06.2522.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-048880/1259/5288_
11.89704619595060.05.6623.30
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/962/4719_
11.89559419367540.04.0719.49
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-048880/1043/5174_
11.91224616909220.04.3422.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1139/4684_
11.89644618206050.04.8319.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048880/1083/5087_
11.8810829720087290.04.6622.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-048880/1012/5246_
11.91150019769850.04.4621.50
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-048880/963/4880_
11.881116518608720.04.0820.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southe

Found on 2025-11-05 10:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1234de38b8

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 04:07:16 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 6 hours 56 minutes 31 seconds
Server load: 1.51 1.57 1.32
Total accesses: 182700 - Total Traffic: 781.6 MB - Total Duration: 72230753
CPU Usage: u27.32 s22.12 cu34.95 cs18.38 - .0189% CPU load
.336 requests/sec - 1508 B/second - 4485 B/request - 395.352 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0187730/1651/3964_
17.853991322513830290.06.9216.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5GspS

0-0187730/1514/3648_
17.8060616614693930.06.0114.90
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLbxoxEP4rlu%2f7IHQ

0-0187730/1449/3393_
17.8844615076880.06.0014.25
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcht

0-0187730/1515/3695_
17.8883615585300.06.2115.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1498/3782_
17.8923715784370.05.9015.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1751/4166_
17.80639714326380.07.5417.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Nh

0-0187730/1379/3573_
17.80563616161730.05.6015.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1389/3498_
17.86374515294930.05.4914.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbqMwEIZfhZtPxhBCC

0-0187730/1317/3286_
17.82474113810030.05.2913.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0187730/1534/3800_
17.82503716811390.06.5516.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1268/3503_
17.8813916312999160.05.5015.19
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5AcK

0-0187730/1533/3395_
17.85455128014052800.06.0014.29
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0187730/1335/3846_
17.8636812214812370.05.3516.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/1213/3394_
17.85446117532700.05.1014.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0187730/1668/3907_
17.84459815257990.06.6216.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/1359/3361_
17.87202713334600.05.3813.92
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/1525/3581_
17.87263713584650.06.6815.76
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1412/3737_
17.80541012644670.05.3915.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0187730/1466/3838_
17.80623614430080.06.0116.60
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0187730/1620/3735_
17.86343512130910.07.1516.65
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLfT9swEMf%2Flbz5yXF

0-0187730/1336/3193_
17.86313511147650.05.7014.11
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgW

0-0187730/1577/3767_
17.8722321913695880.06.3315.59
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5BO6W

0-0187730/1295/3525_
17.87159713583420.05.0815.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/1620/3581_
17.88992815075930.06.2015.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3f4c8364dfd8c

0-0187730/1306/3455_
17.86333015648180.05.2914.72
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0187040/1622/3873_
17.3440046213971400.06.4616.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0187040/1430/3744_
17.3613317816154710.05.8516.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0j8Q%2BW93k

1-0187040/1273/3828_
17.32466114709710.05.2916.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0187040/1533/3365_
17.32524412781520.06.1814.71
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0187040/1410/3559_
17.3625346814653250.05.6015.17
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpS

1-0187040/1487/3980_
17.3262824316500480.05.8117.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78gByC

1-0187040/1516/3632_
17.35333420514741320.06.1015.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0187040/1678/3747_
17.3532266714752730.06.7415.97
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0187040/1590/3766_
17.36159616320190.06.2716.02
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0187040/1455/3735_
17.362843812265620.05.9116.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0187040/1327/3320_
17.32584614958690.05.3113.93
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wsQ

1-0187040/1309/3446_
17.369119913675800.05.4614.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PAgEq

1-0187040/1316/3545_
17.36194613501150.05.4415.08
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0187040/1552/3778_
17.34434514735660.06.4316.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0187040/1156/3606_
17.36742514814190.04.4414.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0187040/1532/3959_
17.324903013268550.06.5517.07
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_59c9cf15731dc

1-0187040/1349/3234_
17.32511112387480.04.7413.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0187040/1219/3798_
17.32611515322020.05.0916.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDspB

1-0187040/1488/4074_
17.363719815112680.06.2216.45
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCGBL

1-0187040/1407/3728_
17.32554

Found on 2025-11-03 04:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1230378d64

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 01-Nov-2025 19:47:48 UTC
Restart Time: Monday, 27-Oct-2025 21:10:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 22 hours 37 minutes 3 seconds
Server load: 0.47 0.50 0.58
Total accesses: 139810 - Total Traffic: 603.2 MB - Total Duration: 56894602
CPU Usage: u12.76 s11.82 cu34.95 cs18.38 - .0182% CPU load
.327 requests/sec - 1481 B/second - 4523 B/request - 406.942 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0187730/669/2982_
7.0122510163730.02.5612.56
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0187730/598/2732_
7.004724010892740.02.3411.22
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0187730/576/2520_
7.00413412152730.02.1910.44
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0187730/702/2882_
7.012895012767330.02.7812.15
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0187730/555/2839_
7.005625411692110.02.1511.84
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/769/3184_
7.01352311349740.03.3713.80
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0187730/520/2714_
7.01135509913132440.01.9911.70
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

0-0187730/637/2746_
6.991125611551640.02.4911.94
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0187730/468/2437_
7.0183411396940.01.7510.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HV

0-0187730/616/2882_
7.012057113534530.02.5912.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/543/2778_
6.99100049823380.02.4412.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-0187730/687/2549_
6.991100511044270.02.6810.98
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWJ7y

0-0187730/529/3040_
6.99953511211770.02.0513.40
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxshEIb%2Fyt44sSw

0-0187730/549/2730_
6.99893414685010.02.1011.68
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp2

0-0187730/572/2811_
6.99106641312140780.02.3512.18
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcpB

0-0187730/623/2625_
6.9977340810026010.02.2510.79
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

0-0187730/754/2810_
7.00653410690810.03.2412.32
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0187730/618/2943_
6.991025410419240.02.4312.64
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0187730/608/2980_
7.01352011917250.02.5813.16
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0187730/630/2745_
6.9980688577940.02.5612.06
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0187730/559/2416_
6.9983348484020.02.2610.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0187730/516/2706_
7.007113919325470.01.9411.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lh

0-0187730/451/2681_
7.0061489776040.01.6511.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oACN

0-0187730/762/2723_
7.01233412186730.03.0212.14
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0187730/561/2710_
7.00506712759020.02.1911.62
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0187040/681/2932_
6.61803410197640.02.5512.73
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0187040/514/2828_
6.63503511766430.01.9312.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0187040/505/3060_
6.611039812147580.02.1613.43
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMchd

1-0187040/539/2371_
6.6198359284630.02.0410.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMcpL

1-0187040/530/2679_
6.616831010764470.02.2111.78
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0187040/663/3156_
6.61593512824910.02.5014.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0187040/611/2727_
6.618273511484630.02.4511.57
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1f2ecc7b2775d

1-0187040/710/2779_
6.63517612031390.02.6611.89
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /module.php/core/frontpage_welcome.php/sito/wp-includes/wlw

1-0187040/729/2905_
6.61738512284300.02.7812.53
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0187040/632/2912_
6.616233909268220.02.4712.74
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdZuT

1-0187040/459/2452_
6.63352312619850.01.7710.39
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJISAA

1-0187040/558/2695_
6.6337842811400720.02.1911.67
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPTxsxEMW%2Fyt588nr

1-0187040/419/2648_
6.63443610721010.01.7211.36
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0187040/566/2792_
6.6451182212021850.02.2912.55
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYzjd

1-0187040/507/2957_
6.63262712690580.01.8012.20
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0187040/633/3060_
6.63172510244460.02.7913.31
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-01870427/703/2588W
6.6400103284035.62.2710.69
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /server-status HTTP/1.1

1-0187040/596/3175_
6.64113613420150.02.4314.13
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0187040/565/3151_
6.6320246312041460.02.2812.51
127.0.0.1http/1.1ip-10-1-102-142.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

1-0187040/501/2822</

Found on 2025-11-01 19:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12fd5bb8c8

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 28-Oct-2025 22:28:24 UTC
Restart Time: Tuesday, 28-Oct-2025 22:20:24 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 minutes
Server load: 1.21 1.30 1.38
Total accesses: 374 - Total Traffic: 1.7 MB - Total Duration: 125861
CPU Usage: u.14 s.05 cu0 cs0 - .0396% CPU load
.779 requests/sec - 3616 B/second - 4640 B/request - 336.527 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1/1_
0.04264120.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0360/40/40_
0.0432314790160.00.210.21
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeSYhpl

0-0360/2/2_
0.004275530400.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/4/4_
0.00441168044830.00.020.02
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1/1_
0.003945110.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vtP8h8j1

0-0360/35/35_
0.0234484490650.00.170.17
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1/1_
0.0433134690.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1/1_
0.0413639780.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1/1_
0.04116102920590.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1/1_
0.051031733460.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0360/1/1_
0.057940810.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/2/2_
0.053168900.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03621/21/21W
0.0500144145.00.040.04
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /server-status HTTP/1.1

0-0360/2/2_
0.042118720.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0360/8/8_
0.04159151949640.00.030.03
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/71/71_
0.023861491214040.00.310.31
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/2/2_
0.02403434600.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/2/2_
0.023871623970.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78qIpY

1-0370/1/1_
0.04312120.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0370/1/1_
0.10177370.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0370/14/14_
0.1112279119770.00.050.05
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/76/76_
0.101774167470.00.380.38
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0370/13/13_
0.12881211560.00.050.05
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0370/6/6_
0.101513117110.00.020.02
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/3/3_
0.0335611520.00.010.01
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/1/1_
0.118930600.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cbd47ce6805df

1-0370/55/55_
0.052542826234330.00.250.25
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/7/7_
0.126349527220.00.030.03
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/1/1_
0.1219240.00.000.00
127.0.0.1http/1.1ip-10-1-105-98.ap-southeast-2.cGET / HTTP/1.1


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

mod_fcgid status:
Total FastCGI processes: 0

Apache/2.4.52 (Ubuntu) Server at trinitylismore-login.cloudworkengine.net Port 80

Found on 2025-10-28 22:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1240ec9ac3

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 26-Oct-2025 22:28:43 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  109 days 15 hours 22 minutes 42 seconds
Server load: 1.07 1.46 1.53
Total accesses: 3652731 - Total Traffic: 14.7 GB - Total Duration: 1227746784
CPU Usage: u110.9 s166.22 cu1121.52 cs648.27 - .0216% CPU load
.386 requests/sec - 1666 B/second - 4321 B/request - 336.117 ms/request
2 requests currently being processed, 48 idle workers
___________________K___________W__________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/1542/69332_
17.10378196236803780.06.03283.20
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7Epwr4

0-0176540/1487/70184_
17.132720233290370.05.42291.95
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1465/69586_
17.084146222508240.05.87286.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5MMN7

0-0176540/1424/70780_
17.189166240574660.05.81289.85
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJDgUe

0-0176540/1481/69137_
17.103901236550960.05.96285.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0176540/1374/69328_
17.064551231628490.05.40288.47
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0176540/1359/70914_
17.1328237246813250.05.19290.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9d0a4ea15161

0-0176540/1428/69800_
17.132494234579830.06.23287.63
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0176540/1425/72489_
17.113474243313910.06.28297.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/1346/71788_
17.103901241963700.05.51296.39
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0176540/1449/69911_
17.1583220239911180.06.03286.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0176540/1472/70703_
17.132720233525360.06.03289.29
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0176540/1403/71868_
17.113290229495210.05.52297.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0176540/1454/72606_
17.151301243653260.06.32300.29
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0176540/1419/67154_
17.17308227867390.05.97277.88
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1557/70201_
17.15918250172170.06.02286.07
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/1423/69805_
17.15113162229674790.05.54290.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62Y7dxG

0-0176540/1435/70839_
17.064460228392170.05.61290.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0176540/1470/71336_
17.132491237168110.05.62292.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-01765476/1446/70615K
17.191023971360295.16.50293.32
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /.vscode/sftp.json HTTP/1.1

0-0176540/1402/70106_
17.0649834232030400.06.01287.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/proofup.php?StateId=_f29ca092

0-0176540/1506/71024_
17.103780241646110.06.29292.60
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0176540/1521/69230_
17.0940663230718050.06.15285.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/1419/71380_
17.142131237044890.05.93297.40
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0176540/1467/70066_
17.065123672222067910.05.62289.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0234880/1511/64771_
16.1320930216574990.05.99266.17
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd0a1ce357de4

1-0234880/1240/65866_
16.092565218759230.05.21269.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0234880/1323/66272_
16.024144211633680.05.28271.57
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0234880/1247/64291_
16.17149165214817660.04.55264.07
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7EpPLq

1-0234880/1332/65799_
16.102233213917180.04.75268.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/1293/65169_
16.201064203711350.05.53268.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDemB

1-02348827/1576/66528W
16.220021990820100.76.10269.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-0234880/1244/65366_
16.122131207437040.04.76267.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0234880/1292/64345_
16.20906210708950.05.65266.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/totp.php?StateId=_850a785d9da

1-0234880/1357/66246_
16.004300214792050.05.31269.08
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0234880/1204/65713_
16.2161164215486370.04.56273.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCFb2

1-0234880/1417/64850_
16.0436643207946140.05.69266.24
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCQEy

1-0234880/1480/67540_
16.023974213469210.05.56273.34
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0234880/1601/65482_
16.073343212613820.06.35267.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae78583cdd7d9

1-0234880/1433/66031_
16.024061210186960.05.40270.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0234880/1536/65270_
16.073308214002370.07.06270.02
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/1442/66351_
16.152033218023550.06.13274.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0234880/1577/64846_
16.07306151216349920.06.26267.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCRsd

1-0234880/1509/65401_
16.21371218437430.06.01268.50
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0234880/1319/65581_
16.023901212502160

Found on 2025-10-26 22:28

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1241ad80fb

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 25-Oct-2025 06:48:45 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  107 days 23 hours 42 minutes 44 seconds
Server load: 1.13 1.28 1.26
Total accesses: 3617836 - Total Traffic: 14.6 GB - Total Duration: 1215171479
CPU Usage: u99.62 s157.96 cu1121.52 cs648.27 - .0217% CPU load
.388 requests/sec - 1676 B/second - 4322 B/request - 335.884 ms/request
1 requests currently being processed, 49 idle workers
________________W_________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0176540/896/68686_
9.381491234217050.03.35280.52
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0176540/786/69483_
9.3731931231087610.02.85289.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HV

0-0176540/689/68810_
9.36499340220697490.02.78283.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpA

0-0176540/763/70119_
9.367974237984930.03.25287.29
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0176540/743/68399_
9.3656029233418730.03.07282.65
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0176540/632/68586_
9.366815229253800.02.47285.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

0-0176540/720/70275_
9.37350323244513250.02.77288.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0176540/830/69202_
9.372326232238690.03.94285.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0176540/753/71817_
9.3638031240312030.03.08294.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgX

0-0176540/662/71104_
9.36437322239519450.03.12294.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCeh3

0-0176540/896/69358_
9.365905237703980.03.91284.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0176540/809/70040_
9.38761299231824230.03.37286.63
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761BX

0-0176540/727/71192_
9.372905227997000.02.76294.29
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0176540/679/71831_
9.381394240559310.02.56296.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-0176540/794/66529_
9.3670541224403820.03.68275.60
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0176540/841/69485_
9.369094246898940.03.14283.19
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-01765425/799/69181W
9.38002271685229.23.17287.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

0-0176540/748/70152_
9.38504225041720.03.08288.19
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0176540/824/70690_
9.381593212235178510.03.21289.69
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0176540/710/69879_
9.368882236414440.03.32290.14
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02c91dab807fd

0-0176540/723/69427_
9.3663032229891580.03.24285.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Nh

0-0176540/791/70309_
9.366528239629050.03.22289.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0176540/702/68411_
9.367707227732370.02.61281.84
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT%2BMwEIX%2FSt785

0-0176540/797/70758_
9.372005235423960.03.34294.81
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0176540/849/69448_
9.368604219708430.03.23287.14
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

1-0234880/726/63986_
7.9988132212698520.02.85263.03
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/543/65169_
8.02527216325560.02.08266.60
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/667/65616_
8.007971209307600.02.70268.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0234880/549/63593_
8.0082927212376550.01.96261.48
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0234880/674/65141_
7.999152901211858570.02.30266.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0234880/614/64490_
8.016870201743920.02.69265.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0234880/736/65688_
8.016175215792570.02.94265.95
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0234880/691/64813_
8.01757147205671580.02.71265.07
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f1946414d3d17

1-0234880/613/63666_
8.01649286208579240.02.84264.05
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0234880/617/65506_
8.0152426212891910.02.16265.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_42a3b8c0f1289

1-0234880/529/65038_
8.016664212264080.01.77270.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

1-0234880/779/64212_
8.0230341206234690.03.28263.83
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/677/66737_
8.0235210211062390.02.65270.43
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0234880/787/64668_
8.02167465209862530.03.14264.17
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0234880/798/65396_
8.015694207377630.03.08268.03
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://trinitylism

1-0234880/630/64364_
8.0146930211208620.02.97265.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0234880/717/65626_
8.021075215126880.03.07271.03
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0234880/767/64036_
8.02211111214000490.02.92264.42
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0234880/709/64601_
8.024126215667780.02.78265.28
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/c

Found on 2025-10-25 06:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12c667bebf

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 23-Oct-2025 11:01:38 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  106 days 3 hours 55 minutes 37 seconds
Server load: 1.84 1.64 1.36
Total accesses: 3563009 - Total Traffic: 14.3 GB - Total Duration: 1198746270
CPU Usage: u119.88 s165.23 cu1081.81 cs629.26 - .0218% CPU load
.388 requests/sec - 1678 B/second - 4322 B/request - 336.442 ms/request
2 requests currently being processed, 48 idle workers
____________________________W____________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326840/2044/67555_
25.302541229883440.09.55276.22
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/password-strength.js HTTP/1.1

0-0326840/2055/68431_
25.30301153228151730.010.02285.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyY0lu

0-0326840/1950/67844_
25.284264217696130.08.76278.76
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0326840/1730/69074_
25.293965234614840.08.87282.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0326840/1917/67332_
25.32356228995460.09.10278.39
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94whi

0-0326840/2167/67558_
25.302180225139540.011.09281.41
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0326840/1889/69304_
25.311455241680830.08.72284.46
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0326840/1845/68119_
25.205256228161730.010.06280.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/2272/70804_
25.31992237037060.010.87290.49
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4337252f0d67c

0-0326840/2069/70110_
25.302476236859290.09.44289.13
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1956/68227_
25.302881235315360.09.10279.94
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0326840/1761/68974_
25.32620227629860.08.65281.82
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/1689/70104_
25.303064225522650.08.27289.61
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0326840/1726/70941_
25.195479237737480.08.63293.08
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1987/65435_
25.284639220713020.09.23270.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/1846/68385_
25.30180166243891600.09.01278.77
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BWR

0-0326840/2079/68086_
25.30323198224350270.010.05282.81
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCEpL

0-0326840/1868/69096_
25.32521780221055340.08.45284.02
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BR93k

0-0326840/1817/69633_
25.302314232233000.08.96285.19
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/accountinfo/complete.php HTTP/1.1

0-0326840/1661/68992_
25.30147411233761560.07.85285.58
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PODyt

0-0326840/2006/68466_
25.3280227001910.09.37280.32
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /graphql HTTP/1.1

0-0326840/1991/69220_
25.284371236346900.09.79285.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0326840/1824/67441_
25.32850224781630.08.53278.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/2005/69576_
25.284740232765130.09.74289.98
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0326840/1869/68345_
25.293431216628440.09.33282.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-056070/1716/62953_
23.492256210044280.09.56258.94
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1837/64314_
23.4925462213600740.08.87263.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/zxcvbn.js HTTP/1.1

1-056070/1619/64387_
23.51456205266700.07.87263.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056074/1711/62621W
23.5100209525794.28.37257.64
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /server-status HTTP/1.1

1-056070/2078/64052_
23.41352194209360170.010.07262.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVG7TsMwFP2VbJ4cJ86LW

1-056070/1626/63421_
23.50754245198008580.07.31261.28
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-056070/2068/64450_
23.491656212466390.09.18260.53
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/1746/63495_
23.50654200924150.08.80260.04
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

1-056070/1814/62645_
23.422881204844560.08.74259.55
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-056070/1660/64336_
23.492477208431180.07.09260.82
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-056070/1778/64006_
23.413210209614110.09.83266.35
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-056070/1819/62978_
23.4044919202740000.08.44258.38
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/accountinfo/complete.php HTTP/1.1

1-056070/1955/65528_
23.413375208208470.09.06265.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-056070/1461/63436_
23.49238164205869000.06.77259.27
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCHAA

1-056070/1563/64011_
23.414056203741330.07.10262.77
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056070/3900/63300_
23.413000207837780.018.07260.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0560723/1754/64311W
23.51202112237133.18.34265.55
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com&RelayState=

1-056070/1856/62824_
23.49210344210732860.09.13259.13
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCcpi

1-056070/1614/63287_
23.491472211987780.07.41260.26
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-056070/1743/63775_
23.422774207198370.08.94264.10
127.0.0.1http/1.

Found on 2025-10-23 11:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12a7afdc1b

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 20-Oct-2025 23:01:44 UTC
Restart Time: Wednesday, 09-Jul-2025 07:06:00 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  103 days 15 hours 55 minutes 44 seconds
Server load: 1.95 1.94 1.78
Total accesses: 3472253 - Total Traffic: 13.9 GB - Total Duration: 1164085978
CPU Usage: u99.5 s154.7 cu1067.62 cs620.69 - .0217% CPU load
.388 requests/sec - 1668 B/second - 4302 B/request - 335.254 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0326840/91/65602_
1.035910222398970.00.39267.06
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/86/66462_
1.035326221968550.00.50275.57
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0326840/165/66059_
1.035847210877180.00.62270.62
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0326840/84/67428_
1.035710227322710.00.36274.42
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/174/65589_
1.036165223673750.00.74270.03
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0326840/117/65508_
1.03628167217723770.00.54270.86
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke9JwIVdZ

0-0326840/58/67473_
1.09610235232870.00.27276.01
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/50/66324_
1.045180222452500.00.31270.63
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/103/68635_
1.04486887228436290.00.44280.07
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0326840/38/68079_
1.044540230361720.00.20279.90
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0326840/35/66306_
1.044375228504620.00.11270.95
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RU

0-0326840/110/67323_
1.044066218645400.00.45273.63
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0326840/116/68531_
1.062973218723960.00.51281.85
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0326840/75/69290_
1.04364171231717930.00.37284.82
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78qK8L

0-0326840/63/63511_
1.06279192213926030.00.23261.31
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXdJlGOlN

0-0326840/94/66633_
1.062691235949700.00.34270.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0326840/90/66097_
1.072294217964470.00.34273.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://trinitylism

0-0326840/91/67319_
1.071646214695200.00.40275.97
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0326840/74/67890_
1.081411226181710.00.34276.56
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0326840/37/67368_
1.0719127226791090.00.15277.89
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_53a6356b9d95f

0-0326840/97/66557_
1.0912040219437810.00.41271.36
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0326840/114/67343_
1.0933149229312330.00.61275.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0326840/74/65691_
1.09970218304770.00.33269.80
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0326840/162/67733_
1.1020152224955110.00.63280.87
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0326840/96/66572_
1.1090209474620.00.47274.10
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-027270/1825/61197_
22.182180203343290.07.68249.15
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-027270/1667/62439_
22.145846204130830.06.80254.37
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-027270/1812/62747_
22.2060199410450.07.34256.00
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /webjars/swagger-ui/index.html HTTP/1.1

1-027270/2182/60855_
22.153750202935430.09.02248.96
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-027270/1797/61934_
22.154665203099400.07.49252.12
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-027270/1881/61754_
22.18736192111130.07.78253.77
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-027270/1632/62349_
22.18365216205476060.06.63251.14
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyRVSr

1-027270/2065/61710_
22.155566195097020.08.43251.06
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-027270/1905/60802_
22.146361196091870.07.81250.67
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-027270/1723/62613_
22.146040201430080.07.11253.47
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-027270/1908/62198_
22.14667269203208550.08.50256.40
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7khAaK

1-027270/1765/61102_
22.145922196265280.07.02249.73
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET / HTTP/1.1

1-027270/1764/63543_
22.15524152199102350.07.29256.70
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k4TQp

1-027270/1622/61927_
22.15447522198770470.06.75252.30
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7khDxt

1-027270/2137/62419_
22.1817110198300590.08.98255.59
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-027270/2161/61561_
22.181480201918530.09.33251.99
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-027270/2206/62524_
22.17313165205116520.09.10257.09
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3Iy4

1-027270/1829/60950_
22.1825747204266600.07.67249.93
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-027270/1777/61628_
22.18103358204741160.07.01252.63
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdus

1-027270/1888/61973_
22.181411199886190.07.90254.85
127.0.0.1http/1.1ip-10-1-94-173.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0

Found on 2025-10-20 23:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b129887a665

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 20-Nov-2024 22:53:23 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  36 days 1 hour 33 minutes 41 seconds
Server load: 0.95 1.22 1.46
Total accesses: 1035713 - Total Traffic: 4.3 GB - Total Duration: 451731687
CPU Usage: u39.45 s66.93 cu352.58 cs192.9 - .0209% CPU load
.332 requests/sec - 1496 B/second - 4502 B/request - 436.155 ms/request
1 requests currently being processed, 74 idle workers
___________________________________________________W____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163760/449/18975_
8.443085401480.02.0380.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET / HTTP/1.1

0-0163760/592/19146_
8.42102541882211750.03.5183.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0163760/578/18784_
8.44489782627510.02.8881.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/602/19140_
8.4112473578263190.02.5780.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/603/18577_
8.4447678519910.02.7179.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/736/19922_
8.42901490648750.03.8685.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0163760/483/19019_
8.421182687301890.02.0882.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0163760/495/19005_
8.449448791267610.02.5780.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHBNDg

0-0163760/568/20461_
8.43663693434310.02.6789.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_f9570e8146f

0-0163760/591/18981_
8.44554080360360.02.7080.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0163760/472/18904_
8.4361163187441060.02.2279.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5Mht

0-0163760/603/19302_
8.42949888331580.02.9182.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0163760/712/19580_
8.44319086486790.03.1283.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0163760/710/19737_
8.44268485409480.03.3185.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0163760/674/19497_
8.421141484688980.03.4584.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-0163760/624/18805_
8.444647388276540.02.8981.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_aa28ca352f309

0-0163760/782/19672_
8.4417540979156130.03.9484.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0163760/411/19229_
8.4113105986475060.01.7382.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

0-0163760/579/18866_
8.42796080121270.02.6483.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0163760/481/19808_
8.4272723988818860.02.5284.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9MwEP0rke%2F5clM

0-0163760/652/20166_
8.44426574936800.02.8287.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMemU

0-0163760/653/19362_
8.443373779831260.03.1882.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0163760/502/18912_
8.421083485810290.02.1882.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0163760/781/19052_
8.41141637385799940.04.1782.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcmA

0-0163760/561/19083_
8.411375384760280.02.4680.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0154060/462/14499_
7.87928065146270.02.0962.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0154060/509/14688_
7.9063466803700.02.0662.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0154060/633/14236_
7.90244664700980.04.1263.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0154060/537/14528_
7.88397167663683730.02.3163.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdOi

1-0154060/618/14391_
7.89304464442480.02.8462.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumI

1-0154060/526/13977_
7.88474591365130880.02.3460.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0154060/579/13966_
7.87996559887860.02.6761.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0154060/614/14084_
7.87647861164900.02.6859.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0154060/569/13459_
7.8787649168274110.02.9258.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wti

1-0154060/550/13560_
7.885944264870140.02.8557.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0154060/624/14447_
7.90155458318140.02.9363.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0154060/421/13433_
7.87722557935460.02.0758.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JU

1-0154060/695/14487_
7.861229667355690.03.5562.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzid

1-0154060/580/14292_
7.90342769056840.02.7761.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTuQgFIZfpXdcUVq2d

1-0154060/405/13945_
7.86140019059709080.01.7957.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJMTAe

1-0154060/591/13541_
7.88456461670540.02.6256.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0154060/700/14751_
7.861175141965001260.02.9462.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOmBhHU

1-0154060/509/14063_
7.893265860529620.02.5361.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0154060/508/13842_
7.861296563450030.02.1160.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqy

1-0154060/661/14310_
7.8777786963734120.02.9261.35

Found on 2024-11-20 22:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12735c038b

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 18-Nov-2024 21:55:01 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  34 days 35 minutes 19 seconds
Server load: 1.79 1.98 2.18
Total accesses: 976160 - Total Traffic: 4.1 GB - Total Duration: 422311227
CPU Usage: u47.8 s68 cu319.1 cs177.84 - .0208% CPU load
.332 requests/sec - 1484 B/second - 4471 B/request - 432.625 ms/request
2 requests currently being processed, 48 idle workers
________________W____________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/998/18097_
16.91505118480188080.04.2676.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157970/1181/18121_
16.93342305676586610.05.7678.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157970/1128/17763_
16.933547178196660.05.4176.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157970/1283/18202_
16.9522422474308370.05.5576.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJJgCm

0-0157970/1126/17559_
16.9522339575293700.05.7374.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=149&StateId=

0-0157970/1217/18707_
16.93322782247220.06.1879.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0157970/1149/18021_
16.98189180542240.05.0078.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157970/1333/18150_
16.92410487113680.06.6576.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157970/1107/19365_
16.9242254987481640.04.6384.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCSkD

0-0157970/1324/17983_
17.03184675120280.05.6776.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157970/945/18044_
16.94256181743290.04.6275.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0157970/1139/18319_
16.94275482042140.05.1577.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/1226/18448_
17.026284881343920.05.8278.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157970/1054/18664_
17.0112720080679760.04.9280.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0157970/1177/18468_
17.0113619780083450.05.2379.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0157970/1148/17810_
17.011134783731940.05.4277.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-01579718/1069/18503W
17.0300740522850.46.2979.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157970/1012/18442_
17.0240082505210.05.3078.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157970/1207/17903_
16.99176473602690.06.4478.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0157970/960/19017_
16.98183485123760.04.3479.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJfT8MgFMW%2FSt94oqx

0-0157970/1138/19040_
16.914783069770710.04.8481.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHDeh9

0-0157970/1218/18340_
16.9236653576704030.05.2677.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=188&StateId=

0-0157970/3328/17930_
16.92394580260000.015.1577.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

0-0157970/1062/17716_
16.9145758580959710.04.8376.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uIVL

0-0157970/1034/18233_
16.942956179838890.04.3076.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0148380/1393/13685_
18.7435432659641350.07.4058.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3U9s

1-0148380/1318/13765_
18.784371061991110.06.0558.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BYR

1-0148380/1272/13205_
18.779519559182230.05.3756.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTAL

1-0148380/1287/13539_
18.73381659468110.06.8259.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/1341/13461_
18.7426277659524130.07.1758.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/1203/13069_
18.72402198461097990.05.3856.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/1094/12962_
18.74308255159400.05.6856.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-0148380/1119/13040_
18.76168156668630.04.4654.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0148380/1245/12463_
18.73373162350620.05.6953.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0148380/1092/12537_
18.74343322259497640.04.7752.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/1347/13407_
18.7710319554653910.06.1057.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du%2BQS

1-0148380/1007/12529_
18.75214553572360.05.2854.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNe

1-01483813/1221/13272W
18.7800616976667.45.3155.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/1203/13219_
18.714856865010170.04.9756.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78ipBX

1-0148380/1210/13207_
18.71452655748520.05.5853.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/1107/12540_
18.75203156863280.04.5551.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0148380/1205/13513_
18.7716221958536730.05.3456.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNdj9owEHznV6C8k5BcO

1-0148380/1147/13237_
18.75249655618110.05.5556.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/1379/12981_
18.781318858613190.07.8857.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQNu

1-01483

Found on 2024-11-18 21:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b120fce776c

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 09:02:49 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 11 hours 43 minutes 7 seconds
Server load: 2.86 2.83 2.05
Total accesses: 927105 - Total Traffic: 3.8 GB - Total Duration: 396829562
CPU Usage: u24.87 s54.7 cu319.1 cs177.84 - .0212% CPU load
.341 requests/sec - 1513 B/second - 4440 B/request - 428.031 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157970/121/17220_
2.11442576720400.00.4572.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/124/17064_
2.1141146972194620.00.5173.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-0157970/185/16820_
2.113493572469750.00.7972.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/151/17070_
2.11271168913670.00.5771.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0157970/201/16634_
2.12245071178970.00.7969.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157970/185/17675_
2.11290675753040.00.9174.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/229/17101_
2.13182174732440.00.8173.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157970/170/16987_
2.122013281149050.00.6970.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCchr

0-0157970/253/18511_
2.13120182900740.00.7480.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

0-0157970/207/16866_
2.13176068537470.00.7771.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157970/140/17239_
2.1379476168550.00.5871.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561ZU

0-0157970/138/17318_
2.144521977914740.00.5673.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157978/172/17394W
2.140076708839.90.5472.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157970/142/17752_
2.1010663272943700.00.5876.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0c68ff48fe784

0-0157970/143/17434_
2.101030174675790.00.5975.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157970/169/16831_
2.10990578217800.01.2273.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/184/17618_
2.10981067666620.00.6073.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

0-0157970/100/17530_
2.1083952478785940.00.3573.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0157970/225/16921_
2.10800569542770.01.1073.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0157970/102/18159_
2.109429480052810.00.4175.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_66ac4398b5dde

0-0157970/138/18040_
2.1168843465185780.00.6377.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0157970/128/17250_
2.10749672342560.00.4872.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0157970/2386/16988_
2.11648976782860.010.4872.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0157970/143/16797_
2.11538577246190.00.5471.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0157970/126/17325_
2.1148564274614250.00.5772.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hZLNbsIwEIRfJfI9cWJCB

1-0148380/246/12538_
3.05244054876330.01.3352.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0148380/270/12717_
3.04890855426280.00.9753.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/224/12157_
3.05433554471720.00.8052.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99Kh0

1-0148380/305/12557_
3.052812655160720.01.2153.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/239/12359_
3.05175553775840.01.2852.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0148380/246/12112_
3.05261121356238590.00.8551.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/198/12066_
3.04809650224790.00.7951.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-0148380/231/12152_
3.1445150293830.00.8650.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0148380/210/11428_
3.021050556263710.00.7648.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0148380/187/11632_
3.1423655798160.00.6148.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dg

1-0148380/308/12368_
3.047741048960000.01.2052.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0148380/173/11695_
3.04719849296470.00.6149.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCehq

1-0148380/250/12301_
3.05517271557011210.00.8751.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/216/12232_
3.05322560209940.00.8951.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0148380/204/12201_
3.05473650973440.00.6748.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0148380/216/11649_
3.04659752704640.00.6647.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0148380/212/12520_
3.0456745053284200.00.6952.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lg

1-0148380/153/12243_
3.03974298350949570.00.5251.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0148380/225/11827_
3.0495521352178110.00.9150.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0148380/204/12363_
3.05361553998570.01.0752.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.

Found on 2024-11-16 09:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12acc03394

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 07:08:42 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 9 hours 48 minutes 59 seconds
Server load: 1.36 2.50 2.52
Total accesses: 867052 - Total Traffic: 3.6 GB - Total Duration: 379062939
CPU Usage: u46.1 s61.91 cu277.18 cs156.19 - .0213% CPU load
.341 requests/sec - 1526 B/second - 4472 B/request - 437.186 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/1182/16013_
18.443041572885040.06.0467.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Dj

0-0318150/1223/15968_
18.4235147968559050.05.9868.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Deya2pF

0-0318150/1308/15765_
18.4223942968664790.06.4768.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdpW

0-0318150/1080/15935_
18.423718064862950.05.5466.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1a673832b74fc

0-0318150/1231/15381_
18.42415112366914300.05.8964.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0318150/1257/16292_
18.41721972055740.06.0968.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0318150/1211/16057_
18.41746071897290.05.8070.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0318150/1179/15927_
18.416713878857970.05.5166.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ebf3996fa3522

0-0318150/1362/17189_
18.4357579750700.07.2675.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdTyshEIb%2Fyt5xxdK

0-0318150/1313/15582_
18.43120565360350.06.7466.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKEq

0-0318150/988/15842_
18.416571073728020.04.8965.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1380/16010_
18.431552173786870.06.5168.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SingleLogoutService.php?SAMLResponse=fZLfT8IwEMf

0-0318150/1304/16354_
18.40771173465140.06.5968.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0318150/1215/16515_
18.43230168808050.06.2971.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0318150/1265/16255_
18.4230242070509610.06.2870.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT9swFIb%2FSu585Th

0-0318150/1244/15817_
18.425145774256740.06.7168.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0318150/1204/16322_
18.432023564837240.05.7268.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDchJ

0-0318150/1335/16422_
18.42388367874640480.06.2769.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7vCC9g

0-0318150/1157/15889_
18.41758166940810.05.7769.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0318150/1232/17100_
18.42468675388220.05.6771.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/1292/16742_
18.416713762058400.05.9572.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a43315720833e

0-0318150/1231/16191_
18.4263350170131200.05.9568.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0318150/1153/15755_
18.42603672546880.06.0068.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0318150/1155/15644_
18.4256818073149790.06.7467.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5ItdK

0-0318150/1146/16131_
18.41693671732920.05.5968.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0267270/1292/11357_
19.98731752135720.06.5847.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0267270/1334/11322_
19.99546749798210.06.7148.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0267270/1219/10940_
19.99234050459920.06.4247.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0267270/1393/11243_
19.99449851636890.07.0048.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-02672712/1169/10991W
20.0100502209525.15.7646.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0267270/1313/10929_
19.994691052056240.06.2547.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.HEAD /saml2/idp/metadata.php HTTP/1.1

1-0267270/1271/10800_
20.01136147380060.06.5246.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0267270/1483/10937_
19.98663545720110.06.9746.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/1418/10268_
19.987083152023900.06.4644.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b0b2ba8c2b69f

1-0267270/1342/10604_
19.986494652246710.06.4844.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0267270/1233/11067_
19.99584945290160.05.9147.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/1307/10581_
19.993811045666090.06.0245.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/1246/11214_
19.99363653115680.06.1047.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0267270/1616/11024_
19.992673455375120.07.5947.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/1182/11019_
19.99390250847165290.05.7544.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0267270/1314/10538_
19.987593249532400.06.3643.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78kCkX

1-0267270/1465/11156_
19.98770150165610.06.9747.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0267270/1264/11046_
19.9962417148580350.06.0147.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgndJlmw1K

1-0267270/1253/10816_
19.99210549648970.06.1946.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0267270/1474/11120

Found on 2024-11-14 07:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1290556c9d

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 06:23:49 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  27 days 9 hours 4 minutes 7 seconds
Server load: 0.79 1.45 1.80
Total accesses: 814753 - Total Traffic: 3.4 GB - Total Duration: 350649125
CPU Usage: u23.46 s48.34 cu277.18 cs156.19 - .0214% CPU load
.344 requests/sec - 1526 B/second - 4430 B/request - 430.375 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0318150/114/14945_
2.781295167584990.00.6462.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0318150/249/14994_
2.753464363476340.01.2663.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4b93f6b489ec8

0-0318150/281/14738_
2.75367663166980.01.3863.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0318150/114/14969_
2.7448794059626040.00.6661.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHJNkg

0-0318150/183/14333_
2.74435660978770.01.0060.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNj9sgEIb%2Fim%2BcM

0-0318150/205/15240_
2.786350665548640.01.0763.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyW2Bb

0-0318150/163/15009_
2.753995967044870.00.8465.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e1ca8775bf4d9

0-0318150/166/14914_
2.73610172910950.00.8761.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0318150/244/16071_
2.76296074215100.01.6069.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0318150/186/14455_
2.7724128658211370.00.9760.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iKCi

0-0318150/146/15000_
2.74527867042440.00.7561.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp0

0-0318150/138/14768_
2.7447227768102120.00.6462.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0318150/165/15215_
2.781672766563610.00.7863.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-0318150/165/15465_
2.76254762585450.00.7366.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0318150/197/15187_
2.73610163476410.01.0365.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0318150/184/14757_
2.78214167554330.01.1063.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0318150/168/15286_
2.7819239759957460.00.8564.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0318150/212/15299_
2.7723420270184320.01.1164.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJDhBe

0-0318150/184/14916_
2.78283062125130.00.9464.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

0-0318150/177/16045_
2.7361741171308950.00.8966.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOq

0-0318150/170/15620_
2.781033656530110.00.7767.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0318150/182/15142_
2.784523862591340.00.9063.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78rpcH

0-0318158/157/14759W
2.780065864779.90.8263.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0318150/185/14674_
2.7863168082180.00.9761.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0318150/128/15113_
2.7456397066401920.00.7463.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0267270/326/10391_
4.3024819946793800.01.5442.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5AtYg

1-0267270/244/10232_
4.2955641743382370.01.2642.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0267270/291/10012_
4.29377545670660.01.5042.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDcBJ

1-0267270/317/10167_
4.2861664145929950.01.4042.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uIWq

1-0267270/250/10072_
4.3120221844654460.01.1241.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCS7A

1-0267270/272/9888_
4.295873546556350.01.3242.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDs

1-0267270/337/9866_
4.3111922242984900.01.8342.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Iuou

1-0267270/418/9872_
4.28675940193680.01.9541.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN1fiX%2BwvE%

1-0267270/449/9299_
4.32625247985190.01.9739.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0267270/352/9614_
4.31138545321980.01.5039.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0267270/209/10043_
4.3234040060770.01.0442.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0267270/341/9615_
4.303171040987090.01.6841.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0267270/241/10209_
4.3177647668910.01.1242.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCcmt

1-0267270/340/9748_
4.3284648632390.01.7441.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0267270/215/10052_
4.29464742252080.01.1640.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0267270/197/9421_
4.29480743874400.00.9538.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0267270/238/9929_
4.29608143508000.01.2741.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0267270/216/9998_
4.2951794842300670.01.0442.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCRAF

1-0267270/287/9850_
4.3023520645589450.01.3241.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCSLd

1-0267270/271/9917_
4.3263

Found on 2024-11-12 06:23

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12f6379859

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 01:33:37 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 4 hours 13 minutes 55 seconds
Server load: 1.19 2.00 1.74
Total accesses: 755496 - Total Traffic: 3.1 GB - Total Duration: 312829775
CPU Usage: u30.5 s49.86 cu243.47 cs139.64 - .0213% CPU load
.347 requests/sec - 1521 B/second - 4379 B/request - 414.072 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/669/13838_
9.806674661859650.03.0357.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/713/13775_
9.79904556897380.03.4757.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMc

0-0249240/525/13594_
9.79949126053864040.02.2157.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0249240/480/13809_
9.8227841451413990.02.0956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0249240/724/12916_
9.79854654259480.03.2953.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/577/14136_
9.82412158358880.02.3457.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpg

0-0249240/610/13899_
9.81598059706820.03.1759.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/703/13768_
9.79798665990190.02.8156.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMchK

0-0249240/755/14757_
9.82402764625850.03.3463.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0249240/689/13360_
9.81623052271630.03.1055.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/697/13942_
9.791063660461910.03.7056.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/717/13710_
9.822211159864510.02.8557.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJLT%2BswEEb%2FSnZeO

0-0249240/628/14064_
9.791005660840880.02.8657.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

0-0249240/571/14110_
9.79731656691190.02.8359.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0249240/590/13820_
9.82511052048350.02.8758.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/686/13445_
9.8246240958988480.03.8257.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdrOT

0-0249240/579/14157_
9.81568253616020.02.9758.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0249240/750/14132_
9.82161862561180.03.0358.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHMdpu

0-0249240/644/13708_
9.82115953797920.02.9058.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/628/14821_
9.7910309261769370.02.8960.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/678/14314_
9.8234141348208750.03.5360.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

0-0249240/708/13847_
9.79687154348630.03.2357.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/699/13650_
9.7970143058982190.03.1357.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-02492427/816/13631W
9.8300584284637.63.5956.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0249240/651/13937_
9.7910801087560391320.02.8357.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/759/9236_
11.01912739608750.03.1937.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/903/9008_
11.011018034819980.04.1237.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0222820/693/8700_
11.01103625439017800.03.1736.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/821/8926_
11.026874636688200.04.0437.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/780/8903_
11.031305834773210.03.2035.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0222820/742/8620_
11.03310536420100.03.4836.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

1-0222820/731/8800_
11.01109831437304430.03.4236.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/749/8411_
11.03253633543590.03.8334.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/747/7952_
11.02672140094990.03.4632.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0222820/707/8225_
11.02758037381180.03.0333.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0222820/766/8876_
11.0353159833679980.03.4435.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iLkF

1-0222820/762/8356_
11.03656033864820.03.6335.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0222820/653/9066_
11.03581640279910.03.0036.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/738/8513_
11.02823537104370.02.7134.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0222820/709/9028_
11.03612635329630.03.1135.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0222820/715/8478_
11.03185748835730030.03.2934.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561bU

1-0222820/665/8851_
11.0321634318280.03.1036.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHMchh

1-0222820/813/8914_
11.01976736116100.03.7436.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNchC

1-0222820/711/8777_
11.02715639628080.03.0936.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/723/8763_
11.02898038047210.03.2037.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/p

Found on 2024-11-10 01:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12ef7cc05d

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 03:05:18 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 5 hours 45 minutes 36 seconds
Server load: 2.65 2.52 1.96
Total accesses: 736612 - Total Traffic: 3.0 GB - Total Duration: 304067024
CPU Usage: u22.17 s42.57 cu243.47 cs139.64 - .0223% CPU load
.367 requests/sec - 1604 B/second - 4374 B/request - 412.791 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0249240/336/13505_
4.34330460182170.01.5455.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4a7d912b5a5b0

0-0249240/214/13276_
4.33449054237310.01.1755.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0249240/204/13273_
4.325053652481960.00.9856.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/178/13507_
4.351133650280530.00.7355.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dcc14d4159d4b

0-0249240/380/12572_
4.32605052297920.01.6851.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0249240/231/13790_
4.3774255982080.00.9956.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0249240/249/13538_
4.343303658405900.01.4057.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6adf00e31a0cf

0-0249240/303/13368_
4.3348322263071330.01.3454.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9MwEP0rke%2F57na

0-0249240/392/14394_
4.3529498563375200.01.8561.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0249240/296/12967_
4.3433047850290100.01.4654.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJCEEW

0-0249240/347/13592_
4.31612159398790.01.8654.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/411/13404_
4.35132258876710.01.7656.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0249240/181/13617_
4.3259617959421740.00.9255.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNLj9owEP4rlu95EJFsZ

0-0249240/210/13749_
4.33426554217380.00.8957.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduK

0-0249240/220/13450_
4.3528820150405420.01.2456.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0249240/321/13080_
4.3519442857623200.01.4654.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78uBVs

0-0249240/223/13801_
4.3521383252508670.01.5057.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJA4sd

0-0249240/408/13790_
4.3734160695190.01.6257.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0249240/270/13334_
4.3748852292790.01.3857.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/274/14467_
4.31648760559480.01.3358.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0249240/375/14011_
4.3514443146872840.01.8359.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3e1G

0-0249240/341/13480_
4.35271752363780.01.6356.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=elizabeth.waters

0-0249240/344/13295_
4.34387755319110.01.8556.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/check.php?username=54322&method=ema

0-0249240/395/13210_
4.37105157042420.01.8955.11
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0249240/289/13575_
4.3253545358291190.01.2856.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0222820/408/8885_
5.394264737787900.01.7736.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/463/8568_
5.394704733104280.02.2435.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/333/8340_
5.39516737894980.01.5235.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0222820/411/8516_
5.404133832860570.01.9235.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10b9b079a42e0

1-02228211/388/8511W
5.4400333926124.91.5934.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0222820/401/8279_
5.39636635294710.01.9034.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0222820/371/8440_
5.39576635974500.01.8234.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDsJK

1-0222820/356/8018_
5.4475232026490.01.9832.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/382/7587_
5.413204838235540.02.0431.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/283/7801_
5.41330534457560.01.5431.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_786c37762a412

1-0222820/382/8492_
5.41239358232258000.01.7734.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/416/8010_
5.41300231996470.02.0633.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0222820/349/8762_
5.429070839017700.01.7135.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu7%2BjON

1-0222820/276/8051_
5.403614634017970.01.1533.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/294/8613_
5.41204633688410.01.4033.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0222820/291/8054_
5.411852434146130.01.3732.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0222820/304/8490_
5.39605632807810.01.3435.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0222820/399/8500_
5.394954934340500.01.9834.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0222820/281/8347_
5.41279278337960340.01.1334.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0222820/403/8443_
5.4132

Found on 2024-11-08 03:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b127bfef993

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 22:14:26 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 54 minutes 44 seconds
Server load: 0.90 1.73 2.11
Total accesses: 698936 - Total Traffic: 2.8 GB - Total Duration: 283220364
CPU Usage: u50.35 s58.9 cu199.97 cs113.46 - .0222% CPU load
.367 requests/sec - 1591 B/second - 4336 B/request - 405.216 ms/request
2 requests currently being processed, 48 idle workers
______________________K__.........................______________
_______W___.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/2587/12728_
28.351573355810820.09.4752.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_926c038982a5a

0-0157180/2267/12550_
28.35132150922390.08.7551.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2110/12662_
28.3220918149235290.08.2353.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KuQC

0-0157180/2127/13020_
28.2932770647683510.08.2352.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/cid.php?StateId=_c8c4136db61b

0-0157180/2264/11707_
28.264926647572600.08.7547.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2339/13030_
28.292703552698950.08.6952.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1d50441e6c01d

0-0157180/2224/12747_
28.2840022953672670.08.9853.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0157180/2508/12597_
28.29336557964740.09.4651.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHCehD

0-0157180/2551/13239_
28.33202057711790.010.1555.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2352/12249_
28.3511519347325010.09.6450.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCQb2

0-0157180/2144/12572_
28.3555053392810.07.8949.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0157180/2437/12562_
28.35143154962640.09.8052.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2365/13020_
28.2646524755182470.09.2252.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVLLbtswEPwVgXdJtvyQQ

0-0157180/2185/13036_
28.3537549075550.08.1054.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0157180/2104/12823_
28.33203047154740.08.2453.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/2051/12353_
28.3416764253695310.08.1351.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

0-0157180/2197/13150_
28.3572649362580.08.5254.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0157180/2400/12989_
28.2840891952720110.09.3453.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0157180/2203/12650_
28.26454148447900.08.8053.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0157180/2111/13770_
28.31240154617060.08.3455.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0157180/2245/13149_
28.274473943269490.09.0654.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/2302/12647_
28.27454149084530.08.8352.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-01571850/2129/12562K
28.38005083114162.17.8552.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-0157180/2177/12410_
28.2936421653253710.08.6951.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78hKUW

0-0157180/2031/12781_
28.293433253925890.08.2852.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/8477.
0.00203118635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.00203118730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.00203118535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.00203118530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.002031184131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.0020311843033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.00203118533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.00203118830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.00203118735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.00203118533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.0020311841530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.0020311842829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.00203118537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.0020311843231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.00203118732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.002031181332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.0020311842230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.0020311845932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.00203118635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.00203118633768430.00.0033.92
127.0.0.1

Found on 2024-11-06 22:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12d2305eca

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 22:10:31 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 days 50 minutes 48 seconds
Server load: 0.71 1.73 1.81
Total accesses: 594251 - Total Traffic: 2.4 GB - Total Duration: 253108766
CPU Usage: u16.84 s35.27 cu199.97 cs113.46 - .0211% CPU load
.343 requests/sec - 1505 B/second - 4385 B/request - 425.929 ms/request
1 requests currently being processed, 49 idle workers
_W_______________________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0157180/133/10274_
1.952344245683200.00.6343.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-01571846/157/10440W
2.08004633188136.40.5943.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0157180/118/10670_
2.0573843328050.00.4946.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_289df415266ad

0-0157180/160/11053_
2.00124141706460.00.8045.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/192/9635_
2.00123142802880.00.8239.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/205/10896_
1.982054147074120.00.8344.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/117/10640_
1.93252147524060.00.5445.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/161/10250_
1.913374750806290.00.7442.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/198/10886_
1.93251351161200.00.7146.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0157180/108/10005_
1.91410040270230.00.4641.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10556_
1.96216148533660.00.4542.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0157180/186/10311_
1.99184048168850.00.8743.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0157180/104/10759_
2.0238449408300.00.3843.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0157180/147/10998_
1.922588444009090.00.6246.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_61ef0a57

0-0157180/83/10802_
1.91277141412890.00.4645.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/171/10473_
1.89536148513140.00.7743.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/245/11198_
2.051321443916260.00.9546.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iJAa

0-0157180/119/10708_
1.89507046041540.00.5344.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/128/10575_
1.895296643599660.00.4845.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0157180/145/11804_
1.89497047854760.00.6547.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0157180/113/11017_
1.90478538124600.00.4646.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCem7

0-0157180/161/10506_
1.91360542575640.00.6843.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0157180/93/10526_
1.90449845241120.00.3644.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpK

0-0157180/119/10352_
1.91424145860160.00.5243.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0157180/169/10919_
1.91294146895040.01.0345.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/8477.
0.0030082635833920.00.0034.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

1-0-0/0/8105.
0.0030082730848700.00.0032.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/8007.
0.0030082535874360.00.0033.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp1

1-0-0/0/8105.
0.0030082530477410.00.0033.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdut

1-0-0/0/8123.
0.00300824131592930.00.0032.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7878.
0.003008243033548540.00.0032.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

1-0-0/0/8069.
0.0030082533351920.00.0032.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0-0/0/7662.
0.0030082830309630.00.0030.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7205.
0.0030082735420430.00.0029.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/7518.
0.0030082533166770.00.0030.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMd1K

1-0-0/0/8110.
0.003008241530017380.00.0032.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7594.
0.003008242829841390.00.0031.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0-0/0/8413.
0.0030082537321200.00.0033.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDc

1-0-0/0/7775.
0.003008243231370920.00.0031.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8319.
0.0030082732539330.00.0032.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/7763.
0.00300821332357650.00.0031.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0-0/0/8186.
0.003008242230804830.00.0033.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9owEMe%2FSt785Bg

1-0-0/0/8101.
0.003008245932098040.00.0032.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0-0/0/8066.
0.0030082635213850.00.0033.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

1-0-0/0/8040.
0.0030082633768430.00.0033.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

Found on 2024-11-04 22:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12247ec081

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 21:12:53 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 23 hours 53 minutes 11 seconds
Server load: 1.06 1.06 1.28
Total accesses: 523279 - Total Traffic: 2.1 GB - Total Duration: 231177563
CPU Usage: u24.1 s38.31 cu167.86 cs93.21 - .0208% CPU load
.337 requests/sec - 1484 B/second - 4411 B/request - 441.786 ms/request
1 requests currently being processed, 49 idle workers
________________W_________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/726/8930_
10.73596441478910.02.8737.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_172d0ceb38711

0-0267300/961/9202_
10.73553343426620.03.6438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4fe1e2b446090

0-0267300/779/9352_
10.72705438751910.03.3740.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5d7ac11031a93

0-0267300/690/9523_
10.71776737525420.02.5239.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/733/8196_
10.68998637982350.02.8234.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0267300/860/9018_
10.71728802841281270.03.0836.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

0-0267300/851/9384_
10.77339542728690.03.2540.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/892/9036_
10.7547886846878080.03.3837.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0267300/819/9332_
10.73573447394550.02.9240.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc73261de04b2

0-0267300/735/8755_
10.7360810436357120.02.6036.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0267300/796/9011_
10.78228443424820.03.1336.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef8b28809ca33

0-0267300/947/8821_
10.79196642571940.03.6137.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtg

0-0267300/829/9413_
10.76450445162940.03.1338.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_283e587569a45

0-0267300/862/9679_
10.76423539665900.03.2641.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/956/9405_
10.74516536942990.03.4939.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/831/8935_
10.79107442628380.03.2837.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_953567a137a2b

0-02673024/939/9761W
10.8100411749658.03.3841.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/847/9369_
10.79134542373390.03.0339.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/783/9297_
10.681023439958550.03.2640.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_714a7f82fd8ab

0-0267300/872/10098_
10.68948543681780.03.1540.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLsJo

0-0267300/796/9641_
10.807643134140760.02.9240.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/924/9193_
10.71849739489810.03.5838.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/totp.php?StateId=_4a2d851a581

0-0267300/929/9202_
10.726463541775440.03.5039.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBbhshEIZfZW%2BcWMz

0-0267300/788/9017_
10.8026140754090.03.0537.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0267300/894/9260_
10.70858641383080.03.2538.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_04a7adbfc4dd9

1-0314230/759/7234_
9.15593432973180.02.6029.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fed5d23081d25

1-0314230/741/6866_
9.101039627359770.02.6327.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/787/6773_
9.13719632186450.02.9228.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/870/7060_
9.19431526887780.03.3228.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/680/6831_
9.101005428091760.02.4327.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a441468bd1146

1-0314230/703/6580_
9.17222629844010.02.6127.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/679/6728_
9.12794429194620.02.5827.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3235527322972

1-0314230/644/6320_
9.11977426135660.02.2726.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4218c95b64ce8

1-0314230/650/6045_
9.11918631681380.02.3424.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/706/6391_
9.13619430181300.02.4225.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5652a674db267

1-0314230/825/6902_
9.13728624949990.02.8228.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDt

1-0314230/750/6310_
9.15585626830060.02.6926.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYYyTN

1-0314230/696/7105_
9.11865433451860.02.5128.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b7d90cfc81b0

1-0314230/692/6456_
9.15559628639090.02.5726.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

1-0314230/798/6965_
9.15486529256380.02.8926.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/762/6562_
9.154073327816460.02.7926.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/654/6909_
9.155423328170940.02.1928.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/694/6943_
9.13699528863170.02.4128.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/726/6750_
9.155074830607130.02.7028.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_op

Found on 2024-11-02 21:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b129f622a1b

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 15:55:57 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 18 hours 36 minutes 14 seconds
Server load: 0.65 0.62 0.65
Total accesses: 496459 - Total Traffic: 2.1 GB - Total Duration: 225561400
CPU Usage: u16.1 s30.79 cu167.86 cs93.21 - .0212% CPU load
.343 requests/sec - 1527 B/second - 4460 B/request - 454.34 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0267300/267/8471_
4.5467143239813100.01.2635.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/366/8607_
4.544283042392800.01.7237.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/315/8888_
4.54731637488740.01.8839.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/197/9030_
4.53791636269950.00.9437.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/224/7687_
4.531001736810000.01.0932.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0267300/316/8474_
4.539062740028790.01.2735.16
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dg

0-0267300/308/8841_
4.55127441027640.01.3438.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5d5608a5236a

0-0267300/382/8526_
4.55252645895940.01.7136.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0267300/304/8817_
4.5449242946467030.01.2738.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

0-0267300/212/8232_
4.54611634945010.00.9134.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0267300/284/8499_
4.5573642384580.01.3634.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDe

0-0267300/320/8194_
4.55172541816890.01.4835.52
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/286/8870_
4.543673543490610.01.3736.66
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0267300/305/9122_
4.55222638348170.01.4439.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsMgFIZfpXdcUdquS

0-0267300/413/8862_
4.55281835844580.01.7838.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HV

0-0267300/318/8422_
4.531266841813300.01.5636.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/463/9285_
4.531062840467140.01.8239.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8QgEIb%2FSm%2BcK

0-0267309/332/8854W
4.5500408038213.21.4137.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0267300/300/8814_
4.531153738304230.01.6938.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0267300/293/9519_
4.531099742393770.01.2838.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0267300/298/9143_
4.531217633436950.01.2438.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d2dbf593e2113

0-0267300/290/8559_
4.5393942737933030.01.3036.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0267300/313/8586_
4.54529840898170.01.4137.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0267300/240/8469_
4.531182739635630.01.0935.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdJC

0-0267300/328/8694_
4.5384940440203340.01.4036.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/175/6650_
2.83463932274130.00.7327.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHNdpy

1-0314230/229/6354_
2.82931526287620.00.9426.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/275/6261_
2.82702931365820.01.3227.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMclV

1-0314230/275/6465_
2.821093625904210.01.3926.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0314230/190/6341_
2.821028726939930.00.8626.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/207/6084_
2.821272729140250.00.9025.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Lh

1-0314230/192/6241_
2.8276143427560700.00.9325.78
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpg

1-0314230/146/5822_
2.829673125393890.00.6324.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0314230/172/5567_
2.82640930788130.00.7323.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdp2

1-0314230/212/5897_
2.82521629312130.00.8323.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0314230/183/6260_
2.82880623166700.00.7525.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNdpo

1-0314230/215/5775_
2.83402625565390.00.9824.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHNd

1-0314230/193/6602_
2.828213832133870.00.8226.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT8MwDIb%2FSm85pVm

1-0314230/172/5936_
2.8334146827916150.00.7424.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpS

1-0314230/187/6354_
2.83233527928250.00.8324.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0314230/231/6031_
2.8310139426732710.01.0124.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdNW

1-0314230/144/6399_
2.8327042426923520.00.5927.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0314230/228/6477_
2.8258143727975870.00.9126.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0314230/149/6173_
2.8319145329624620.00.7026.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dj

Found on 2024-11-01 15:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b125a17c4ac

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 18:47:58 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  14 days 21 hours 28 minutes 15 seconds
Server load: 1.58 1.29 1.55
Total accesses: 447423 - Total Traffic: 1.8 GB - Total Duration: 197408016
CPU Usage: u39.99 s40.49 cu124.55 cs70.29 - .0214% CPU load
.348 requests/sec - 1540 B/second - 4429 B/request - 441.211 ms/request
1 requests currently being processed, 49 idle workers
_____________W___________.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136670/1612/7526_
24.87363635470590.07.8631.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0136670/2050/7629_
24.87183435514480.08.8132.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f49e3dbc3fe20

0-0136670/1681/7897_
24.87416632063950.07.0634.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0136670/1934/8200_
24.8643842131681820.07.7433.82
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1365/6767_
24.871681230760360.05.6528.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bf2d8bdf9a11

0-0136670/2077/7581_
24.8872633635120.08.3031.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a79ddacd52a80

0-0136670/1905/7802_
24.873512435107170.08.6833.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1836/7442_
24.87236537417000.07.8831.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1876/7967_
24.87152809840621930.08.1434.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1578/7448_
24.8837531172550.07.0831.48
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1634/7571_
24.88128435950830.06.7130.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6deffa430a99e

0-0136670/1674/7189_
24.87268534473760.08.0730.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdpl

0-0136670/1780/7893_
24.87194536385440.06.9932.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b476c2c6d31ac

0-01366714/2006/8145W
24.8900337805627.49.2035.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0136670/1946/7692_
24.87217529565270.08.2532.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1566/7399_
24.88487436692000.07.0831.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1912/8193_
24.88123435669610.07.8735.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_979d9206d0998

0-0136670/1735/7724_
24.86455037069990.08.0332.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0136670/1884/7837_
24.87251432781410.08.7134.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_58bfed6e730a6

0-0136670/2241/8566_
24.87382637764210.09.4134.72
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/2106/8072_
24.88101429897600.09.3634.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_70afc14286b59

0-0136670/1644/7583_
24.8861531963320.07.0031.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0136670/1639/7452_
24.8730831332955540.07.3632.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5JPug

0-0136670/1680/7630_
24.87287433990510.07.1331.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10ad82ff5aae3

0-0136670/1653/7739_
24.87332534748190.07.2532.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6475.
0.00161199430248640.00.0027.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0-0/0/6125.
0.0016119944524784200.00.0025.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/select.php?StateId=_6b7ebf7f3

1-0-0/0/5986.
0.00161199130320660.00.0025.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6190.
0.00161199124952470.00.0025.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6151.
0.00161199425963170.00.0025.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5877.
0.00161199128265090.00.0024.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0-0/0/6049.
0.00161199426416860.00.0024.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0-0/0/5676.
0.001611993124179070.00.0023.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/mfa/proofup.php?StateId=_6b7ebf7f

1-0-0/0/5395.
0.001611996490028897560.00.0022.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/5685.
0.00161199027089400.00.0023.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/6077.
0.001611994722232930.00.0025.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/5560.
0.001611994324793810.00.0023.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6409.
0.001611992931199540.00.0025.93
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_73f79ca20b9f2

1-0-0/0/5764.
0.00161199526092010.00.0024.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6167.
0.00161199026774030.00.0023.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0-0/0/5800.
0.0016119926025709010.00.0023.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJISPs

1-0-0/0/6255.
0.00161199125839730.00.0026.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/6249.
0.00161199127135540.00.0026.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6024.
0.001611993728632330.00.0025.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_db6370f7cd4c7

1-0-0/0/6113.
0.0016119952794502

Found on 2024-10-30 18:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12ebe3ebd5

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 23:40:07 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  11 days 2 hours 20 minutes 25 seconds
Server load: 0.56 1.31 1.54
Total accesses: 303751 - Total Traffic: 1.2 GB - Total Duration: 138934916
CPU Usage: u14.6 s22.93 cu94.47 cs53.18 - .0193% CPU load
.317 requests/sec - 1388 B/second - 4382 B/request - 457.397 ms/request
1 requests currently being processed, 49 idle workers
______________________W___________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0259750/581/4706_
6.86564321821790.02.2719.03
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f4017308dc3f

0-0259750/586/4340_
6.86554523425320.02.2717.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/565/4983_
6.86440141822329890.02.3620.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0259750/518/5143_
6.8467840721557580.02.0721.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/452/4242_
6.8653214220011840.01.8417.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0259750/483/4449_
6.8649811620498360.02.2318.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0259750/492/4826_
6.8474340423511220.02.2820.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-0259750/579/4377_
6.84621524122100.02.6718.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0259750/614/4966_
6.86562027461770.02.5521.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0259750/547/4624_
6.8783622248000.02.1919.59
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561RX

0-0259750/568/4728_
6.86480725508460.02.5318.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/618/4448_
6.86203322344510.02.3318.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b59d0a813ab99

0-0259750/588/4907_
6.86364122187840.02.5320.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0259750/477/4954_
6.863252922820630.01.9320.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0259750/490/4549_
6.863924120010450.02.1918.88
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0259750/543/4742_
6.871752826364980.02.2219.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-0259750/394/5063_
6.862613324976200.01.4720.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

0-0259750/404/5043_
6.87145623908170.01.7621.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0259750/567/5043_
6.87242120365160.02.5121.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0259750/555/4873_
6.84774622410920.02.1019.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0259750/476/4936_
6.84865420233090.01.9820.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0259750/520/4923_
6.87112020711620.01.9220.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0259758/523/4557W
6.870022646809.92.0719.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0259750/549/4586_
6.84805418923900.02.1819.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHNduK

0-0259750/376/4830_
6.849004522811970.01.5219.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/367/5044_
4.71292424660340.01.3821.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0312120/302/4944_
4.71350420299910.01.0420.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0312120/426/4677_
4.72167824371020.01.6820.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0312120/380/4891_
4.712353020629610.01.5520.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0312120/364/4719_
4.72190021154280.01.5719.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /.git/config HTTP/1.1

1-0312120/447/4556_
4.72136122129820.01.9518.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0312120/373/4665_
4.739778119871210.01.2919.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0312120/338/4475_
4.735240020619310.01.3418.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNbxshEIb%2Fyt44sex

1-0312120/437/4338_
4.69924322544260.01.8218.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c36cb9badca82

1-0312120/443/4384_
4.735621830070.01.7517.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCduS

1-0312120/345/4925_
4.6988939817041960.01.4420.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqy

1-0312120/360/4216_
4.69831419078640.01.3517.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0312120/360/4985_
4.70767624687000.01.4420.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0312120/297/4535_
4.70653420293260.01.1219.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0312120/390/4823_
4.7056421521155730.01.5318.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0312120/369/4263_
4.70592172220136580.01.4717.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0312120/360/4742_
4.70714620588480.01.3519.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

1-0312120/322/5010_
4.707843321617540.01.2820.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1afb030c86607

1-0312120/388/4755_
4.70552023727270.01.7820.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0312120/363/4709_
4.7050523621034440.01.3819.32
127.0.0.1http

Found on 2024-10-26 23:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b127f2da0a5

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 23:46:54 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 2 hours 27 minutes 11 seconds
Server load: 1.60 1.81 2.02
Total accesses: 277658 - Total Traffic: 1.1 GB - Total Duration: 127127334
CPU Usage: u73.73 s52.47 cu25.7 cs15.08 - .0212% CPU load
.353 requests/sec - 1549 B/second - 4387 B/request - 457.856 ms/request
3 requests currently being processed, 72 idle workers
________________K_____________________W_______________________K_
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/2633/4120_
35.66239519132290.010.9816.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

0-0306740/2332/3726_
35.58782520569110.010.0015.47
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wtj

0-0306740/2986/4403_
35.597403220082190.012.7618.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/3238/4610_
35.64329119227540.013.8319.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/2538/3774_
35.64390617399510.010.7615.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0306740/2548/3958_
35.64511618734480.011.1116.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOl

0-0306740/2777/4305_
35.60683110121625300.012.4318.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2335/3795_
35.6687021570100.09.9115.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/2821/4319_
35.62542525480340.012.9718.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0306740/2548/4069_
35.61637219887390.011.4217.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/2907/4108_
35.58821123332880.011.3716.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/2367/3809_
35.625863219744750.010.0516.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2807/4315_
35.644945661620112490.011.4817.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/3146/4465_
35.6442420421061920.012.8718.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5aJJ

0-0306740/2610/4046_
35.60662617841690.010.8316.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761BX

0-0306740/2780/4189_
35.64516123290770.011.3816.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-03067425/3230/4653K
35.6800229412672.213.9819.41
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /v2/_catalog HTTP/1.1

0-0306740/3079/4636_
35.6715276421656670.013.0519.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/3053/4469_
35.626134018115280.013.3819.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec4WAs

0-0306740/2879/4313_
35.6429924718914400.011.3317.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVLBbtswDP0VQ3fbie3Vi

0-0306740/2987/4458_
35.66153517805850.012.7418.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0306740/2994/4388_
35.644695818752830.012.3718.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=55&method=

0-0306740/2602/4031_
35.62548020723590.011.3817.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /about HTTP/1.1

0-0306740/2697/4022_
35.6620419816823210.011.6917.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/3103/4428_
35.6677621194310.012.8418.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0307110/3100/4656_
35.8818240023403970.013.4619.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLXc

1-0307110/3169/4619_
35.8841040919286080.013.5419.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLbtswEEV%2FRTuuKOp

1-0307110/2871/4248_
35.87544123066460.012.7518.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /?rest_route=/wp/v2/users/ HTTP/1.1

1-0307110/3143/4487_
35.866307019166570.013.5819.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/3138/4352_
35.882713919963260.013.6018.40
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_928429c94eb80

1-0307110/2506/4104_
35.85740120311780.010.3516.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0307110/2875/4283_
35.867004517555990.012.3218.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d70093f120588

1-0307110/2870/4128_
35.874956004919420630.011.9417.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2560/3899_
35.883643921146240.010.9116.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgV

1-0307110/2644/3939_
35.8912392620040250.011.0015.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/3035/4577_
35.874867615810040.012.9019.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/accountinfo/start-reset.php?username=55884&meth

1-0307110/2403/3843_
35.88330417475150.09.9015.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7024648d462f4

1-0307110/3285/4609_
35.8665318122642730.013.6018.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJBC%2

1-03071116/2714/4221W
35.9100187847879.412.0618.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0307110/2853/4393_
35.875113519608190.011.2116.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_bad17cbd04975

1-0307110/2536/3891_
35.8864718736360.010.7615.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0307110/2995/4356_
35.86607019030240.012.5318.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/3047/4679_
35.875304119162960.012.7019.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3b2b3dac5693f

1-0307110/3028/4325_
35.88225022519430.013.4318.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/3011/4342_
35.85775<

Found on 2024-10-24 23:46

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b125dfbc0a4

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 22:15:01 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 55 minutes 18 seconds
Server load: 1.48 1.80 2.09
Total accesses: 218372 - Total Traffic: 882.4 MB - Total Duration: 89093996
CPU Usage: u49.94 s37.85 cu25.7 cs15.08 - .0211% CPU load
.359 requests/sec - 1521 B/second - 4237 B/request - 407.992 ms/request
2 requests currently being processed, 73 idle workers
K_________________________W_____________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306741/1790/3277K
24.030014068571.17.1912.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /debug/default/view?panel=config HTTP/1.1

0-0306740/1593/2987_
23.876453215575190.06.6412.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/2277/3694_
23.8950273916058920.09.0914.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2418/3790_
24.00198114429140.09.7415.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/1894/3130_
24.0358113588720.07.5912.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/1723/3133_
24.0381014100220.07.1212.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/1992/3520_
23.8945917716927270.08.6214.50
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5KvZZ

0-0306740/1544/3004_
23.88522114458480.05.9411.42
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/2029/3527_
23.9822651319518870.08.7614.73
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuSUiaI

0-0306740/1592/3113_
23.92377615518010.06.5112.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

0-0306740/2096/3297_
23.875803016926070.07.9712.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d30db01070ad7

0-0306740/1634/3076_
23.8762122413238210.06.6312.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

0-0306740/2085/3593_
23.94311013534810.08.4814.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/2238/3557_
23.96268014991220.08.4314.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/1873/3309_
23.953118613780650.07.3313.15
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1982/3391_
23.96279518839840.08.0513.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_27dd55e830a8fae46

0-0306740/2307/3730_
24.00206498317495640.08.8314.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2213/3770_
24.0011324714851680.08.8015.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PGmVi

0-0306740/2120/3536_
24.0017673414573600.09.2015.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/2155/3589_
24.00163514111230.08.1313.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLRTsIwFIZfZXe96rqNI

0-0306740/2243/3714_
23.86666113130890.09.2315.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0306740/2039/3433_
24.00208115114332850.07.9514.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1733/3162_
24.00207114858730.06.9012.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/1883/3208_
23.87575113439390.08.1313.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/2371/3696_
24.0335115115470.09.4114.69
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0307110/2244/3800_
25.02192016619910.09.5115.90
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-03071128/2351/3801W
25.0500134105497.69.9215.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

1-0307110/2178/3555_
25.0025019217199540.09.5815.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5GsDB

1-0307110/2355/3699_
25.002354314210190.09.6715.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWju8wREs

1-0307110/2338/3552_
25.02206015696710.09.6514.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1634/3232_
24.964534814990050.06.4013.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/2162/3570_
24.9730220114057890.08.7914.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5IvdL

1-0307110/2176/3434_
25.045121414820110.08.4513.51
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78mouv

1-0307110/1857/3196_
25.031834817067420.07.5213.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1891/3186_
25.02206483314070870.07.5912.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0307110/2149/3691_
25.0311220711490840.08.6814.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVLBjtowEP2VyPckrJMsY

1-0307110/1742/3182_
25.0464113226740.06.7312.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0307110/2363/3687_
24.96466517419340.09.0814.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0307110/1960/3467_
24.89629414187710.08.5314.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fed277d6cc9ec

1-0307110/2035/3575_
25.03165914979300.07.6913.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f1d4dd6be84ba

1-0307110/1826/3181_
24.89681511884690.07.6712.89
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/2388/3749_
24.97311113156320.09.6115.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0307110/2167/3799_
25.02198114757910.08.5015.37
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0307110/2213/3510_
24.93561517291040.09.5714.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0307110/2246/3577_
24.9158828281551216

Found on 2024-10-22 22:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1251891cb5

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 22:44:05 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 1 hour 24 minutes 22 seconds
Server load: 1.87 1.96 2.03
Total accesses: 149610 - Total Traffic: 547.8 MB - Total Duration: 57485920
CPU Usage: u24.17 s22.2 cu25.7 cs15.08 - .0199% CPU load
.342 requests/sec - 1314 B/second - 3839 B/request - 384.238 ms/request
2 requests currently being processed, 73 idle workers
_____________W______________________K___________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0306740/1123/2610_
11.75227111899330.03.799.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0306740/873/2267_
11.7526173112746960.02.868.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1098/2515_
11.75244410217910.03.549.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

0-0306740/1431/2803_
11.71371010370090.04.7810.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0306740/959/2195_
11.7139509658180.03.018.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/879/2289_
11.66478010461950.02.968.53
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0306740/1031/2559_
11.82135511035910.03.579.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/864/2324_
11.75289010476060.02.818.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0306740/1054/2552_
11.80184313618390.03.979.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/836/2357_
11.87326911103700.03.028.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1289/2490_
11.82111211033550.04.028.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0306740/952/2394_
11.8017359221450.03.309.38
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1018/2526_
11.8774458618090.03.409.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03067447/1233/2552W
11.90001053870213.94.099.83
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /server-status HTTP/1.1

0-0306740/1026/2462_
11.61581510366230.03.369.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/972/2381_
11.87764212006600.03.258.75
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1377/2800_
11.61601512370480.04.6310.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0306740/1249/2806_
11.6157520510776020.04.2410.81
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1123/2539_
11.906779302900.03.719.56
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1170/2604_
11.6452288969950.03.799.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_143082af934ea

0-0306740/1217/2688_
11.752847539898810.04.3610.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0306740/1203/2597_
11.66497410682450.03.939.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8eed684421737

0-0306740/889/2318_
11.655106510622890.02.978.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b792c8adc08ae

0-0306740/819/2144_
11.71351549618040.03.208.61
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0306740/1454/2779_
11.713953412384930.05.0210.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_091b34f3c7076

1-0307110/1134/2690_
11.9855512657040.03.7310.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wji

1-0307110/1271/2721_
11.76550510723190.04.179.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1233/2610_
11.986820712460870.04.179.86
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=rVJNb9swDP0rhu62U89OO

1-0307110/1474/2818_
11.97111359272840.05.2710.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Ftrini

1-0307110/1026/2240_
11.9221059180030.03.288.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/817/2415_
11.89236611176450.02.739.34
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0307110/1134/2542_
11.96134310000120.03.709.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_415d64cdaad8b

1-0307110/930/2188_
11.765436210797080.02.948.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1067/2406_
11.76562414421470.04.049.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1070/2365_
11.9821110160200.03.538.49
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0307110/1174/2716_
11.78534928059270.03.8110.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307113/970/2410K
11.980010844053.13.159.09
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /debug/default/view?panel=config HTTP/1.1

1-0307110/1350/2674_
11.842994613350870.04.629.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0307110/1225/2732_
11.8144922011386060.03.949.95
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLjhoxELzzFWjuzDNaE

1-0307110/1090/2630_
11.78525411867750.03.479.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/929/2284_
11.8047214748622710.03.008.21
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0307110/1285/2646_
11.961461928286460.04.119.63
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5MPQ3

1-0307110/1269/2901_
11.98973310485840.04.1311.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_98b728fcbdf1a

1-0307110/1140/2437_
11.82365012591420.03.859.06
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0307110/1281/2612_
11.814366710288920.0

Found on 2024-10-20 22:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12742faaa3

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 19-Oct-2024 00:36:59 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 3 hours 17 minutes 16 seconds
Server load: 2.02 2.30 2.04
Total accesses: 61786 - Total Traffic: 252.4 MB - Total Duration: 38735706
CPU Usage: u25.11 s19.12 cu0 cs0 - .0163% CPU load
.228 requests/sec - 976 B/second - 4284 B/request - 626.933 ms/request
2 requests currently being processed, 48 idle workers
______________________W_____________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1292/1292_
18.01830118518850.05.145.14
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1222/1222_
18.0910059569790.04.964.96
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/1248/1248_
18.0184967199570.04.794.79
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT4MwFIb%2FCne9KgU

0-0360/1216/1216_
18.0858086117970.04.994.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

0-0360/1057/1057_
18.08186597379450.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1222/1222_
18.08351145288647840.04.774.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/1346/1346_
18.0828687787750.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1276/1276_
18.0193968630020.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/1333/1333_
18.08670610079420.05.445.44
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKc

0-0360/1334/1334_
18.09414278337640.05.225.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0360/1019/1019_
18.0774097660250.04.134.13
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1256/1256_
18.0824886439190.05.365.36
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1319/1319_
18.09166115977080.05.545.54
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1157/1157_
18.0775697843020.05.185.18
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1293/1293_
18.0179997009550.05.305.30
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1217/1217_
18.08404689593820.04.804.80
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0360/1225/1225_
18.0772169313540.04.764.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1384/1384_
18.0188678195060.05.985.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/1211/1211_
18.0852857227530.05.055.05
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

0-0360/1248/1248_
18.0770676476570.05.205.20
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1261/1261_
18.0864056649770.05.175.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDu

0-0360/1143/1143_
18.0848567597790.05.125.12
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-03633/1298/1298W
18.110076524653.25.195.19
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/1131/1131_
18.0831486078300.04.394.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/1075/1075_
18.0181598384080.04.464.46
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/1422/1422_
18.2235569319350.05.995.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKcJ3

1-0370/1296/1296_
18.2075617698340.05.265.26
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/password-strength.js HTTP/1.1

1-0370/1212/1212_
18.214314629067910.05.025.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/1187/1187_
18.2071206122680.04.914.91
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0370/1054/1054_
18.22307566703520.04.244.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1402/1402_
18.1990567858330.05.925.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0370/1214/1214_
18.2361377703280.05.085.08
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/1057/1057_
18.2236152657857500.04.294.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRb9sgEMe%2Fit94wmD

1-0370/1197/1197_
18.207786410943630.05.005.00
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1153/1153_
18.231057695630.04.454.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT9swEMe%2FSt785Dh

1-0370/1385/1385_
18.216104275756970.05.705.70
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

1-0370/1254/1254_
18.216558458123470.05.255.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/1149/1149_
18.206794878878530.04.604.60
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0370/1283/1283_
18.1987958104810.05.245.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1407/1407_
18.1983119715810.05.295.29
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/1198/1198_
18.20815465902170.04.654.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1211/1211_
18.2079255866150.04.974.97
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

1-0370/1431/1431_
18.2219367799690.06.176.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/1115/1115_
18.2315158813140.04.554.55
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0371/1206/1206W
18.23007013161.14.714.71
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /serve

Found on 2024-10-19 00:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b124e46fb70

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 17-Oct-2024 02:51:27 UTC
Restart Time: Tuesday, 15-Oct-2024 21:19:42 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 5 hours 31 minutes 45 seconds
Server load: 1.04 1.30 1.78
Total accesses: 26405 - Total Traffic: 109.8 MB - Total Duration: 18045789
CPU Usage: u11.03 s8.68 cu0 cs0 - .0185% CPU load
.248 requests/sec - 1083 B/second - 4361 B/request - 683.423 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/537/537_
8.115517144325310.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PEjgc

0-0360/493/493_
8.1616174028760.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0360/495/495_
8.1071562993730.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0360/556/556_
8.16278122344490.02.432.43
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/394/394_
8.107384563110500.01.671.67
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcO0

0-0360/488/488_
8.16216764510890.01.921.92
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/599/599_
8.116352353660930.02.272.27
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVJdT%2BMwEPwrkd%2Fz0

0-0360/601/601_
8.12514115049200.02.392.39
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/503/503_
8.115264495084090.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTtwwEIZfJTefHCcml

0-0360/694/694_
8.1541164071710.02.652.65
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBs

0-0360/529/529_
8.1449904844540.02.242.24
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/484/484_
8.1167772816240.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/466/466_
8.167761992210.01.981.98
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/532/532_
8.1448543082740.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1037943160b61

0-0360/530/530_
8.1531610933236750.02.232.23
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0360/498/498_
8.1624805072720.02.022.02
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0360/516/516_
8.115822124540550.02.102.10
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJMGwq

0-0360/643/643_
8.161066024198680.02.872.87
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0360/459/459_
8.161919083354420.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJAFCl

0-0360/534/534_
8.144372092817680.02.252.25
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVNNj9owEP0rke%2f5gAa

0-0360/596/596_
8.153817353156480.02.452.45
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCZLC

0-0360/486/486_
8.1529763335390.02.322.32
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HW

0-0360/596/596_
8.16369182812320.02.332.33
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DeyW23i

0-0360/459/459_
8.1447862773430.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0360/412/412_
8.1159814519130.01.841.84
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/619/619_
8.2551514165470.02.642.64
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0370/639/639_
8.2549063270950.02.682.68
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9wgEIb%2Fim%2BcM

1-0370/494/494_
8.264485423699900.01.991.99
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHLdJu

1-0370/533/533_
8.2559812839340.02.282.28
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0370/513/513_
8.2640142951370.02.072.07
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b9bcb3c1d2d2f

1-0370/654/654_
8.2820963938660.02.742.74
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/523/523_
8.282264224217450.02.352.35
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78oDk0

1-0370/388/388_
8.2549903287450.01.621.62
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0370/515/515_
8.272667106051130.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCG7w

1-0370/468/468_
8.2642462663740.01.851.85
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_21b8ffbfd1eff

1-0370/549/549_
8.2632682140430.02.222.22
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0370/579/579_
8.2469163458800.02.572.57
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

1-0370/519/519_
8.246564444848850.02.172.17
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCc

1-0370/634/634_
8.281698803114290.02.582.58
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsignin-s

1-0370/590/590_
8.288844428750.02.312.31
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dc4aff3af092c

1-0370/511/511_
8.285962235250.01.941.94
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0370/436/436_
8.2814762697480.01.771.77
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgV

1-0370/615/615_
8.2630363983240.03.043.04
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0370/428/428_
8.272594774899970.01.761.76
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PAUNW

1-0370/500/500_
8.2551513655920.02.012.01
127.0.0.1http/1.1ip-10-1-103-111.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370

Found on 2024-10-17 02:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12f3311202

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 15-Oct-2024 02:13:56 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 4 hours 38 minutes 10 seconds
Server load: 1.27 1.29 1.29
Total accesses: 290506 - Total Traffic: 995.2 MB - Total Duration: 47934419
CPU Usage: u18.9 s15.49 cu62.4 cs41.08 - .0258% CPU load
.543 requests/sec - 1950 B/second - 3592 B/request - 165.003 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-029130/719/5515_
10.324051332011444800.04.0719.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/714/6004_
10.2950209498510.03.8021.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-029130/807/5769_
10.33379010397350.04.3820.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-029130/604/6208_
10.361253110765940.03.0321.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_276a2b5a836d0

0-029130/694/6153_
10.3520449411071070.03.7120.78
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL0j9T9YvudTI

0-029130/740/5416_
10.333441728827220.03.9618.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuMwFN0jzT9Y3udVw

0-029130/717/6083_
10.39301607794550.03.4219.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5IuGd

0-029130/795/5756_
10.3429747673900.05.1520.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOf

0-029130/736/6392_
10.388207244990.04.2822.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-029130/581/5619_
10.33316369252530.02.8618.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/823/6099_
10.32396190879021300.04.0120.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/908/5840_
10.304613279428230.04.3819.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNr9owELzzK1DuJAFSC

0-029130/881/5578_
10.3523117611339880.04.4018.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJCTl0

0-029130/870/6118_
10.352222049027910.05.1821.39
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1DecwX2Y

0-029130/873/5643_
10.38454111158600.04.8519.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/748/5824_
10.37981688874170.03.8619.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPbjtowEH3nK1Dec2WBX

0-029130/827/6063_
10.352606811948730.04.1920.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/662/5611_
10.352893982110051900.03.4719.26
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/775/5905_
10.3241318984960.03.8719.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-029130/931/6222_
10.352927508810200.04.6321.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-029130/906/6477_
10.361681979114830.04.5621.85
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNj9owEP0rke%2F5JLS

0-029130/870/5730_
10.31430419700410.04.3919.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-029130/540/5379_
10.391418855000.03.7219.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-029130/668/5611_
10.3528319610071990.03.3818.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78mq4U

0-029130/754/5773_
10.2853118710102600.04.0520.32
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuSUwKW

1-029610/758/5553_
10.473263969010531690.03.9918.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/783/5663_
10.48242810202240.03.9318.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-029610/781/5860_
10.4730218508330.03.8720.37
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/767/5569_
10.4638419378960.04.1819.56
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/844/5457_
10.49332037551130.04.4219.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1DuJOQDd

1-029610/697/5763_
10.463944628716920.04.0719.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh78iTQW

1-029610/715/5393_
10.48266109010363030.03.7318.42
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/741/5936_
10.4344519220540.04.0420.22
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-029610/673/5971_
10.4639508985070.04.2920.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/791/6213_
10.472893980910905330.03.7420.71
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-029610/870/5654_
10.4732607537200.04.2719.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-029610/819/5652_
10.4963410260980.05.4220.43
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJbT8QgEIX%2FSt94ovS

1-029610/542/5803_
10.482141629021370.02.7318.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSh7kjg8S

1-029610/687/6033_
10.491171789058620.03.4820.04
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwX6D8QvOuJB

1-029610/826/5788_
10.473224210045380.04.3320.00
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0296129/610/5463W
10.5100836960140.83.0517.71
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-029610/872/5430_
10.49151010478590.04.6819.35
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-029610/700/4818_
10.4987111249270.03.9817.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-029610/801/6468_
10.481871799502950.04.4121.98
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVNNj9owEL3zK1Du5Itlt

1-029610/849/6666_
10.4951410114770.04.2222.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZ

Found on 2024-10-15 02:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b123d9a78fc

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 23:28:05 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 1 hour 52 minutes 19 seconds
Server load: 0.46 0.73 0.90
Total accesses: 201861 - Total Traffic: 616.9 MB - Total Duration: 18458275
CPU Usage: u52.13 s38.37 cu0 cs0 - .0257% CPU load
.573 requests/sec - 1835 B/second - 3204 B/request - 91.4405 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/3635/3635_
41.2852464371910.011.2111.21
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/4153/4153_
41.2936343200370.012.7412.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_564e27308bf84

0-0340/4103/4103_
41.3022543657680.012.8712.87
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/4488/4488_
41.2946353437090.013.6713.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdOC

0-0340/4368/4368_
41.2933173731580.013.4413.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/3920/3920_
41.292833313224180.011.9611.96
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT%2BwgEIX%2FSt94o

0-0340/4402/4402_
41.285114853356980.013.1413.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgnetcZGIs

0-0340/4009/4009_
41.2871643744410.011.9111.91
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

0-0340/4399/4399_
41.2861543227410.013.3413.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/4024/4024_
41.2949003184810.012.3312.33
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4333/4333_
41.301963533719280.013.2013.20
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

0-0340/4090/4090_
41.3111613628040.012.6612.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0340/3689/3689_
41.2940844055940.011.1411.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDdpS

0-0340/4413/4413_
41.3115203661130.013.3613.36
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/3729/3729_
41.319544003070.011.4411.44
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94oqx

0-0340/4385/4385_
41.2924543267130.013.2713.27
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/4187/4187_
41.2938244165050.012.7612.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/3781/3781_
41.288042304681080.011.7711.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=rVJNbxoxEP0rK9%2F3k00

0-0340/4063/4063_
41.335203829090.012.3412.34
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/4012/4012_
41.3112503974340.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0340/4547/4547_
41.294727424127610.013.9013.90
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0340/3895/3895_
41.286447843824350.011.9511.95
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/3884/3884_
41.28576303772910.011.8111.81
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_76e67acb68b0e

0-0340/3744/3744_
41.2856033340460.011.2911.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15e82728c25b2

0-0340/3789/3789_
41.2947513869250.012.0312.03
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/3668/3668_
40.3520253366240.011.2511.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7b218aa52e31

1-0350/4265/4265_
40.3266543643790.012.7512.75
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4123/4123_
40.37108463471300.012.7912.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3902/3902_
40.32786432843610.011.8011.80
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3523/3523_
40.3440263003570.010.8310.83
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-03525/4021/4021W
40.380033643436.312.1212.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/3700/3700_
40.343453223729620.011.4111.41
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761JV

1-0350/4139/4139_
40.3425643356260.012.6012.60
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzir

1-0350/4460/4460_
40.3437544013550.013.5513.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3979/3979_
40.3431643742520.012.0912.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHDd

1-0350/3802/3802_
40.35245423036500.011.5711.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0350/3946/3946_
40.3615943820710.012.1112.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/4299/4299_
40.3451873797350.013.1213.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/3987/3987_
40.3357103462760.012.2912.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0350/4044/4044_
40.328193034613880.012.4912.49
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=173&StateId=

1-0350/3966/3966_
40.3447513936490.011.7911.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/3736/3736_
40.3711613839320.011.4511.45
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/3229/3229_
40.3260334406340.010.1110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52f2da9cdf228

1-0350/4740/4740_
40.3283844051790.014.6314.63
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/4611/4611_
40.3443543488550.014.1414.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https

Found on 2024-10-12 23:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1200f1e952

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 22:40:06 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 1 hour 4 minutes 21 seconds
Server load: 0.79 1.13 1.26
Total accesses: 8943 - Total Traffic: 33.9 MB - Total Duration: 4780337
CPU Usage: u4.67 s4.69 cu0 cs0 - .0053% CPU load
.0506 requests/sec - 201 B/second - 3973 B/request - 534.534 ms/request
1 requests currently being processed, 49 idle workers
__________________W_______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/202/202_
2.434029791420.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/172/172_
2.443845904700.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzbX

0-0340/170/170_
2.453115918620.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

0-0340/165/165_
2.4436951034750.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJPT%2BMwEMW%2FSm4%2

0-0340/241/241_
2.452690813920.00.840.84
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0340/192/192_
2.4340311014390.00.720.72
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0340/199/199_
2.436367713500.00.700.70
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/147/147_
2.43649339912640.00.540.54
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDehX

0-0340/179/179_
2.435395543840.00.690.69
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/161/161_
2.434865768890.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/164/164_
2.452218584040.00.680.68
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWzit

0-0340/206/206_
2.45212361176610.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4c884b1046f8

0-0340/165/165_
2.4521231345600.00.580.58
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee61f085397d1

0-0340/173/173_
2.4519851023050.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWLsb

0-0340/188/188_
2.451693711075780.00.760.76
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0340/192/192_
2.451085633160.00.730.73
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBj9owEIX%2FSm4%2BO

0-0340/168/168_
2.45528681160.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/186/186_
2.461561264000.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-03425/176/176W
2.46008983342.80.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/155/155_
2.43907341019620.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/167/167_
2.4388351107240.00.640.64
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdTyMhFIb%2FytxxxTA

0-0340/166/166_
2.4380041250330.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

0-0340/159/159_
2.438565709710.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKduA

0-0340/175/175_
2.437413541114210.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRTtswFIZfJXe%2Bcpy

0-0340/147/147_
2.4360641530470.00.650.65
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWyaL

1-0350/157/157_
2.482493501217010.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCcm7

1-0350/168/168_
2.472829532580.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/195/195_
2.473458746420.00.770.77
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJBT%2BMwEIX%2FSm4%2

1-0350/150/150_
2.469095583250.00.570.57
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0350/156/156_
2.46829383947320.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/150/150_
2.473760730930.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /.git/config HTTP/1.1

1-0350/145/145_
2.4689991183090.00.620.62
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/177/177_
2.4764271190340.00.590.59
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/157/157_
2.468772221437730.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-0350/145/145_
2.467085880990.00.520.52
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0350/179/179_
2.476184952480.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/239/239_
2.482081972760.00.940.94
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0350/164/164_
2.467705670920.00.660.66
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0350/196/196_
2.482112600420.00.740.74
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/207/207_
2.4821121650470.00.790.79
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0350/173/173_
2.4758124301033500.00.610.61
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBbtwgEIZfxTdOGBu78

1-0350/175/175_
2.4918981027200.00.670.67
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/152/152_
2.4751343131539510.00.550.55
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYWycb

1-0350/220/220_
2.474031771950.00.860.86
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0350/268/268_
2.4957340679160.01.071.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT%2BQgFIb%2FSu%2B

1-0350/198/198_
2.4738801189560.00.690.69
127.0.0.1http/1.1i

Found on 2024-10-10 22:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1281260fae

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:50 UTC
Restart Time: Monday, 09-Sep-2024 06:19:28 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 52 minutes 21 seconds
Server load: 1.56 2.14 2.47
Total accesses: 1031211 - Total Traffic: 3.9 GB - Total Duration: 292096844
CPU Usage: u29.42 s45.98 cu294.73 cs165.4 - .0207% CPU load
.399 requests/sec - 1613 B/second - 4043 B/request - 283.256 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/420/19095_
6.4575242355305020.01.5971.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/408/20079_
6.46476556390920.01.7374.47
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0716e312c8dc4

0-065990/429/20016_
6.456711310654956340.01.6475.31
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVI9b9swEN0L5D8Q3CXRR

0-065990/434/18062_
6.4640724751710050.02.3970.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=lVPLrtowEN3zFSj7PKChg

0-065990/405/20112_
6.45943553380780.01.7074.39
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7568d4336e259

0-065990/524/18256_
6.46658747996200.02.2268.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/483/18811_
6.46628448879140.02.3070.76
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4953280e84e3

0-065990/499/17590_
6.46550955687790.01.9766.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_5951107b30816fcbc

0-065990/476/19674_
6.46582052063230.02.0073.26
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/437/18833_
6.471975555555080.02.2272.53
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/416/18770_
6.47332749291090.01.9171.33
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c827b5df88de6

0-065990/546/18411_
6.47248653123860.02.3369.54
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHKdp2

0-065990/544/18929_
6.471523346849140.02.1468.67
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/432/18013_
6.47842847927120.01.9966.34
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/614/19865_
6.451406449421060.03.0573.87
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3e52884237cb

0-065990/564/19508_
6.472621353153460.02.3972.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

0-065990/500/20311_
6.451456549489850.02.1576.93
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c375feffbc8d2

0-065990/425/19051_
6.45136523650356710.01.9671.96
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLTuswEN0j8Q%2BW93m

0-065990/460/19827_
6.45133736752959070.01.9675.18
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

0-065990/479/18165_
6.45124542752894090.02.2169.56
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-065990/546/18974_
6.4512874552667160.02.4671.71
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/600/18594_
6.45111435049468150.02.5470.66
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-065990/440/18368_
6.451172151956680.01.9969.17
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-065990/430/18392_
6.45102533251846630.01.6469.49
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XU

0-065990/490/18726_
6.45860648043580.02.1070.92
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_371172ee691e0

1-0136090/267/18433_
3.6589536745303850.01.2969.60
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0136090/307/19043_
3.64993747371320.01.3171.00
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/262/19285_
3.641162448806150.01.0972.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59e4b17f70bab

1-0136090/281/17442_
3.6582542048351730.01.3966.25
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/227/17884_
3.641082654912920.00.8765.48
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdb9sgFIb%2Fiu%2B4w

1-0136090/234/17985_
3.641294750179140.00.9367.57
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/243/17514_
3.65673647102950.00.9868.45
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0136090/429/17621_
3.655881441647806360.01.6366.21
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/254/16730_
3.6563649853025170.01.0663.65
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136090/253/18464_
3.65719950471000.01.3369.85
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136090/244/18873_
3.65449293847187290.01.0570.98
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/243/17903_
3.65573650608040.01.0369.38
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0136090/257/18727_
3.65514358250158320.01.0971.73
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/249/18712_
3.6526664647980600.01.0069.88
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

1-0136090/280/17740_
3.65210750459770.01.1365.72
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHDumW

1-0136090/245/18111_
3.6537027847729870.00.9867.43
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/250/20063_
3.659340448725900.01.1375.61
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0136090/303/19236_
3.65171447616490.01.2874.06
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09ca8a5cac1cb

1-0136090/286/20016_
3.64141779548104140.01.1574.99
127.0.0.1http/1.1ip-10-1-103-53.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTxs

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b12df37637b

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:50 UTC
Restart Time: Tuesday, 08-Oct-2024 21:42:46 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 29 minutes 4 seconds
Server load: 0.47 0.85 1.08
Total accesses: 1627 - Total Traffic: 6.9 MB - Total Duration: 1110211
CPU Usage: u.9 s.69 cu0 cs0 - .00681% CPU load
.0697 requests/sec - 308 B/second - 4433 B/request - 682.367 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/39/39_
0.4613424692830.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/19/19_
0.45138542735650.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtsgEIZfxTdOGNtxq

0-0370/20/20_
0.461284870900.00.060.06
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0370/39/39_
0.4612034262660.00.200.20
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8657d40d5d437

0-0370/44/44_
0.461136218274530.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHCdp2

0-0370/50/50_
0.46865404793600.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfM%

0-0370/36/36_
0.461049240231570.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/22/22_
0.46959203129880.00.070.07
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/33/33_
0.467844206670.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_24b9a4926b35e

0-0370/24/24_
0.4663611296040.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0370/43/43_
0.46712547130.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fbd60c7d65ebb

0-0370/34/34_
0.465830420610.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0370/28/28_
0.465472171510.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a42a5c1f51fd5

0-0370/25/25_
0.474554429060.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0370/24/24_
0.4738558353340.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XX

0-0370/24/24_
0.4727836945900.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEEZfJTuvHLtNg

0-0370/32/32_
0.47221332630.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0370/36/36_
0.47181424175770.00.180.18
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0370/38/38_
0.471216135580.00.160.16
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

0-0370/48/48_
0.475774154490.00.210.21
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/30/30_
0.4793858550.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0370/32/32_
0.45162247114520.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/34/34_
0.45157016379470.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/22/22_
0.4515202174400.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c102bb42e6bb0

0-0370/21/21_
0.4514266348080.00.110.11
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/27/27_
0.48129843448530.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/47/47_
0.481374371010.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/35/35_
0.48141612127880.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOd

1-0380/27/27_
0.48147481065640.00.220.22
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/41/41_
0.4812514242480.00.190.19
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHLt

1-0380/27/27_
0.48117141235870.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0380/39/39_
0.481097215184240.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLJTsMwEL0j8Q%2BR71l

1-0380/25/25_
0.4899531107790.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNb9swDIb%2Fim86yfJ

1-0380/34/34_
0.4890428477510.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0380/40/40_
0.4883632512950.00.170.17
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJNT%2BMwEIb%2FSm4%2

1-0380/25/25_
0.4966041103280.00.120.12
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0380/24/24_
0.497523277520.00.080.08
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0380/28/28_
0.496294303040.00.130.13
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT4MwEMe%2FCm99KgU

1-0380/21/21_
0.495751278193030.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=nVPJbtswEP0VgXdJjO14I

1-0380/51/51_
0.495013387175750.00.260.26
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

1-0380/25/25_
0.494145107070.00.150.15
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_744c0d02a84f9

1-0380/38/38_
0.493340200250.00.230.23
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0380/27/27_
0.492554145730.00.100.10
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2daa0148e5209

1-0380/36/36_
0.491971154470.00.140.14
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0380/28/28_
0.49155769320.00.090.09
127.0.0.1http/1.1ip-10-1-105-111.ap-southeast-2.GET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0380/37/37_
0.4984427166590.00.15

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b122f597e47

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:49 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 36 minutes 3 seconds
Server load: 1.05 1.14 1.27
Total accesses: 1627 - Total Traffic: 6.7 MB - Total Duration: 1168034
CPU Usage: u.78 s.79 cu0 cs0 - .00661% CPU load
.0685 requests/sec - 295 B/second - 4317 B/request - 717.907 ms/request
2 requests currently being processed, 48 idle workers
_______________W____________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/36/36_
0.4655711571308570.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKchB

0-0340/34/34_
0.4651163191730.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

0-0340/40/40_
0.463401088200680.00.190.19
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/32/32_
0.4641752218280.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzb7

0-0340/40/40_
0.46288548430.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/28/28_
0.465810132640.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0340/27/27_
0.45927338118330.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/18/18_
0.458544042220.00.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/34/34_
0.4568210693400.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/33/33_
0.46635818390.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/28/28_
0.4623422258540.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0340/37/37_
0.461544487170.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/26/26_
0.4684411512890.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0340/32/32_
0.46561103370.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0340/32/32_
0.4693088610.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cHEAD /saml2/idp/metadata.php HTTP/1.1

0-0342/22/22W
0.470029373.80.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/36/36_
0.441416119106730.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_daa053c3b7ff6

0-0340/44/44_
0.44137246405470.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/23/23_
0.4413418102570.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/24/24_
0.4412858387380.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/35/35_
0.4412295332410.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-0340/39/39_
0.4511704670990.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0340/28/28_
0.4511014253730.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9c9130d94597

0-0340/26/26_
0.4510235160770.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_faef4587504c8

0-0340/27/27_
0.45751230890120.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0350/29/29_
0.482543891120.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/23/23_
0.473320102750.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0350/57/57_
0.4739110282310.00.280.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/22/22_
0.4613343105780.00.070.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3077a9b850d5

1-0350/32/32_
0.4611356522350.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/30/30_
0.474671892111380.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

1-0350/33/33_
0.4612585406900.00.150.15
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0350/47/47_
0.468725600520.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0350/23/23_
0.461194256248540.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/21/21_
0.46989388184800.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.46812314210450.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBl

1-0350/38/38_
0.481969108770.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/41/41_
0.461058566291660.00.230.23
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.481264200870.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06ad13838ad68

1-0350/25/25_
0.48644167460.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_535c4fb62e15a

1-0350/29/29_
0.467175493900.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKf

1-0350/34/34_
0.4831496070.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c62949131ffe5

1-0350/26/26_
0.4664321683832020.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0350/23/23_
0.46608248228920.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-03517/75/75W
0.48001121023.70.260.26
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owFLzvr4hyzycuz

1-0350/43/43_
0.4656511616311910.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2

Found on 2024-10-09 04:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb312ab09b122ab09b1214964ee5

Apache Status

Apache Server Status for trinitylismore-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:11:50 UTC
Restart Time: Tuesday, 08-Oct-2024 21:35:45 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 hours 36 minutes 5 seconds
Server load: 1.05 1.14 1.27
Total accesses: 1640 - Total Traffic: 6.7 MB - Total Duration: 1168674
CPU Usage: u.79 s.79 cu0 cs0 - .00665% CPU load
.069 requests/sec - 296 B/second - 4298 B/request - 712.606 ms/request
2 requests currently being processed, 48 idle workers
_______________K____________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0340/36/36_
0.4655811571308570.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHKchB

0-0340/34/34_
0.4651263191730.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8MgEMe%2FSt94orR

0-0340/40/40_
0.463411088200680.00.190.19
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8MgFIb%2FSu%2B4o

0-0340/32/32_
0.4641852218280.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLRbtsgFIZfxXdcYRzb7

0-0340/40/40_
0.46289548430.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

0-0340/28/28_
0.465830132640.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0340/27/27_
0.45928338118330.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHMd

0-0340/18/18_
0.458554042220.00.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/34/34_
0.4568410693400.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0340/33/33_
0.46636818390.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/28/28_
0.4623522258540.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

0-0340/37/37_
0.461554487170.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/26/26_
0.4686411512890.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCe

0-0340/32/32_
0.46571103370.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0340/32/32_
0.46103088610.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cHEAD /saml2/idp/metadata.php HTTP/1.1

0-0343/23/23K
0.471029387.40.060.06
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

0-0340/36/36_
0.441417119106730.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_daa053c3b7ff6

0-0340/44/44_
0.44137446405470.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0340/23/23_
0.4413428102570.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/24/24_
0.4412868387380.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0340/35/35_
0.4412315332410.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBTuMwEIZfJTefHMdJK

0-0340/39/39_
0.4511714670990.00.250.25
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHOc

0-0340/28/28_
0.4511034253730.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9c9130d94597

0-0340/26/26_
0.4510255160770.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_faef4587504c8

0-0340/27/27_
0.45752230890120.00.130.13
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCf

1-0350/29/29_
0.482553891120.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/23/23_
0.473340102750.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0350/57/57_
0.4739310282310.00.280.28
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0350/22/22_
0.4613363105780.00.070.07
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3077a9b850d5

1-0350/32/32_
0.4611376522350.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/30/30_
0.474691892111380.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJdT8IwFIb%2Fyu561XW

1-0350/33/33_
0.4612605406900.00.150.15
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHCd

1-0350/47/47_
0.468735600520.00.170.17
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwEMe%2Fyt761HU

1-0350/23/23_
0.461195256248540.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZJNb%2BMgEIb%2Fim%2B

1-0350/21/21_
0.46990388184800.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.46814314210450.00.140.14
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLBjtowEIZfJTefHCeBl

1-0350/38/38_
0.481979108770.00.160.16
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0350/41/41_
0.461059566291660.00.230.23
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flighthou

1-0350/29/29_
0.481274200870.00.090.09
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06ad13838ad68

1-0350/25/25_
0.48664167460.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_535c4fb62e15a

1-0350/29/29_
0.467185493900.00.100.10
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKf

1-0350/34/34_
0.4832496070.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c62949131ffe5

1-0350/26/26_
0.4664421683832020.00.080.08
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLLTsMwEEV%2FJTuvHKd

1-0350/23/23_
0.46610248228920.00.110.11
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-03529/87/87W
0.49001184945.60.290.29
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /server-status HTTP/1.1

1-0350/43/43_
0.4656611616311910.00.120.12
127.0.0.1http/1.1ip-10-1-91-167.ap-southeast-2.cGET /saml2/idp/SSO

Found on 2024-10-09 04:11

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.66
Domain: www.scalingworks.asia
Port: 443
URL: https://www.scalingworks.asia

First seen 2022-12-10 02:11
Last seen 2025-09-09 06:31
Open for 1004 days

Severity: medium
Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b135b19f020397cdc500dc21a0218db97a

Found 34 files trough .DS_Store spidering:

/images
/images/404.png
/images/client
/images/client/amazon.svg
/images/client/daikin.png
/images/client/gobike.png
/images/client/google.svg
/images/client/iprice.png
/images/client/lenovo.svg
/images/client/paypal.svg
/images/client/savoroflife.png
/images/client/shopify.svg
/images/client/spotify.svg
/images/client/ugcurrency.png
/images/client/ugcurrency.png.sb-ca29d379-Eyyj5A
/images/client/yippi.png
/images/favicon.ico
/images/header-bg.png
/images/icon
/images/logo.png
/images/payments
/images/stacks
/images/stacks/android.svg
/images/stacks/angular.svg
/images/stacks/aws.svg
/images/stacks/azure.svg
/images/stacks/docker.svg
/images/stacks/googlecloud.svg
/images/stacks/ios.svg
/images/stacks/kubernetes.svg
/images/stacks/nodejs.svg
/images/stacks/php.svg
/images/stacks/python.svg
/images/stacks/react.svg

Found on 2025-09-09 06:31

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af24725c32cdade6c08aff9d5f4231c83a28fd6

Found 9 files trough .DS_Store spidering:

/images
/images/404.png
/images/client
/images/favicon.ico
/images/header-bg.png
/images/icon
/images/logo.png
/images/payments
/images/stacks

Found on 2024-11-06 09:11

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bceb8b4c655ea541b07d61c6713737df73

Found 22 files trough .DS_Store spidering:

/images
/images/404.png
/images/client
/images/client/amazon.svg
/images/client/daikin.png
/images/client/gobike.png
/images/client/google.svg
/images/client/iprice.png
/images/client/lenovo.svg
/images/client/paypal.svg
/images/client/savoroflife.png
/images/client/shopify.svg
/images/client/spotify.svg
/images/client/ugcurrency.png
/images/client/ugcurrency.png.sb-ca29d379-Eyyj5A
/images/client/yippi.png
/images/favicon.ico
/images/header-bg.png
/images/icon
/images/logo.png
/images/payments
/images/stacks

Found on 2023-03-01 07:04

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.46
Domain: ucsbh4k9kqwb.xyz
Port: 443
URL: https://ucsbh4k9kqwb.xyz

First seen 2024-10-04 08:40
Last seen 2024-10-08 08:51
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 08:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.46
Domain: ucsbh4k9kqwb.xyz
Port: 443
URL: https://ucsbh4k9kqwb.xyz

First seen 2024-05-06 06:48
Last seen 2024-09-30 19:30
Open for 147 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 19:30
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-09 00:01
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.46
Domain: iyorbi1luppqvo.xyz
Port: 443
URL: https://iyorbi1luppqvo.xyz

First seen 2024-04-06 07:29
Last seen 2024-09-30 06:30
Open for 176 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ede80ff5
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/pzhan/ios-down-pzhan.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 06:30
  
  216 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522328e4b29
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/ios-down-pzhan.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-08-26 15:28
  
  215 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.46
Domain: irs-extension.net
Port: 443
URL: https://irs-extension.net

First seen 2022-11-01 05:43
Last seen 2024-08-20 11:17
Open for 658 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a34c0322d04c0322d04c0322d0
```
Found 2 files trough .DS_Store spidering:

/images
/images/thumb1a.jpg
```
  Found on 2024-08-20 11:17
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.46
Domain: moriarty.link
Port: 80
URL: http://moriarty.link

First seen 2023-02-02 23:54
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cab73d65
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/stormzhang/stormzhang.github.com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 23:54
  
  280 Bytes
Create report

Open service 65.9.95.46:80 · d1x866ehkquskv.amplifyapp.com

2026-01-12 03:55

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 03:55:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://d1x866ehkquskv.amplifyapp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d33f640b9793fb0553cc6dbe55988068.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: MH2GiDniZEyiemy1Exa72Ehigf-YWaPDwD9D6S8bfeKIv4BGZxGb3g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.46:443 · d1x866ehkquskv.amplifyapp.com

2026-01-12 03:55

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Mon, 12 Jan 2026 03:55:41 GMT
X-Cache: Error from cloudfront
Via: 1.1 5a9253ffd4a04a82b061e7ef23f713d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: vjJMBe4qlJn0vuF2JZfOJApw-jJnJLa6uQ3iA4dRoziYQGKfg5yM8w==

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.46:443 · assa.computer

2026-01-09 12:10

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 56847
Connection: close
Date: Fri, 09 Jan 2026 12:10:49 GMT
Last-Modified: Fri, 31 Jan 2025 04:19:09 GMT
ETag: "c04ea73847bb4172383113bf75291cee"
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 b5f551be30f63eca57ca04273cb75994.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: L-ljxUH93x1DKXUEHNBsFBh-coKIB2gGEB9_tbSlhwAAcD0p-GS97g==

Page title: 아싸컴

<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>아싸컴</title>
<link rel="stylesheet" as="style" crossorigin="anonymous" href="https://cdn.jsdelivr.net/gh/orioncactus/pretendard/dist/web/variable/pretendardvariable-dynamic-subset.min.css">
<script src="https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js" defer></script>
<script>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({"gtm.start": new Date().getTime(), event: "gtm.js"});var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != "dataLayer" ? "&l=" + l : "";j.async = true;j.src = "https://www.googletagmanager.com/gtm.js?id=" + i + dl;f.parentNode.insertBefore(j, f);})(window, document, "script", "dataLayer", "GTM-P7JHMQWP");</script>
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P7JHMQWP" height="0" width="0" style="display: none; visibility: hidden"></iframe></noscript>
<link rel="preload" as="fetch" crossorigin="anonymous" href="/_payload.json">
<style>/*! tailwindcss v3.3.5 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-feature-settings:normal;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #00

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.46:443 · registro-laboral.com

2026-01-09 11:44

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1699
Connection: close
Last-Modified: Sun, 16 Jun 2019 22:06:19 GMT
Server: AmazonS3
Date: Fri, 09 Jan 2026 02:44:59 GMT
ETag: "0654c3e15b9e0ec0bb8efdf83eb6f239"
X-Cache: Hit from cloudfront
Via: 1.1 93fcd07b66eaf26b036f14e2ec9d73ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 5b7O2iqjiIrd_Zv-7e1PnSXJAwPyYGKNgTL7uzkrHztcprXynFOrkw==
Age: 32356

Page title: Registro Laboral

<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8" />
    <title>Registro Laboral</title>
    <meta name="description" i18n-content="" content="Registro de jornada laboral" />
    <meta name="keywords" i18n-content="" content="jornada laboral,registro jornada laboral,aplicacion registro jornada laboral,registro jornada,jornada laboral simple,jornada laboral,registro de horas" />
    <meta name="robots" content="INDEX,FOLLOW" />
    <meta http-equiv="Cache-Control" content="max-age=36000" />
    <base href="/" />
    <!-- Global site tag (gtag.js) - Google Analytics -->
    <script async="" src="https://www.googletagmanager.com/gtag/js?id=UA-1216710-21"></script>
    <script>
        window.dataLayer = window.dataLayer || [];

        function gtag() {
            dataLayer.push(arguments);
        }
        gtag('js', new Date());

        gtag('config', 'UA-1216710-21');
    </script>

    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="favicon.ico">

    <link rel="manifest" href="manifest.webmanifest">
    <meta name="theme-color" content="#1976d2">
<link rel="stylesheet" href="styles.48552d20da3622dd30aa.css"></head>

<body>
    <app-root class="bg"></app-root>
    <noscript>Please enable JavaScript to continue using this application.</noscript>
<script type="text/javascript" src="runtime.a5dd35324ddfd942bef1.js"></script><script type="text/javascript" src="es2015-polyfills.4a4cfea0ce682043f4e9.js" nomodule></script><script type="text/javascript" src="polyfills.407a467dedb63cfdd103.js"></script><script type="text/javascript" src="main.1d0232f82f388b07bbc1.js"></script></body>

</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.46:80 · cdn.outreachapps.com

2026-01-09 11:14

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 09:37:07 GMT
X-Redirect-By: WordPress
Location: https://outreachapps.com/
Server: nginx/1.29.4
X-Powered-By: PHP/7.4.33
X-Cache: Hit from cloudfront
Via: 1.1 2a5c925255bb252ff0ed65977311f74e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 973QFwZ56AEESH891Db4t8tvsNByclBrWB7HFWIbYq21BYbKd-3n0w==
Age: 5865

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.46:443 · litefcp-test-ui2gmqbury.029930584171.lambda-lite.global.on.aws

2026-01-08 05:36

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Thu, 08 Jan 2026 05:36:51 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 0c8bf5614b4bcc3e76982cb7ff9a7662.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: pW2ggmvpq2wWxmsqKb6vOejew6nxGk-gH7D1z3OK0uwlc9bunIyFHQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: pW2ggmvpq2wWxmsqKb6vOejew6nxGk-gH7D1z3OK0uwlc9bunIyFHQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.46:80 · litefcp-test-ui2gmqbury.029930584171.lambda-lite.global.on.aws

2026-01-08 05:36

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 08 Jan 2026 05:36:50 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9ed2eeec8748ea461af0d1cbf998da0e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: mdH9W4YyxpObiZTJItAAuRbDsO_w-_lJ-WUShj6kBzsxdOXBDVvE3g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: mdH9W4YyxpObiZTJItAAuRbDsO_w-_lJ-WUShj6kBzsxdOXBDVvE3g==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.46:443 · litefcp-test-inkjyd7akm.204726797591.lambda-lite.global.on.aws

2026-01-07 20:21

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Wed, 07 Jan 2026 20:21:31 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 2a9856881d192b485d1bf1928e98c7ec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 4jL6IZuEczOGCoe2LPIeA-kp0aseZbrG1qOtF5FaRmancy7Ugf7KlQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 4jL6IZuEczOGCoe2LPIeA-kp0aseZbrG1qOtF5FaRmancy7Ugf7KlQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin

Create report

Open service 65.9.95.46:80 · litefcp-test-inkjyd7akm.204726797591.lambda-lite.global.on.aws

2026-01-07 20:21

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 20:21:30 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 2a9856881d192b485d1bf1928e98c7ec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: lzXBrdxLf2iuG5CqhXhit7tSRPN7ghU8nWA3KV32ZpxuK1_AD17G0g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: lzXBrdxLf2iuG5CqhXhit7tSRPN7ghU8nWA3KV32ZpxuK1_AD17G0g==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin

Create report

Open service 65.9.95.46:443 · metrics-publishing-canary-1767812441030.799634396366.lambda-lite.global.on.aws

2026-01-07 19:01

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Wed, 07 Jan 2026 19:01:38 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b9288402a0a891e0bbaca832ecabae60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: OH0gr3ESm-j9k9u_hOMydOCWKc3sHGaC5fgzHgw3aNkEY5qkC3Vd4A==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: OH0gr3ESm-j9k9u_hOMydOCWKc3sHGaC5fgzHgw3aNkEY5qkC3Vd4A==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin

Create report

Open service 65.9.95.46:80 · metrics-publishing-canary-1767812441030.799634396366.lambda-lite.global.on.aws

2026-01-07 19:01

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 19:01:38 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 7df0d6b4ce8f8b155434dd5d830b76be.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: NGoJyMultF5C6A-dgw2ptQ2i5h_y1HGVpHmLHYvKruEFT_VvsJtcNw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: NGoJyMultF5C6A-dgw2ptQ2i5h_y1HGVpHmLHYvKruEFT_VvsJtcNw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin

Create report

Open service 65.9.95.46:80 · litefcp-test-yx9uqdd9eb.475705689239.lambda-lite.global.on.aws

2026-01-06 18:51

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 06 Jan 2026 18:51:46 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 db66f1cc00a415c34c42ad011b26850c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: kTXfLYyI6UOTjqWZSGv7OE85f4x_AFg7J-5yoSCjO351Rm6Gs6KvMA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: kTXfLYyI6UOTjqWZSGv7OE85f4x_AFg7J-5yoSCjO351Rm6Gs6KvMA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 65.9.95.46:443 · litefcp-test-yx9uqdd9eb.475705689239.lambda-lite.global.on.aws

2026-01-06 18:51

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Tue, 06 Jan 2026 18:51:47 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 2a5c925255bb252ff0ed65977311f74e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: WUCumfOMxmFJI7LLs5uegA6qBNFQCbiB7UMoUx7tDqaG_LryJU1VXw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: WUCumfOMxmFJI7LLs5uegA6qBNFQCbiB7UMoUx7tDqaG_LryJU1VXw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 65.9.95.46:80 · permissionmanager.spektr.a2z.com

2026-01-04 04:10

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 04:10:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://permissionmanager.spektr.a2z.com/
X-Cache: Redirect from cloudfront
Via: 1.1 168125097acf734cd7750e139a974b38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 9iVqPVOiKCWliXIqyt6lQH7unIMiNM-fJklZye6ghdORQzYCGhgAdw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-04 by HttpPlugin

Create report

Open service 65.9.95.46:443 · permissionmanager.spektr.a2z.com

2026-01-04 04:10

HTTP/1.1 403 Forbidden
Content-Type: application/json
Content-Length: 42
Connection: close
Date: Sun, 04 Jan 2026 04:10:22 GMT
x-amz-apigw-id: WpE3VGERIAMEOag=
x-amzn-RequestId: ae7ec585-be27-49b5-b7b7-9b82d849c0f2
x-amzn-ErrorType: MissingAuthenticationTokenException
X-Cache: Error from cloudfront
Via: 1.1 2a5c925255bb252ff0ed65977311f74e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: tRChIy0iZzUIHg53PRoUQ-9pcTEF1E67RTIq03V7CMFt_CknPpUQEQ==


{"message":"Missing Authentication Token"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 65.9.95.46:443 · assa.computer

2026-01-02 15:42

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 56847
Connection: close
Date: Fri, 02 Jan 2026 15:42:17 GMT
Last-Modified: Fri, 31 Jan 2025 04:19:09 GMT
ETag: "c04ea73847bb4172383113bf75291cee"
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 f631e696fd022598ec39e248ac48b192.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: re0vgfmGpbJ8OwF4gFvn_WwOq8nL6U668TUrl1_PHANu7iQm5G2Wtw==

Page title: 아싸컴

<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>아싸컴</title>
<link rel="stylesheet" as="style" crossorigin="anonymous" href="https://cdn.jsdelivr.net/gh/orioncactus/pretendard/dist/web/variable/pretendardvariable-dynamic-subset.min.css">
<script src="https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js" defer></script>
<script>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({"gtm.start": new Date().getTime(), event: "gtm.js"});var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != "dataLayer" ? "&l=" + l : "";j.async = true;j.src = "https://www.googletagmanager.com/gtm.js?id=" + i + dl;f.parentNode.insertBefore(j, f);})(window, document, "script", "dataLayer", "GTM-P7JHMQWP");</script>
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P7JHMQWP" height="0" width="0" style="display: none; visibility: hidden"></iframe></noscript>
<link rel="preload" as="fetch" crossorigin="anonymous" href="/_payload.json">
<style>/*! tailwindcss v3.3.5 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-feature-settings:normal;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #00

Found 2026-01-02 by HttpPlugin

Create report

Open service 65.9.95.46:80 · cdn.outreachapps.com

2026-01-02 03:48

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 02 Jan 2026 03:48:29 GMT
X-Redirect-By: WordPress
Location: https://outreachapps.com/
Server: nginx/1.29.4
X-Powered-By: PHP/7.4.33
X-Cache: Hit from cloudfront
Via: 1.1 2a9856881d192b485d1bf1928e98c7ec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 8cXHClKl-VX5cTMcVPVBwwM73K92ZTcYGT3LraMb1GPFMB63JAhJZw==
Age: 1

Found 2026-01-02 by HttpPlugin

Create report

Open service 65.9.95.46:443 · registro-laboral.com

2026-01-02 03:02

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1699
Connection: close
Date: Fri, 02 Jan 2026 03:02:02 GMT
Last-Modified: Sun, 16 Jun 2019 22:06:19 GMT
ETag: "0654c3e15b9e0ec0bb8efdf83eb6f239"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9ed2eeec8748ea461af0d1cbf998da0e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: MIJ6zx8HDt9vZBLfTQZp6-zU-XRLiJ_-uI4KH9_P91ExpcbYhaxsAw==
Age: 1

Page title: Registro Laboral

<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8" />
    <title>Registro Laboral</title>
    <meta name="description" i18n-content="" content="Registro de jornada laboral" />
    <meta name="keywords" i18n-content="" content="jornada laboral,registro jornada laboral,aplicacion registro jornada laboral,registro jornada,jornada laboral simple,jornada laboral,registro de horas" />
    <meta name="robots" content="INDEX,FOLLOW" />
    <meta http-equiv="Cache-Control" content="max-age=36000" />
    <base href="/" />
    <!-- Global site tag (gtag.js) - Google Analytics -->
    <script async="" src="https://www.googletagmanager.com/gtag/js?id=UA-1216710-21"></script>
    <script>
        window.dataLayer = window.dataLayer || [];

        function gtag() {
            dataLayer.push(arguments);
        }
        gtag('js', new Date());

        gtag('config', 'UA-1216710-21');
    </script>

    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="favicon.ico">

    <link rel="manifest" href="manifest.webmanifest">
    <meta name="theme-color" content="#1976d2">
<link rel="stylesheet" href="styles.48552d20da3622dd30aa.css"></head>

<body>
    <app-root class="bg"></app-root>
    <noscript>Please enable JavaScript to continue using this application.</noscript>
<script type="text/javascript" src="runtime.a5dd35324ddfd942bef1.js"></script><script type="text/javascript" src="es2015-polyfills.4a4cfea0ce682043f4e9.js" nomodule></script><script type="text/javascript" src="polyfills.407a467dedb63cfdd103.js"></script><script type="text/javascript" src="main.1d0232f82f388b07bbc1.js"></script></body>

</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 65.9.95.46:443 · assa.computer

2025-12-23 00:52

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 56847
Connection: close
Date: Tue, 23 Dec 2025 00:52:59 GMT
Last-Modified: Fri, 31 Jan 2025 04:19:09 GMT
ETag: "c04ea73847bb4172383113bf75291cee"
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 1f7383179aa19c47a962c46236696426.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: 77MIhavidZiA3TuTuqvtd3OHJtYFiVO3rsqz5235m8JXDwLsbl-z5A==

Page title: 아싸컴

<!DOCTYPE html>
<html >
<head><meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>아싸컴</title>
<link rel="stylesheet" as="style" crossorigin="anonymous" href="https://cdn.jsdelivr.net/gh/orioncactus/pretendard/dist/web/variable/pretendardvariable-dynamic-subset.min.css">
<script src="https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js" defer></script>
<script>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({"gtm.start": new Date().getTime(), event: "gtm.js"});var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != "dataLayer" ? "&l=" + l : "";j.async = true;j.src = "https://www.googletagmanager.com/gtm.js?id=" + i + dl;f.parentNode.insertBefore(j, f);})(window, document, "script", "dataLayer", "GTM-P7JHMQWP");</script>
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P7JHMQWP" height="0" width="0" style="display: none; visibility: hidden"></iframe></noscript>
<link rel="preload" as="fetch" crossorigin="anonymous" href="/_payload.json">
<style>/*! tailwindcss v3.3.5 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-feature-settings:normal;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #00

Found 2025-12-23 by HttpPlugin

Create report

Open service 65.9.95.46:443 · registro-laboral.com

2025-12-22 18:40

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1699
Connection: close
Date: Mon, 22 Dec 2025 18:40:16 GMT
Last-Modified: Sun, 16 Jun 2019 22:06:19 GMT
ETag: "0654c3e15b9e0ec0bb8efdf83eb6f239"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 d19bc25644fc0cb24d9e1c2cb87755ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: piW42xyQK_fpVpvYyNvNuknkEApFbNZSl9lEqy141CzhtxXaDX1tfA==

Page title: Registro Laboral

<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8" />
    <title>Registro Laboral</title>
    <meta name="description" i18n-content="" content="Registro de jornada laboral" />
    <meta name="keywords" i18n-content="" content="jornada laboral,registro jornada laboral,aplicacion registro jornada laboral,registro jornada,jornada laboral simple,jornada laboral,registro de horas" />
    <meta name="robots" content="INDEX,FOLLOW" />
    <meta http-equiv="Cache-Control" content="max-age=36000" />
    <base href="/" />
    <!-- Global site tag (gtag.js) - Google Analytics -->
    <script async="" src="https://www.googletagmanager.com/gtag/js?id=UA-1216710-21"></script>
    <script>
        window.dataLayer = window.dataLayer || [];

        function gtag() {
            dataLayer.push(arguments);
        }
        gtag('js', new Date());

        gtag('config', 'UA-1216710-21');
    </script>

    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" type="image/x-icon" href="favicon.ico">

    <link rel="manifest" href="manifest.webmanifest">
    <meta name="theme-color" content="#1976d2">
<link rel="stylesheet" href="styles.48552d20da3622dd30aa.css"></head>

<body>
    <app-root class="bg"></app-root>
    <noscript>Please enable JavaScript to continue using this application.</noscript>
<script type="text/javascript" src="runtime.a5dd35324ddfd942bef1.js"></script><script type="text/javascript" src="es2015-polyfills.4a4cfea0ce682043f4e9.js" nomodule></script><script type="text/javascript" src="polyfills.407a467dedb63cfdd103.js"></script><script type="text/javascript" src="main.1d0232f82f388b07bbc1.js"></script></body>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.9.95.46:80 · cdn.outreachapps.com

2025-12-22 16:27

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 16:27:04 GMT
X-Redirect-By: WordPress
Location: https://outreachapps.com/
Server: nginx/1.29.4
X-Powered-By: PHP/7.4.33
X-Cache: Hit from cloudfront
Via: 1.1 0bb58964819755c192fe9c24c342bd1a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: HF7mpv03b031jhftzFgDuyckAY0rhWJkrxVagFTCl43hLS7e8sD8aQ==
Age: 1

Not after:

2026-03-04 23:59

Domain summary

trlismore-login.cloudworkengine.net 50 trinitylismore-login.cloudworkengine.net 50 www.interop.pagopa.it 4 ucsbh4k9kqwb.xyz 3 www.scalingworks.asia 3 www.rolandma.com 3 iyorbi1luppqvo.xyz 2 assa.computer 3 registro-laboral.com 3 moriarty.link 1 irs-extension.net 1 litefcp-test-ui2gmqbury.029930584171.lambda-lite.global.on.aws 1 permissionmanager.spektr.a2z.com 1 litefcp-test-yx9uqdd9eb.475705689239.lambda-lite.global.on.aws 1 metrics-publishing-canary-1767812441030.799634396366.lambda-lite.global.on.aws 1 litefcp-test-inkjyd7akm.204726797591.lambda-lite.global.on.aws 1 d1x866ehkquskv.amplifyapp.com 1 cdn.outreachapps.com 2

18 recorded

Host 65.9.95.46

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Apache server-status page is publicly available

Apache server-status page is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

*.d1x866ehkquskv.amplifyapp.comd1x866ehkquskv.amplifyapp.com

assa.computerwww.assa.computer

*.registro-laboral.comwww.registro-laboral.comregistro-laboral.com

lambda-lite.global.on.awslitefcp-test-ui2gmqbury.029930584171.lambda-lite.global.on.aws

lambda-lite.global.on.awslitefcp-test-inkjyd7akm.204726797591.lambda-lite.global.on.aws

lambda-lite.global.on.awsmetrics-publishing-canary-1767812441030.799634396366.lambda-lite.global.on.aws

lambda-lite.global.on.awslitefcp-test-yx9uqdd9eb.475705689239.lambda-lite.global.on.aws

permissionmanager.spektr.a2z.com

Domain summary