LeakIX - Host 65.9.95.66

Host 65.9.95.66

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache 2.4.58

tcp/443

CloudFront

tcp/443 tcp/80

nginx nginx 1.28.0

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.66
Domain: painel.gcidades.com.br
Port: 80
URL: http://painel.gcidades.com.br

First seen 2024-09-08 09:29
Last seen 2026-01-16 19:44
Open for 495 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65222fedf7aa
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/Diagonel/G-Cidades_Frontend
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX2FJejdpdnFTWFJpcUp0RGxRb01hdlhmTXpjaXBpSjNlNWEzWA==
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-16 19:44
  
  428 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: www.borrowly.com.au
Port: 443
URL: https://www.borrowly.com.au

First seen 2024-10-09 05:16
Last seen 2026-01-16 13:39
Open for 464 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f59365a34a05c5684a05c5684a05c568
```
Found 2 files trough .DS_Store spidering:

/images
/svg
```
  Found on 2026-01-16 13:39
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: thegroupbuyexperiment.com
Port: 443
URL: https://thegroupbuyexperiment.com

First seen 2023-02-03 04:26
Last seen 2026-01-16 11:20
Open for 1078 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2026-01-16 11:20
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 65.9.95.66
Domain: clyps.io
Port: 443
URL: https://clyps.io

First seen 2025-10-17 08:41
Last seen 2025-12-09 22:45
Open for 53 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa36194a638c6650fdc1a7a5af8aa887b670866539b
```
GraphQL introspection enabled at /graphql
Types: 282 (by kind: ENUM: 6, INPUT_OBJECT: 251, OBJECT: 18, SCALAR: 7)
Operations:
- Query: Query | fields: brandedDesign, client, clients, clientsCount, design
- Mutation: Mutation | fields: createOneBrand, createOneCategory, createOneClient, createOneDesign, createOneUser
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-09 22:45
  
  365.1 kBytes
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.66
Domain: broughton-login.cloudworkengine.net
Port: 443
URL: https://broughton-login.cloudworkengine.net

First seen 2024-10-09 04:17
Last seen 2025-12-01 14:10
Open for 418 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20252b7291

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 01-Dec-2025 14:11:00 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 16 hours 32 minutes 50 seconds
Server load: 0.64 0.84 0.82
Total accesses: 917764 - Total Traffic: 3.5 GB - Total Duration: 224436695
CPU Usage: u45.27 s67.93 cu325.69 cs170.43 - .0151% CPU load
.228 requests/sec - 920 B/second - 4043 B/request - 244.547 ms/request
1 requests currently being processed, 49 idle workers
______W___________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268150/660/17673_
9.302624540902470.02.4767.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268150/670/17663_
9.30241249699120.02.4967.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/706/18134_
9.29303244105660.02.6569.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/608/18285_
9.29387046867400.02.2870.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HT

0-0268150/669/17935_
9.28742138116950.02.4969.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/748/18058_
9.29334445084010.02.7369.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-02681528/734/17227W
9.3100433398537.52.3865.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0268150/748/18406_
9.31180340409880.02.5570.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/728/17592_
9.261211550500320.02.8568.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/810/17862_
9.3170241024510.02.7068.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/863/17654_
9.261511443643620.03.1967.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/639/17829_
9.261421348731440.02.5869.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/690/18031_
9.261380343812310.02.6469.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/619/17422_
9.261331446614190.02.4067.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/599/17389_
9.271151541012800.02.0766.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/717/17003_
9.281080342568960.02.8765.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/764/18043_
9.28850546698210.03.2270.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php/login.php HTTP/1.1

0-0268150/709/17528_
9.281049238996210.02.7168.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/746/17457_
9.28971445479140.02.7367.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/813/17938_
9.287752644349120.03.1868.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_75c45fc876507

0-0268150/675/18329_
9.28551441968700.02.5371.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/684/17933_
9.28671545336990.02.6469.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/612/17678_
9.28438036424550.02.1067.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /admin/assets/filemanager/dialog.php HTTP/1.1

0-0268150/683/17533_
9.28480241943900.02.5668.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/619/17863_
9.281022338591010.02.2969.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0115500/89/15210_
1.28191436411330.00.3558.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/92/15292_
1.28463038007750.00.3558.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /assets/filemanager/dialog.php HTTP/1.1

1-0115500/78/15258_
1.261355339022090.00.2258.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0115500/108/15213_
1.261091437208250.00.4859.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/95/15106_
1.2842233972400.00.3357.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0115500/80/15671_
1.27611539300030.00.3160.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/97/16036_
1.26995236596940.00.3663.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0115500/87/15549_
1.27911640971170.00.3159.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/92/15344_
1.261031537694890.00.3158.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/94/15559_
1.261062233826810.00.3859.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0115500/111/15798_
1.27731438091520.00.4561.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/122/14643_
1.27491535565020.00.4855.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/80/15823_
1.27742139228630.00.2660.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0115500/78/14987_
1.28131535973790.00.2557.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/113/15412_
1.27791533665670.00.3759.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/122/15703_
1.261571637509650.00.5161.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/94/15389_
1.261271540266260.00.3158.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/117/15529_
1.261451544009360.00.4159.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/114/15099_
1.261391637998170.00.4058.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/82/15948_
1.28251540769480.00.3061.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0115500/118/15367_
1.28371539729570.00.4658.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /mod

Found on 2025-12-01 14:10

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2081843c2e

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 29-Nov-2025 03:38:43 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  44 days 6 hours 32 seconds
Server load: 0.82 1.20 1.28
Total accesses: 876932 - Total Traffic: 3.3 GB - Total Duration: 218009418
CPU Usage: u58.9 s72.55 cu296.1 cs154.76 - .0152% CPU load
.229 requests/sec - 930 B/second - 4055 B/request - 248.605 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0112130/1598/16855_
20.54665339792050.06.3164.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1530/16886_
20.538843348413430.05.6565.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1482/17281_
20.54383342440350.05.4566.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1447/17539_
20.53834545652940.05.6367.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1462/17168_
20.54654437140430.05.7066.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1583/17186_
20.54714444057830.05.9166.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1275/16384_
20.54534542326280.04.7163.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1597/17498_
20.56264238863380.06.3767.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1592/16735_
20.539833149060610.06.1564.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1568/16933_
20.56188139751010.06.1065.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1390/16681_
20.56294542295820.05.0764.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1455/17081_
20.53954547419200.05.4866.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1341/17227_
20.562283342565140.05.2766.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d9fea25e3300a

0-0112130/1566/16646_
20.538083844871220.06.1564.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1364/16626_
20.562073339823820.04.9664.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1270/16167_
20.553618641188420.04.8361.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1650/17157_
20.54774445127610.06.3266.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1317/16687_
20.553835737816910.05.1865.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1411/16583_
20.56105243983320.05.4663.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1493/17021_
20.54742342557110.05.5065.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1563/17518_
20.56129440555160.06.2968.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1544/17143_
20.55348243908470.06.0666.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_3341372f1a846c0e8

0-0112130/1379/16965_
20.5665335242070.05.3265.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-01121323/1272/16714W
20.5700405032626.44.9865.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0112130/1375/17112_
20.54474437768170.05.2766.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/918/14539_
13.56594435215130.03.6856.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/874/14515_
13.56660236830120.03.4356.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1063/14563_
13.56525437803530.04.3156.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/989/14441_
13.566833536050150.03.9256.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/997/14385_
13.56800032848870.04.0455.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0272870/1040/14861_
13.56732238445440.04.0057.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/858/15124_
13.56894434969070.03.1059.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1172/14704_
13.56414539460170.04.6456.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/876/14623_
13.56748136602470.03.4455.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/885/14521_
13.56374232647020.03.6156.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/948/14875_
13.57326236649590.03.4257.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/856/13752_
13.56383333995460.03.1952.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1024/14980_
13.572853037928630.03.8257.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/938/14256_
13.56354434814930.03.4354.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1034/14571_
13.57263131899460.04.0156.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/972/14913_
13.5883436118320.03.7058.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/882/14572_
13.58114538736800.03.3555.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/876/14734_
13.5848442632870.03.1556.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0272870/1013/14264_
13.56965336693020.04.0155.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/905/15216_
13.5719824939791210.03.4158.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=404&StateId=

1-0272870/824/14416_
13.572143938711610.03.2655.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.

Found on 2025-11-29 03:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20cfafac11

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 26-Nov-2025 04:59:42 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 7 hours 21 minutes 32 seconds
Server load: 2.13 1.35 1.27
Total accesses: 822494 - Total Traffic: 3.1 GB - Total Duration: 207671844
CPU Usage: u51.75 s65.91 cu280.74 cs146.79 - .0153% CPU load
.23 requests/sec - 935 B/second - 4057 B/request - 252.49 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0112130/449/15706_
5.38653537767350.01.8160.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/344/15700_
5.42277246388340.01.3260.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

0-0112130/430/16229_
5.385794139466850.01.6562.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/332/16424_
5.37726243402740.01.3563.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/370/16076_
5.38593535384480.01.4662.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/416/16019_
5.37725242211860.01.6861.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/318/15427_
5.37697440799850.01.1559.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/438/16339_
5.39533635490080.01.7062.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/363/15506_
5.40344344820430.01.4760.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/449/15814_
5.41288037418110.01.7661.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0112130/424/15715_
5.40451340250500.01.5960.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0112130/436/16062_
5.4635046050170.01.6963.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0112130/365/16251_
5.42197241183700.01.4662.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/426/15506_
5.46117443316170.01.7360.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0112130/407/15669_
5.42277338027280.01.4260.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0112130/273/15170_
5.40368239594510.01.1158.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/415/15922_
5.42173643467390.01.6461.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/322/15692_
5.40413636164820.01.2261.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/402/15574_
5.42233442500680.01.4859.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/443/15971_
5.37762240866400.01.6261.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/379/16334_
5.431613938558640.01.5063.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/441/16040_
5.37784239469420.01.6462.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/390/15976_
5.36816333566690.01.4861.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/252/15694_
5.461324739205210.01.1361.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/351/16088_
5.39499136362390.01.3462.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-078290/1544/13499_
21.40515133713680.05.8951.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1486/13498_
21.42113535696410.05.9552.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/1660/13321_
21.41246335869340.06.3651.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1548/13334_
21.38726233604290.05.9452.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1516/13275_
21.40384230803100.05.5350.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1529/13688_
21.39580136361600.05.7852.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-078290/1443/14142_
21.38773433270890.05.7856.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/1583/13413_
21.40353537596150.05.8851.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/1670/13641_
21.41168235064120.06.6151.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1602/13497_
21.3875340130622930.06.3152.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfW5a

1-078290/1504/13782_
21.41309234824760.05.5653.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1462/12784_
21.4118729532622780.05.6149.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

1-0782925/1486/13803W
21.4200359856829.25.7053.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-078290/1574/13164_
21.41153332935590.06.2350.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/1469/13401_
21.38790329973950.05.8352.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/1768/13815_
21.404433334119060.06.8953.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65b39e9de2319

1-078290/1488/13518_
21.38713535970110.05.6251.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/1547/13736_
21.41215339921380.05.9252.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1459/13144_
21.38675232880600.05.6350.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/1709/14170_
21.38599036822970.06.4554.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-078290/1490/13400_
21.40548036513700.05.8051.53
127.0.0.1http/1.1ip-10-1-104-199.

Found on 2025-11-26 04:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d201d908309

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 23-Nov-2025 15:05:49 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  38 days 17 hours 27 minutes 39 seconds
Server load: 1.30 1.20 1.01
Total accesses: 757218 - Total Traffic: 2.9 GB - Total Duration: 193584247
CPU Usage: u40.32 s57.8 cu265.85 cs139.36 - .015% CPU load
.226 requests/sec - 916 B/second - 4051 B/request - 255.652 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292070/689/14482_
9.30221735301300.02.2555.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/642/14406_
9.30360541928640.02.3155.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/584/14717_
9.29540436387090.02.2456.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/824/14963_
9.30420540674350.02.8857.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/611/14787_
9.291028233240060.02.0456.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/608/14705_
9.29571337678280.02.0256.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0292070/643/14295_
9.30276238641910.02.3455.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/756/14928_
9.3035232918110.02.7357.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/734/14178_
9.30254239958550.02.7054.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/685/14248_
9.30145332855950.02.4655.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/739/14386_
9.301113138046550.02.7355.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/640/14626_
9.291432341073400.02.4657.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/739/14859_
9.2914543236908240.02.6657.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/650/14221_
9.291380439362290.02.4654.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/662/14252_
9.291320435020110.02.2454.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/647/13909_
9.291140437502450.02.0853.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/805/14545_
9.2910714740733780.02.8656.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5252fcfc900fd

0-0292070/712/14302_
9.291260634157000.02.6855.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/560/14369_
9.291199540056630.01.9855.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/697/14731_
9.29866237679710.02.5656.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/785/15085_
9.29720436462940.02.8158.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/690/14800_
9.29960437148790.02.4557.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/608/14502_
9.29780531153790.02.1055.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/748/14637_
9.29660437582270.02.9157.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/601/14772_
9.29840433653710.02.2257.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/241/12196_
3.715995330966320.00.8846.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/265/12277_
3.6813574732714070.01.0147.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-078290/280/11941_
3.714062932222290.01.0546.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3f691da7e2f07

1-078290/306/12092_
3.71554331733300.01.0247.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/236/11995_
3.70814127159250.00.7646.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/236/12395_
3.69854334008800.00.7047.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/246/12945_
3.6913112431777730.00.8351.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0782928/249/12079W
3.7200349426435.20.7546.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-078290/300/12271_
3.681440433140240.01.0446.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/323/12218_
3.7160528618910.01.1547.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/288/12566_
3.681405232993520.00.9749.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/280/11602_
3.6911542930738280.01.0044.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/247/12564_
3.691080533923410.00.9148.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/321/11911_
3.691233229255480.01.1345.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/293/12225_
3.691020527475640.01.1347.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/314/12361_
3.717493130533430.01.2248.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6f27c581791ee

1-078290/245/12275_
3.69896234000630.00.8546.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/314/12503_
3.71120637257780.01.1348.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/272/11957_
3.691037531281170.00.9446.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/271/12732_
3.71711434658300.00.9849.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/288/12198_
3.71480434335070.00.9246.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

Found on 2025-11-23 15:05

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d207e7c3090

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 21-Nov-2025 11:08:31 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  36 days 13 hours 30 minutes 20 seconds
Server load: 0.70 1.45 1.38
Total accesses: 734788 - Total Traffic: 2.8 GB - Total Duration: 190796160
CPU Usage: u46.74 s58.98 cu250.2 cs130.91 - .0154% CPU load
.233 requests/sec - 946 B/second - 4067 B/request - 259.661 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292070/195/13988_
3.52985234677730.00.6853.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/183/13947_
3.511062441534810.00.7554.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/233/14366_
3.501097135961120.01.0155.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0292070/280/14419_
3.5010773439909860.01.0955.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/194/14370_
3.54333232812120.00.6955.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/204/14301_
3.54102537141170.00.7055.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/185/13837_
3.521036138142000.00.7553.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0292070/276/14448_
3.529794032082380.00.9755.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/250/13694_
3.5210173639365310.01.0853.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/216/13779_
3.539134032342530.00.9653.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/269/13916_
3.539403837354990.01.1054.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/257/14243_
3.538722440690610.01.1556.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/316/14436_
3.53887336455440.01.2555.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/221/13792_
3.53767238863760.01.0153.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0292070/232/13822_
3.54739234634160.00.8453.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/257/13519_
3.54687137113350.00.9852.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/272/14012_
3.54582440008750.01.0854.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/271/13861_
3.54587433730570.01.2654.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/159/13968_
3.54642639661480.00.6354.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/277/14311_
3.54402437151670.01.1655.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/255/14555_
3.54273335948300.01.0256.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/257/14367_
3.54462436699080.01.0655.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/241/14135_
3.54222430883370.00.9854.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/259/14148_
3.5542437082380.01.2355.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/198/14369_
3.5429416033321640.00.8356.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfNXFmT

1-0214410/1616/11797_
21.84342430640710.06.5345.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1659/11821_
21.83702432313770.06.8145.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1476/11509_
21.82887431665100.05.9144.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/1421/11616_
21.83882531061910.05.5445.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1409/11591_
21.8110684326667010.05.5344.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0214410/1395/12018_
21.829573933701500.05.7246.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0214410/1572/12520_
21.84162431090280.06.5049.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1464/11643_
21.821028334145270.05.6444.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0214410/1562/11824_
21.84522532492830.06.1144.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1443/11711_
21.83822427735730.05.5845.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1696/12106_
21.83762432521590.07.0147.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1379/11159_
21.829263230222020.05.5543.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0214410/1721/12127_
21.84428174533424820.06.9546.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw97ke

1-0214410/1465/11395_
21.8482228454520.05.7543.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1532/11756_
21.82985227010540.05.9446.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1493/11871_
21.84229229587190.06.2246.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1532/11834_
21.8299416133394390.06.0845.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHdasMwDIVfJfi%2BseP

1-0214410/1707/11985_
21.84287236146920.06.8746.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/1469/11537_
21.83670230818290.05.6944.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1696/12335_
21.83587533990880.06.7648.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410

Found on 2025-11-21 11:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2099d99f27

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 18-Nov-2025 10:02:06 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 12 hours 23 minutes 56 seconds
Server load: 2.21 1.85 1.42
Total accesses: 663443 - Total Traffic: 2.5 GB - Total Duration: 175875176
CPU Usage: u34.49 s49.39 cu233.01 cs121.92 - .0152% CPU load
.229 requests/sec - 928 B/second - 4054 B/request - 265.095 ms/request
1 requests currently being processed, 49 idle workers
___________W______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-044090/671/12653_
9.25197431040690.02.5648.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/711/12679_
9.25137438331490.02.7149.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/523/12820_
9.24252333438910.01.8549.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/635/12800_
9.24378436759610.02.5449.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/661/12916_
9.24317430169580.02.6149.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/667/12871_
9.243974234363790.02.5749.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-044090/527/12400_
9.24223233676310.02.1147.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/611/12986_
9.24269328882550.02.3949.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/523/12216_
9.22850036879630.02.1047.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-044090/633/12473_
9.2518517329804760.02.5748.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

0-044090/614/12744_
9.2577535214140.02.4849.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0440925/651/12582W
9.2600365503629.22.4949.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-044090/668/13015_
9.228674033849420.02.6450.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-044090/701/12428_
9.2553036478290.02.8447.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-044090/717/12543_
9.22677432753340.02.8348.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/569/12225_
9.22738534620380.02.2347.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/692/12573_
9.22617436928070.02.7648.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/626/12400_
9.22797531226500.02.4348.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/667/12669_
9.23495236530580.02.7648.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/708/12891_
9.225523434850570.02.9149.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/680/12986_
9.22569232921240.02.6250.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/760/12977_
9.22702032185210.03.3350.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-044090/645/12654_
9.23459327062350.02.5349.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-044090/577/12813_
9.23524334506930.02.4350.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/640/13061_
9.24437531221490.02.7450.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/76/10257_
1.10535227489480.00.2839.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/69/10231_
1.1051916429039050.00.3239.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9RtN

1-0214410/73/10106_
1.10557428927020.00.3338.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/76/10271_
1.104882929128150.00.2540.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/82/10264_
1.10684224176670.00.2539.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/63/10686_
1.10643430205130.00.2541.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/68/11016_
1.1398028436930.00.2643.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0214410/49/10228_
1.09857530344380.00.1639.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/68/10330_
1.11447028987890.00.2938.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0214410/97/10365_
1.1081882324511340.00.4340.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0214410/79/10489_
1.10578429136920.00.2740.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/87/9867_
1.107874527067790.00.3437.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0214410/129/10535_
1.1072832528529270.00.5040.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeV1dXu

1-0214410/151/10081_
1.08882025589920.00.5538.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0214410/87/10311_
1.1311223324110.00.2740.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/67/10445_
1.1315994527347520.00.3740.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0214410/78/10380_
1.136533530617950.00.3439.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/idp/prp.php?login_hint=ABrown%40students.b

1-0214410/74/10352_
1.11420231633070.00.3039.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/71/10139_
1.1136315428376880.00.3039.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRSsMwFIZfpeR%2BTRq

1-0214410/59/10698_
1.11388233631109030.00.2141.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0214410/103/10356_
1.112793031621310.00.3439.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5195aec2fb1e6

1-0

Found on 2025-11-18 10:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20704421c7

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 03:14:27 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 5 hours 36 minutes 17 seconds
Server load: 1.18 1.02 1.00
Total accesses: 607818 - Total Traffic: 2.3 GB - Total Duration: 165655198
CPU Usage: u43.96 s52.75 cu201.12 cs105.03 - .0149% CPU load
.225 requests/sec - 912 B/second - 4051 B/request - 272.541 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................____________W_
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/1417/11601_
18.53468329149320.05.3444.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1450/11562_
18.5427518636256600.05.9644.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx%2B

0-046010/1278/11703_
18.53415330743640.04.8945.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1363/11653_
18.53363134302380.04.9644.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1410/11689_
18.53578827168690.05.5545.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1447/11718_
18.54329331317880.05.8545.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1324/11369_
18.534393231387930.05.1343.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1312/11994_
18.50786027319430.05.1046.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/undefined HTTP/1.1

0-046010/1325/11190_
18.5496133165050.05.0343.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1380/11458_
18.54158427762150.05.1244.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1314/11662_
18.541397233346100.05.3145.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1266/11355_
18.50108418934116390.04.8244.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/idp/prp.php?wfresh=0&client-request-id=304

0-046010/1347/11894_
18.5538431687290.05.3045.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1184/11305_
18.50698434530550.04.3943.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1411/11429_
18.50686131171190.05.7744.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-046010/1307/11249_
18.53626432825820.04.9143.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d5cFF

0-046010/1317/11401_
18.50732134915280.05.3944.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1204/11152_
18.50973229147830.04.6843.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1329/11572_
18.52668233674500.05.1144.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1354/11835_
18.501057133152000.04.9245.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1174/11839_
18.5525231243710.04.4345.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1257/11701_
18.50818430284800.04.9344.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1424/11515_
18.5010163025096800.05.5444.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1362/11753_
18.50758632877320.05.3045.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1274/11819_
18.50938428866830.05.1045.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/10181.
0.0023183227424750.00.0038.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10162.
0.002318128952160.00.0039.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10033.
0.002318228834110.00.0038.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10195.
0.002318129017970.00.0040.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

1-0-0/0/10182.
0.002318324130000.00.0039.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10623.
0.002318229998480.00.0040.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10948.
0.002318128308980.00.0043.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10179.
0.002318130270700.00.0039.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/10262.
0.002318328960570.00.0038.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10268.
0.002318324398290.00.0039.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_94a1d5308b4ea9686

1-0-0/0/10410.
0.002318429034780.00.0040.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/9780.
0.00231831126888690.00.0037.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BR

1-0-0/0/10406.
0.002318328393370.00.0040.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/9930.
0.002318425351780.00.0037.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10224.
0.002318223255070.00.0040.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10378.
0.002318227193730.00.0040.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10302.
0.002318330437540.00.0038.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10278.
0.002318231586420.00.0039.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

1-0-0/0/10068.
0.0023184628273090.00.0039.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/10639.
0.002318430972150.00.0041.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10253.
0.002318231469410.00.0039.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10297.
0.0023183633616510.0

Found on 2025-11-16 03:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2064efb62b

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 02:44:05 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 5 hours 5 minutes 55 seconds
Server load: 1.40 1.34 1.42
Total accesses: 587276 - Total Traffic: 2.2 GB - Total Duration: 163006752
CPU Usage: u51.02 s54.13 cu185.28 cs96.65 - .0153% CPU load
.233 requests/sec - 947 B/second - 4070 B/request - 277.564 ms/request
1 requests currently being processed, 74 idle workers
__________________W_____________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/1120/11304_
14.58932127681590.04.3743.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1147/11259_
14.61759036032020.04.8643.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-046010/1062/11487_
14.59848030441140.04.2344.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-046010/1094/11384_
14.6178013733814610.04.0243.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-046010/1139/11418_
14.5810183526889900.04.6544.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5873b90217f72

0-046010/1137/11408_
14.598144431048430.04.8244.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1021/11066_
14.58986230578230.04.0942.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1038/11720_
14.63149126864170.04.2545.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-046010/1072/10937_
14.61602232989980.04.2442.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1

0-046010/1072/11150_
14.61744227473060.04.0243.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1044/11392_
14.61676433195910.04.2444.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/968/11057_
14.62467133836380.03.8843.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1126/11673_
14.61549331586860.04.6145.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/977/11098_
14.63128234391120.03.7842.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1072/11090_
14.6374330728840.04.5342.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/938/10880_
14.598703932562710.03.9542.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-046010/1029/11113_
14.62236234696610.04.4843.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/895/10843_
14.62358228748050.03.5142.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0460129/1032/11275W
14.6500334374449.94.0743.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-046010/1035/11516_
14.62416332759050.03.8944.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/885/11550_
14.62531130797910.03.3944.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/917/11361_
14.62286329951150.03.6943.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1120/11211_
14.62386124750100.04.6943.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1055/11446_
14.63181232498460.04.2244.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1020/11565_
14.62315228605030.04.3345.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1588/9889_
20.5040230127099270.06.1938.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d5%2F

1-0241810/1380/9884_
20.46795128694000.05.7838.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1398/9736_
20.49543228569530.05.5637.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1379/9953_
20.50514328737560.05.7239.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1462/9941_
20.50449023906350.05.5938.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0241810/1435/10374_
20.50278229700320.05.9140.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1698/10699_
20.51172528055980.06.8942.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0241810/1577/9954_
20.5114484630027470.06.6438.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0241810/1348/9964_
20.451007027493700.05.1737.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0241810/1548/10012_
20.485852924208450.06.2538.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ef3e3095a78eb

1-0241810/1577/10148_
20.48731128828650.06.4439.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0241810/1267/9512_
20.50305026617930.04.9936.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0241810/1337/10182_
20.45976728018850.05.1239.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1498/9672_
20.5145124902650.05.4837.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1491/9987_
20.502143323099240.06.1339.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1480/10102_
20.45865326848420.05.9439.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1405/9981_
20.48761130072270.05.5537.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0241810/1468/10020_
20.50351331381940.05.9938.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1640/9817_
20.48758327997830.06.7238.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1463/10355_
20.45916430837100.05.6540.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1414/9959_
20.51121230843930.05.4638.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1445/10027_
20.45104523278768

Found on 2025-11-14 02:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d205e333675

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 17:43:08 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  27 days 20 hours 4 minutes 58 seconds
Server load: 1.02 1.08 1.27
Total accesses: 548966 - Total Traffic: 2.1 GB - Total Duration: 153791165
CPU Usage: u35.89 s44.51 cu185.28 cs96.65 - .0151% CPU load
.228 requests/sec - 926 B/second - 4060 B/request - 280.147 ms/request
1 requests currently being processed, 49 idle workers
______________________________________W___________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/542/10726_
6.991257226595710.02.0741.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/560/10672_
6.991099532087110.02.3741.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/539/10964_
6.991125129498060.02.1642.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/434/10724_
6.991125231816550.01.7041.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/582/10861_
6.991219425978240.02.4142.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/604/10875_
6.991075228974170.02.5942.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/480/10525_
6.991152329361970.01.9240.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/473/11155_
7.00679425218050.01.9542.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/513/10378_
6.99979531465830.02.0039.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/453/10531_
7.00794226252850.01.6840.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/549/10897_
7.00739431999550.02.1542.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/480/10569_
7.01199433292930.02.0741.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/526/11073_
7.00619630136760.02.0442.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/534/10655_
7.00559533483150.02.0640.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/501/10519_
7.00514329423700.02.1140.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/488/10430_
6.99859531759680.02.0440.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/462/10546_
7.01332132926040.01.9040.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/417/10365_
7.01251327579060.01.5640.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/423/10666_
7.00379432030670.01.6641.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/517/10998_
7.01310231885820.02.0242.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/423/11088_
7.004843329388770.01.6743.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/369/10813_
7.01164228570160.01.4241.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/549/10640_
7.01139423825480.02.3641.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/568/10959_
7.0255330322600.02.1942.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/479/11024_
7.0219427509340.02.1742.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/921/9222_
12.618523525907470.03.5035.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/916/9420_
12.611039427795120.03.7936.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/847/9185_
12.6110847527252190.03.4235.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/839/9413_
12.617843027804470.03.4537.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/876/9355_
12.62582323171210.03.3136.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/799/9738_
12.62644227941400.03.4337.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1046/10047_
12.62439525257590.04.1439.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/956/9333_
12.62499527684810.03.9535.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/809/9425_
12.611244226159100.03.1535.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/980/9444_
12.62704323397880.03.9736.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/810/9381_
12.611125227628730.03.4336.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/770/9015_
12.631842624753660.02.9934.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/874/9719_
12.62551226409770.03.3737.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-02418125/1061/9235W
12.6300241019529.33.8635.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0241810/951/9447_
12.63244222050670.03.8037.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/939/9561_
12.6325737325328500.03.8637.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFPa4NAEMW%2Fiuw97h8

1-0241810/855/9431_
12.62359227324030.03.3435.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/995/9547_
12.63145230704980.03.9236.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/974/9151_
12.6113843026138250.04.1135.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/898/9790_
12.62319529555990.03.5938.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/828/9373_
12.6338229862150.03.2636.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/887/9469_
12.637963170785<

Found on 2025-11-12 17:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d202a35603e

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 18:01:06 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 20 hours 22 minutes 55 seconds
Server load: 2.63 1.63 1.16
Total accesses: 499953 - Total Traffic: 1.9 GB - Total Duration: 143167077
CPU Usage: u44.95 s48.27 cu156.5 cs80.86 - .0148% CPU load
.224 requests/sec - 906 B/second - 4050 B/request - 286.361 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215930/1164/9603_
15.36197424437010.04.0936.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1091/9635_
15.36617529758030.04.0937.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1277/9894_
15.36317427458320.04.7038.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/921/9702_
15.36437629443340.03.3337.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1271/9809_
15.36497623989170.04.3637.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1091/9819_
15.35797626383630.04.0337.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1061/9530_
15.36137427750960.03.8336.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1344/10223_
15.3730023265770.04.7739.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0215930/961/9299_
15.3513563729652460.03.6335.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-02159325/1044/9547W
15.3800246228628.93.7236.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0215930/1109/9900_
15.363893729671630.04.2538.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/948/9577_
15.351277429974680.03.4837.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1253/10159_
15.35977427610000.04.8539.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/997/9734_
15.371215231335600.03.5237.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0215930/1052/9481_
15.3510564027247850.03.8536.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1083/9484_
15.351310530249110.04.0836.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1167/9610_
15.3777430880760.04.3236.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/968/9450_
15.35857424586810.03.5336.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1067/9707_
15.36763229711020.03.9637.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1131/10020_
15.35923430199430.04.1138.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0215930/1322/10127_
15.351157427627580.05.2139.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1016/9993_
15.351031326421520.03.7238.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1159/9585_
15.36677421899240.04.4937.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1175/9914_
15.36737528251410.04.5138.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1241/10112_
15.37106225939230.04.5339.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1582/8228_
21.40763223606760.06.1531.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1490/8449_
21.41122026104800.05.7032.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-075920/1452/8264_
21.399893825016180.05.6231.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1473/8508_
21.391097425790970.05.6533.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1563/8360_
21.4136320655360.05.7132.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1505/8881_
21.411145025298690.05.6133.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-075920/1612/8930_
21.39964322501180.06.0535.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1605/8318_
21.3912892626038630.05.8831.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1667/8554_
21.41257424742520.06.2332.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1524/8413_
21.391337520535190.05.6132.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1615/8528_
21.406893325707820.06.3933.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1439/8200_
21.39801222896280.05.3831.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1446/8747_
21.40557524050880.05.0233.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1459/8112_
21.391037621477620.05.4231.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1359/8398_
21.40647219803150.05.3532.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

1-075920/1585/8534_
21.41431322934140.05.9633.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1534/8514_
21.411562926072130.05.5732.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1563/8461_
21.41892628440590.05.7932.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1510/8120_
21.414563524226760.06.0231.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1634/8769_
21.39917427445530.06.2534.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1541/8470_
21.41377428095720.06.0332.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

Found on 2025-11-10 18:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20025c13c4

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 18:18:27 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 20 hours 40 minutes 16 seconds
Server load: 1.43 1.08 1.06
Total accesses: 460922 - Total Traffic: 1.7 GB - Total Duration: 133692667
CPU Usage: u29.42 s37.78 cu156.5 cs80.86 - .0148% CPU load
.224 requests/sec - 906 B/second - 4053 B/request - 290.055 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215930/365/8804_
4.5912285922347660.01.0733.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/292/8836_
4.591358528122370.00.9533.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/324/8941_
4.6238425726930.01.1434.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/302/9083_
4.6298427546000.00.9835.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/397/8935_
4.62135322410290.01.3734.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/307/9035_
4.62492324563350.01.0034.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/331/8800_
4.591277224702650.01.0733.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/491/9370_
4.591118420960480.01.5936.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/235/8573_
4.5911592927907040.00.7832.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/281/8784_
4.591017322371720.00.8233.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0215930/291/9082_
4.60938528071880.01.0334.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/315/8944_
4.60878427940910.01.0935.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/378/9284_
4.60757225761570.01.3035.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/363/9100_
4.608583229957300.01.2135.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/343/8772_
4.606283124358160.01.1733.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/324/8725_
4.60685228846770.01.1133.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/396/8839_
4.62552228389390.01.3833.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/305/8787_
4.6244631723046820.01.0734.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuRe82H

0-0215930/345/8985_
4.62338427939820.01.1434.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/302/9191_
4.60601227436400.00.9335.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/397/9202_
4.62516125845920.01.5335.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/359/9336_
4.62272225147030.01.2035.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/349/8775_
4.62218419846790.01.1633.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/312/9051_
4.62292026170030.01.0935.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /.git/config HTTP/1.1

0-0215930/340/9211_
4.6318223212930.01.1935.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/729/7375_
10.61458621338200.02.8628.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/834/7793_
10.60619224768160.03.0329.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/701/7513_
10.60578423481230.02.7328.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/690/7725_
10.60638424197660.02.6130.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/778/7575_
10.60872419193700.02.9529.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/798/8174_
10.60998423625880.02.8731.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/862/8180_
10.61398421108270.03.2732.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/806/7519_
10.60535123953010.03.0928.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-075920/830/7717_
10.60698422694350.03.1529.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/759/7648_
10.60499218841350.02.7629.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/683/7596_
10.613282823849010.02.5929.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/707/7468_
10.61278421132940.02.5728.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/686/7987_
10.61158621989780.02.3231.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/851/7504_
10.61146120229460.03.2229.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/662/7701_
10.61257118021820.02.5630.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/755/7704_
10.6151120734170.02.7829.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/791/7771_
10.591298424443440.02.9729.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/774/7672_
10.601058426553660.02.8829.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/774/7384_
10.6127222706460.03.1128.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/796/7931_
10.609283125438520.02.8530.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/710/7639_
10.591238425974170.02.6829.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/687/7571_
10.5911

Found on 2025-11-08 18:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20c999a57e

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 07-Nov-2025 06:07:52 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 8 hours 29 minutes 41 seconds
Server load: 0.95 1.55 1.64
Total accesses: 447494 - Total Traffic: 1.7 GB - Total Duration: 132187661
CPU Usage: u23.58 s32.97 cu156.5 cs80.86 - .0152% CPU load
.232 requests/sec - 943 B/second - 4074 B/request - 295.395 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process





<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215930/106/8545_
1.01263122005780.00.2833.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ed898a13a2d2c

0-0215930/52/8596_
1.0063427991480.00.2333.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/73/8690_
1.00146225377350.00.2833.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/47/8828_
0.991658627260200.00.1734.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/66/8604_
0.99232521711390.00.2433.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/38/8766_
0.98543524350500.00.1633.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/59/8528_
0.971094224471860.00.2032.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0215930/94/8973_
0.971060220437440.00.3934.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/48/8386_
0.9799030627741080.00.2232.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfjbGJN

0-0215930/44/8547_
0.97963422079190.00.1433.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/76/8867_
0.979273727741800.00.3034.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0215930/72/8701_
0.97903527694470.00.3334.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/90/8996_
0.9787113125491860.00.4434.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

0-0215930/73/8810_
0.97832329701910.00.2634.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/54/8483_
0.97711324137670.00.2932.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/55/8456_
0.977652728621830.00.2032.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/108/8551_
0.97702028147670.00.4632.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0215930/47/8529_
0.98686022634690.00.2333.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0215930/83/8723_
0.9846516727690930.00.4033.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/54/8943_
0.98633327149860.00.1934.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/108/8913_
0.98516325292940.00.4334.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0215930/78/9055_
0.99408124930730.00.2934.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0215930/67/8493_
0.99363419620330.00.2532.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/29/8768_
0.99387125991860.00.1034.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0215930/82/8953_
0.99296422975680.00.2834.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/469/7115_
7.00479120937240.02.0027.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/571/7530_
6.98723524553680.02.2128.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/453/7265_
6.997023923131360.01.8828.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-075920/463/7498_
6.98783523916490.01.9529.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/489/7286_
6.98843418979040.02.0528.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/483/7859_
6.979404223022730.01.9130.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-075920/575/7893_
6.995323420541400.02.2531.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/556/7269_
6.99603523789140.02.2628.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/563/7450_
6.99687022492380.02.2828.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-075920/513/7402_
6.99663518618610.01.9928.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/442/7355_
7.00423523445680.01.7828.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/435/7196_
7.01391120656340.01.7227.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/426/7727_
7.01303521816270.01.5730.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/502/7155_
7.003977719965830.01.9127.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d6a42a1df8fc1

1-075920/420/7459_
7.01243617865730.01.7329.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/514/7463_
7.01183420427120.02.0429.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0759228/491/7471W
7.0100241132840.42.0128.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-075920/484/7382_
6.961023425948110.01.9328.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/524/7134_
7.01123522494970.02.2627.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/463/7598_
6.97914025142630.01.6729.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075920/419/7348_
7.0148325731370.01.7828.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

Found on 2025-11-07 06:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20065ec91f

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 04-Nov-2025 23:42:50 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 days 2 hours 4 minutes 40 seconds
Server load: 1.45 1.67 1.84
Total accesses: 390994 - Total Traffic: 1.5 GB - Total Duration: 116118245
CPU Usage: u34.68 s37.35 cu121.86 cs62.73 - .0148% CPU load
.225 requests/sec - 914 B/second - 4060 B/request - 296.982 ms/request
2 requests currently being processed, 48 idle workers
________________W_______________________K_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273220/778/7560_
10.9443519810140.02.8629.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/745/7517_
10.9457324666560.02.8728.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/810/7549_
10.90509220966730.03.2629.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/817/7839_
10.90481522390950.03.2730.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/848/7499_
10.90389119413910.03.3429.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/894/7666_
10.9389321079960.03.5929.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/774/7454_
10.904334122092310.02.9928.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273220/847/7707_
10.90566017829490.03.3329.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/ssoservice.php?samlrequest=fzfba4naeix/iuw9ru6um

0-0273220/949/7443_
10.922093825549660.03.7828.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273220/788/7464_
10.91306119392220.02.7729.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0273220/890/7526_
10.92181524988610.03.4828.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/799/7681_
10.91223224016350.03.2230.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/746/7794_
10.91241422063920.02.7229.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/652/7623_
10.91272225699700.02.5229.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/688/7328_
10.90337320467130.02.6727.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/797/7312_
10.92143225060540.03.0228.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-02732248/917/7347W
10.97002562601142.23.5128.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0273220/709/7304_
10.92173719200890.02.7428.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/703/7597_
10.89588124133420.02.5729.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0273220/756/7809_
10.93118021566830.02.9430.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/690/7784_
10.89610122692330.02.8929.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/754/7742_
10.89636329022470850.02.8629.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfPxT

0-0273220/764/7389_
10.9058810916571290.02.9028.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273220/863/7640_
10.89655322909050.03.3029.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/744/7737_
10.90541520394140.02.9830.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1194/6026_
17.55560317563900.04.8322.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/1241/6332_
17.55620220748460.05.1524.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1270/6221_
17.57170120759640.04.8423.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1374/6444_
17.56297020781620.05.8025.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0118930/1235/6198_
17.5714930015329830.04.9024.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa8IwFIX%2FSsm7TUy

1-0118930/1335/6694_
17.5939320650800.05.4025.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1193/6521_
17.55361417503390.04.8225.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1114/6082_
17.57193219526760.04.3323.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1261/6285_
17.56260319749710.04.7023.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/1338/6146_
17.57210114499870.05.0523.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0118930/1144/6290_
17.555775120846310.04.7324.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0118930/1189/6153_
17.55588117699360.04.5823.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0118930/1363/6679_
17.57234218892710.05.5026.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1290/6083_
17.579614618059320.05.0423.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

1-0118930/1225/6419_
17.58494014427750.04.5925.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0118933/1207/6297K
17.594017732153.34.8124.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /webjars/swagger-ui/index.html HTTP/1.1

1-0118930/1233/6274_
17.55648220879220.04.8223.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1281/6269_
17.588232620257330.05.1023.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda8IwFIb%2FSsm9TZO

1-0118930/1297/6000_
17.55601520336420.05.2823.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1260/6251_
17.5546063422738970.04.7424.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBa4NAEIX%2Fiuw97qq

1-0118930/1157/6294_
17.5553531721822420.04.4924.28
127.0.0.1

Found on 2025-11-04 23:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20a86cef95

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 09:12:39 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  18 days 11 hours 34 minutes 28 seconds
Server load: 1.97 1.46 1.43
Total accesses: 355912 - Total Traffic: 1.3 GB - Total Duration: 107758850
CPU Usage: u20.6 s28.15 cu121.86 cs62.73 - .0146% CPU load
.223 requests/sec - 905 B/second - 4060 B/request - 302.768 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273220/96/6878_
1.05830518156230.00.3326.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/79/6851_
1.048732522625760.00.3326.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/129/6868_
1.058072519317460.00.5726.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/55/7077_
1.04928019869260.00.2427.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/67/6718_
1.041010717739300.00.2326.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/121/6893_
1.0718315918704460.00.5026.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d58g2

0-0273220/90/6770_
1.05754220847750.00.3826.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/105/6965_
1.056848816155640.00.3927.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0e5036768f068

0-0273220/93/6587_
1.05640323782350.00.4125.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/64/6740_
1.05604018153350.00.2626.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/80/6716_
1.0558620523531110.00.2925.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=jZJRb9sgEMe%2FisW7bYx

0-0273220/94/6976_
1.055732722787120.00.3927.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/81/7129_
1.055072620367450.00.1927.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/78/7049_
1.0546915324142080.00.3527.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfE9PE2

0-0273220/50/6690_
1.05350519540350.00.1725.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/78/6593_
1.0625231523200840.00.2625.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfW1L

0-0273220/44/6474_
1.06290522878500.00.1424.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/51/6646_
1.06221417067850.00.1926.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/97/6991_
1.0715716222119170.00.4027.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRa4MwEMb%2FFcl7NRq

0-0273220/77/7130_
1.0759320374250.00.3227.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/54/7148_
1.0411733120590110.00.2027.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/62/7050_
1.0724120506460.00.2327.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/67/6692_
1.04108573215120000.00.2225.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0273220/79/6856_
1.041124321207670.00.3727.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/64/7057_
1.041055218526760.00.2427.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/566/5398_
7.84941115507400.02.3520.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/574/5665_
7.84770518855240.02.5621.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-01189325/576/5527W
7.8700193803728.92.1421.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0118930/637/5707_
7.8633237018145920.02.7722.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

1-0118930/529/5492_
7.86410514026300.02.1321.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/520/5879_
7.86473618910650.02.2322.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7bb83c5a80f9a

1-0118930/479/5807_
7.86599216420990.02.0223.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/488/5456_
7.86580318318960.02.0220.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/660/5684_
7.86524318508220.02.4221.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/664/5472_
7.8647615412624310.02.3621.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegey5Z%2

1-0118930/511/5657_
7.8616816317737270.02.2321.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9RmO

1-0118930/471/5435_
7.841069516186110.01.8020.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/643/5959_
7.86273317846880.02.6923.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/582/5375_
7.86230516476140.02.3320.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/575/5769_
7.86207312428240.02.1422.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/495/5585_
7.8410944715802210.02.0321.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0118930/576/5617_
7.84890419896830.02.2920.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/520/5508_
7.84851218866250.02.0720.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/489/5192_
7.841038218445280.02.0419.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/593/5584_
7.84706421622450.02.2622.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0118930/522/5659_
7.8482429120290370.02.1321.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZF

Found on 2025-11-03 09:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20643f2d1b

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 01-Nov-2025 23:53:41 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 2 hours 15 minutes 30 seconds
Server load: 0.97 1.12 1.19
Total accesses: 323511 - Total Traffic: 1.2 GB - Total Duration: 96745065
CPU Usage: u37.59 s36.09 cu92.16 cs46.47 - .0144% CPU load
.219 requests/sec - 888 B/second - 4057 B/request - 299.047 ms/request
1 requests currently being processed, 49 idle workers
_______W__________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-075430/1073/6287_
15.37711517258630.03.7824.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1195/6282_
15.351234218917969060.04.3824.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-075430/1094/6201_
15.37652518296860.04.0723.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1084/6314_
15.38187116741800.04.0524.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1091/6065_
15.341312414638520.03.9223.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1090/6206_
15.3413663006317574130.03.9323.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-075430/1186/5991_
15.37472419181000.04.2423.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0754325/1096/6332W
15.3800143838728.94.1724.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-075430/1042/6052_
15.3413275904621278780.03.9123.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-075430/1012/6043_
15.37387316029630.04.0223.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1035/6118_
15.3511054620054270.03.8223.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-075430/1290/6236_
15.37522219965060.04.6724.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1236/6453_
15.3510985019059190.04.8125.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_acba0a63af179

0-075430/1252/6208_
15.351121222551980.04.6623.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1092/5980_
15.3690617217699510.04.1522.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVLLTgIxFN37FZPuOy8kS

0-075430/1083/5993_
15.36962320829280.03.8623.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1043/5927_
15.3511716721744040.04.1723.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-075430/1095/5933_
15.37794214737410.04.4323.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1184/6350_
15.361071320671970.04.2824.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-075430/1209/6412_
15.38225318602660.04.5424.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1150/6467_
15.368882917589220.04.1224.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1077/6273_
15.37831518621440.03.9824.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1228/6208_
15.382883113200470.04.6424.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1245/6334_
15.38112517504830.04.5624.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/965/6496_
15.37772416818150.03.7025.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1386/4760_
21.6051513526100.05.2917.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1582/4991_
21.60515215631860.05.7418.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1625/4891_
21.5613275972316184420.05.9518.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0248540/1697/4996_
21.58818216599210.06.3519.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1559/4872_
21.59751312312570.05.9818.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1508/5269_
21.5711114616039700.05.5419.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0248540/1754/5256_
21.5893781014375680.06.6720.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0248540/1668/4867_
21.60585317144910.06.3018.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1623/4968_
21.596993117338110.06.1018.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1561/4737_
21.5890616810971040.05.7718.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfY6LGG

1-0248540/1620/5059_
21.59779215634990.06.1319.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1688/4874_
21.571011413756630.06.4718.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1622/5248_
21.60412515950910.06.4320.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1540/4699_
21.60351514428820.06.1018.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1619/5111_
21.5885429923090.06.4020.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1520/5002_
21.60232412730290.05.7919.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1595/4987_
21.5711804617009600.05.7918.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b6f2101e505fe

1-0248540/1584/4878_
21.571162103916335480.05.8818.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0248540/1358/4620_
21.60211215899480.05.0617.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1669/4859_
21.561346219259650.06.6519.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1850/5058_
21.60171617476770.07.0719.55

Found on 2025-11-01 23:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20d25b6221

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 28-Oct-2025 17:50:28 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  12 days 20 hours 12 minutes 17 seconds
Server load: 0.44 0.52 0.63
Total accesses: 244570 - Total Traffic: 951.4 MB - Total Duration: 73931492
CPU Usage: u21.7 s23.24 cu76.92 cs38.62 - .0145% CPU load
.22 requests/sec - 899 B/second - 4079 B/request - 302.292 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151680/1356/4813_
17.13646214321590.05.3219.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1329/4585_
17.13999511496740.05.2317.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1211/4658_
17.13966212991700.04.6818.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1307/4680_
17.12119917012046860.04.9718.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fd9272b711eb3

0-0151680/1265/4512_
17.15219511413350.05.0018.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1414/4686_
17.121299511201890.05.6918.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1315/4436_
17.13879515077280.05.2217.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1299/4745_
17.121179411143930.05.1218.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1260/4584_
17.13774416612290.04.9017.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1244/4643_
17.13699411966370.04.6918.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1174/4646_
17.1211284514029150.04.3317.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1208/4526_
17.131074215095890.04.7017.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1411/4798_
17.15121112310270.05.6818.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1274/4609_
17.135282718634390.04.8217.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1434/4452_
17.13492215074340.05.3516.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1239/4452_
17.138282716700890.04.7817.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1174/4474_
17.13579417735550.04.4617.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1268/4444_
17.1339312810282910.05.0917.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1551/4805_
17.121381216934180.06.2518.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1305/4787_
17.1539413228190.05.0218.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1424/4840_
17.15193213797070.05.1518.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1349/4734_
17.1428912113753920.05.1618.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_5ff9d8456a407

0-0151680/1295/4558_
17.1345949834560.05.0917.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1373/4606_
17.13339411705660.05.2218.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1453/4975_
17.121259212452110.05.7019.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/10/3384_
0.09639410414400.00.0212.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/11/3420_
0.0967535011125670.00.0412.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRSsMwFIZfpeR%2BTZp

1-0248540/6/3272_
0.09759511767940.00.0212.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/8/3307_
0.09819510896570.00.0212.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/6/3319_
0.0986328446600.00.0113.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/9/3770_
0.0993959077890.00.0214.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/9/3511_
0.0953519521410.00.0314.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/12/3211_
0.09519410575080.00.0312.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/8/3353_
0.09471213079760.00.0312.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/10/3186_
0.0939947998760.00.0312.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/9/3448_
0.09351112003110.00.0213.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/12/3198_
0.10325210317500.00.0412.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/11/3637_
0.10279411363790.00.0314.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/7/3166_
0.10227310667980.00.0212.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/11/3503_
0.1015867553560.00.0313.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/9/3491_
0.109949365520.00.0213.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-02485425/32/3424W
0.1000122868028.90.0512.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0248540/9/3303_
0.071358410909550.00.0212.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/7/3269_
0.071268212177490.00.0212.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/5/3195_
0.071239413083850.00.0112.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/7/3215_
0.071200186712770520.00.0312.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfY

Found on 2025-10-28 17:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d201f185ac3

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 26-Oct-2025 15:25:19 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 17 hours 47 minutes 9 seconds
Server load: 0.16 0.40 0.52
Total accesses: 195511 - Total Traffic: 756.9 MB - Total Duration: 60652074
CPU Usage: u17.22 s19.14 cu62.58 cs31.33 - .014% CPU load
.211 requests/sec - 855 B/second - 4059 B/request - 310.223 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________W__________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151680/392/3849_
4.0612843210144540.01.3515.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/330/3586_
4.06135048779050.01.2013.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/343/3790_
4.0613873110679410.01.2014.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/335/3708_
4.06143528867760.01.1514.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/289/3536_
4.092628971090.00.9813.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/378/3650_
4.099049053700.01.4713.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/408/3529_
4.08829213395080.01.6814.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/327/3773_
4.07113229179970.01.2514.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/267/3591_
4.061170412538100.00.8813.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/318/3717_
4.0799058766950.01.1814.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/336/3808_
4.0710862812680310.01.1514.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/311/3629_
4.07870413419600.01.0413.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/314/3701_
4.0869049297230.01.3314.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/330/3665_
4.087863015694310.01.1113.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/365/3383_
4.08630413155720.01.2512.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/292/3505_
4.085514514225790.00.9913.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/323/3623_
4.08510514725890.01.1013.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/298/3474_
4.08486258401840.01.0113.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/311/3565_
4.08390514001750.01.1213.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/340/3822_
4.0842709990740.01.1014.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0151680/345/3761_
4.08330611001330.01.2314.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/308/3693_
4.092884811506110.01.0414.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_57e5e50d77961

0-0151680/286/3549_
4.0927057515940.00.9613.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/276/3509_
4.0922239860010.01.0014.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/330/3852_
4.091862910277720.01.2314.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/740/2457_
8.9752627852570.02.578.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/778/2406_
8.9781056993090.02.649.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/639/2403_
8.96105059719470.02.359.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/616/2332_
8.97684298211060.02.138.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/777/2388_
8.9757046426060.02.889.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/659/2569_
8.97501345965320.02.4010.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7e7f57add868f

1-08810/756/2555_
8.9745047414890.03.0110.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/710/2356_
8.9742728447890.02.649.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-08810/682/2460_
8.97351410238810.02.429.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/658/2293_
8.97277435264600.02.408.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ab1182b9d41a

1-08810/701/2413_
8.9725148919250.02.559.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/570/2191_
8.9732528289700.01.908.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/698/2484_
8.9721048770270.02.619.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/612/2225_
8.9815048990450.02.058.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-088125/719/2632W
8.990059108028.92.7210.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-08810/720/2476_
8.9884306028770.02.319.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/806/2487_
8.96141049248460.02.659.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/710/2365_
8.961371308921290.02.468.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3b521dff06af3

1-08810/638/2250_
8.96129049034520.02.308.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/694/2249_
8.9611513110191260.02.508.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/664/2368_
8.96111058526420.02.589.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/758/2673_
8.961230<

Found on 2025-10-26 15:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20baf00863

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 24-Oct-2025 15:09:02 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 17 hours 30 minutes 52 seconds
Server load: 0.74 0.95 0.90
Total accesses: 172623 - Total Traffic: 676.8 MB - Total Duration: 56734652
CPU Usage: u39.41 s28.1 cu31.46 cs15.55 - .0152% CPU load
.229 requests/sec - 940 B/second - 4110 B/request - 328.662 ms/request
1 requests currently being processed, 74 idle workers
_________________________W______________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0228500/1483/3373_
20.9696129139610.05.9213.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1457/3137_
20.9767368263410.05.7712.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1612/3321_
20.9622483010173140.06.3912.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1724/3292_
20.9734328112510.06.7612.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1486/3142_
20.96205358502210.05.9112.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1433/3176_
20.9744527667020.05.5312.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1284/3015_
20.961513511928860.04.8911.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1532/3359_
20.96163368489190.06.0513.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1594/3232_
20.961355411800150.05.9512.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1618/3280_
20.96127347852100.06.4013.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1664/3391_
20.9611123111869040.06.4713.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1530/3186_
20.961436412744760.05.9612.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1497/3267_
20.98147288667340.05.7612.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1581/3250_
20.961993515077790.06.2112.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1381/2907_
20.97853412375700.05.2710.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1367/3090_
20.97782313205350.05.3112.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1624/3191_
20.98104313908840.06.4412.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0228500/1417/3038_
20.961666377812570.05.6912.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_da8f27b5defe7

0-0228500/1422/3149_
20.98253513272720.05.5612.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1532/3358_
20.96193349239330.06.4013.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1540/3300_
20.962113410250240.05.9312.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1550/3301_
20.9610473510665310.05.9212.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1504/3152_
20.961712277037470.05.9812.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1434/3093_
20.96181359202280.05.7112.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1577/3435_
20.9755349559410.06.0813.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-088127/188/1905W
3.070067403134.10.576.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-08810/312/1940_
3.0719366175360.01.097.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/220/1984_
3.0737348492820.00.927.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/245/1961_
3.0713357766430.00.987.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/292/1903_
3.05217355815970.01.157.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/254/2164_
3.05208225425360.01.058.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/229/2028_
3.052012306714910.00.918.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/210/1856_
3.051947357681440.00.857.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_44ce5bf05756a

1-08810/203/1981_
3.05187349359410.00.717.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/216/1851_
3.05173014807370.00.837.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/237/1949_
3.051647288394620.00.937.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/174/1795_
3.051675237581300.00.677.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SingleLogoutService.php?SAMLResponse=fZLdahsxEIV

1-08810/226/2012_
3.05157348129760.00.847.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/156/1769_
3.05145358034320.00.506.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/179/2092_
3.05139355019990.00.768.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/181/1937_
3.05133345154300.00.737.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/229/1910_
3.05109358564810.00.917.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/198/1853_
3.05115357633350.00.737.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/169/1781_
3.0697348323180.00.626.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/213/1768_
3.0779369104590.00.887.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/200/1904_
3.0773347923670.00.727.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php

Found on 2025-10-24 15:08

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20f2cca716

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 22-Oct-2025 21:41:57 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 3 minutes 46 seconds
Server load: 2.35 2.30 2.13
Total accesses: 138197 - Total Traffic: 542.3 MB - Total Duration: 46404818
CPU Usage: u25.15 s19.25 cu31.46 cs15.55 - .0151% CPU load
.228 requests/sec - 939 B/second - 4114 B/request - 335.787 ms/request
1 requests currently being processed, 49 idle workers
_________________________........................._________W____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0228500/948/2838_
12.9913527103220.03.9311.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/916/2596_
12.96346127113620.03.539.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1054/2763_
12.9725717458690.04.2010.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1013/2581_
12.9720826484100.03.9810.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/977/2633_
12.9638127456210.03.8510.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/895/2638_
12.9728716193470.03.3910.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/903/2634_
12.9915419610964160.03.3910.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa8IwFIX%2FSsm7SRp

0-0228500/964/2791_
12.9818207269320.03.7510.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0228500/1036/2674_
12.999309914020.03.9110.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /robots.txt HTTP/1.1

0-0228500/1051/2713_
12.9912226014940.04.1710.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1009/2736_
12.996879534830.04.0210.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/972/2628_
12.992517311384770.03.7410.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHLaoNAFIZfRWYf5xKvQ

0-0228500/917/2687_
12.995236571110.03.4710.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/981/2650_
12.93512211563530.03.7010.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j63o0N

0-0228500/842/2368_
12.9352555010407790.03.228.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFBa4NAEIX%2Fiuw9rm4

0-0228500/897/2620_
12.9444077011873980.03.6510.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0228500/1073/2640_
12.95433212083690.04.3110.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/837/2458_
12.963819156436970.03.299.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0228500/848/2575_
12.934943811079370.03.319.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0228500/990/2816_
12.9540707801720.03.9710.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0228500/857/2617_
12.94466257666620.03.199.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a410028a4aba8

0-0228500/902/2653_
12.9730619307220.03.4410.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/943/2591_
12.9633515428990.03.719.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/834/2493_
12.96390417892510.03.3710.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0228500/1032/2890_
12.9723918291670.04.0211.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1717.
0.0020386585572310.00.006.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1628.
0.0020386525358740.00.006.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1764.
0.0020386558155510.00.006.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1716.
0.0020386557400920.00.006.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1611.
0.0020386515114990.00.006.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1910.
0.0020386595045170.00.007.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1799.
0.0020386556222750.00.007.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1646.
0.0020386547269990.00.006.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1778.
0.0020386548836410.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1635.
0.0020386534239380.00.006.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1712.
0.0020386557394340.00.006.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1621.
0.0020386537097590.00.006.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1786.
0.00203865347798720.00.007.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1613.
0.0020386526647620.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1913.
0.0020386524482420.00.007.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1756.
0.0020386534765000.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1681.
0.0020386527386420.00.006.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1655.
0.0020386547073400.00.006.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1612.
0.0020386547618970.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1555.
0.0020386528547620.00.006.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1704.
0.0020386547299800.00.006.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1915.
0.00

Found on 2025-10-22 21:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20d7457462

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 20-Oct-2025 18:27:16 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 20 hours 49 minutes 6 seconds
Server load: 1.59 1.30 1.17
Total accesses: 91373 - Total Traffic: 357.6 MB - Total Duration: 36296867
CPU Usage: u6.34 s7.72 cu31.46 cs15.55 - .0145% CPU load
.217 requests/sec - 891 B/second - 4103 B/request - 397.238 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
___W_______.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0228500/21/1911_
0.32129923426600.00.067.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/24/1704_
0.32135515845020.00.076.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/28/1737_
0.321401335536190.00.126.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/17/1585_
0.32146034372140.00.056.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/28/1684_
0.342765567440.00.086.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/29/1772_
0.3432723365940.00.076.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/25/1756_
0.32126428381940.00.067.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/20/1847_
0.33121225229870.00.057.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/29/1667_
0.33110747726400.00.086.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/24/1686_
0.33104744098770.00.076.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/30/1757_
0.3398757008990.00.096.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/29/1685_
0.3386749867200.00.086.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/25/1795_
0.3480755112760.00.066.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/26/1695_
0.3478239795840.00.076.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/31/1557_
0.34704478373790.00.095.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/29/1752_
0.3467259889210.00.096.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/25/1592_
0.34567510104790.00.075.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/29/1650_
0.3450754447090.00.076.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/40/1767_
0.3447329745980.00.156.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/24/1850_
0.34404275401680.00.056.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/25/1785_
0.3437436087900.00.086.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/21/1772_
0.3426746393930.00.057.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/30/1678_
0.3420753979120.00.096.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/34/1693_
0.3418236416510.00.137.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/36/1894_
0.34104536437530.00.137.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1717.
0.001938485572310.00.006.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1628.
0.001938425358740.00.006.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1764.
0.001938458155510.00.006.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1716.
0.001938457400920.00.006.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1611.
0.001938415114990.00.006.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1910.
0.001938495045170.00.007.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1799.
0.001938456222750.00.007.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1646.
0.001938447269990.00.006.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1778.
0.001938448836410.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1635.
0.001938434239380.00.006.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1712.
0.001938457394340.00.006.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1621.
0.001938437097590.00.006.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1786.
0.0019384347798720.00.007.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1613.
0.001938426647620.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1913.
0.001938424482420.00.007.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1756.
0.001938434765000.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1681.
0.001938427386420.00.006.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1655.
0.001938447073400.00.006.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1612.
0.001938447618970.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1555.
0.001938428547620.00.006.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1704.
0.001938447299800.00.006.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1915.
0.001938436579480.00.007.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /

Found on 2025-10-20 18:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20c3cf5a97

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 18-Oct-2025 16:37:35 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 18 hours 59 minutes 25 seconds
Server load: 1.26 1.40 1.29
Total accesses: 45782 - Total Traffic: 175.1 MB - Total Duration: 15894814
CPU Usage: u19.04 s11.93 cu0 cs0 - .0128% CPU load
.19 requests/sec - 761 B/second - 4011 B/request - 347.185 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/1084/1084_
12.4696422081790.04.284.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/927/927_
12.45124653739430.03.493.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/860/860_
12.4810652752600.03.323.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/855/855_
12.4822642066950.03.183.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/963/963_
12.4764651710210.03.933.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/1016/1016_
12.46100651304620.03.703.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/925/925_
12.4781944211110.03.713.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/932/932_
12.4694652454120.03.603.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/861/861_
12.4784803783850.03.133.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-0350/857/857_
12.4778422617090.03.343.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/902/902_
12.4740654437310.03.273.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/950/950_
12.4734644040900.03.553.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/851/851_
12.46112211267030.03.023.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/988/988_
12.4758643274670.03.743.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/809/809_
12.4770651425760.02.862.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/948/948_
12.484655387840.03.733.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/884/884_
12.47463292757580.03.193.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/941/941_
12.4821422518490.03.723.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/856/856_
12.45160644304540.03.103.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/1023/1023_
12.45148652227600.03.783.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/952/952_
12.45142643054390.03.553.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/1027/1027_
12.45154654079770.04.094.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/927/927_
12.451363241694820.03.273.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/904/904_
12.45117123918080.03.613.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/857/857_
12.45130654172280.03.273.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/961/961_
12.461063313055360.03.463.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/862/862_
12.469603292969830.03.263.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0360/954/954_
12.4788655225210.03.783.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/819/819_
12.4782654014300.03.123.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/879/879_
12.45147831947600.03.573.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/908/908_
12.46100143286490.03.623.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/879/879_
12.4735722356680.03.473.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/911/911_
12.45157024270300.03.513.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/974/974_
12.45142035699300.03.753.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/1001/1001_
12.45133023032180.04.084.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/954/954_
12.46118525681770.03.853.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/837/837_
12.46114924630420.03.333.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/842/842_
12.46126723996390.03.373.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/856/856_
12.47763282650030.03.343.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/1069/1069_
12.4766021829680.04.124.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/896/896_
12.4778422784940.03.433.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/900/900_
12.4752641794320.03.453.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/874/874_
12.4721953388650.03.173.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/896/896_
12.4742933531440.03.533.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/745/745_
12.47163364322500.02.722.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-03625/891/891W
12.480037173728.93.393.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0360/1128/1128_
12.475423508460.04.334.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/715/7

Found on 2025-10-18 16:37

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d209c2418b1

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 16-Oct-2025 14:35:20 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 hours 57 minutes 10 seconds
Server load: 1.21 1.19 1.01
Total accesses: 14757 - Total Traffic: 59.7 MB - Total Duration: 10352078
CPU Usage: u5.87 s3.54 cu0 cs0 - .0154% CPU load
.242 requests/sec - 1025 B/second - 4241 B/request - 701.503 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/237/237_
3.7912915699150.01.001.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/322/322_
3.791263272081250.01.231.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/261/261_
3.809141570850.01.051.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/207/207_
3.80426291134260.00.770.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/291/291_
3.798117568990.01.351.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/245/245_
3.7913514333740.00.920.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/377/377_
3.79997283060650.01.641.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_6e9c51e75a0ff

0-0350/296/296_
3.79117141652700.01.191.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/229/229_
3.79105022749010.00.770.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/260/260_
3.79963511599230.01.091.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/272/272_
3.7960033636630.01.031.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/298/298_
3.79663292532450.01.121.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/338/338_
3.7912314487550.01.191.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/312/312_
3.7990322440400.01.281.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/271/271_
3.797464583650.01.021.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/238/238_
3.7951143014810.00.970.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/293/293_
3.7969142020430.01.111.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/293/293_
3.8029731001700.01.161.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/270/270_
3.80363283481560.01.101.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/341/341_
3.8027151211650.01.411.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/345/345_
3.8015142119430.01.371.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/361/361_
3.803163017640.01.651.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/286/286_
3.7914726544980.01.131.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/263/263_
3.79139323007630.01.111.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/223/223_
3.8063273045780.00.890.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-03625/272/272W
4.130016282628.90.880.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0360/263/263_
4.124131942890.01.061.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/367/367_
4.11128644319910.01.591.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/269/269_
4.11138022997520.01.151.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/302/302_
4.1228427919000.01.351.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/316/316_
4.12126302339090.01.401.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/304/304_
4.119915608180.01.181.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/283/283_
4.1239153377340.01.161.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/299/299_
4.1233164726050.01.201.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/426/426_
4.1221162017710.01.761.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/315/315_
4.128634517100.01.391.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/282/282_
4.111326263234790.01.121.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/259/259_
4.11141143137390.01.041.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/211/211_
4.11117931791830.00.920.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/387/387_
4.1112382663100.01.591.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/318/318_
4.11111251764490.01.311.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/314/314_
4.11102632550720.01.311.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/323/323_
4.1263142608240.01.221.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/302/302_
4.1286812247360.01.221.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/225/225_
4.1257153575560.01.001.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/270/270_
4.1268632628360.01.041.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/407/407_
4.12726302331760.01.621.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/250/250_
4.11932456083

Found on 2025-10-16 14:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d204ed895be

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 14-Oct-2025 13:12:40 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  97 days 6 hours 4 minutes 59 seconds
Server load: 0.73 1.64 1.76
Total accesses: 1793625 - Total Traffic: 6.8 GB - Total Duration: 989600158
CPU Usage: u96.06 s150.34 cu594.13 cs317.13 - .0138% CPU load
.213 requests/sec - 868 B/second - 4069 B/request - 551.732 ms/request
1 requests currently being processed, 49 idle workers
______________W___________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0255040/1067/31949_
16.746516169567850.04.20124.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1276/33243_
16.7545217170147450.05.36129.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0255040/1468/33250_
16.745317182558940.06.20128.58
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1177/32372_
16.744803162719470.04.69125.32
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1283/31674_
16.754116181786500.05.34122.23
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1159/31515_
16.7310541165254740.04.53122.47
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1123/32873_
16.751882170549460.04.64128.21
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1260/32148_
16.75961165338220.05.00122.70
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1395/33029_
16.7310116180130700.05.94128.90
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1293/33101_
16.751282175251410.05.37129.49
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1249/32866_
16.7214316184465950.04.76128.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1070/32537_
16.7213074176486380.04.03125.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/1294/32923_
16.753516184359200.05.11127.50
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1363/32696_
16.74986473161122680.05.46127.89
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9fqy

0-02550420/1213/32455W
16.75001658061022.84.99126.92
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

0-0255040/1192/32208_
16.7311316185456410.04.87126.46
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1258/31932_
16.747352171065610.05.09122.59
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1249/32805_
16.72135456183120020.04.91127.55
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/1220/32991_
16.7311132158990820.05.02127.54
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1241/33519_
16.748316166287070.05.00129.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1089/32208_
16.7312930174221890.04.23124.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0255040/1305/32242_
16.749203174985040.05.06124.90
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1200/32889_
16.7459114173794010.04.94127.98
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1149/32220_
16.752462171457370.04.55125.18
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1218/32071_
16.7311916182014330.04.83124.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/842/31514_
11.277642156160450.03.46120.92
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/745/29567_
11.293933166049600.03.09113.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/860/29353_
11.291716160431550.03.65113.26
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/900/29742_
11.294322144465350.03.89114.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/869/30813_
11.2928854141971530.03.46118.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847743a1f56e3

1-040130/985/30476_
11.292317157466940.04.19118.48
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/842/29617_
11.2710381156386110.03.42113.21
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/641/29098_
11.279516155997350.02.60111.71
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/721/30073_
11.278901172083890.02.97116.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/701/29606_
11.2710021159673190.03.04116.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/811/30298_
11.285265155292530.03.42117.23
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-040130/835/30376_
11.287116152677250.03.39118.00
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/801/30049_
11.2713422178832620.03.19115.77
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/1081/29403_
11.2713116160042410.04.48114.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/811/29818_
11.291117154909630.03.34115.37
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/851/29720_
11.286373161129610.03.42114.64
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/917/29927_
11.2614916164211690.03.83117.45
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/814/30891_
11.29511163729570.03.51121.15
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/859/29995_
11.2712516156804880.03.70117.00
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/880/30104_
11.27136041176384430.03.80118.39
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-040130/824/30836_
11.271071716155

Found on 2025-10-14 13:12

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20f7e4e948

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 12-Oct-2025 09:48:25 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  95 days 2 hours 40 minutes 43 seconds
Server load: 3.64 1.88 1.63
Total accesses: 1742776 - Total Traffic: 6.6 GB - Total Duration: 974847768
CPU Usage: u85.68 s143.29 cu584.2 cs311.76 - .0137% CPU load
.212 requests/sec - 861 B/second - 4062 B/request - 559.365 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0255040/199/31081_
2.66473166713080.00.71120.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/241/32208_
2.652261167080860.00.96125.16
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/275/32057_
2.661614178856950.01.00123.37
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0255040/204/31399_
2.66144121159902430.00.65121.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/195/30586_
2.652766178835750.00.64117.53
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/222/30578_
2.6535346163239610.00.89118.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/202/31952_
2.66967168258010.00.71124.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/271/31159_
2.647264162482390.00.87118.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0255040/229/31863_
2.66292175262140.00.81123.77
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/206/32014_
2.638166172382050.00.87124.98
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/232/31849_
2.6377031181298190.00.82124.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ccc9c3e6f6eb

0-0255040/269/31736_
2.647392173064550.00.91121.88
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02550410/225/31854W
2.66001821518811.80.82123.21
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

0-0255040/214/31547_
2.645765157375960.00.78123.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/172/31414_
2.6466929163707330.00.57122.50
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/191/31207_
2.6453832182858390.00.64122.23
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/202/30876_
2.64479449168045730.00.76118.26
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0255040/242/31798_
2.646213180426270.00.94123.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/187/31958_
2.645300156974100.00.64123.16
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0255040/201/32479_
2.644556163514390.00.80125.74
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/156/31275_
2.644281171310800.00.48121.25
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/240/31177_
2.6436928172489800.00.82120.67
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/182/31871_
2.653310171480630.00.63123.67
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0255040/162/31233_
2.65321170167233120.00.57121.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9xkT

0-0255040/228/31081_
2.652622177145110.00.83120.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1103/30424_
12.6460834154433930.03.84116.61
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/1005/28639_
12.68366163905340.03.65109.19
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1056/28341_
12.655300156668220.03.88109.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-059200/932/28682_
12.68951142429870.03.44109.84
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-059200/973/29760_
12.6874139124900.03.80114.68
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/904/29314_
12.646356154800350.03.30113.59
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1057/28630_
12.673321153113710.03.64109.30
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/917/28253_
12.663602153992210.03.11108.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1105/29115_
12.654732168947930.03.89112.40
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/930/28745_
12.673312156167550.03.38112.78
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/1092/29313_
12.672693152841100.03.98113.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/962/29331_
12.6554640150662870.03.73113.86
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/952/29096_
12.6730727175606160.03.39112.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/989/28161_
12.672156156370030.03.58108.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/947/28769_
12.6477936152295950.03.61111.17
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/960/28646_
12.648693155709360.03.36110.23
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/1014/28788_
12.647345160740240.03.81112.76
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1026/29874_
12.646958161399410.03.96116.94
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1069/28966_
12.672262153545800.03.79112.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/999/29002_
12.68694174320660.03.47113.68
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/826/29831_
12.647566158536030.02.72116.14
127.0.0.1http/1.1ip-10-1-93-107.ap

Found on 2025-10-12 09:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20572f880e

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 10-Oct-2025 09:29:34 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  93 days 2 hours 21 minutes 52 seconds
Server load: 0.80 1.10 1.34
Total accesses: 1723294 - Total Traffic: 6.5 GB - Total Duration: 970123918
CPU Usage: u86.96 s141.7 cu575.13 cs306.89 - .0138% CPU load
.214 requests/sec - 871 B/second - 4066 B/request - 562.947 ms/request
1 requests currently being processed, 49 idle workers
______________W___________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295330/855/30746_
11.734657166188020.02.76119.43
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/898/31747_
11.735761166488340.03.19123.42
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/891/31653_
11.7367530178293790.02.97122.00
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/906/30996_
11.727182237158954130.03.11119.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0295330/920/30191_
11.7359367178473490.03.31116.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/839/30203_
11.734056162784780.02.88117.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/994/31602_
11.735256167285590.03.69123.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/1031/30714_
11.759333160255680.03.48117.06
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0295330/976/31440_
11.741492174448930.03.67122.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/857/31658_
11.751056171345460.03.12123.50
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/941/31452_
11.733383180429560.03.40123.06
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/838/31273_
11.732811171734740.02.96120.29
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0295330/916/31452_
11.733543181321200.03.17121.89
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/942/31208_
11.732256156277880.03.17121.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02953310/970/31068W
11.76001628269411.83.51121.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

0-0295330/1014/30869_
11.719455181797080.03.82121.09
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/866/30486_
11.728033166318810.03.05116.75
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/979/31329_
11.727202257179773360.03.42121.87
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0295330/928/31621_
11.7274731155161540.02.99122.11
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0295330/1048/32125_
11.728256162821580.03.55124.47
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/916/30960_
11.71899708170713840.03.32120.23
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0295330/982/30738_
11.71852267171622680.03.82119.08
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0295330/929/31499_
11.76753170969130.02.91122.34
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/871/30899_
11.7010056166835210.03.09120.09
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/974/30642_
11.72832128176569590.03.58118.80
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/721/30042_
7.692442153806880.02.36115.12
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/623/28257_
7.666430162694140.02.23107.78
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-059200/678/27963_
7.691622155405090.02.50107.63
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/540/28290_
7.667656141733610.01.97108.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/637/29424_
7.667056138547240.02.53113.40
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/555/28965_
7.673456152981970.02.06112.35
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/606/28179_
7.668534152265430.01.99107.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-059200/519/27855_
7.69457153167800.01.78107.03
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/636/28646_
7.6410656168009880.02.27110.78
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/533/28348_
7.6497528155324720.01.90111.30
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/635/28856_
7.649394152073340.02.36111.60
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/590/28959_
7.6737535149367590.02.27112.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/630/28774_
7.65871721175225050.02.30110.92
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-059200/601/27773_
7.668320155938690.02.21107.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-059200/569/28391_
7.675330150990060.02.22109.79
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-059200/589/28275_
7.665856154907970.02.08108.96
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/659/28433_
7.674372159924000.02.43111.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/640/29488_
7.6926840160349610.02.54115.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/606/28503_
7.6681447152964410.02.12110.89
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/563/28566_
7.6673647173773500.02.01112.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/477/29482_
7.67476415

Found on 2025-10-10 09:29

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2038e1a9e2

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 18-Nov-2024 14:50:22 UTC
Restart Time: Monday, 18-Nov-2024 05:18:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 hours 31 minutes 30 seconds
Server load: 0.57 0.61 0.72
Total accesses: 6685 - Total Traffic: 30.3 MB - Total Duration: 1613398
CPU Usage: u3.24 s1.94 cu0 cs0 - .0151% CPU load
.195 requests/sec - 925 B/second - 4747 B/request - 241.346 ms/request
1 requests currently being processed, 49 idle workers
______________________________________W___________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/162/162_
2.12667206582270.00.770.77
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/112/112_
2.117584224710.00.520.52
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_36933bd9dab90

0-0360/125/125_
2.117234280640.00.620.62
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e1c70d73ae498

0-0360/159/159_
2.12175275280.00.720.72
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1b9ecf02145ba

0-0360/122/122_
2.12805109740.00.530.53
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fb1bfa3c03961

0-0360/160/160_
2.12583365090.00.720.72
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0360/152/152_
2.124901245380.00.590.59
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0360/154/154_
2.12462170496190.00.780.78
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/174/174_
2.123657289740.00.750.75
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/125/125_
2.12330168246640.00.540.54
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/122/122_
2.125686256430.00.670.67
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/110/110_
2.124297235070.00.600.60
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/89/89_
2.12396166246330.00.320.32
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/108/108_
2.126347384680.00.490.49
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/122/122_
2.122804444330.00.560.56
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_66c220cf0ad21

0-0360/103/103_
2.123144305410.00.460.46
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_e5a83f7804d93

0-0360/143/143_
2.122433277080.00.760.76
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0360/165/165_
2.121374779660.00.790.79
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2ed49a6098abc

0-0360/114/114_
2.122054220090.00.510.51
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b4478d8952bc7

0-0360/143/143_
2.121674340320.00.610.61
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9b1b8be8c50ac

0-0360/123/123_
2.121074228010.00.540.54
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_4be013ae3f3ac

0-0360/156/156_
2.1232161212410.00.730.73
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/150/150_
2.1169450629580.00.650.65
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d6aef87f9dca4

0-0360/112/112_
2.12535207318750.00.490.49
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/119/119_
2.12600169289420.00.490.49
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/92/92_
2.094114286330.00.350.35
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7f316c38cbeb3

1-0370/172/172_
2.093243364030.00.910.91
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0370/101/101_
2.092945106500.00.540.54
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/150/150_
2.09264205198880.00.700.70
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/163/163_
2.10122175356030.00.800.80
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/130/130_
2.102226227950.00.630.63
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/147/147_
2.10186175412320.00.650.65
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/144/144_
2.10925441700.00.600.60
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/133/133_
2.101516264830.00.620.62
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/140/140_
2.10655532690.00.570.57
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/116/116_
2.10484373990.00.500.50
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a4f6fa06048cb

1-0370/96/96_
2.10222256570.00.400.40
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0370/168/168_
2.08737193567660.00.840.84
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0379/181/181W
2.11002701313.00.840.84
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /server-status HTTP/1.1

1-0370/98/98_
2.096844291050.00.430.43
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_37d298eb2fa8c

1-0370/135/135_
2.087076225890.00.570.57
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/98/98_
2.096514359950.00.390.39
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_103c468643570

1-0370/144/144_
2.096174258970.00.590.59
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_2aff0325e49bf

1-0370/126/126_
2.095864342020.00.550.55
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_77cb483dfb293

1-0370/132/132_
2.095506239800.00.570.57
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cb5e4c29ea7ba

1-0370/116/116_

Found on 2024-11-18 14:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20c3e67695

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 20:38:15 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 15 hours 7 minutes 37 seconds
Server load: 1.10 1.97 1.95
Total accesses: 1011555 - Total Traffic: 4.2 GB - Total Duration: 421024557
CPU Usage: u75.85 s110.87 cu388.05 cs184.26 - .0128% CPU load
.171 requests/sec - 756 B/second - 4436 B/request - 416.215 ms/request
1 requests currently being processed, 74 idle workers
__________________________________________________________W_____
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212440/1344/19198_
21.0495384302390.05.5081.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1293/18511_
21.032195375826000.05.5379.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1276/18400_
21.031159381754220.05.2778.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1275/19257_
21.0226303979522070.05.5980.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1486/19098_
21.0319313682567170.06.1879.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1418/18655_
21.023685366595010.06.0478.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1452/19508_
21.0316413375381300.05.7482.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1345/18534_
21.023395373616340.05.2577.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1469/19045_
21.025112267483730.06.0679.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1503/19028_
21.025241475505650.06.3179.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1365/18957_
21.0243313674749920.05.7180.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1354/18604_
21.0157334383531690.05.4678.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1189/18180_
21.04278471868010.04.7375.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1439/19017_
21.024738574585270.06.1080.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1287/19467_
21.02409792177692920.05.3482.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0212440/1391/18895_
21.023855374922180.05.9879.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1616/19179_
21.024429472487840.06.6680.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1420/19390_
21.0313317378799800.05.6581.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1544/19007_
21.0155313875604550.06.3879.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1368/18747_
21.023095377274820.05.9279.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1552/19061_
21.03589387330870.06.2879.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1340/19272_
21.032491182526200.05.5881.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212440/1441/19266_
21.0252715274104600.06.0980.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/1316/19452_
21.0444015871514450.05.6682.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1392/18158_
21.03995277109390.05.8377.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/356/18744_
6.525263272542790.01.6180.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/506/17736_
6.5249319075311280.02.2174.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/452/17175_
6.5225313469389140.01.7671.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/417/17872_
6.531426477155140.01.7777.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/402/18592_
6.54343476075160.01.7478.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/285/18163_
6.53695275953650.01.2076.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/386/18041_
6.531218277718090.01.6076.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0223790/460/18064_
6.52224125274676370.01.8175.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/423/18076_
6.5231316971528190.01.7576.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/384/17415_
6.541074871289150.01.6973.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0223790/447/17603_
6.5234414473601850.01.9373.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/520/17656_
6.525275180593350.02.2275.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0223790/430/17929_
6.52194943767293880.01.6975.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeS5aVH

1-0223790/433/17875_
6.5317244873944280.01.8176.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0223790/375/17772_
6.53497083192010.01.6374.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0223790/446/18336_
6.525122475373390.01.8977.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/320/17199_
6.5257956176265580.01.3272.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a2e284e4355e6

1-0223790/374/17670_
6.525610469141300.01.5774.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/644/18954_
6.5246413477803680.02.7880.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/443/18232_
6.523902378295510.01.8377.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/397/18023_
6.5243973771958400.01.6577.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/462/18412_
6.5310413878942210.0

Found on 2024-11-16 20:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2038e9fce3

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 13:55:14 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  66 days 8 hours 24 minutes 36 seconds
Server load: 0.65 0.93 0.96
Total accesses: 987064 - Total Traffic: 4.1 GB - Total Duration: 402482894
CPU Usage: u63.67 s102.43 cu388.05 cs184.26 - .0129% CPU load
.172 requests/sec - 764 B/second - 4438 B/request - 407.758 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212440/959/18813_
14.77328513880567380.03.8579.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/902/18120_
14.753718071333340.03.9077.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0212440/921/18045_
14.7725483778799370.03.7776.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/865/18847_
14.753782076341810.03.6678.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0212440/1082/18694_
14.7536224478948290.04.3977.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/993/18230_
14.7535974164179260.04.1777.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/1034/19090_
14.773259071097600.04.1480.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212440/950/18139_
14.777483871023580.03.6676.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/976/18552_
14.7728734764446580.04.0277.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_beaeddd921694

0-0212440/1145/18670_
14.7717994271732510.04.7178.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_88e87ab9e76e5

0-0212440/889/18481_
14.779463472429840.03.6678.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/957/18207_
14.773116280770130.03.7977.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212448/820/17811W
14.780066893499.73.3074.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212440/1042/18620_
14.772455370636330.04.4178.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/870/19050_
14.7716013575490500.03.6380.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1031/18535_
14.7534914472324200.04.5277.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/1172/18735_
14.77679370094820.04.7878.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1064/19034_
14.763392177137650.04.2479.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0212440/1093/18556_
14.783454172406300.04.5277.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1053/18432_
14.7534464674207450.04.5677.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212440/1120/18629_
14.7715462682623500.04.5277.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/939/18871_
14.7719483680106960.03.8879.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1025/18850_
14.771269472291800.04.3479.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/901/19037_
14.78587468723890.03.9180.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0212440/992/17758_
14.7713483574640850.04.2875.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/19/18407_
0.181590270868050.00.0678.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/10/17240_
0.181762273862140.00.0372.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/34/16757_
0.181809065758060.00.1570.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0223790/15/17470_
0.172466471901440.00.0676.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/13/18203_
0.1721463872846420.00.0876.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/14/17892_
0.1814654173877190.00.0775.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_36a22afac8cdd

1-0223790/8/17663_
0.181269574226480.00.0375.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/14/17618_
0.18801472428100.00.0473.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/4/17657_
0.181246268808990.00.0175.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/14/17045_
0.18726468558960.00.0871.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/14/17170_
0.1966247171832000.00.0971.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLJbsIwEL33KyLfncSQL

1-0223790/5/17141_
0.19546075929780.00.0273.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /.well-known/assetlinks.json HTTP/1.1

1-0223790/7/17506_
0.191483565230310.00.0273.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/11/17453_
0.153838370453230.00.0474.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/7/17404_
0.153748480198710.00.0372.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/13/17903_
0.1636304270491530.00.0775.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0223790/3/16882_
0.163609274055700.00.0170.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/21/17317_
0.17353076866924070.00.0772.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0223790/7/18317_
0.17347034573253050.00.0277.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRa4MwEMb%2FFcl7jYm

1-0223790/13/17802_
0.173418773876560.00.0476.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/totp.php?StateId=_9f503ccd331

1-0223790/10/17636_
0.173346368731310.00.0275.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1<

Found on 2024-11-14 13:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d200fdf1756

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 01:19:31 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  63 days 19 hours 48 minutes 53 seconds
Server load: 1.83 1.63 1.66
Total accesses: 932278 - Total Traffic: 3.9 GB - Total Duration: 380509942
CPU Usage: u70.46 s102.43 cu356.88 cs169.57 - .0127% CPU load
.169 requests/sec - 750 B/second - 4440 B/request - 408.151 ms/request
2 requests currently being processed, 48 idle workers
........................._____________W__________________K______
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/17854.
0.0033322574239900.00.0075.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad25dbe3a1971

0-0-0/0/17218.
0.0033322468163810.00.0073.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9d75454832f6e

0-0-0/0/17124.
0.0033322774701800.00.0072.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17982.
0.003332219873495110.00.0075.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17612.
0.0033322875833080.00.0073.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17237.
0.0033322560784710.00.0072.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/18056.
0.0033322568224170.00.0076.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a828c1dd4db3c

0-0-0/0/17189.
0.0033322467639510.00.0072.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec854e0ab4968

0-0-0/0/17576.
0.0033322459498110.00.0073.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b85f6bb1aa3c2

0-0-0/0/17525.
0.0033322567492010.00.0073.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_028eac6d83307

0-0-0/0/17592.
0.0033322469391870.00.0074.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_184d62e4ca04a

0-0-0/0/17250.
0.0033322577811030.00.0073.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/16991.
0.0033322664359530.00.0071.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17578.
0.0033322566704970.00.0073.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a280453d163d6

0-0-0/0/18180.
0.0033322571217800.00.0076.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c910d2aab87bc

0-0-0/0/17504.
0.0033322768599950.00.0073.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17563.
0.0033322766550750.00.0073.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0-0/0/17970.
0.0033322573484760.00.0075.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17463.
0.003332247667729110.00.0073.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17379.
0.0033322119869902970.00.0073.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/17509.
0.0033322477941100.00.0073.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b57feae0fe808

0-0-0/0/17932.
0.0033322477538810.00.0075.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_861aa7e52d79d

0-0-0/0/17825.
0.0033322566937580.00.0074.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a8848de456e1

0-0-0/0/18136.
0.0033322565576470.00.0076.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0-0/0/16766.
0.0033322272148140.00.0071.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/1398/18292_
21.586773570599820.05.7478.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6985e37825098

1-0286030/1408/17134_
21.58670273443570.05.6771.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/1311/16653_
21.602189464587760.05.2469.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/1477/17331_
21.593884370026320.06.4375.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/1705/18097_
21.5862018672261370.07.2476.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

1-0286030/1472/17799_
21.60683873581990.06.1674.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/1473/17567_
21.60945273028700.06.1274.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/1266/17503_
21.58491371390960.05.2473.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/1341/17581_
21.60323367624360.05.7574.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/1489/16949_
21.58448067732300.06.2271.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0286030/1368/17065_
21.60365370103910.05.7671.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/1364/17057_
21.60120273667350.05.7872.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/1335/17370_
21.58653264135090.05.7273.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-02860320/1479/17357W
21.6100702378065.96.1074.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0286030/1548/17320_
21.5940917079524990.06.4772.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRasIwFIZfpeTeJjlWq

1-0286030/1418/17766_
21.60187111469950680.06.0074.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/1509/16771_
21.6030333972985500.06.2770.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFba4NAEIX%2Fiux73Eu

1-0286030/1313/17227_
21.58544066617940.05.3372.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0286030/1404/18171_
21.58578372271160.05.9476.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/1330/17671_
21.58510372887040.05.7075.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/me

Found on 2024-11-12 01:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20e8cb42ae

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 09:42:19 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  62 days 4 hours 11 minutes 42 seconds
Server load: 3.39 2.00 1.93
Total accesses: 891239 - Total Traffic: 3.7 GB - Total Duration: 363313812
CPU Usage: u68.03 s99.46 cu340.83 cs162.09 - .0125% CPU load
.166 requests/sec - 736 B/second - 4441 B/request - 407.65 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151810/1019/17285_
15.999516972294660.04.3773.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfW3b

0-0151810/856/16786_
15.95361166566100.03.5471.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0151810/983/16577_
15.93583472092760.04.2070.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e5bf566aaf8c8

0-0151810/917/17403_
15.98126071924810.03.8272.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0151810/942/17029_
16.00132073785800.03.8870.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/998/16781_
15.99116558814090.04.4971.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0151810/1132/17438_
15.93500465650190.04.9874.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38a6b06c27f35

0-0151810/1136/16763_
15.96326465126630.04.8470.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0151810/1001/17167_
15.9979458129930.04.1471.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_99bb24c6d0b7e

0-0151810/1012/16979_
15.93540665374370.03.9471.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d362f697c067

0-0151810/1025/17083_
15.94390567093140.04.6372.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1065/16881_
15.97259076021810.04.5271.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0151810/1053/16544_
15.98192162530620.04.4069.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0151810/975/17129_
15.97267164598240.04.2271.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0151810/1190/17630_
15.9822316469073320.04.9674.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/952/17093_
15.97284666586680.04.0571.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9082ddc0ebdb2

0-0151810/1000/17033_
15.96305564963400.04.2371.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1086/17454_
15.93528071678590.04.5573.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0151810/968/16887_
15.9438218965228950.03.9670.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgf6%2

0-0151810/1053/16967_
15.96289168197030.04.5371.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/1128/17060_
15.98198476892300.04.7871.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_80ddf235b6582

0-0151810/1194/17391_
15.95349675543730.05.4773.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1092/17335_
15.98148265391880.04.5072.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/1044/17492_
16.003078363459540.04.6073.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0151810/932/16298_
15.93453470659000.04.2269.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9050393e28123

1-0286030/652/17546_
10.05516267438130.02.7575.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/689/16415_
10.05558069586630.02.7768.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0286030/685/16027_
10.05535262784420.02.6767.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/559/16413_
10.0919266556930.02.3771.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/746/17138_
10.0643317069121490.02.9972.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/737/17064_
10.06479770919200.03.0171.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/654/16748_
10.07334169555380.02.7471.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0286030/597/16834_
10.0637425968510850.02.5470.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFfa8IwFMW%2FSsm7zZ%

1-0286030/644/16884_
10.07290764803300.02.5971.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/forgot-username.php HTTP/1.1

1-0286030/734/16194_
10.08180664568580.03.1467.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/622/16319_
10.07326067815180.02.5068.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286030/621/16314_
10.07295270101120.02.6669.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/671/16706_
10.06362161618470.02.8670.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286030/737/16615_
10.08242466442360.03.1071.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b18b3af98b9e2

1-0286030/813/16585_
10.09115274616230.03.1769.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/660/17008_
10.0821117667571490.02.7771.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx8sQ

1-0286030/751/16013_
10.081254869774910.02.8967.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/554/16468_
10.07277263561710.02.3169.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/667/17434_
10.08260169492620.02.7773.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286030/693/17034_
10.095518169242610.02.9172.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.

Found on 2024-11-10 09:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2052d2c5cb

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 11:03:05 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  60 days 5 hours 32 minutes 28 seconds
Server load: 2.38 2.50 1.81
Total accesses: 879468 - Total Traffic: 3.6 GB - Total Duration: 359520401
CPU Usage: u61.86 s94.41 cu340.83 cs162.09 - .0127% CPU load
.169 requests/sec - 751 B/second - 4447 B/request - 408.793 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151810/810/17076_
12.565213571960600.03.6272.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/671/16601_
12.511793265986950.02.7870.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/776/16370_
12.56239071444500.03.4069.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0151810/674/17160_
12.55879271524950.02.9471.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/714/16801_
12.5651073286240.03.1069.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0151810/802/16585_
12.565794858499530.03.6770.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/891/17197_
12.502156165265070.04.0173.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0151810/918/16545_
12.511766063842410.03.9770.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /sitemap.xml HTTP/1.1

0-0151810/741/16907_
12.56298057804800.03.3671.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0151818/735/16702W
12.560064742839.72.9070.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0151810/724/16782_
12.5120254566145880.03.4071.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/858/16674_
12.511283174197620.03.7571.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/778/16269_
12.559997461698590.03.2368.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4215bd944906a

0-0151810/757/16911_
12.5211284563367820.03.4171.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/902/17342_
12.5310954567999890.03.9173.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/701/16842_
12.521259265747370.03.1070.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/765/16798_
12.5212814064166040.03.3570.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/843/17211_
12.502256171030220.03.7172.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0151810/720/16639_
12.511672864752660.03.0670.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php HTTP/1.1

0-0151810/793/16707_
12.51148316667279780.03.4870.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYed1eNm

0-0151810/916/16848_
12.5310781175993190.04.0070.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0151810/978/17175_
12.521121574982540.04.6372.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/873/17116_
12.55860264939310.03.6571.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/774/17222_
12.56317162944460.03.6772.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0151810/671/16037_
12.50223226670236190.03.1768.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=250&StateId=

1-0286030/458/17352_
6.622220166978950.02.0574.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0286030/455/16181_
6.622257168802280.01.7967.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286030/455/15797_
6.6750061594720.01.8866.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0286030/336/16190_
6.672523865984170.01.4570.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/466/16858_
6.6318185468388000.01.8270.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f5b18b89f5341

1-0286030/511/16838_
6.6222473570339200.02.0070.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/410/16504_
6.6315704169170190.01.8170.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/351/16588_
6.631775567837290.01.4769.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

1-0286030/389/16629_
6.641271563385340.01.6570.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0286030/449/15909_
6.649414063475680.02.0066.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9a1100a9fc9b

1-0286030/445/16142_
6.641455366278860.01.8967.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/377/16070_
6.641283169436180.01.6368.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0286030/411/16446_
6.631716260734890.01.8069.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/468/16346_
6.6411214165886050.02.1570.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/522/16294_
6.65581173935970.02.1268.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0286030/419/16767_
6.641098166744220.01.7270.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0286030/558/15820_
6.65743069264410.02.2466.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0286030/388/16302_
6.641196461810350.01.7068.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/438/17205_
6.641113168840240.01.8872.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0286030/472/16813_
6.653104468634960.02.1171.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/476/1649

Found on 2024-11-08 11:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d204fb02875

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 06:35:38 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  58 days 1 hour 5 minutes
Server load: 1.10 1.86 1.73
Total accesses: 839760 - Total Traffic: 3.5 GB - Total Duration: 341878434
CPU Usage: u76.26 s100.03 cu307.25 cs145.14 - .0125% CPU load
.167 requests/sec - 743 B/second - 4440 B/request - 407.114 ms/request
1 requests currently being processed, 49 idle workers
________________________________W_________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/1630/16253_
23.31636468804210.06.3369.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

0-0240640/1475/15918_
23.271367364097890.06.2368.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1444/15587_
23.31604367195110.06.1866.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1553/16482_
23.271293069365900.06.3368.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0240640/1455/16079_
23.281056369314440.06.0566.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1436/15764_
23.281184355319210.06.0766.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1598/16299_
23.30682260675150.06.4969.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1368/15604_
23.271293158536880.05.8966.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0240640/1799/16145_
23.3462254210850.07.5367.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1475/15950_
23.3143286260353860.06.0767.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0240640/1598/16043_
23.3077477763050330.06.5068.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0240640/1542/15809_
23.32381170749140.06.5767.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0240640/1555/15484_
23.30650558172430.06.4065.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0240640/1653/16149_
23.34230224660009860.06.6467.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

0-0240640/1596/16430_
23.30852564678550.06.6669.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0240640/1506/16127_
23.29994063426530.05.9567.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/1548/16026_
23.271312361620310.06.4467.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1551/16365_
23.333804467985190.06.4368.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/1503/15910_
23.28122815661745500.05.9566.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/1501/15910_
23.34295363793770.06.2067.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1544/15919_
23.3492273355550.06.2066.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1507/16186_
23.31572370416320.06.1567.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1510/16227_
23.271404558922440.06.4168.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0240640/1579/16421_
23.26148619159561500.06.6069.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9fqz

0-0240640/1473/15354_
23.2615223166757300.06.4165.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j63q2b

1-0294910/1265/16510_
21.126924062067450.05.3271.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/1335/15399_
21.11880066136720.05.6064.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0294910/1335/15005_
21.091293158965000.05.4862.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0294910/1338/15521_
21.101211263059920.05.5867.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1429/16060_
21.12798465581160.05.8167.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fVJbT8IwFH73Vyx931Uc

1-0294910/1290/15882_
21.10109066865252640.05.2766.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hZJRT8IwFIX%2FytL3rVu

1-0294910/1325/15779_
21.1267518666827700.05.3067.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfTaJVG

1-0294918/1319/15896W
21.160063534569.75.4666.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0294910/1308/15913_
21.081504560607040.05.5367.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fVLfT8IwEH73r1j6vq2r

1-0294910/1391/15176_
21.12642058498220.05.7163.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0294910/1387/15340_
21.13604363263490.06.0064.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1426/15374_
21.13426366680840.05.9165.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/1469/15662_
21.101292358068020.06.1965.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/1480/15563_
21.1010263863416590.06.7166.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/1338/15420_
21.0814523768601890.05.5164.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a3a6d283845f

1-0294910/1417/15892_
21.13585363767290.05.7766.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1288/14947_
21.1669565275540.05.4562.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0294910/1336/15602_
21.133754058294880.05.6565.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/1474/16433_
21.1525979065476450.06.2269.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=30&StateId=_

1-0294910/1446/16024_
21.09132238263726430.06.3268.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9urs

1-0294910/1402/15633_

Found on 2024-11-06 06:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20f1d1485f

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 10:45:36 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  56 days 5 hours 14 minutes 58 seconds
Server load: 0.86 0.93 1.17
Total accesses: 800891 - Total Traffic: 3.3 GB - Total Duration: 322536430
CPU Usage: u58.61 s89.05 cu307.25 cs145.14 - .0124% CPU load
.165 requests/sec - 732 B/second - 4440 B/request - 402.722 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/872/15495_
11.07283265121670.03.3666.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/704/15147_
11.073744860430730.03.0064.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/787/14930_
11.07455264032080.03.3163.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/704/15633_
11.06486065746800.02.8965.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0240640/688/15312_
11.0743830964731050.02.8163.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0240640/653/14981_
11.05523052061890.02.7563.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0240640/775/15476_
11.08100057555780.03.0665.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/714/14950_
11.02981355951170.02.9463.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

0-0240640/860/15206_
11.0929350644110.03.7263.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/780/15255_
11.08221156388960.03.1864.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0240640/798/15243_
11.072324559903770.03.2164.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/770/15037_
11.03969167165530.03.3564.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0240640/770/14699_
11.08136256303500.03.1961.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/820/15316_
11.03957055865460.03.2364.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/750/15584_
11.05674259219420.03.1966.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/699/15320_
11.021061256864890.02.5664.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/695/15173_
11.03941157390890.02.6763.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0240640/718/15532_
11.065074665479550.02.8565.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/695/15102_
11.04841256355150.02.6563.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/696/15105_
11.05555259722690.02.9363.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/704/15079_
11.05790369195270.02.7663.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/666/15345_
11.0569918965652950.02.5164.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx%2F

0-0240640/786/15503_
11.03886116155381570.03.3465.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d19se

0-0240640/837/15679_
11.05622256184700.03.4465.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/648/14529_
11.05750263387710.02.7261.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/591/15836_
9.131039460244080.02.3668.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/599/14663_
9.14803362448710.02.5061.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/466/14136_
9.139694354906660.01.9059.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/568/14751_
9.13950258692950.02.3664.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/617/15248_
9.165672062984040.02.4064.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294910/569/15161_
9.1664881360733200.02.2063.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0294910/587/15041_
9.14855160014020.02.2364.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/621/15198_
9.157696860574480.02.6463.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/573/15178_
9.16685556881860.02.3064.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0294910/665/14450_
9.17463155219750.02.6560.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/677/14630_
9.17250059403050.02.8761.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0294910/702/14650_
9.174984063235530.02.7762.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/680/14873_
9.16545254302790.02.9862.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/581/14664_
9.174383659734260.02.5162.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/600/14682_
9.17416262153850.02.4761.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/614/15089_
9.181234460487580.02.5663.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/574/14233_
9.1736581661260850.02.4259.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0294910/573/14839_
9.18383355629750.02.3862.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/703/15662_
9.17232260903750.02.7865.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-02949123/668/15246W
9.1900598770090.52.9565.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0294910/619/14850_
9.14927147055865660.02.6863.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.c

Found on 2024-11-04 10:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20ebcada91

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 12:24:28 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  54 days 6 hours 53 minutes 50 seconds
Server load: 1.03 1.07 1.30
Total accesses: 769620 - Total Traffic: 3.2 GB - Total Duration: 311801402
CPU Usage: u59.16 s86.58 cu293 cs138.19 - .0123% CPU load
.164 requests/sec - 729 B/second - 4445 B/request - 405.137 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/142/14765_
1.84208262893220.00.5263.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/143/14586_
1.843343559272240.00.6362.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_059cd4950aacc

0-0240640/104/14247_
1.84388562183880.00.3660.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/86/15015_
1.84459663574370.00.3462.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_262ab977c43fa

0-0240640/140/14764_
1.84482162764400.00.4761.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

0-0240640/108/14436_
1.84519150728650.00.4860.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/101/14802_
1.84149655647460.00.4162.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ecff2f4bab0a

0-0240640/135/14371_
1.8418254465070.00.5060.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/112/14458_
1.84103448368690.00.4960.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_711c6e40065c6

0-0240640/105/14580_
1.811230454259490.00.3861.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f029ab65302cd

0-0240640/136/14581_
1.811219458452940.00.4361.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4f8705b22123e

0-0240640/130/14397_
1.8111114064893810.00.6261.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/118/14047_
1.811189054312000.00.3759.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /wp-login.php HTTP/1.1

0-0240640/134/14630_
1.81109416554047240.00.5161.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/128/14962_
1.82981156479870.00.5663.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0240640/151/14772_
1.811066555143850.00.4961.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/166/14644_
1.811032355059560.00.6661.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6b327f2f63d30

0-0240640/139/14953_
1.82917262569810.00.5563.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/149/14556_
1.838564653502580.00.5261.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/95/14504_
1.83835555130540.00.3961.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/112/14487_
1.83799266179210.00.3760.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/122/14801_
1.83776562722860.00.4162.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5cae3ee41d173

0-0240640/114/14831_
1.83703553742270.00.4062.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/132/14974_
1.83569554231180.00.5462.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/123/14004_
1.83629461880630.00.4659.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44f230d0ba773

1-0113630/1487/15229_
20.93845159106420.06.5265.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1383/14045_
20.931082460839780.05.5458.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_95e528afb6ab6

1-0113630/1354/13636_
20.946513653112380.05.5457.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1315/14168_
20.9378918257621770.05.7261.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1376/14607_
20.93820361177890.05.9361.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f75ee682fe60

1-0113630/1459/14576_
20.931208459164780.06.0061.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4200f71cb1eed

1-0113630/1435/14434_
20.931170358689600.06.2861.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1455/14557_
20.9458816559235400.06.2461.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1413/14590_
20.94504555356230.05.9662.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1375/13768_
20.94238652373500.05.6657.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_43ca6e7a5715d

1-0113638/1409/13918W
20.940056585269.75.5658.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0113630/1397/13930_
20.9434732861445650.05.7659.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1341/14178_
20.94476252617550.05.4359.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1331/14068_
20.9444768157678300.05.4059.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1458/14066_
20.94513660252920.05.7658.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1214/14458_
20.94113456020380.04.8860.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_934df6f22d14e

1-0113630/1303/13643_
20.93886659222350.05.2357.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_05154c26be8c6

1-0113630/1364/14238_
20.93122518353103580.05.5959.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1520/14937_
20.931100458447830.06.4263.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82c3c24b457c7

1-0113630/1531/14555_
20.94715557037400.06.5862.06
127.0.0.1http/1.1ip-10-1-110-84.a

Found on 2024-11-02 12:24

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d209b3d71d1

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 04:14:09 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  52 days 22 hours 43 minutes 31 seconds
Server load: 2.27 2.39 2.69
Total accesses: 759326 - Total Traffic: 3.1 GB - Total Duration: 308834658
CPU Usage: u70.13 s90.39 cu276.99 cs130.09 - .0124% CPU load
.166 requests/sec - 739 B/second - 4452 B/request - 406.722 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0317520/1631/14555_
22.85683162333720.06.9362.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0317520/1327/14355_
22.872886158834620.05.6461.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1486/14058_
22.881974561435080.05.9159.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1608/14836_
22.85459262830640.06.6662.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1615/14561_
22.881221562204750.06.8560.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c75d908696e9e

0-0317520/1600/14254_
22.88160050280890.06.6560.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0317520/1480/14617_
22.87214455011570.06.1962.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02bf058482fc2

0-0317520/1550/14121_
22.881864152807300.06.7059.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1622/14283_
22.86374148023430.06.8959.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0317520/1405/14389_
22.84734353890750.05.9760.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1618/14394_
22.85603557892890.07.0461.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a8bcf88ceb615

0-0317520/1652/14203_
22.881744364365190.07.0660.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1454/13870_
22.888520553868100.06.3258.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hZJPU4MwEMW%2FCpM7BCh

0-0317520/1357/14434_
22.8811553311060.05.4660.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8e9a555b17e1d

0-0317520/1506/14764_
22.85420655994660.06.2062.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_282c6ee4e3017

0-0317520/1558/14503_
22.85619354569770.06.6460.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1497/14412_
22.84712193754643720.06.0660.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0317520/1715/14726_
22.85576462069110.07.2862.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1320/14326_
22.86311253060990.05.5660.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1466/14299_
22.862963754654680.06.3060.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1602/14299_
22.85551365882060.06.6460.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1803/14614_
22.84784362508210.07.3561.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1618/14664_
22.85493353032010.06.6561.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1549/14728_
22.85663653798060.06.3861.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0317520/1421/13788_
22.87232461457080.05.9858.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1298/15040_
17.80542358078150.05.7264.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1170/13832_
17.8055928159937940.04.7658.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1147/13429_
17.83288152669140.04.8056.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0113630/1111/13964_
17.82352256943680.04.8561.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1175/14406_
17.82301360654010.05.2261.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1212/14329_
17.79634258644370.05.1060.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1126/14125_
17.7968214657926290.04.9260.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0113630/1272/14374_
17.83232458743110.05.4960.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1249/14426_
17.832063354873540.05.3661.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1172/13565_
17.8691451918530.04.8457.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1224/13733_
17.797205655923780.04.9057.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b0fc1648c4add

1-0113630/1194/13727_
17.86138260391730.05.0658.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1145/13982_
17.85175451740590.04.7058.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0113630/1153/13890_
17.851673757220310.04.7559.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0113630/1222/13830_
17.79763659489720.04.8458.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1052/14296_
17.865319954917830.04.3760.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1127/13467_
17.81442558566080.04.6156.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae44829e917f3

1-0113630/1165/14039_
17.79706652323200.04.8258.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1280/14697_
17.7960947057770580.05.5262.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18uK

1-0113630/1326/14350_
17.832695256589150.05.7861.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /mo

Found on 2024-11-01 04:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d205ec54551

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 05:03:43 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  50 days 23 hours 33 minutes 5 seconds
Server load: 2.04 2.75 2.25
Total accesses: 718752 - Total Traffic: 3.0 GB - Total Duration: 293610667
CPU Usage: u52.35 s79.79 cu276.99 cs130.09 - .0122% CPU load
.163 requests/sec - 727 B/second - 4455 B/request - 408.501 ms/request
2 requests currently being processed, 48 idle workers
_________________W______________________________K_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0317520/841/13765_
11.0145458550990.03.6159.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8b7832a6a69dc

0-0317520/681/13709_
11.00191255507450.02.8758.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/661/13233_
10.99247258910750.02.6756.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/654/13882_
10.97443460445380.02.5958.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5e99997fef89

0-0317520/801/13747_
10.96489559821680.03.5257.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/810/13464_
10.97468548204860.03.5356.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/576/13713_
10.97369452540620.02.4358.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26fb92f3febc0

0-0317520/775/13346_
10.98327249798130.03.2856.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/677/13338_
10.97406445386630.02.9155.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c21dec83906a7

0-0317520/682/13666_
11.00216951122020.02.9557.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4134fb166670

0-0317520/782/13558_
11.0186125954663540.03.2857.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0317520/841/13392_
11.011317761341470.03.7157.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/696/13112_
11.00142351726240.02.9055.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/593/13670_
11.01133121849568040.02.5457.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0317520/747/14005_
10.95571952145540.03.0659.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_891b0ae265741

0-0317520/698/13643_
11.00171450403850.02.8857.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4270351e70aa2

0-0317520/739/13654_
11.01114552615870.03.0057.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-03175211/839/13850W
11.0200582214617.73.4958.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0317520/665/13671_
11.00199850522070.02.9558.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/741/13574_
10.97353251888220.03.1957.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/736/13433_
11.0166561593150.02.9956.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/784/13595_
10.99238159801950.03.2957.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/732/13778_
10.96511550041620.03.1758.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b39f3cf9df401

0-0317520/657/13836_
10.96528350954970.02.8158.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4b833c002e181

0-0317520/652/13019_
10.98304458704020.02.7055.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01383e0a3eead

1-0113630/352/14094_
5.9455454929550.01.5660.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6197e44349e3

1-0113630/424/13086_
5.93865257052440.01.7855.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/369/12651_
5.905483048414780.01.5853.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/374/13227_
5.9419453901730.01.5357.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2648045678117

1-0113630/321/13552_
5.90578556934180.01.3557.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5bc917f27945

1-0113630/377/13494_
5.93147355409270.01.5356.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/367/13366_
5.91317654766570.01.5557.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5fee822c130ab

1-0113630/422/13524_
5.90500555059410.01.7656.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/436/13613_
5.91340551745110.01.9057.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/355/12748_
5.91334448897990.01.5253.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6070a0139a3a3

1-0113630/414/12923_
5.92189553385100.01.6954.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/370/12903_
5.90482356996900.01.5355.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e33ae58c0fd0

1-0113630/430/13267_
5.90459449018590.01.7655.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6e4baf5ace10

1-0113630/361/13098_
5.92199554907840.01.4855.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/361/12969_
5.90431455901720.01.5754.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eab0c36b71062

1-0113630/387/13631_
5.91229451219490.01.5657.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_656b092533331

1-0113630/387/12727_
5.91376556354420.01.5853.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/342/13216_
5.91258448219010.01.4555.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/408/13825_
5.92158254949580.01.7358.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/361/13385_
5.90521453963490.01.5457.01

Found on 2024-10-30 05:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d209b679af6

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 28-Oct-2024 04:54:25 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  48 days 23 hours 23 minutes 47 seconds
Server load: 1.71 1.21 1.28
Total accesses: 674506 - Total Traffic: 2.8 GB - Total Duration: 276920810
CPU Usage: u62.1 s81.78 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 710 B/second - 4455 B/request - 410.553 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/1445/12771_
18.93759255620640.06.2954.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1273/12935_
18.9655152337340.05.4755.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1528/12395_
18.94567355602720.06.6253.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/1379/13085_
18.96266257440750.05.4455.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/1379/12794_
18.96224555627800.05.7252.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1360/12525_
18.94500153944482890.05.6852.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJftTHVG

0-065990/1409/12986_
18.92819050195490.06.3055.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/1417/12419_
18.961013147175120.05.8052.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7a50a3a7b5b25

0-065990/1618/12517_
18.96148042235770.06.3952.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/1578/12849_
18.9743147420640.06.7254.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1548/12592_
18.93709251781780.06.5553.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1309/12356_
18.928003257291420.05.6052.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a99153b60038f

0-065990/1278/12264_
18.9371519748311530.05.2351.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1473/12942_
18.94645147185660.06.2554.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/1343/13099_
18.937764547897290.05.7055.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/1202/12810_
18.94692247993370.05.0653.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1328/12776_
18.94634449329760.05.4854.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1517/12847_
18.95354452851390.06.1154.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71cdbeee84129

0-065990/1206/12867_
18.9538325147638970.04.7954.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx%2B

0-065990/1295/12634_
18.94596448836420.05.3553.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45c0b5ece99eb

0-065990/1314/12517_
18.96116058645530.05.7552.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET //broughton-login.cloudworkengine.net/module.php/core/front

0-065990/1382/12616_
18.94473656373440.05.9353.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1448/12889_
18.95319146761170.05.8654.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1297/12958_
18.96136548760730.05.3854.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1309/12239_
18.9713256169380.05.4951.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1122/13083_
14.47679251610090.04.7556.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1040/12211_
14.47709254339070.04.3551.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/894/11819_
14.46795244897600.03.7549.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/996/12383_
14.47750050808690.04.3954.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/1085/12788_
14.48645153269040.04.6853.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1052/12549_
14.50101451723730.04.6852.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eddd5e49e9fe1

1-0179180/989/12565_
14.477015451191290.04.1753.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b8f07be5205e

1-0179180/1164/12464_
14.46805450339120.04.9051.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0179180/1159/12659_
14.5035248514010.04.7753.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/928/11874_
14.48606045064370.03.9749.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0179180/968/12071_
14.4955321350236100.04.0550.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77ee322360f09

1-0179180/1007/12005_
14.4857929852977270.04.2751.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

1-0179180/967/12327_
14.4936426646237510.03.9651.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9GmN

1-0179180/1061/12204_
14.49260450010300.04.2352.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6fd8c26b2e92

1-0179180/1153/11989_
14.49499052486180.04.8150.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/1001/12764_
14.49339247383340.04.1953.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1154/11792_
14.49428113153819430.04.9749.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d3dZM

1-0179180/1162/12443_
14.501485244932900.04.8052.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/1131/12897_
14.507632652029790.04.8154.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9fqx

1-0179180/1164/12516_
14.5056150647510.04.7053.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

Found on 2024-10-28 04:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2027021539

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 03:51:20 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 22 hours 20 minutes 42 seconds
Server load: 0.32 0.97 1.35
Total accesses: 645096 - Total Traffic: 2.7 GB - Total Duration: 267977382
CPU Usage: u49.49 s73.98 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 708 B/second - 4455 B/request - 415.407 ms/request
2 requests currently being processed, 48 idle workers
_______________K_________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/820/12146_
11.00264253893590.03.6452.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/794/12456_
10.99822450592640.03.5753.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-065990/866/11733_
11.0224410954034600.03.7050.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/867/12573_
10.991210056206420.03.3553.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/835/12250_
10.991292353196060.03.5550.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/828/11993_
10.9719023743117250.03.5050.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/831/12408_
11.00692348728300.03.6152.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/786/11788_
11.0031914245314110.03.1449.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb5226e61ea63

0-065990/981/11880_
11.007734440647720.03.7749.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/915/12186_
11.00743345825370.03.8451.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/908/11952_
11.02212349738010.03.6750.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/748/11795_
11.00268555816610.03.1050.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/738/11724_
11.02149146376970.03.0749.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-065990/867/12336_
11.0292345669390.03.7052.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/682/12438_
11.004494545834660.02.7552.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_767867a5b5307

0-065993/646/12254K
11.023046600855.12.7351.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

0-065990/857/12305_
10.971699747472790.03.4952.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-065990/874/12204_
10.9913834351173660.03.4251.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/629/12290_
10.981416045881850.02.4552.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/721/12060_
10.962045047174920.03.1751.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-065990/676/11879_
10.99122822555231830.02.9049.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92b1ce502ac50

0-065990/752/11986_
10.971962254616850.03.2650.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/799/12240_
10.971582345086800.03.1851.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/776/12437_
10.9910053747236300.03.2952.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/722/11652_
11.00522254767890.02.9149.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-01791828/551/12512W
6.5100499272470.82.2853.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0179180/492/11663_
6.4222034552543230.02.1549.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/383/11308_
6.491023844039010.01.5347.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/476/11863_
6.49243181248663090.02.0351.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/531/12234_
6.422390352310430.02.4051.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/509/12006_
6.4699963549219150.02.2750.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/388/11964_
6.49183206350073040.01.6351.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/422/11722_
6.4945735847862220.01.6548.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BR

1-0179180/536/12036_
6.47763146202320.02.1951.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0179180/414/11360_
6.442045042805810.01.6947.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/430/11533_
6.442059248121300.01.7548.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/466/11464_
6.4420678451076630.01.9949.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/502/11862_
6.441892345157430.02.0549.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/400/11543_
6.451411047437410.01.4049.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/544/11380_
6.44193618850512690.02.1647.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d588G

1-0179180/492/12255_
6.451551444970400.02.0551.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/525/11163_
6.451608052415720.02.0446.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/536/11817_
6.4513023543323470.02.1949.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/466/12232_
6.4610134749985990.01.9351.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/492/11844_
6.477023349278400.02.0050.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/598/11820_
6.461220045080860.02.3850.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.

Found on 2024-10-26 03:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20fad7b932

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 19:28:03 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 13 hours 57 minutes 25 seconds
Server load: 0.49 0.86 1.14
Total accesses: 625682 - Total Traffic: 2.6 GB - Total Duration: 260701955
CPU Usage: u41.26 s68.7 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 708 B/second - 4457 B/request - 416.668 ms/request
1 requests currently being processed, 49 idle workers
________W_________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/450/11776_
5.702313051967000.02.0650.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/403/12065_
5.70260448666440.01.8051.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/472/11339_
5.70341751517170.02.0848.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1eb58c0c1b58

0-065990/489/12195_
5.70321054730220.01.8951.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/420/11835_
5.705183451084030.01.7448.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/422/11587_
5.69671542479210.01.8249.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/402/11979_
5.70199547337120.01.7450.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a122d7276975

0-065990/360/11362_
5.7150644452490.01.4347.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0b39d65a457e2

0-0659922/522/11421W
5.7100393662028.91.9448.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-065990/444/11715_
5.70142444808800.01.7249.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77e00fa47b021

0-065990/548/11592_
5.6879616048655450.02.2949.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/388/11435_
5.68845153857680.01.6548.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/366/11352_
5.70173444955490.01.5447.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d153ff0fb3baf

0-065990/365/11834_
5.68826043448360.01.4950.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/351/12107_
5.7178444753150.01.4751.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/355/11963_
5.69772945086100.01.5150.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_296936b2e9390

0-065990/414/11862_
5.68812045697400.01.6850.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/499/11829_
5.7057928049907440.01.8849.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-065990/319/11980_
5.70596044898680.01.2150.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-065990/321/11660_
5.697267346492630.01.3949.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f91e9f32cfcb1

0-065990/334/11537_
5.70549454196650.01.4648.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e31719793bf14

0-065990/343/11577_
5.7065279553704400.01.4849.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/399/11840_
5.7046313843789860.01.7050.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-065990/418/12079_
5.70453345705030.01.7951.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e826bbe88731b

0-065990/369/11299_
5.70418552923800.01.5047.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0179180/104/12065_
1.2186035548763110.00.3751.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9aqL

1-0179180/85/11256_
1.2369451070870.00.3947.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5327c5c225ef

1-0179180/95/11020_
1.23343142783970.00.4146.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0179180/95/11482_
1.231163547872600.00.3550.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0179180/78/11781_
1.23153450723530.00.2949.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4a3c750f62232

1-0179180/93/11590_
1.231842947966820.00.4448.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/96/11672_
1.23281447772130.00.4049.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c37ae3c3c5b66

1-0179180/70/11370_
1.23250046277080.00.2647.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/82/11582_
1.23217444885070.00.3049.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15d21be1b8b18

1-0179180/88/11034_
1.21839241515640.00.3446.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/92/11195_
1.22818446969290.00.3746.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0179180/100/11098_
1.22804549812920.00.4247.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0179180/84/11444_
1.22785443879300.00.2547.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c0577c623c8a0

1-0179180/101/11244_
1.22753445873060.00.3448.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_981acab5e9323

1-0179180/99/10935_
1.22716449071150.00.3546.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45f40d2560fef

1-0179180/159/11922_
1.22658544024310.00.6750.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/106/10744_
1.22621450163900.00.4045.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84c0a1de199ac

1-0179180/71/11352_
1.22596042072770.00.2847.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/99/11865_
1.2256418048433550.00.4149.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9xsR

1-0179180/102/11454_
1.22534546543470.00.4048.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /m

Found on 2024-10-24 19:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20d180e61c

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 14:30:47 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 9 hours 9 seconds
Server load: 2.17 1.42 1.11
Total accesses: 585062 - Total Traffic: 2.4 GB - Total Duration: 245491998
CPU Usage: u57.94 s73.61 cu212.93 cs100.48 - .0119% CPU load
.156 requests/sec - 696 B/second - 4462 B/request - 419.6 ms/request
2 requests currently being processed, 48 idle workers
__W________________________________K______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147920/1258/10910_
18.361171249312460.05.4746.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0147920/1322/11285_
18.37227546292400.05.3648.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-01479215/1205/10510W
18.3700483302917.65.0345.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0147920/1448/11345_
18.37277351408360.06.0448.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0147920/1209/11042_
18.37144448456790.05.0045.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da9a5ed488787

0-0147920/1137/10728_
18.36875439383650.04.8745.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ef9e8fc8d8164

0-0147920/1308/11238_
18.3610033844613100.05.3547.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1169/10657_
18.36110019542015440.05.1045.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1169/10538_
18.361303436495350.04.9544.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1158/10897_
18.3771442268940.04.8245.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9ca645d48881

0-0147920/1054/10670_
18.36925643948510.04.3445.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7258d30c9842d

0-0147920/1425/10645_
18.361074451155250.05.7645.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c238585aa0f2

0-0147920/1269/10549_
18.3681618442556950.05.5744.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1212/11029_
18.36712440909070.04.8346.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_11230078e7f2a

0-0147920/1417/11338_
18.36686641018730.05.9248.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1256/11122_
18.36793542147950.05.0846.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ebfbc24252626

0-0147920/1276/11100_
18.37322542811900.05.2147.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da3754315599c

0-0147920/1159/10950_
18.37389945924570.04.8246.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php HTTP/1.1

0-0147920/1207/11161_
18.36652442111160.05.1547.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0147920/1193/10873_
18.36760444230810.05.0846.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cc20cb3c29410

0-0147920/1088/10675_
18.36604649836610.04.4744.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1037/10787_
18.374033851263870.03.9845.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1400/11005_
18.37103440776150.06.0846.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1257/11141_
18.3751718742668590.05.4947.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/1014/10550_
18.375449125750.04.3144.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1065/11259_
15.161194646285990.04.6048.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_691059ab191f8

1-0218350/888/10398_
15.16808547560480.03.5343.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/950/10212_
15.16457240236760.03.9043.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0218350/1000/10604_
15.16982243436360.04.4946.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0218350/1147/10806_
15.16634448064960.04.8545.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_886be107315ce

1-0218350/849/10700_
15.167918344603900.03.6144.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/894/10866_
15.1631323942937800.04.0746.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/981/10652_
15.16892443023130.03.9644.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fec123125d98f

1-0218350/1069/10841_
15.16703542167380.04.6246.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218350/1146/10426_
15.16771638920950.05.0643.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db1ef631129b7

1-0218351/951/10460K
15.183243887711.73.9543.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0218350/923/10283_
15.163384747175580.03.8644.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5471f67746eb1

1-0218350/965/10547_
15.161314540685920.03.8844.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1066/10448_
15.16852642717790.04.8644.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_58f9f263a5508

1-0218350/1073/10092_
15.16680546383670.04.4942.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d7117fa7a745

1-0218350/1169/10969_
15.16395541745710.05.0546.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9d5fc11a8478

1-0218350/958/9990_
15.1761546816100.03.9842.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1172/10526_
15.16736439622330.05.3244.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_66a60869da7bd

1-0218350/934/11016_
15.161141445344320.03.9446.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5cb4d8889e845

1-0218350/1019/10646_
15.1611754401061

Found on 2024-10-22 14:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d206c76ee0f

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 12:52:28 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 7 hours 21 minutes 50 seconds
Server load: 0.33 0.66 0.87
Total accesses: 536837 - Total Traffic: 2.2 GB - Total Duration: 227465010
CPU Usage: u35.92 s61.68 cu212.93 cs100.48 - .0115% CPU load
.15 requests/sec - 670 B/second - 4460 B/request - 423.713 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147920/267/9919_
3.55467044676190.01.0342.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0147920/248/10211_
3.54523342831460.00.9643.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/269/9574_
3.546384345283690.01.0941.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/279/10176_
3.54630547130880.01.0543.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/270/10103_
3.5458016345467690.01.1241.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/170/9761_
3.53868536462820.00.6241.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/242/10172_
3.55501140891500.00.9043.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0147920/209/9697_
3.554372737455770.00.8940.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0076353df34a2

0-0147920/229/9598_
3.55385432977750.00.9640.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_015f192eb6beb

0-0147920/274/10013_
3.55366139368810.01.0642.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0147920/215/9831_
3.5527445640435490.00.8141.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/337/9557_
3.5531142945973680.01.3040.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=409&StateId=

0-0147920/269/9549_
3.55137437325460.01.0339.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_623d398b038a6

0-0147920/233/10050_
3.55222537745550.00.8242.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/260/10181_
3.55173536744740.00.9743.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_678fa37738567

0-0147920/264/10130_
3.5595639031710.01.0142.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/224/10048_
3.56604440053470.00.8142.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/281/10072_
3.5635543660700.01.0342.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/325/10279_
3.54778439795960.01.4843.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f05be81a932f2

0-0147920/234/9914_
3.57379741348230.00.7741.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0147920/316/9903_
3.538323647276310.01.2341.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/223/9973_
3.53809448047850.00.8442.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64b5a46cc8e69

0-0147920/227/9832_
3.54761436502300.00.9441.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0147920/287/10171_
3.54661440156270.01.1142.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f8258539a4def

0-0147920/227/9763_
3.5471418644307440.00.8941.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/58/10252_
0.65624543165050.00.2144.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/45/9555_
0.66397443175180.00.1840.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed44acf7848ab

1-0218350/32/9294_
0.67297138316080.00.1139.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0218350/80/9684_
0.66361040387190.00.3842.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0218350/56/9715_
0.66349844571420.00.1940.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218350/50/9901_
0.66501541312540.00.2041.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0218350/36/10008_
0.67235439286690.00.1942.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4852e309f231

1-0218350/52/9723_
0.66451339232120.00.1940.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218350/73/9845_
0.6648030439680180.00.3142.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=409&StateId=

1-0218350/53/9333_
0.67192535412170.00.2038.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40d957964355c

1-0218350/28/9537_
0.68156439091950.00.1240.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_20245e1d20ebc

1-0218350/51/9411_
0.6811816744328530.00.2140.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/42/9624_
0.687419235943170.00.2040.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBa4NAEIX%2Fiuw9rq5

1-0218350/24/9406_
0.6565317438277800.00.1340.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/32/9051_
0.65631042360330.00.1237.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0218350/73/9873_
0.65570737649170.00.3341.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/38/9070_
0.6844543365340.00.1538.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0609cf177351b

1-0218350/34/9388_
0.6819835422070.00.1438.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218350/80/10162_
0.6581915640348890.00.3142.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-02183513/62/9689W
0.69004082157

Found on 2024-10-20 12:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20b071a087

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 18-Oct-2024 09:11:24 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  39 days 3 hours 40 minutes 46 seconds
Server load: 1.15 1.57 1.76
Total accesses: 512009 - Total Traffic: 2.1 GB - Total Duration: 220483002
CPU Usage: u54.07 s68.22 cu184.17 cs86.37 - .0116% CPU load
.151 requests/sec - 678 B/second - 4485 B/request - 430.623 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0260810/1203/9401_
19.5710483743521550.05.0040.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_48a556f7ffe59

0-0260810/1318/9710_
19.578593841837540.05.4942.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_754fc75d26d46

0-0260810/1246/9103_
19.57796444093740.05.2139.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_32d104221d3d3

0-0260810/1277/9644_
19.5832936045663420.05.4641.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeXddN1

0-0260810/1352/9556_
19.57366443906810.05.5039.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bc30e322608e3

0-0260810/1193/9377_
19.57936535383310.04.9839.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/1232/9688_
19.573433738710470.05.2441.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_534f9b056d7e1

0-0260810/1328/9269_
19.59129436507220.05.3439.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1327/9098_
19.57734432041400.05.6338.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6da759cd86020

0-0260810/1411/9529_
19.57563438197520.05.9640.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb3f928e7b166

0-0260810/1190/9379_
19.57758438810000.04.8040.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_804dec6e09e87

0-0260810/1069/8946_
19.57678344695830.04.6238.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/1198/9061_
19.5797619335577840.04.9038.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1188/9552_
19.591505936398580.05.1940.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/1153/9719_
19.5747017035697970.04.9541.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1360/9637_
19.595036237928390.05.6540.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL3zKyLfnTh

0-0260810/1425/9584_
19.571075338788060.05.9141.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/1308/9543_
19.57393342301500.05.5640.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e1d008206016

0-0260810/1553/9758_
19.58259438064240.06.5941.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d00f85cb9278b

0-0260810/1364/9500_
19.5917740022890.05.7140.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/totp.php?StateId=_b1867eb6f7a

0-0260810/1375/9373_
19.57718446157480.05.7439.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bab5da387ae02

0-0260810/1443/9530_
19.58200547231130.06.2540.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1f1d3b19f82b2

0-0260810/1429/9360_
19.58237134831760.06.1739.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/1395/9643_
19.58289438776950.05.7340.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/1294/9317_
19.57845143043800.05.5039.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/1130/9712_
13.95945441255240.05.0142.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ace42e1458d5

1-069740/1127/9086_
13.9743440390410.04.8338.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0697419/981/8822W
13.9700370025447.24.0537.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-069740/923/9132_
13.97160538816030.03.9740.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b79ff54e64b6a

1-069740/874/9118_
13.965531542565680.03.5638.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/980/9412_
13.96785540141980.04.2439.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c799e65cf1118

1-069740/1067/9532_
13.96748538094720.04.4940.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6151df0a0fffb

1-069740/782/9197_
13.95845237467390.03.0638.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/900/9239_
13.96703538151410.03.7039.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/822/8873_
13.958983234295300.03.4337.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/987/9036_
13.97136638066560.04.0338.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_225e577b6f89f

1-069740/959/8897_
13.96298343312180.04.4038.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/932/9154_
13.9725217934694800.03.8638.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/875/8962_
13.96357436916950.03.6438.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f7d4c439a42e

1-069740/903/8558_
13.968114740876190.03.7336.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-069740/875/9283_
13.96403436468820.03.6239.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aabc1eac3d756

1-069740/927/8554_
13.963731642001340.03.8436.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-069740/890/8909_
13.96648559534034160.03.6137.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-069740/1002/9658_
13.97228139127060.04.2340.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/911/9181_
</

Found on 2024-10-18 09:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20c1434776

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 16-Oct-2024 12:03:06 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  37 days 6 hours 32 minutes 28 seconds
Server load: 2.45 2.10 1.73
Total accesses: 469017 - Total Traffic: 2.0 GB - Total Duration: 200154683
CPU Usage: u35.56 s56.92 cu184.17 cs86.37 - .0113% CPU load
.146 requests/sec - 654 B/second - 4495 B/request - 426.754 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0260810/356/8554_
6.769055240133750.01.5837.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/407/8799_
6.78111536822250.01.5738.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/444/8301_
6.7493730039881930.01.9336.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFLa8MwEIT%2FitE91sM

0-0260810/432/8799_
6.765391140526220.01.9837.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/395/8599_
6.76810438679290.01.6535.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/472/8656_
6.769188431210230.01.9936.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/362/8818_
6.76864334400020.01.5937.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/507/8448_
6.76633432812160.02.0535.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_61dca37dc8f68

0-0260810/556/8327_
6.7657217728585690.02.3735.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfy5J

0-0260810/563/8681_
6.76593134191120.02.5836.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0260810/343/8532_
6.76796635752320.01.4336.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04891326d5f15

0-0260810/372/8249_
6.76881341085620.01.5835.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/419/8282_
6.7743416432577920.01.8334.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeddfV6

0-0260810/355/8719_
6.76518233233590.01.6337.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/376/8942_
6.76664631868170.01.5838.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/442/8719_
6.78365233139780.01.8936.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/464/8623_
6.77458535557690.01.9637.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/481/8716_
6.77505238585420.02.0637.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/591/8796_
6.78259434802470.02.6037.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1b69f37b124c

0-0260810/479/8615_
6.78326535424070.02.1336.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/391/8389_
6.78157241748400.01.6435.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/360/8447_
6.78230542571860.01.5336.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/526/8457_
6.784143631013850.02.4136.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/454/8702_
6.78134535238710.01.8036.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/520/8543_
6.7815038955400.02.2236.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-069740/45/8627_
1.18143535478170.00.2237.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/93/8052_
1.15926233497350.00.4034.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/94/7935_
1.17506333483400.00.3333.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/84/8293_
1.17526334047650.00.3536.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0697420/112/8356W
1.1800379476826.90.3535.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-069740/94/8526_
1.1747917635757620.00.4435.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/82/8547_
1.15847534998940.00.3636.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/61/8476_
1.17590433189460.00.2435.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4b24dca54d39

1-069740/58/8397_
1.1680316934256860.00.2236.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/48/8099_
1.16676430822810.00.1834.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_78baf77c32b75

1-069740/76/8125_
1.17269432917800.00.3334.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2307a6bef9b97

1-069740/87/8025_
1.17423038696030.00.4634.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-069740/63/8285_
1.17370231583610.00.2935.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/69/8156_
1.173483632573400.00.2534.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_073f793649178

1-069740/68/7723_
1.18239237200190.00.2732.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/77/8485_
1.17562432427040.00.2836.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c0f0dc8a4b64

1-069740/71/7698_
1.18104438976990.00.3332.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eaf841ea0b8ee

1-069740/66/8085_
1.16622430540190.00.2833.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_96fe85b64ddcf

1-069740/49/8705_
1.18184634319300.00.1736.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1311b76e03cb

1-069740/86/8356_
1.16639435824900.00.4336.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e89196cb77100

1-069740/82/8223

Found on 2024-10-16 12:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2025513b9f

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 14-Oct-2024 09:45:25 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 4 hours 14 minutes 47 seconds
Server load: 3.13 1.81 1.63
Total accesses: 419274 - Total Traffic: 1.8 GB - Total Duration: 181029636
CPU Usage: u46.09 s59.73 cu151.64 cs70.81 - .0108% CPU load
.138 requests/sec - 621 B/second - 4503 B/request - 431.769 ms/request
2 requests currently being processed, 48 idle workers
W__________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069654/1104/7663W
14.102036554218.24.6633.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/1026/7887_
14.03486433434070.04.4734.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab7e4448c715c

0-069650/862/7355_
14.07170435782550.03.5232.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/952/7714_
14.0942235665580.03.8333.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/997/7652_
14.02653234733510.04.2632.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/981/7661_
14.06255328270700.04.3532.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b9e93b243e1d9

0-069650/963/7914_
14.062165031034510.04.0234.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/932/7459_
14.07814228346180.03.9131.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/846/7218_
14.07133525051360.03.4330.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/894/7424_
14.0799530117670.03.4531.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/929/7619_
14.07183232147510.03.8633.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/920/7417_
14.0268242537608910.03.8331.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/828/7143_
14.03540528513040.03.4030.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1097/7817_
14.05376530351630.04.5933.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1083/7969_
14.054755228666640.04.4734.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/915/7692_
14.02733329411670.03.8032.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-069650/995/7595_
14.02704531662620.03.9732.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a38b46c50f23c

0-069650/1129/7732_
14.054273134855770.04.8933.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/1048/7732_
14.026193330598520.04.4733.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/887/7610_
14.0276497431636110.03.5532.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BG

0-069650/898/7449_
14.02571437498350.03.7131.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/1095/7631_
14.06227438502400.04.6132.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/888/7363_
14.0919428579750.03.6831.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/935/7651_
14.0628216431674350.03.9732.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1141/7458_
14.06359035216930.04.8831.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0123230/955/7659_
11.98247331312450.04.1433.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/815/7010_
11.9913229658490.03.5029.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/704/7031_
11.96676430432260.03.1430.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9ed5a0d981e7b

1-0123230/866/7235_
11.96561229011850.03.8331.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/814/7218_
11.98265233154310.03.5330.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/1000/7565_
11.97468032047960.04.1731.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0123230/899/7562_
11.9739014031465620.03.6232.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0123230/820/7433_
11.96647428095270.03.5031.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d2d310e40ba6

1-0123230/838/7481_
11.96715231048330.03.6632.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/909/7081_
11.98349426888980.03.9829.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9141b74ed7ed

1-0123239/808/7149W
11.9900283340410.03.3130.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0123230/778/7136_
11.983765934160280.03.4330.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/810/7254_
11.98105528310960.03.4530.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa68b35f87f43

1-0123230/868/7133_
11.99634729333910.03.8330.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/766/6639_
11.9819319233915190.03.1628.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/826/7426_
11.98180528028460.03.2631.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0123230/756/6820_
11.98163636336350.03.1829.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0123230/751/7189_
11.98217127085800.03.1730.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123230/893/7542_
11.96693429890470.03.8631.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b0ace41bb71af

1-0123230/771/7357_
11.9993431848420.03.3131.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.ph

Found on 2024-10-14 09:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d201c55881d

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 10:42:25 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 5 hours 11 minutes 47 seconds
Server load: 2.67 1.69 1.59
Total accesses: 376662 - Total Traffic: 1.6 GB - Total Duration: 161863771
CPU Usage: u39.46 s54.32 cu140.13 cs65.22 - .0104% CPU load
.131 requests/sec - 592 B/second - 4511 B/request - 429.732 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069650/125/6684_
1.779054131876310.00.4628.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57120f202428f

0-069650/191/7052_
1.761083430436160.00.8930.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/104/6597_
1.761149032580400.00.3928.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-069650/92/6854_
1.77864531053950.00.3129.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a3a9cd0967a54

0-069650/138/6793_
1.76116816432636100.00.5828.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfSxq

0-069650/138/6818_
1.781652724608680.00.6229.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/136/7087_
1.77525528578120.00.4530.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/122/6649_
1.761109423879080.00.5028.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_39e1db4639a5c

0-069650/97/6469_
1.77707622829530.00.4127.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/102/6632_
1.77784326714590.00.3328.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/113/6803_
1.77623427711740.00.4229.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_874434287dede

0-069650/140/6637_
1.77656233017250.00.5528.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/105/6420_
1.76100016525129970.00.3427.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/143/6863_
1.761036527212120.00.5529.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c8f92543002c

0-069650/169/7055_
1.779274525589860.00.6530.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/117/6894_
1.7749120924340320.00.3529.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/109/6709_
1.77424526231940.00.3229.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/122/6725_
1.77350528469580.00.4528.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b035cbc57523

0-069650/174/6858_
1.7828816426285920.00.6229.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/126/6849_
1.78266527893400.00.4929.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/129/6680_
1.78197734804000.00.4828.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb00776494ab0

0-069650/127/6663_
1.78182134905890.00.5328.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/148/6623_
1.7843426361360.00.6028.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8c5273753cf89

0-0696511/116/6832W
1.7900281724114.10.3829.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-069650/123/6440_
1.7774616929284690.00.4327.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1043/6675_
16.591158426911750.04.2428.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7b832b06d6ee

1-0305700/1050/6172_
16.60400526544760.04.1226.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1091/6302_
16.60273427180630.04.4427.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f4628f758f71

1-0305700/1027/6337_
16.60182224034220.04.2827.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/1084/6369_
16.60501527496150.04.2827.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1118/6539_
16.607815626962830.04.4127.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1039/6624_
16.60985526203990.04.1828.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f6cbba5d4cb5e

1-0305700/1106/6578_
16.591053424997110.04.7727.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4010e71a09525

1-0305700/965/6599_
16.601022424106930.04.1428.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbd756bb534ca

1-0305700/912/6112_
16.60765323199220.03.5225.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/1108/6313_
16.60888523994040.04.4426.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1081/6333_
16.60326430331890.04.3827.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dde7bc95b9779

1-0305700/1061/6415_
16.607371525314800.04.0927.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7837b141cf94

1-0305700/1065/6211_
16.60665424505870.04.2126.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94f9efdd9283f

1-0305700/971/5843_
16.6081918430289170.04.1325.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1143/6572_
16.591124525408830.05.0028.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22d50418f6758

1-0305700/1053/5999_
16.6055245733757730.04.3525.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1061/6397_
16.60454424615280.04.1026.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e09569601686a

1-0305700/1084/6589_
16.591099426660870.04.1327.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1183/6555

Found on 2024-10-12 10:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d2071fa3af8

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 10:00:08 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 4 hours 29 minutes 30 seconds
Server load: 6.87 2.08 1.38
Total accesses: 361155 - Total Traffic: 1.5 GB - Total Duration: 157701253
CPU Usage: u43.94 s53.95 cu128.04 cs59.76 - .0106% CPU load
.134 requests/sec - 607 B/second - 4535 B/request - 436.658 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/884/6361_
14.97600130907940.03.7227.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212020/967/6713_
14.98303629239330.03.8629.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_7c124

0-0212020/832/6319_
14.961029331835770.03.1727.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/979/6574_
14.98252230457760.03.9428.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/893/6484_
14.98165431771140.03.5427.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/939/6474_
14.967237223770410.03.9227.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/1000/6805_
14.96699527941180.04.1929.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212020/920/6338_
14.968981422999260.03.5527.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1011/6206_
14.974293822275020.04.0426.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/918/6337_
14.96970025709790.03.5527.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0212020/1051/6508_
14.96637426686410.04.2728.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/974/6304_
14.97497032305410.03.8627.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/904/6169_
14.9415844524270880.03.5526.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1295a4cab9e88

0-0212020/1006/6542_
14.97404326418200.03.8528.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/995/6652_
14.94161551824653720.04.0528.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVNdb5swFH3vr0C8h49Ak

0-0212020/975/6622_
14.9843123837690.03.9528.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/953/6434_
14.98323625529860.03.9428.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_16ee4

0-0212020/930/6428_
14.951143227782360.03.5827.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/1015/6504_
14.9684446524878400.04.3628.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/1044/6553_
14.941470427135040.04.3428.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1008/6356_
14.951369234040060.03.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1041/6388_
14.95120022734217090.04.2227.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?client-request-id=b02457f7-a5b

0-0212020/934/6307_
14.951253625489410.04.0027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_fca22

0-0212020/877/6542_
14.969793627228710.03.8227.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d0ba88be3256

0-0212020/881/6121_
14.951112228698820.03.5726.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/762/6394_
12.051061026191670.03.1527.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0305700/720/5842_
12.08309625368660.02.9125.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_9cb2a

1-0305700/751/5962_
12.09165126426180.03.0425.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057011/701/6011W
12.0900233164714.13.0026.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0305700/789/6074_
12.083663026631780.03.2126.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/785/6206_
12.03152818126088620.03.2626.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTwIxEL37Kza97xcsI

1-0305700/753/6338_
12.051004325535540.03.1427.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/782/6254_
12.051137024224000.03.2926.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0305700/689/6323_
12.05970023338670.03.0327.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0305700/664/5864_
12.076995322523930.02.7024.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/763/5968_
12.06852223183080.03.1125.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/736/5988_
12.0927518429481450.03.0326.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBa8MwDIX%2FSvC9ceI

1-0305700/754/6108_
12.0766636124466470.03.0326.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=87&StateId=_

1-0305700/765/5911_
12.07583223650700.03.1425.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/671/5543_
12.06816229818580.02.9823.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/819/6248_
12.0412333724490060.03.6326.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/accountinfo/password-expired.php HTTP/1.1

1-0305700/786/5732_
12.02456233062040.03.2724.59
127.0.0.1http/1.1

1-0305700/726/6062_
12.07415223753990.02.9025.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/672/6177_
12.05117838625588160.02.5826.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=102&StateId=

1-0305700/881/6253_
12.0412723928271370.03.8627.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/791/6060_
12.031395324426540.03.3626.91
127.0.0.1http/1.1ip-10-1-110-

Found on 2024-10-10 10:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d207b9b52b0

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:10 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 32 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352349 - Total Traffic: 1.5 GB - Total Duration: 153979017
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.007 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237314229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232653628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23410228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23151031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22884223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22865527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211164222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23760221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109422925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23630530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24291123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23679225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235611724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23235325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.248226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219253923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211550333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-02120213/767/6114W
12.2400321944530.52.9826.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111813726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211221828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241715624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2473422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201945325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201435323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111876123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211015522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22760221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22873222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23246228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23691423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201527423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23630531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23327423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016034727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2424222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057068/633/5803K
9.2500276565290.52.

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20b02e53da

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:10 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 32 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352347 - Total Traffic: 1.5 GB - Total Duration: 153979015
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.01 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237314229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232653628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23410228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23151031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22883223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22865527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211164222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23760221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109422925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23629530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24291123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23678225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235611724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23234325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.248226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219253923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211550333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-02120211/765/6112W
12.2400321944325.02.9826.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111813726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211221828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241715624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2473422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201945325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201435323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111876123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211015522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22760221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22873222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23246228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23691423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201527423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23629531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23327423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016034727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2424222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057068/633/5803K
9.2500276565290.52.5

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d20b8ab0529

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:10 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 32 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352355 - Total Traffic: 1.5 GB - Total Duration: 153979021
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237324229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232653628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137935331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23410228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23152031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22884223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22865527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211164222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23760221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109422925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23789426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23630530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24301123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23679225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235711724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24466323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23235325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.248226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219253923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211850526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211550333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-02120219/773/6120W
12.2400321944943.43.0026.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211463225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111813726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211222828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211171025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241715624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2445226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2473422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23490526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201945325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201435323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111876123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211015522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22760221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22874222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23246228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23760223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23692423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21891128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201527423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23630531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23327423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201232325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016044727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2424222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057068/633/5803K
9.2500276565290.52.53</

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d7380d20d7380d200d460cf8

Apache Status

Apache Server Status for broughton-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:10 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 32 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352350 - Total Traffic: 1.5 GB - Total Duration: 153979019
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.006 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237314229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232653628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23410228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23151031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22884223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22865527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211164222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23760221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109422925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23630530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24291123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23679225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235611724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23235325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.248226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219253923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211550333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-02120214/768/6115W
12.2400321944635.02.9926.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111813726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211221828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241715624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2473422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201945325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201435323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111876123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211015522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22760221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22873222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23246228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23691423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201527423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23630531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23327423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016034727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2424222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057068/633/5803K
9.2500276565290.52.

Found on 2024-10-09 04:17

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.66
Domain: bac-login.cloudworkengine.net
Port: 443
URL: https://bac-login.cloudworkengine.net

First seen 2024-10-09 04:17
Last seen 2025-11-30 09:55
Open for 417 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186fe928a36

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 30-Nov-2025 09:56:51 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 12 hours 18 minutes 40 seconds
Server load: 1.60 1.64 1.64
Total accesses: 889886 - Total Traffic: 3.4 GB - Total Duration: 219633527
CPU Usage: u49.48 s69.24 cu310.64 cs162.5 - .0151% CPU load
.226 requests/sec - 915 B/second - 4045 B/request - 246.811 ms/request
2 requests currently being processed, 48 idle workers
________________________W___W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0268150/158/17171_
1.63830240065840.00.5365.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/116/17109_
1.62868148829540.00.4765.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/141/17569_
1.6091270442708240.00.5067.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268150/121/17798_
1.609373345904600.00.4068.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_13800d8696543

0-0268150/129/17395_
1.609444337367720.00.4967.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268150/95/17405_
1.59962444226680.00.2866.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/123/16616_
1.628754142668900.00.3963.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268150/106/17764_
1.637615639343080.00.3668.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268150/123/16987_
1.63782549343180.00.4165.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/129/17181_
1.63722440074520.00.4366.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/124/16915_
1.63615242545380.00.4165.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/132/17322_
1.63662747723510.00.4167.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/129/17470_
1.635483642755190.00.4267.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/122/16925_
1.6443417845541940.00.4165.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZJRT8IwFIXf%2FRVL37c

0-0268150/144/16934_
1.6348074740182850.00.4665.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0268150/97/16383_
1.64369241318130.00.2762.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/144/17423_
1.643353145470640.00.5767.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_07ff66065088e

0-0268150/175/16994_
1.663134638209530.00.6966.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0268150/155/16866_
1.66302444286510.00.5264.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/132/17257_
1.662483443004200.00.4866.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/123/17777_
1.66225640796070.00.3769.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0268150/124/17373_
1.66172344353580.00.4467.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0268150/120/17186_
1.66127235546130.00.3666.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0268150/124/16974_
1.66105440915020.00.4166.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-02681529/181/17425W
1.6700380554948.80.5767.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/1124/14745_
16.9786877035465900.04.3256.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0272870/1188/14829_
16.9693013737182430.04.3657.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw97rp

1-0272870/1313/14813_
16.97921038182190.05.1357.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0272870/1222/14674W
16.950036446830.04.6457.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0272870/1256/14644_
17.0053233205030.04.9456.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1288/15109_
16.96945138653470.04.8158.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0272870/1124/15390_
16.99240235187060.03.9160.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/1459/14991_
16.97902439731790.05.5357.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1115/14862_
17.00122536906260.04.1956.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1208/14844_
16.97848332949570.04.6457.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/1191/15118_
16.97773437002440.04.3158.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/1111/14007_
16.97802034504040.04.1153.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0272870/1284/15240_
16.98671338328930.04.7458.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1208/14526_
16.97751035112050.04.2455.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0272870/1282/14819_
16.98602432339680.04.8557.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1213/15154_
16.98422636379370.04.4958.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1153/14843_
16.98362539179010.04.2056.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1114/14972_
16.99329242906560.03.9657.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1299/14550_
16.9929216437135270.05.0756.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2Bx

1-0272870/1185/15496_
16.98638155240103680.04.2559.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0272870/1132/14724_
16.98541238990130.04.2556.48
127.0.0.1http/1.1ip-10-1-1

Found on 2025-11-30 09:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186aa4d8beb

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 29-Nov-2025 11:52:33 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  44 days 14 hours 14 minutes 22 seconds
Server load: 0.93 1.23 1.26
Total accesses: 880303 - Total Traffic: 3.3 GB - Total Duration: 218401680
CPU Usage: u60.22 s73.78 cu296.1 cs154.76 - .0152% CPU load
.228 requests/sec - 925 B/second - 4052 B/request - 248.098 ms/request
1 requests currently being processed, 49 idle workers
__________________________________W_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0112130/1697/16954_
21.47146139882990.06.6365.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0112130/1585/16941_
21.4539876248506080.05.8665.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

0-0112130/1554/17353_
21.4744442505340.05.7566.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1517/17609_
21.473428445724960.05.8467.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1516/17222_
21.47104737234060.05.8766.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1642/17245_
21.47164644143410.06.1166.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1331/16440_
21.4774255442479230.04.8763.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

0-0112130/1694/17595_
21.44829238958910.06.7167.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1662/16805_
21.45452349131170.06.4065.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1626/16991_
21.44681239845480.06.3065.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1446/16737_
21.44871242308690.05.2564.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1505/17131_
21.45429467247547500.05.6566.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYe1101u

0-0112130/1404/17290_
21.44755042609900.05.4966.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0112130/1636/16716_
21.4639110545083670.06.3864.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1431/16693_
21.45644439877030.05.2064.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1340/16237_
21.449493041249790.05.1162.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_ebe3e30b71283

0-0112130/1708/17215_
21.47307545198680.06.4866.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1383/16753_
21.44935237890520.05.3865.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1479/16651_
21.45591444070730.05.6664.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1542/17070_
21.47284642655520.05.6465.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1638/17593_
21.45607340588830.06.6368.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1605/17204_
21.44891344014010.06.2566.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1433/17019_
21.45524535263310.05.4865.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1360/16802_
21.45502240618840.05.2665.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1433/17170_
21.431016237823330.05.4467.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/965/14586_
14.49122288935323430.03.8256.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

1-0272870/966/14607_
14.48224536949800.03.7556.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1123/14623_
14.49150177637877200.04.4756.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/username.php HTTP/1.1

1-0272870/1059/14511_
14.482913536130350.04.1156.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/1068/14456_
14.48392132917970.04.2755.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0272870/1108/14929_
14.48326238518090.04.2357.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/957/15223_
14.48464635031530.03.4360.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1280/14812_
14.4998439519060.04.9856.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/958/14705_
14.48364236713630.03.7055.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-02728728/987/14623W
14.4900327700340.63.9356.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0272870/990/14917_
14.46944436822120.03.5857.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/912/13808_
14.4951034035580.03.3852.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

1-0272870/1086/15042_
14.469063137974590.04.0057.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_23b0e51765358

1-0272870/999/14317_
14.461004434848410.03.5954.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/1084/14621_
14.46882231981640.04.1757.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1025/14966_
14.47632236172100.03.8658.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/940/14630_
14.47674338767660.03.5155.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0272870/972/14830_
14.47596242723940.03.4856.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/1065/14316_
14.47514236718630.04.1555.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/973/15284_
14.47824539841840.03.6359.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/926/14518_
14.46852138835150.03.5855.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-

Found on 2025-11-29 11:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186a64a0704

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 27-Nov-2025 07:01:24 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  42 days 9 hours 23 minutes 14 seconds
Server load: 1.47 1.21 1.09
Total accesses: 847515 - Total Traffic: 3.2 GB - Total Duration: 213092071
CPU Usage: u46.77 s64.18 cu296.1 cs154.76 - .0153% CPU load
.231 requests/sec - 939 B/second - 4061 B/request - 251.432 ms/request
2 requests currently being processed, 48 idle workers
____________K_________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0112130/953/16210_
12.33558338883170.03.7362.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/958/16314_
12.321115447596750.03.6863.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/889/16688_
12.33439241693850.03.4364.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/826/16918_
12.3286621244748530.03.3465.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeS5F%2

0-0112130/840/16546_
12.33682036032470.03.3363.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0112130/959/16562_
12.32815543198180.03.6263.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/722/15831_
12.33630141604360.02.6760.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/1015/16916_
12.352704537659070.04.2465.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/1000/16143_
12.35245346120390.04.0562.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/1046/16411_
12.36844338137040.04.2363.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/879/16170_
12.35335541580990.03.3362.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/859/16485_
12.32919159646606160.03.3064.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2Bm

0-0112131/825/16711K
12.360041971281.13.3064.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-0112130/898/15978_
12.321031044036550.03.5961.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0112130/881/16143_
12.351054238988780.03.1862.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0112130/718/15615_
12.35381240238170.02.8359.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/969/16476_
12.32967244276230.03.7764.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/763/16133_
12.33454137184430.03.0763.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0112130/772/15944_
12.3635443290650.03.0861.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/908/16436_
12.327042941753960.03.3663.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_28658ca5633a0

0-0112130/841/16796_
12.35155439229020.03.5865.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/1007/16606_
12.34403143005270.03.9764.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0112130/774/16360_
12.321055434225480.03.0563.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0112130/721/16163_
12.321146439832220.02.9363.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0112130/733/16470_
12.33536236828630.02.7964.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/352/13973_
5.37755434601850.01.4953.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/330/13971_
5.37840236125940.01.3954.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/468/13968_
5.37875536768970.02.0454.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/342/13794_
5.37995435172360.01.4153.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/448/13836_
5.3710473632164820.02.0053.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/420/14241_
5.361137337754050.01.6954.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php HTTP/1.1

1-0272870/312/14578_
5.361165234268910.01.1457.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/561/14093_
5.37935638569270.02.5554.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/312/14059_
5.361099235783910.01.2553.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/361/13997_
5.38693431588390.01.4954.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0272870/329/14256_
5.38515535491890.01.4155.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/410/13306_
5.38635533391840.01.6151.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/305/14261_
5.38575436716130.01.1955.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/312/13630_
5.38545333875450.01.2852.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/435/13972_
5.384463431269180.01.7154.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0272870/390/14331_
5.384033834882650.01.6256.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0272870/313/14003_
5.38292437257180.01.2253.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/358/14216_
5.38366241187190.01.4254.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0272870/384/13635_
5.391125234879910.01.6252.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0272870/333/14644_
5.39215539135000.01.2856.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0272870/252/13844_
5.38403137484330.01.0453.27
127.0.0.1http/1.1

Found on 2025-11-27 07:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186451c88c5

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 23-Nov-2025 08:45:46 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  38 days 11 hours 7 minutes 36 seconds
Server load: 1.68 1.31 1.14
Total accesses: 752919 - Total Traffic: 2.8 GB - Total Duration: 192887620
CPU Usage: u38.61 s56.76 cu265.85 cs139.36 - .0151% CPU load
.227 requests/sec - 918 B/second - 4053 B/request - 256.186 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0292070/587/14380_
8.213112635115910.01.8654.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/548/14312_
8.20202341843560.01.9755.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/523/14656_
8.20278436309430.01.9556.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/734/14873_
8.20237640585090.02.5857.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/534/14710_
8.19537433168120.01.7856.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/546/14643_
8.203312537589470.01.7656.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/571/14223_
8.20117538524160.02.1054.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/633/14805_
8.17837532625080.02.2056.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/638/14082_
8.20954439668050.02.3454.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-02920728/612/14175W
8.2100326686534.82.2254.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0292070/665/14312_
8.17854337809880.02.3855.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/562/14548_
8.17744340993960.02.1757.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/667/14787_
8.17775336812310.02.4456.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/549/14120_
8.187334339217930.02.1154.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/578/14168_
8.187153834882250.01.9354.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/574/13836_
8.18597437413690.01.8552.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0292070/706/14446_
8.1957812040550710.02.5256.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0292070/613/14203_
8.186313433994120.02.3055.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/493/14302_
8.18681239974700.01.7855.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/610/14644_
8.19506137608480.02.2356.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/647/14947_
8.20363036295530.02.3057.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/icons/clipboard.svg HTTP/1.1

0-0292070/593/14703_
8.195542337023130.02.0856.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0292070/563/14457_
8.2046267131118410.01.9355.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0292070/638/14527_
8.20345237414520.02.5256.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0292070/539/14710_
8.19477533584850.02.0257.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/161/12116_
2.62357430880370.00.6446.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/181/12193_
2.60734032581510.00.7547.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-078290/208/11869_
2.622542532141630.00.7945.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-078290/196/11982_
2.62346131507890.00.6346.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/159/11918_
2.61488127016630.00.4845.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/149/12308_
2.615053733878990.00.4247.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/totp.php HTTP/1.1

1-078290/186/12885_
2.6070424831616540.00.6250.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=342&StateId=

1-078290/155/11985_
2.59842234855400.00.4746.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/220/12191_
2.5978355732915160.00.8045.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d58i2

1-078290/197/12092_
2.59869228331370.00.7346.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/235/12513_
2.6075399232920950.00.8049.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-078290/202/11524_
2.61657430610500.00.6844.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/183/12500_
2.61610233829920.00.6948.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/214/11804_
2.60727029053860.00.7545.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-078290/203/12135_
2.615643927375220.00.7347.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-078290/221/12268_
2.61468030390580.00.8947.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-078290/156/12186_
2.61548233943280.00.5246.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-078290/213/12402_
2.6324682337138790.00.7147.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda8IwFIb%2FSsm9TZq

1-078290/204/11889_
2.615874131166050.00.6645.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-078290/194/12655_
2.61417434547920.00.7049.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-078290/204/12114_
2.6229580734221770.00.6446.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeas

Found on 2025-11-23 08:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81866b5fe0fe

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 20-Nov-2025 04:53:11 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 7 hours 15 minutes
Server load: 0.94 1.32 1.61
Total accesses: 708905 - Total Traffic: 2.7 GB - Total Duration: 185718992
CPU Usage: u52.98 s61.22 cu233.01 cs121.92 - .0154% CPU load
.232 requests/sec - 944 B/second - 4063 B/request - 261.98 ms/request
2 requests currently being processed, 48 idle workers
_W_______________________________________________K..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-044090/1510/13492_
22.2210619532699670.05.9651.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2Bx

0-044094/1532/13500W
22.220040638274.05.8752.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-044090/1466/13763_
22.21224434856580.05.5852.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-044090/1596/13761_
22.21128538470220.06.5353.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1657/13912_
22.21245131818400.06.6853.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1664/13868_
22.2128415836051330.06.5853.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

0-044090/1537/13410_
22.1951818837102920.06.1251.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=studentcafe_02&RelaySt

0-044090/1498/13873_
22.19605231313120.05.8653.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1506/13199_
22.19622538237510.06.0051.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1514/13354_
22.2256131440300.06.1451.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1322/13452_
22.2222636662990.05.2752.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1741/13672_
22.19588239805760.07.1353.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1501/13848_
22.19502635404560.05.8953.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1576/13303_
22.21155237972180.06.6251.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1501/13327_
22.195973334061390.05.9651.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/1318/12974_
22.19562536127060.04.9949.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1614/13495_
22.203173039276350.06.6252.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-044090/1510/13284_
22.19526232624860.05.8151.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/1588/13590_
22.21297538412220.06.3552.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-044090/1538/13721_
22.19345436190630.06.2152.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1702/14008_
22.19409134860210.06.7454.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1635/13852_
22.19381536048990.06.8453.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1575/13584_
22.21251129397960.06.0452.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-044090/1418/13654_
22.19441636419830.05.9353.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-044090/1410/13831_
22.19424232478320.05.9754.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1064/11245_
14.46262528979120.04.2043.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1167/11329_
14.443049231563210.04.9544.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0214410/926/10959_
14.41569330432730.03.6242.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/930/11125_
14.43409130285660.03.6743.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/910/11092_
14.41553425932610.03.6142.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/912/11535_
14.42491132959610.03.8344.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1090/12038_
14.4162920030240920.04.3847.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0214410/965/11144_
14.41507332899750.03.8243.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/975/11237_
14.44320430555040.03.8342.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0214410/932/11200_
14.43409226941600.03.6743.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1167/11577_
14.43363431478540.04.6845.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/921/10701_
14.42434229620340.03.7341.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1105/11511_
14.44297432062440.04.5544.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0214410/961/10891_
14.41612327545070.03.7341.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/947/11171_
14.41588226011240.03.6843.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/988/11366_
14.47121128925200.04.1944.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1043/11345_
14.41527232249810.04.1143.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/979/11257_
14.46245234396950.03.8743.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/1070/11138_
14.47201530215230.04.1343.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0214410/1193/11832_
14.47141233173740.04.7146.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0214410/992/11245_
14.4721814633153190.03.8743.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOServ

Found on 2025-11-20 04:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186d194f792

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 18:02:59 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 20 hours 24 minutes 49 seconds
Server load: 2.52 2.10 1.48
Total accesses: 616564 - Total Traffic: 2.3 GB - Total Duration: 167234643
CPU Usage: u47.23 s55.25 cu201.12 cs105.03 - .0148% CPU load
.224 requests/sec - 906 B/second - 4046 B/request - 271.236 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................W_____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/1582/11766_
20.781030629472570.05.9045.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1625/11737_
20.80712136472080.06.5445.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1442/11867_
20.79910630956880.05.4345.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1552/11842_
20.79751434535650.05.6445.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1599/11878_
20.79804327495280.06.3145.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-046010/1628/11899_
20.806383131654420.06.4545.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1486/11531_
20.789396331719030.05.7344.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1492/12174_
20.8076227576870.05.7246.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1468/11333_
20.80490634591770.05.5543.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1524/11602_
20.80610628373580.05.5844.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1505/11853_
20.805443433864200.05.9345.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1463/11552_
20.80414234402360.05.5145.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1544/12091_
20.80526232413250.05.9346.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1356/11477_
20.8032234769550.04.9743.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1579/11597_
20.781150431413780.06.4444.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1532/11474_
20.7811143633155500.05.8344.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_34c5a9087f97d

0-046010/1488/11572_
20.8010735199350.05.9644.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1420/11368_
20.80327229481200.05.4844.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1495/11738_
20.781209334022050.05.7045.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1493/11974_
20.80310533304960.05.4545.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1358/12023_
20.803603131417820.05.1346.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_42d3f7a970635

0-046010/1426/11870_
20.80130430437290.05.5745.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1590/11681_
20.80230225326090.06.1345.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1515/11906_
20.8065332976940.05.7746.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1446/11991_
20.80250529101900.05.7046.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/10181.
0.00556303227424750.00.0038.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10162.
0.0055630128952160.00.0039.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10033.
0.0055630228834110.00.0038.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10195.
0.0055630129017970.00.0040.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

1-0-0/0/10182.
0.0055630324130000.00.0039.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10623.
0.0055630229998480.00.0040.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10948.
0.0055630128308980.00.0043.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10179.
0.0055630130270700.00.0039.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/10262.
0.0055630328960570.00.0038.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10268.
0.0055630324398290.00.0039.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_94a1d5308b4ea9686

1-0-0/0/10410.
0.0055630429034780.00.0040.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/9780.
0.005563031126888690.00.0037.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BR

1-0-0/0/10406.
0.0055630328393370.00.0040.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/9930.
0.0055630425351780.00.0037.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10224.
0.0055630223255070.00.0040.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10378.
0.0055630227193730.00.0040.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10302.
0.0055630330437540.00.0038.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10278.
0.0055630231586420.00.0039.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

1-0-0/0/10068.
0.00556304628273090.00.0039.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/10639.
0.0055630430972150.00.0041.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/10253.
0.0055630231469410.00.0039.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10297.
0.005563036

Found on 2025-11-16 18:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186ad5618f2

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 15:58:05 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 18 hours 19 minutes 55 seconds
Server load: 0.80 0.64 0.71
Total accesses: 594010 - Total Traffic: 2.3 GB - Total Duration: 164306349
CPU Usage: u53.96 s56.26 cu185.28 cs96.65 - .0152% CPU load
.231 requests/sec - 939 B/second - 4067 B/request - 276.605 ms/request
1 requests currently being processed, 74 idle workers
______________________W_________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/1233/11417_
15.891036428925170.04.7543.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1258/11370_
15.89761236156130.05.3344.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1123/11548_
15.899653230532750.04.4444.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_0106ec21209e2

0-046010/1152/11442_
15.898502934043870.04.2143.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1225/11504_
15.891156427028010.04.9444.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1242/11513_
15.89711331176810.05.1844.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-046010/1107/11152_
15.891078231113510.04.3542.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/1115/11797_
15.8816452727007840.04.4845.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1140/11005_
15.89436433041340.04.5042.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1158/11236_
15.89616427604950.04.3343.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1131/11479_
15.89496533253660.04.6444.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1077/11166_
15.901442833895030.04.2443.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1205/11752_
15.90256631628170.04.9045.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1039/11160_
15.881516534465850.03.9642.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1191/11209_
15.881424330894420.05.0243.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1029/10971_
15.891276532633930.04.3142.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1118/11202_
15.881816534764650.04.7443.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1001/10949_
15.881996428839850.03.9042.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1162/11405_
15.8813442733564480.04.5444.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/1121/11602_
15.9043132826220.04.1644.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

0-046010/961/11626_
15.90236330875970.03.6645.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-046010/998/11442_
15.881882230020490.03.9844.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0460129/1235/11326W
15.9100249272241.94.9943.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-046010/1167/11558_
15.881696532599110.04.6845.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/1111/11656_
15.881945428686410.04.6245.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1666/9967_
21.83239227149380.06.4238.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1476/9980_
21.8110443928773470.06.1338.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1501/9839_
21.815232728623810.05.8537.90
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1463/10037_
21.814443328826290.06.0039.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1556/10035_
21.81316524022320.05.9238.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1506/10445_
21.802007229762010.06.1540.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1780/10781_
21.8018882728197140.07.2442.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d93dfd12682eb

1-0241810/1635/10012_
21.801848230063490.06.8038.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1438/10054_
21.811356228873870.05.5138.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1627/10091_
21.81656224268960.06.5139.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1656/10227_
21.81796428893540.06.6740.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1352/9597_
21.8333126728180.05.3536.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1410/10255_
21.801576428190260.05.3639.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1588/9762_
21.8017243125198780.05.8637.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/1576/10072_
21.80195125323189720.06.4439.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/wstrust/active.php HTTP/1.1

1-0241810/1548/10170_
21.811171326924480.06.1839.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1547/10123_
21.81976530204480.06.1338.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1536/10088_
21.8376631457960.06.2338.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1741/9918_
21.81856728161460.07.0538.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1558/10450_
21.811320330893010.05.9840.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/1515/10060_
21.801659231229010.05.7738.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wst

Found on 2025-11-14 15:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186d9c58cf3

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 13:38:17 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  27 days 16 hours 6 seconds
Server load: 0.73 0.89 0.89
Total accesses: 547810 - Total Traffic: 2.1 GB - Total Duration: 153638307
CPU Usage: u35.4 s44.04 cu185.28 cs96.65 - .0151% CPU load
.229 requests/sec - 931 B/second - 4063 B/request - 280.459 ms/request
1 requests currently being processed, 49 idle workers
_____________W____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-046010/519/10703_
6.70791226592720.02.0141.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/530/10642_
6.71388431954610.02.2541.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/522/10947_
6.71508529494940.02.1142.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/413/10703_
6.71448531752780.01.6441.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/565/10844_
6.70687125976030.02.3742.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/587/10858_
6.722373828971870.02.5541.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-046010/460/10505_
6.715632729358130.01.8740.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/450/11132_
6.7288025185030.01.8942.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

0-046010/489/10354_
6.71268431441330.01.9339.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/434/10512_
6.72184326250920.01.6340.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-046010/531/10879_
6.72148431998440.02.1042.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/457/10546_
6.701048533290690.02.0141.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/509/11056_
6.7270230117290.01.9842.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0460125/503/10624W
6.7200334796628.82.0040.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-046010/467/10485_
6.6913963429412680.02.0340.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/465/10407_
6.72208431494440.01.9840.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/429/10513_
6.7011633132911130.01.7940.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-046010/394/10342_
6.701082327574390.01.5040.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/402/10645_
6.701228432025210.01.6141.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/497/10978_
6.701108531882840.01.9642.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-046010/399/11064_
6.701338229378710.01.6043.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-046010/353/10797_
6.7097630628568000.01.3841.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfjdFUG

0-046010/524/10615_
6.7088431623818100.02.3041.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFPa4NAEMW%2Fiuw97r9

0-046010/540/10931_
6.70868130306760.02.1042.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

0-046010/454/10999_
6.70834227507050.02.1142.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/901/9202_
12.331952725899910.03.4535.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/895/9399_
12.33328427703820.03.7336.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/825/9163_
12.33407327178950.03.3535.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/822/9396_
12.33230127605260.03.3936.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/849/9328_
12.3479023159060.03.2536.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0241810/785/9724_
12.3317229927563040.03.4037.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

1-0241810/1019/10020_
12.311288625246650.04.0739.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/922/9299_
12.311136127678870.03.8635.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/788/9404_
12.31628626152860.03.1035.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/955/9419_
12.33853323393050.03.9036.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0241810/791/9362_
12.324953227616120.03.3836.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/748/8993_
12.31862324747870.02.9334.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/859/9704_
12.3428526407270.03.3337.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/1019/9193_
12.31834124098350.03.8035.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/931/9427_
12.31988422048920.03.7537.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/909/9531_
12.311054225318660.03.7437.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/825/9401_
12.311204227299460.03.2635.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/961/9513_
12.31928430698830.03.8436.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/960/9137_
12.31808526136360.04.0835.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0241810/877/9769_
12.3110962929553540.03.5438.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0241810/805/9350_
12.31834329853450.03.1936.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0241810/867/9449_
</

Found on 2025-11-12 13:38

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81863451ed33

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 15:52:00 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  25 days 18 hours 13 minutes 49 seconds
Server load: 0.51 0.58 0.69
Total accesses: 499349 - Total Traffic: 1.9 GB - Total Duration: 143138927
CPU Usage: u44.69 s48.05 cu156.5 cs80.86 - .0148% CPU load
.224 requests/sec - 909 B/second - 4051 B/request - 286.651 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215930/1148/9587_
15.22826224435940.04.0436.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1082/9626_
15.201090529756870.04.0737.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1266/9883_
15.22875427456970.04.6738.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0215930/912/9693_
15.201011229442140.03.3137.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1257/9795_
15.2010443523988240.04.3337.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1079/9807_
15.2396226358920.04.0037.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1051/9520_
15.228113327749720.03.8036.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1334/10213_
15.22638023257930.04.7439.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml/ HTTP/1.1

0-0215930/954/9292_
15.22551429650490.03.6235.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1010/9513_
15.225852824619680.03.6736.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_342fb3d51bbd1

0-0215930/1095/9886_
15.20971629665380.04.2137.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/937/9566_
15.224442929973950.03.4537.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1244/10150_
15.23251527608920.04.8339.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/981/9718_
15.227794131312110.03.4337.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_f6305a2537e35

0-0215930/1043/9472_
15.22397227246550.03.8336.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1075/9476_
15.22491430248050.04.0636.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1141/9584_
15.22671430868800.04.2436.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/959/9441_
15.231442924585570.03.5136.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1053/9693_
15.2356129704200.03.9237.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

0-0215930/1113/10002_
15.232113030175370.04.0738.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/1313/10118_
15.23339227627050.05.1839.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1006/9983_
15.23255126416410.03.6938.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1148/9574_
15.201128221896360.04.4737.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/1164/9903_
15.201151528238030.04.4838.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/1227/10098_
15.22731425921070.04.4839.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1573/8219_
21.2670423606010.06.1231.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1478/8437_
21.257443126100140.05.6532.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1434/8246_
21.25255425008460.05.5831.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1457/8492_
21.25311525787100.05.6033.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1533/8330_
21.25610420649770.05.6432.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1497/8873_
21.25697425296120.05.5933.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1606/8924_
21.26218122500780.06.0335.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1598/8311_
21.254273426037050.05.8731.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c07bda93fe531

1-075920/1656/8543_
21.24818324741080.06.2032.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1517/8406_
21.25485320534140.05.5932.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1601/8514_
21.2411113425655840.06.3433.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1429/8190_
21.26131422895590.05.3531.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1438/8739_
21.241025324048360.05.0033.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-075920/1452/8105_
21.25255121476610.05.4031.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1347/8386_
21.241085319801610.05.3232.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/1576/8525_
21.24911422932950.05.9433.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1528/8508_
21.25791426069220.05.5632.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1551/8449_
21.256583228430950.05.7632.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c44857e778070

1-075920/1495/8105_
21.241000224220890.05.9431.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/1625/8760_
21.26191427444950.06.2334.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/1529/8458_
21.24851428094160.06.0032.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

Found on 2025-11-10 15:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818697291f10

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 14:57:33 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  23 days 17 hours 19 minutes 23 seconds
Server load: 0.50 0.71 0.95
Total accesses: 459947 - Total Traffic: 1.7 GB - Total Duration: 133645503
CPU Usage: u29.02 s37.34 cu156.5 cs80.86 - .0148% CPU load
.224 requests/sec - 910 B/second - 4056 B/request - 290.567 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0215930/352/8791_
4.38344522343180.01.0433.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/255/8799_
4.38464528098320.00.8533.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/308/8925_
4.38524425724480.01.1034.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/287/9068_
4.37702227543400.00.9534.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/368/8906_
4.378073522323830.01.2834.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/284/9012_
4.371122124548900.00.9334.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0215930/311/8780_
4.38378024700180.01.0133.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0215930/477/9356_
4.39218420955650.01.5635.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/225/8563_
4.382772827904710.00.7632.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/264/8767_
4.39164422352990.00.7833.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/273/9064_
4.39104528070250.00.9934.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/300/8929_
4.3927227937020.01.0235.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/354/9260_
4.361364525743250.01.2035.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/350/9087_
4.3614083029954730.01.1834.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/331/8760_
4.361290224354570.01.1533.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/308/8709_
4.361310328845620.01.0733.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/368/8811_
4.371244428363100.01.3033.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/284/8766_
4.3711082623037410.00.9734.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/328/8968_
4.371040327938640.01.0934.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/286/9175_
4.371266327434710.00.8835.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/372/9177_
4.371178125771250.01.4635.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/347/9324_
4.37884425143940.01.1735.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/332/8758_
4.37824619845050.01.1233.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/294/9033_
4.371004426167890.01.0535.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/321/9192_
4.37584423211240.01.1335.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/706/7352_
10.331117221335800.02.7728.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/819/7778_
10.3212784124767240.02.9929.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-075920/680/7492_
10.32125915123473850.02.6828.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFPa4NAEMW%2Fiuw97h9

1-075920/670/7705_
10.321304524196330.02.5630.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0759225/749/7546W
10.3500191905928.42.8829.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-075920/780/8156_
10.351243423623820.02.8331.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8d2c9bd60fd39

1-075920/837/8155_
10.341064421078510.03.2032.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/793/7506_
10.321178223947560.03.0528.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/796/7683_
10.321347422689600.03.0329.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-075920/743/7632_
10.3211775318836230.02.7229.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/670/7583_
10.341016323845040.02.5729.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-075920/691/7452_
10.34944621131820.02.5228.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/671/7972_
10.34818321966940.02.2831.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/836/7489_
10.34764420227740.03.1729.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/641/7680_
10.348772718012830.02.5030.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/732/7681_
10.34644620714330.02.7229.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/776/7756_
10.34404624442420.02.9329.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/762/7660_
10.352073026552810.02.8529.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/760/7370_
10.345773122704920.03.0728.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/764/7899_
10.3544525426140.02.7230.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/684/7613_
10.34364225968320.02.6129.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0

Found on 2025-11-08 14:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186441cd2aa

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 07-Nov-2025 03:26:34 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  22 days 5 hours 48 minutes 24 seconds
Server load: 1.22 1.23 1.35
Total accesses: 445066 - Total Traffic: 1.7 GB - Total Duration: 131559992
CPU Usage: u22.47 s32.39 cu156.5 cs80.86 - .0152% CPU load
.232 requests/sec - 943 B/second - 4074 B/request - 295.597 ms/request
1 requests currently being processed, 49 idle workers
W_________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-02159343/47/8486W
0.22002185881115.70.1332.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0215930/12/8556_
0.1937127944330.00.0733.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/9/8626_
0.1962125326670.00.0233.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/10/8791_
0.1970227221070.00.0434.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/24/8562_
0.1880121599640.00.1133.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0215930/5/8733_
0.16280224332200.00.0233.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/8/8477_
0.11645524276930.00.0432.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/2/8881_
0.1162853320356290.00.0134.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuReE2M

0-0215930/9/8347_
0.1160719827687030.00.0432.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxege%2Fyi

0-0215930/7/8510_
0.11578122038340.00.0333.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0215930/2/8793_
0.11552227689710.00.0133.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/16/8645_
0.12526627548560.00.0534.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/15/8921_
0.12491025296880.00.0634.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/undefined HTTP/1.1

0-0215930/22/8759_
0.14457329582300.00.0833.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/20/8449_
0.154224224083090.00.1432.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0215930/2/8403_
0.15422128376780.00.0132.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0215930/42/8485_
0.15386127824280.00.1632.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0215930/6/8488_
0.16364222355220.00.0433.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/9/8649_
0.16339327424220.00.0533.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0215930/6/8895_
0.16308026998640.00.0234.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0215930/40/8845_
0.18236025123420.00.1934.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0215930/33/9010_
0.18221224714440.00.1134.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0215930/33/8459_
0.18140319597680.00.1232.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.HEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2

0-0215930/3/8742_
0.18165525587580.00.0134.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0215930/3/8874_
0.1811230922887950.00.0134.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeW5b%2

1-075920/399/7045_
6.33211220834390.01.7127.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/527/7486_
6.31394224470310.02.0728.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/404/7216_
6.3237317122881850.01.6627.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d19Aw

1-075920/430/7465_
6.31405523733340.01.8329.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/442/7239_
6.30422118877810.01.8528.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-075920/416/7792_
6.30533422947390.01.6129.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

1-075920/543/7861_
6.33285420491290.02.1531.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/536/7249_
6.33260223715490.02.2028.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/506/7393_
6.33346422377540.02.0628.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/482/7371_
6.3332314718609270.01.8828.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeS5b%2

1-075920/408/7321_
6.33179223155080.01.6628.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/408/7169_
6.33156320249960.01.6227.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/387/7688_
6.34105521787510.01.4330.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-075920/471/7124_
6.34122319895100.01.8027.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-075920/374/7413_
6.3576217795530.01.5729.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-075920/443/7392_
6.3662220295300.01.7928.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/439/7419_
6.366024080230.01.8928.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /v3/api-docs HTTP/1.1

1-075920/435/7333_
6.29559025896980.01.7128.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075920/461/7071_
6.3622222381440.02.0227.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/412/7547_
6.30479325008950.01.5129.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-075920/398/7327_
6.26615025587980.01.7228.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-075920/430/7314_
6.28573027501880.01.70</

Found on 2025-11-07 03:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186db5588a7

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 05-Nov-2025 05:51:25 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  20 days 8 hours 13 minutes 15 seconds
Server load: 0.59 1.42 1.59
Total accesses: 399996 - Total Traffic: 1.5 GB - Total Duration: 118410478
CPU Usage: u38.45 s39.41 cu121.86 cs62.73 - .0149% CPU load
.228 requests/sec - 925 B/second - 4067 B/request - 296.029 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273220/949/7731_
13.49756520247290.03.5429.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/946/7718_
13.5515325033620.03.7729.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/981/7720_
13.515932821256040.04.0830.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_636a8056e2d3d

0-0273220/947/7969_
13.51396523839050.03.8230.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/1030/7681_
13.51546020093110.04.0730.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/1078/7850_
13.541063021527280.04.3530.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/896/7576_
13.51434322477960.03.4529.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1076/7936_
13.51500418294480.04.3531.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1098/7592_
13.54211225935370.04.3929.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/961/7637_
13.52353219782460.03.5829.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1081/7717_
13.54249025350320.04.2629.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0273220/981/7863_
13.54262324404820.04.0831.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0273220/926/7974_
13.5232713822379240.03.4330.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273220/827/7798_
13.53310026076050.03.2029.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0273220/831/7471_
13.51456421306260.03.3428.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/942/7457_
13.54156425387930.03.5528.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/1133/7563_
13.498953325904730.04.4029.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_56b66cdc5d568

0-0273220/886/7481_
13.54188319480400.03.4629.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0273220/827/7721_
13.49876524516800.03.0429.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/1010/8063_
13.5589022383640.03.9431.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/897/7991_
13.51689022945900.03.7830.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/971/7959_
13.51626122965840.03.7530.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0273220/933/7558_
13.51636516765660.03.5929.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/1031/7808_
13.49798223413150.03.9330.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/870/7863_
13.51555120857310.03.4930.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0118930/1360/6192_
20.24329331318155810.05.4923.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

1-0118930/1427/6518_
20.23576521222920.05.8724.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1390/6341_
20.20888221072810.05.3324.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1535/6605_
20.24260121195170.06.5525.91
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1432/6395_
20.21772315969210.05.8525.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/1526/6885_
20.226122320908450.06.1726.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/idp/resumelogout.php?id=_d3ee19cf4064fcbff

1-0118930/1399/6727_
20.24216517831730.05.6626.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1327/6295_
20.2736519991300.05.2824.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1395/6419_
20.25197240620003970.05.2724.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0118930/1587/6395_
20.2789014995510.06.0624.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-0118930/1338/6484_
20.234062821088710.05.4825.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/1323/6287_
20.23465217849350.05.0524.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-01189325/1549/6865W
20.2700193858528.46.1826.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0118930/1475/6268_
20.21808318281560.05.8424.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0118930/1434/6628_
20.226203714930680.05.5326.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0118930/1366/6456_
20.2354616718384460.05.4325.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9fqy

1-0118930/1402/6443_
20.23516521447440.05.5424.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/1486/6474_
20.21691120485580.05.9924.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1493/6196_
20.23451320806260.05.9923.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/1588/6579_
20.25148223325210.06.1725.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/1328/6465_
20.24359322420790.05.1624.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.p

Found on 2025-11-05 05:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818675f86cf6

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 03-Nov-2025 04:35:37 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  18 days 6 hours 57 minutes 27 seconds
Server load: 1.10 1.47 1.39
Total accesses: 352293 - Total Traffic: 1.3 GB - Total Duration: 106879611
CPU Usage: u19.11 s27.17 cu121.86 cs62.73 - .0146% CPU load
.223 requests/sec - 905 B/second - 4059 B/request - 303.383 ms/request
1 requests currently being processed, 49 idle workers
____________W_____________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273220/5/6787_
0.05242018080190.00.0226.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0273220/3/6775_
0.05287122285880.00.0126.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/5/6744_
0.04314119081310.00.0225.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0273220/5/7027_
0.04348419761580.00.0227.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/4/6655_
0.04369217676010.00.0126.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6773_
0.03562218513090.00.0026.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/37/6717_
0.06220320756880.00.1525.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0273220/28/6888_
0.08154316037500.00.0826.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/18/6512_
0.08130223612370.00.0624.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/8/6684_
0.08109417594090.00.0426.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0273220/3/6639_
0.0886323358810.00.0125.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/13/6895_
0.0848522682420.00.0626.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02732227/30/7078W
0.0900202125242.10.0527.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0273220/11/6982_
0.027003024012830.00.0826.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_b5f5ffb391e07

0-0273220/1/6641_
0.036622419464260.00.0025.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6516_
0.03618323020820.00.0025.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/2/6432_
0.03601122745870.00.0124.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6596_
0.03581216926010.00.0026.04
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6895_
0.03553321882610.00.0026.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/4/7057_
0.035133520301730.00.0127.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c0cb4f66b730f

0-0273220/4/7098_
0.03478220326690.00.0126.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6989_
0.03454320277530.00.0026.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0273220/1/6626_
0.04418415011770.00.0025.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/1/6778_
0.03418221055430.00.0026.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0273220/2/6995_
0.04408618179580.00.0127.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/446/5278_
6.7742834915311420.01.8119.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxege%2F0h

1-0118930/504/5595_
6.793301318629610.02.3221.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/441/5392_
6.77528419120040.01.5820.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/584/5654_
6.814018065840.02.5221.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /swagger/v1/swagger.json HTTP/1.1

1-0118930/431/5394_
6.8160213273300.01.6620.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/458/5817_
6.76562118801240.01.9822.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/413/5741_
6.80122316126140.01.7922.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/439/5407_
6.8014533818207330.01.8220.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-0118930/585/5609_
6.81103518271830.02.1621.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/612/5420_
6.8126212437600.02.1220.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/455/5601_
6.76562217634410.01.9821.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/397/5361_
6.77468416027350.01.4920.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/548/5864_
6.76685217735670.02.3523.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/480/5273_
6.76649816350310.01.9520.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0118930/492/5686_
6.76606212309750.01.8522.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/442/5532_
6.77505215768950.01.8421.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/492/5533_
6.77416119772060.01.9420.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/471/5459_
6.77389318739700.01.8620.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0118930/418/5121_
6.77418418361970.01.7019.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0118930/533/5524_
6.80305121355650.02.0521.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0118930/435/5572_
6.793593820114800.01.7421.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0118930/333/5653_
6.80277220758140.01.1921.76
127.0.0.1</

Found on 2025-11-03 04:35

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186b1606efc

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 01-Nov-2025 19:36:38 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  16 days 21 hours 58 minutes 27 seconds
Server load: 1.00 1.23 1.16
Total accesses: 321835 - Total Traffic: 1.2 GB - Total Duration: 95869747
CPU Usage: u36.92 s35.5 cu92.16 cs46.47 - .0144% CPU load
.22 requests/sec - 894 B/second - 4061 B/request - 297.885 ms/request
1 requests currently being processed, 49 idle workers
_________________________________W________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-075430/1047/6261_
14.9449417223910.03.7124.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1149/6236_
14.94709517870170.04.2223.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1058/6165_
14.921536318207200.03.9623.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1043/6273_
14.921165216614690.03.9524.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1042/6016_
14.927683214609700.03.7823.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1060/6176_
14.92880316963380.03.8423.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1150/5955_
14.921429419138800.04.1423.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1046/6282_
14.92949614078080.04.0824.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1024/6034_
14.92834320090980.03.8623.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/983/6014_
14.921363315978060.03.9223.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1013/6096_
14.94508320037850.03.7623.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1255/6201_
14.921462219803950.04.5624.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1201/6418_
14.9449025618936560.04.7224.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=98&StateId=_

0-075430/1172/6128_
14.945342722374730.04.4123.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1037/5925_
14.94349517668420.03.9522.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1059/5969_
14.94409420819000.03.7923.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/991/5875_
14.94589521716230.04.0322.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1069/5907_
14.941682914704130.04.3123.42
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1156/6322_
14.944682920650970.04.2024.49
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-075430/1183/6386_
14.921129418587820.04.4524.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1118/6435_
14.94252217582300.04.0324.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-075430/1043/6239_
14.94229418564050.03.8924.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1181/6161_
14.921249513159810.04.4723.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/1227/6316_
14.921009417307950.04.5124.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-075430/947/6478_
14.94121416811770.03.6525.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1357/4731_
21.16889513081400.05.1417.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1548/4957_
21.151435415562280.05.6518.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1609/4875_
21.16862114987830.05.9118.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1671/4970_
21.18186416534410.06.2819.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1512/4825_
21.18109512287030.05.7818.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1486/5247_
21.16529416030700.05.4919.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1701/5203_
21.17354414230060.06.4820.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1628/4827_
21.151489416981560.06.1818.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-02485426/1556/4901W
21.1800172981531.55.9118.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0248540/1533/4709_
21.18289510949670.05.6918.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1604/5043_
21.18163315626580.06.0819.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1644/4830_
21.17417313717390.06.3318.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0248540/1587/5213_
21.1513682715931150.06.3020.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1508/4667_
21.151309414336840.05.9818.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1592/5084_
21.18234399892490.06.2720.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1493/4975_
21.151189412677670.05.7119.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1570/4962_
21.16648416981560.05.7118.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0248540/1562/4856_
21.16546216261270.05.8118.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1337/4599_
21.1511352915798710.05.0117.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0248540/1646/4836_
21.16997318204490.06.5919.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0248540/1811/5019_
21.1610683217248090.06.9719.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0

Found on 2025-11-01 19:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818636d66818

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 28-Oct-2025 06:47:29 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  12 days 9 hours 9 minutes 19 seconds
Server load: 0.58 0.64 0.74
Total accesses: 238237 - Total Traffic: 927.6 MB - Total Duration: 72038320
CPU Usage: u33.59 s28.78 cu62.58 cs31.33 - .0146% CPU load
.223 requests/sec - 909 B/second - 4082 B/request - 302.381 ms/request
1 requests currently being processed, 49 idle workers
______________________________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151680/1232/4689_
15.54152014060330.04.8118.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0151680/1257/4513_
15.512933211397770.05.0217.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1114/4561_
15.50460412635980.04.3517.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1214/4587_
15.495434311848260.04.5917.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/1100/4347_
15.46725110389990.04.3617.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0151680/1301/4573_
15.475933311036840.05.2717.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/1197/4318_
15.51280614922430.04.6717.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1175/4621_
15.505195110822150.04.6518.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/1139/4463_
15.53197116427370.04.4116.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1126/4525_
15.531822911746500.04.2717.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/1029/4501_
15.50507013796400.03.7917.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0151680/1084/4402_
15.51349214863810.04.2217.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1266/4653_
15.47687211298970.05.1918.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1171/4506_
15.5580018315530.04.4317.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.js HTTP/1.1

0-0151680/1307/4325_
15.5647214696840.04.9216.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0151680/1106/4319_
15.53209316405500.04.1916.75
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/accountinfo/sent-username.php HTTP/1.1

0-0151680/1053/4353_
15.5493317431550.04.0316.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/1165/4341_
15.5641410038850.04.6217.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1402/4656_
15.47620016670360.05.7118.30
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0151680/1194/4676_
15.47640411846210.04.6418.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1309/4725_
15.46760413115100.04.7217.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/1189/4574_
15.47714013203930.04.5417.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

0-0151680/1116/4379_
15.562119392420.04.4717.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET / HTTP/1.1

0-0151680/1264/4497_
15.46785211462460.04.7717.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0151680/1334/4856_
15.47575111964820.05.2418.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-08810/1542/3259_
20.03287010286130.05.8212.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-08810/1675/3303_
20.03190110874300.06.1012.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/1342/3106_
20.02495111480540.05.2112.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/1489/3205_
20.04173210781840.05.7512.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-08810/1583/3194_
20.055728265440.06.1212.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-088124/1718/3628W
20.060087391326.86.1814.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-08810/1585/3384_
20.054719207820.06.3213.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a6f3c40ced08b

1-08810/1424/3070_
20.053118210242260.05.3911.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9RqN

1-08810/1465/3243_
20.00706012713300.05.4912.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/post.css HTTP/1.1

1-08810/1433/3068_
19.9972317563630.05.6212.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-08810/1602/3314_
20.0071482110754130.05.9812.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-08810/1391/3012_
19.9877239814460.05.0211.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-08810/1722/3508_
20.006322610960390.06.5213.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/1443/3056_
20.0060518410441610.05.5311.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza974NdH

1-08810/1488/3401_
20.025491467445670.05.9313.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFfa8IwFMW%2FSsm7TUz

1-08810/1572/3328_
20.0240169002090.05.9812.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/1629/3310_
20.006582710958480.05.8712.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/1534/3189_
20.02565010582940.05.6611.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-08810/1471/3083_
20.02543011768540.05.5711.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-08810/1507/3062_
20.03340412711640.05.9312.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/1387/3091_
20.0323617112575890.05.4712.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfY2O0M

Found on 2025-10-28 06:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186f62eb153

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 26-Oct-2025 05:26:16 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 7 hours 48 minutes 6 seconds
Server load: 0.36 0.81 0.91
Total accesses: 188043 - Total Traffic: 728.6 MB - Total Duration: 59280097
CPU Usage: u14.41 s17.23 cu62.58 cs31.33 - .0141% CPU load
.211 requests/sec - 856 B/second - 4063 B/request - 315.248 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151680/219/3676_
2.251118309729180.00.7214.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/202/3458_
2.25114428620150.00.7213.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/198/3645_
2.24116314810426370.00.6213.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d1%2B

0-0151680/207/3580_
2.2715298581100.00.7113.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/184/3431_
2.278638797850.00.6213.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/224/3496_
2.271187158487630.00.7913.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0151680/208/3329_
2.251078412819730.00.7613.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/196/3642_
2.25915369065180.00.7614.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/146/3470_
2.25987512076610.00.4813.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/171/3570_
2.258271518559930.00.5914.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

0-0151680/164/3636_
2.258594012191260.00.5213.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/188/3506_
2.25782213259020.00.6113.52
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/133/3520_
2.2574239062400.00.4813.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/165/3500_
2.25719015413390.00.5213.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0151680/204/3222_
2.25687512851960.00.6612.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/187/3400_
2.25646314034900.00.6513.22
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0151680/159/3459_
2.2561313414474120.00.5413.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_30325ef0c5f12

0-0151680/166/3342_
2.2555138198800.00.5613.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0151680/194/3448_
2.25507413662990.00.6913.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/198/3680_
2.2641139804180.00.5814.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/203/3619_
2.263784310701810.00.7213.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151680/171/3556_
2.27327611216240.00.4813.64
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/160/3423_
2.2726757390130.00.5213.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0151680/213/3446_
2.2723529702890.00.7413.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0151680/178/3700_
2.27200210101380.00.5714.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/595/2312_
6.9465137502060.02.048.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-08810/643/2271_
6.9471916737420.02.158.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-08810/534/2298_
6.9380749470820.01.968.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/500/2216_
6.9469718078090.01.758.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-08810/568/2179_
6.9462756108850.02.018.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/540/2450_
6.945651635775640.01.979.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-08810/552/2351_
6.9453827163600.02.219.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/515/2161_
6.9444748159980.01.858.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/499/2277_
6.96385429872160.01.768.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-08810/529/2164_
6.9631525121100.01.938.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/539/2251_
6.96251298784740.01.948.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/436/2057_
6.963727678032670.01.417.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-08810/504/2290_
6.9620748507460.01.889.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/494/2107_
6.9714038834600.01.687.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/523/2436_
6.9710005709280.02.059.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-08810/486/2242_
6.972745678050.01.668.55
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-088125/648/2329W
6.980090391328.42.028.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-08810/576/2231_
6.911125398617840.01.988.26
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-08810/482/2094_
6.911151278614370.01.687.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/546/2101_
6.92104749839820.01.928.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/523/2227_
6.9292748427480.01.918.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

Found on 2025-10-26 05:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186c93542df

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 24-Oct-2025 05:41:12 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 8 hours 3 minutes 1 second
Server load: 0.61 1.13 1.33
Total accesses: 168676 - Total Traffic: 662.7 MB - Total Duration: 56009719
CPU Usage: u37.75 s26.74 cu31.46 cs15.55 - .0155% CPU load
.234 requests/sec - 964 B/second - 4119 B/request - 332.055 ms/request
2 requests currently being processed, 73 idle workers
______K______________________________W__________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0228500/1429/3319_
20.24104349030350.05.7013.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1411/3091_
20.24884288218260.05.6011.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1566/3275_
20.253612610149320.06.2412.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_dc52a199fe47c

0-0228500/1598/3166_
20.25649137958830.06.2912.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1437/3093_
20.2527928424200.05.7512.48
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1394/3137_
20.2567717642280.05.3811.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0228503/1254/2985K
20.270011922423.04.8111.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /v2/_catalog HTTP/1.1

0-0228500/1484/3311_
20.271048414370.05.8413.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0228500/1548/3186_
20.231303111701390.05.8012.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1559/3221_
20.23123227811110.06.2412.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1620/3347_
20.231163411704040.06.2913.02
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1463/3119_
20.23136685812688210.05.7312.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0228500/1440/3210_
20.2554734028640040.05.5912.23
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0228500/1509/3178_
20.25250114961300.05.9012.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0228500/1337/2863_
20.24996212149450.05.1010.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1322/3045_
20.24949312849640.05.1812.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1583/3150_
20.254362913884700.06.3312.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1375/2996_
20.264927726110.05.5311.92
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/1365/3092_
20.25609313245810.05.3712.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1498/3324_
20.2520349207700.06.3013.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/1494/3254_
20.25328010184630.05.7612.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0228500/1495/3246_
20.2410793110642130.05.7112.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_618713ce39f53

0-0228500/1454/3102_
20.267456996630.05.8011.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0228500/1378/3037_
20.2512829170140.05.5012.37
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/1525/3383_
20.2474359457160.05.8612.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/129/1846_
2.3038346726210.00.466.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/254/1882_
2.3056366099850.00.897.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/164/1928_
2.3066708441740.00.707.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-08810/182/1898_
2.3044367718530.00.737.44
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/216/1827_
2.30336305696700.00.827.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-08810/197/2107_
2.312963225388950.00.848.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=335&StateId=

1-08810/157/1956_
2.3125606535690.00.637.79
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-08810/171/1817_
2.31230247648980.00.697.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=parentlounge_02&cookie

1-08810/150/1928_
2.321391619199950.00.547.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegeS5F%2

1-08810/154/1789_
2.328344681770.00.617.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/186/1898_
2.322358110220.00.747.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/128/1749_
2.325717542300.00.527.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-088129/141/1927W
2.330079598050.00.497.62
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-08810/112/1725_
2.28139108005230.00.366.60
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /apple-touch-icon.png HTTP/1.1

1-08810/127/2040_
2.28131634917240.00.568.10
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/130/1886_
2.29124935058480.00.507.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/196/1877_
2.29110358553130.00.827.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-08810/141/1796_
2.291184317574380.00.546.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-08810/120/1732_
2.29105428308160.00.466.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/161/1716_
2.29102128783640.00.706.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-08810/153/1857_
2.2996247595420.00.597.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /saml2/idp/SSOService.php HTTP/1.1

1-08810/195/2110_
2.29926268561

Found on 2025-10-24 05:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818673bf6578

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 22-Oct-2025 06:32:57 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 8 hours 54 minutes 47 seconds
Server load: 1.11 1.46 1.25
Total accesses: 128720 - Total Traffic: 506.1 MB - Total Duration: 44588592
CPU Usage: u21.33 s16.69 cu31.46 cs15.55 - .0154% CPU load
.234 requests/sec - 963 B/second - 4122 B/request - 346.4 ms/request
1 requests currently being processed, 49 idle workers
_________________________........................._____W________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0228500/739/2629_
10.5560266154880.03.0710.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/750/2430_
10.582726948470.02.939.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/836/2545_
10.55678267051910.03.359.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d9efd5f823010

0-0228500/801/2369_
10.5565426050560.03.149.19
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/800/2456_
10.588837228110.03.2710.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/701/2444_
10.5469325997180.02.659.27
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/702/2433_
10.55562410308270.02.619.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/748/2575_
10.55542346743030.02.8710.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/910/2548_
10.5646129745820.03.519.77
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/914/2576_
10.5550725635770.03.6410.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/757/2484_
10.5647829009430.03.089.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/779/2435_
10.574453810991840.02.999.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0228500/786/2556_
10.574123726299710.03.019.65
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fVJNTwIxEL37Kza9d3fZL

0-0228500/779/2448_
10.57308511081000.03.039.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/661/2187_
10.573498429790120.02.548.20
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0228500/730/2453_
10.58165011709590.02.999.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0228500/837/2404_
10.572042711601810.03.369.15
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/687/2308_
10.5812335977910.02.789.17
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/693/2420_
10.57265210940070.02.779.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/784/2610_
10.5813620357562530.03.059.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9JsZ

0-0228500/708/2468_
10.572421857448610.02.619.35
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/idp/prp.php?client-request-id=9e6f5d88-745

0-0228500/738/2489_
10.53723348967540.02.819.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0228500/810/2458_
10.5373445237540.03.159.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0228500/687/2346_
10.586857719880.02.829.68
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0228500/809/2667_
10.5563727941920.03.2010.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1717.
0.0014932585572310.00.006.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1628.
0.0014932525358740.00.006.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1764.
0.0014932558155510.00.006.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1716.
0.0014932557400920.00.006.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1611.
0.0014932515114990.00.006.43
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1910.
0.0014932595045170.00.007.82
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1799.
0.0014932556222750.00.007.16
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1646.
0.0014932547269990.00.006.41
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1778.
0.0014932548836410.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1635.
0.0014932534239380.00.006.59
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1712.
0.0014932557394340.00.006.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1621.
0.0014932537097590.00.006.58
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1786.
0.00149325347798720.00.007.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/1613.
0.0014932526647620.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1913.
0.0014932524482420.00.007.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/1756.
0.0014932534765000.00.006.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1681.
0.0014932527386420.00.006.46
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1655.
0.0014932547073400.00.006.28
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1612.
0.0014932547618970.00.006.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1555.
0.0014932528547620.00.006.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/1704.
0.0014932547299800.00.006.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0-0/0/1915.
0.0014932536579480.00.007.63
12

Found on 2025-10-22 06:32

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186125b2240

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 19-Oct-2025 08:23:05 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 10 hours 44 minutes 54 seconds
Server load: 2.09 1.39 1.26
Total accesses: 54239 - Total Traffic: 205.3 MB - Total Duration: 17436577
CPU Usage: u22.42 s14.35 cu0 cs0 - .0123% CPU load
.182 requests/sec - 722 B/second - 3969 B/request - 321.477 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/1257/1257_
14.6732422300690.04.944.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/1083/1083_
14.6743643922400.04.084.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03527/1025/1025W
14.730029935040.33.813.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

0-0350/1082/1082_
14.726302314730.03.983.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0350/1131/1131_
14.711667232402710.04.574.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

0-0350/1132/1132_
14.6733801663030.04.074.07
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /resources/icons/clipboard.svg HTTP/1.1

0-0350/1076/1076_
14.7021814599310.04.334.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0350/1193/1193_
14.6729812862980.04.614.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0350/1044/1044_
14.6827613949600.03.803.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0350/1057/1057_
14.7023542894190.04.094.09
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.js HTTP/1.1

0-0350/1070/1070_
14.72832574723210.03.973.97
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=251&StateId=

0-0350/1163/1163_
14.7273404569430.04.384.38
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/1084/1084_
14.6736611469200.03.843.84
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0350/1153/1153_
14.72122374282800.04.254.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/958/958_
14.71150441995840.03.453.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/1121/1121_
14.6664215884310.04.324.32
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/1056/1056_
14.72104482963780.03.743.74
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/1089/1089_
14.732632663070.04.254.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/995/995_
14.6665724558150.03.713.71
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/1192/1192_
14.6757532409930.04.394.39
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/1093/1093_
14.6749643484110.04.054.05
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/1194/1194_
14.6762624460180.04.674.67
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/1124/1124_
14.6754731871520.03.933.93
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/1099/1099_
14.6737654134310.04.364.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/1004/1004_
14.6745634354510.03.763.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/1132/1132_
14.573534333363980.04.084.08
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0360/1021/1021_
14.5733723373243310.03.873.87
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0360/1188/1188_
14.5729211165548090.04.704.70
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0360/1022/1022_
14.5824114407650.03.863.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0360/1009/1009_
14.5555642128070.03.963.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/1083/1083_
14.5731643467160.04.214.21
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/1025/1025_
14.608602524250.04.034.03
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0360/1064/1064_
14.5563424375240.03.993.99
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/1153/1153_
14.5650936046900.04.344.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0360/1133/1133_
14.56482283195440.04.534.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/1108/1108_
14.5643025845160.04.474.47
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/1027/1027_
14.5736614833350.04.114.11
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0360/992/992_
14.5644144342050.03.853.85
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/1003/1003_
14.59192502749930.03.803.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0360/1274/1274_
14.60150292734980.04.814.81
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0360/1046/1046_
14.5823512945820.03.963.96
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0360/1065/1065_
14.601032582262490.04.004.00
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=139&StateId=

1-0360/1055/1055_
14.6152723564070.03.833.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/hotp.php HTTP/1.1

1-0360/1084/1084_
14.6093443770160.04.144.14
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0360/893/893_
14.6110424582100.03.293.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0360/1048/1048_
14.5565113939920.03.893.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0

Found on 2025-10-19 08:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186df10ea99

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 17-Oct-2025 07:21:42 UTC
Restart Time: Wednesday, 15-Oct-2025 21:38:10 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 9 hours 43 minutes 32 seconds
Server load: 0.48 0.94 1.27
Total accesses: 33247 - Total Traffic: 133.3 MB - Total Duration: 13672682
CPU Usage: u13.54 s7.85 cu0 cs0 - .0176% CPU load
.274 requests/sec - 1151 B/second - 4205 B/request - 411.246 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0350/792/792_
9.181034381481600.03.243.24
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/647/647_
9.181099452643190.02.512.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/623/623_
9.21301672470050.02.502.50
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/637/637_
9.2035341806530.02.452.45
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/698/698_
9.2058221312290.02.982.98
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/728/728_
9.18106731038590.02.782.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/675/675_
9.19799263652680.02.832.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/636/636_
9.1992122098350.02.562.56
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/616/616_
9.19891433563450.02.332.33
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/668/668_
9.19761102468400.02.762.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/687/687_
9.2052824223960.02.542.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/714/714_
9.2047343347120.02.802.80
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/627/627_
9.1999581011240.02.342.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/765/765_
9.1968002995150.02.942.94
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0350/549/549_
9.1971341016560.02.062.06
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/673/673_
9.20434323790910.02.662.66
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/601/601_
9.1965342392640.02.252.25
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/701/701_
9.20400381567050.02.862.86
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0350/596/596_
9.2123344059390.02.292.29
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/737/737_
9.2113442026080.03.013.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0350/711/711_
9.218532908240.02.832.83
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/769/769_
9.2117343790660.03.343.34
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0350/705/705_
9.213131383230.02.612.61
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0350/632/632_
9.181149533610630.02.632.63
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_9bd63dcced906

0-0350/626/626_
9.18119353801770.02.532.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/668/668_
9.1410473332518820.02.312.31
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfk0Zbb

1-0360/619/619_
9.1483342736780.02.572.57
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/695/695_
9.1576924982650.02.882.88
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/574/574_
9.1569213615150.02.402.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-03625/642/642W
9.170015299928.42.762.76
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /server-status HTTP/1.1

1-0360/680/680_
9.149493172954130.02.892.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2Bx

1-0360/677/677_
9.1638921394420.02.782.78
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0360/674/674_
9.1710934086980.02.692.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0360/718/718_
9.1411711735386220.02.892.89
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_897a25f3e3ce9

1-0360/731/731_
9.14113362682360.03.013.01
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/689/689_
9.14107345052470.02.952.95
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/531/531_
9.1491433923360.02.122.12
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/607/607_
9.14101363751670.02.542.54
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/603/603_
9.15734302426680.02.512.51
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/797/797_
9.166697741355300.03.183.18
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0360/678/678_
9.1659362407240.02.722.72
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/634/634_
9.16499301172840.02.532.53
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/624/624_
9.1631303092630.02.362.36
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0360/661/661_
9.1646832711400.02.732.73
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0360/541/541_
9.1629344098010.02.132.13
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0360/646/646_
9.16146343546490.02.692.69
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_911f0031a2146

1-0360/850/850_
9.1619923183870.03.403.40
127.0.0.1http/1.1ip-10-1-104-199.ap-southeast-2.GET /saml2/id

Found on 2025-10-17 07:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186d220523c

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 14-Oct-2025 21:53:19 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  97 days 14 hours 45 minutes 37 seconds
Server load: 0.83 1.05 1.38
Total accesses: 1800936 - Total Traffic: 6.8 GB - Total Duration: 991427403
CPU Usage: u98.8 s152.12 cu594.13 cs317.13 - .0138% CPU load
.214 requests/sec - 868 B/second - 4069 B/request - 550.507 ms/request
1 requests currently being processed, 49 idle workers
_________________________________W________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0255040/1199/32081_
18.5249727169882290.04.72124.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/1461/33428_
18.534391170441850.06.07130.27
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1611/33393_
18.525402183114140.06.75129.12
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1354/32549_
18.534506163163910.05.42126.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/1387/31778_
18.534351181182079210.05.81122.69
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=ifuda%40students.br

0-0255040/1350/31706_
18.57901165481340.05.23123.17
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0255040/1252/33002_
18.543512170780240.05.18128.74
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1396/32284_
18.542902165732450.05.51123.21
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1517/33151_
18.581640180592910.06.42129.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/1483/33291_
18.54378328175673970.06.16130.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfy1L

0-0255040/1373/32990_
18.543250184604330.05.21128.78
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0255040/1172/32639_
18.552042176616600.04.40125.37
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1439/33068_
18.53413114184996320.05.61128.00
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0255040/1584/32917_
18.58273161653560.06.35128.77
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/1350/32592_
18.543331166042330.05.45127.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0255040/1352/32368_
18.571231186017840.05.43127.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0255040/1361/32035_
18.515642171202550.05.49122.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/1370/32926_
18.552291183499090.05.31127.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1347/33118_
18.571332159227790.05.47127.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1389/33667_
18.57551166447250.05.54130.48
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1191/32310_
18.561571174423870.04.62125.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0255040/1429/32366_
18.50625193175163010.05.46125.30
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFba4MwGIb%2FiuS%2B5

0-0255040/1334/33023_
18.515942173990100.05.48128.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/1302/32373_
18.534042059171906170.05.13125.76
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0255040/1353/32206_
18.561861182268800.05.33124.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/918/31590_
13.17842156406860.03.76121.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/901/29723_
13.074500166195200.03.60113.54
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-040130/1043/29536_
13.084051183161177560.04.38113.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-040130/1042/29884_
13.074643144654230.04.43114.87
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/1108/31052_
13.103891142373970.04.44119.81
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-040130/1189/30680_
13.084141157873940.05.00119.29
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-040130/982/29757_
13.1511341156842040.03.96113.75
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-040130/777/29234_
13.18440156207350.03.08112.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0401324/877/30229W
13.18001725488140.83.48116.78
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

1-040130/856/29761_
13.131496159754300.03.78117.08
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/939/30426_
13.075109155454320.03.86117.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/943/30484_
13.075881152990750.03.84118.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/944/30192_
13.113202179202380.03.75116.34
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-040130/1210/29532_
13.112106160297990.04.98114.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-040130/907/29914_
13.103662155051680.03.71115.74
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/950/29819_
13.066171161574610.03.81115.03
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-040130/1079/30089_
13.112561164724240.04.47118.09
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/982/31059_
13.1034043163915570.04.14121.77
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-040130/1034/30170_
13.111961157344210.04.25117.55
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-040130/1014/30238_
13.113051176804990.04.27118.86
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-040130/1009/31021_
13.1868116260337

Found on 2025-10-14 21:53

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818697afacbc

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 12-Oct-2025 23:11:59 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  95 days 16 hours 4 minutes 18 seconds
Server load: 0.46 1.30 1.71
Total accesses: 1748454 - Total Traffic: 6.6 GB - Total Duration: 975915849
CPU Usage: u87.94 s145.11 cu584.2 cs311.76 - .0137% CPU load
.212 requests/sec - 859 B/second - 4061 B/request - 558.159 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0255040/290/31172_
4.094812166949850.01.03120.88
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/350/32317_
4.0957350167538540.01.32125.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/440/32222_
4.096106179388340.01.63124.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/307/31502_
4.0951231159983680.00.99121.62
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/330/30721_
4.096381179497560.01.19118.07
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/333/30689_
4.077842163374970.01.28119.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/304/32054_
4.094951168451570.01.07124.64
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/359/31247_
4.092120162531800.01.15118.84
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0255040/306/31940_
4.094172175304620.01.09124.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/319/32127_
4.093706172460470.01.24125.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/320/31937_
4.092802181521940.01.11124.68
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/368/31835_
4.092506173114990.01.22122.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/375/32004_
4.0934812182375110.01.35123.74
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/341/31674_
4.09492157497170.01.19123.61
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/273/31515_
4.091306163784870.00.91122.84
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/334/31350_
4.0710203183162430.01.14122.74
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/333/31007_
4.079393168119650.01.19118.69
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02550413/388/31944W
4.10001805107119.91.39124.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

0-0255040/334/32105_
4.0787329157075230.01.19123.71
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0255040/297/32575_
4.078506163850910.01.10126.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0255040/282/31401_
4.078376171582090.00.93121.69
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0255040/358/31295_
4.07811159172589930.01.16121.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLbsIwEEV%2FJfKe2DH

0-0255040/282/31971_
4.077413171575770.00.97124.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/284/31355_
4.087212167846340.00.95121.58
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0255040/297/31150_
4.0870831177423770.01.04120.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1227/30548_
14.109041154625060.04.27117.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1103/28737_
14.123001164015450.04.03109.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1154/28439_
14.108421156817360.04.26109.39
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-059200/1047/28797_
14.123561142682190.03.87110.27
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-059200/1076/29863_
14.122701139212570.04.15115.03
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1014/29424_
14.109706154908830.03.72114.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1160/28733_
14.106706153326260.03.99109.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1034/28370_
14.107132154069160.03.57108.82
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1206/29216_
14.107907168988870.04.26112.77
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1045/28860_
14.126221452156285460.03.75113.16
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-059200/1191/29412_
14.125062153267060.04.33113.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1100/29469_
14.108563150749200.04.20114.34
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1045/29189_
14.126013176053170.03.70112.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1099/28271_
14.125506156847030.03.98109.35
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1095/28917_
14.132034152522610.04.05111.62
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-059200/1109/28795_
14.141771155871890.03.95110.82
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1149/28923_
14.14707160985070.04.30113.25
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1124/29972_
14.1010541161547040.04.28117.25
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/1188/29085_
14.124306153892170.04.30113.07
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/1104/29107_
14.12396401174510000.03.83114.03
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfE%2BO

1-059200/944/29949_
14.14411158849540.03.17116.59
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.c

Found on 2025-10-12 23:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186ce73afe9

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 10-Oct-2025 12:34:48 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  93 days 5 hours 27 minutes 6 seconds
Server load: 0.69 1.27 1.13
Total accesses: 1724555 - Total Traffic: 6.5 GB - Total Duration: 970322870
CPU Usage: u87.48 s142.15 cu575.13 cs306.89 - .0138% CPU load
.214 requests/sec - 870 B/second - 4066 B/request - 562.651 ms/request
1 requests currently being processed, 49 idle workers
________W_________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295330/867/30758_
12.0830629166189940.02.78119.45
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/927/31776_
12.084796166514840.03.30123.54
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/913/31675_
12.075221178301450.03.04122.07
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/957/31047_
12.075032159080500.03.27120.11
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/955/30226_
12.084840178591780.03.44116.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0295330/861/30225_
12.082396162830200.02.94117.58
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/1021/31629_
12.08406378167367240.03.81123.16
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

0-0295330/1044/30727_
12.0410797160256730.03.51117.09
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02953312/1001/31465W
12.10001744502216.73.73122.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

0-0295330/874/31675_
12.0410311171410820.03.17123.55
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0295330/983/31494_
12.091196180457440.03.56123.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/881/31316_
12.096846171765900.03.16120.49
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0295330/935/31471_
12.0818935181331800.03.23121.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/958/31224_
12.09596156296060.03.22122.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/997/31095_
12.048996162996970.03.58121.43
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/1031/30886_
12.058396181798270.03.86121.13
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/905/30525_
12.076384166350820.03.21116.91
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0295330/1008/31358_
12.075481179801870.03.51121.96
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/943/31636_
12.075634155169790.03.03122.15
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0295330/1077/32154_
12.067196162852620.03.64124.55
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/933/30977_
12.068161170716620.03.37120.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/1014/30770_
12.067893171653050.03.94119.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/954/31524_
12.049596170971970.02.97122.40
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/908/30936_
12.058721166871490.03.19120.20
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/1005/30673_
12.0674242176595720.03.75118.96
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/741/30062_
8.02681153827990.02.42115.18
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-059200/652/28286_
8.0249442162706810.02.38107.92
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/691/27976_
8.025322155407130.02.54107.67
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/559/28309_
8.015996141740690.02.02108.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/685/29472_
8.015132138579310.02.77113.64
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/571/28981_
8.021796152989230.02.11112.40
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/629/28202_
8.017795152276190.02.09107.76
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/544/27880_
8.0190627153248930.01.86107.11
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/652/28662_
8.018802168011540.02.31110.82
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/550/28365_
8.018671155480970.01.96111.36
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/661/28882_
8.018292152172650.02.47111.71
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/610/28979_
8.022102149368850.02.32112.46
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/652/28796_
8.017942175258680.02.41111.03
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/617/27789_
8.0173541155942630.02.25107.62
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-059200/584/28406_
8.024197150993380.02.27109.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/616/28302_
8.024840155148980.02.18109.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-059200/672/28446_
8.022997159925370.02.46111.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/684/29532_
8.021360160375340.02.70115.67
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-059200/629/28526_
8.016596152996460.02.19110.97
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/579/28582_
8.015492173775190.02.06112.26
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/496/29501_
8.023596157755080.01

Found on 2025-10-10 12:34

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81861ca068a5

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 08-Oct-2025 12:26:02 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  91 days 5 hours 18 minutes 20 seconds
Server load: 0.87 0.75 0.89
Total accesses: 1703839 - Total Traffic: 6.5 GB - Total Duration: 966768090
CPU Usage: u78.52 s135.37 cu575.13 cs306.89 - .0139% CPU load
.216 requests/sec - 879 B/second - 4069 B/request - 567.406 ms/request
1 requests currently being processed, 49 idle workers
___________________________________________W______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295330/531/30422_
6.4112982165732760.01.61118.28
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/524/31373_
6.431001165816770.01.79122.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/538/31300_
6.4313227177794200.01.65120.68
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/508/30598_
6.431702158486410.01.68118.52
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/560/29831_
6.4113833176804350.01.99114.96
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/466/29830_
6.4113323162210650.01.52116.16
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/568/31176_
6.43136166747350.02.03121.38
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/566/30249_
6.418522159770540.01.86115.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/543/31007_
6.41103231173489920.02.07120.75
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/505/31306_
6.419136171073110.01.83122.21
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/492/31003_
6.41124626179807960.01.70121.37
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6a3a0f8b0b5d5

0-0295330/484/30919_
6.4110935171256420.01.62118.95
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/495/31031_
6.4112136180696830.01.69120.41
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/558/30824_
6.419964155704140.01.84120.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/562/30660_
6.417936161665890.01.95119.81
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/603/30458_
6.426126181380600.02.40119.66
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/510/30130_
6.4328035165693340.01.75115.45
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/605/30955_
6.4320033179383030.02.02120.46
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fee327f528845

0-0295330/548/31241_
6.433136153766760.01.62120.73
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/674/31751_
6.433736162056130.02.04122.96
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/524/30568_
6.435874170213990.01.83118.75
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

0-0295330/554/30310_
6.434323170845250.02.07117.34
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/505/31075_
6.417702170392170.01.69121.12
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/496/30524_
6.427161165985400.01.67118.68
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/554/30222_
6.434936175415130.01.91117.12
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/207/29528_
2.477772153026870.00.77113.53
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/212/27846_
2.47115227161808990.00.76106.30
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/208/27493_
2.486736154773180.00.73105.85
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/178/27928_
2.4712736140520290.00.65107.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/240/29027_
2.4713272138092110.00.94111.82
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/201/28611_
2.485874152483410.00.70110.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/SSOService.php?cookieTime=1759835663&spentityid=

1-059200/208/27781_
2.481482151903770.00.77106.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/174/27510_
2.483183152328540.00.59105.84
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/243/28253_
2.483012167524870.00.95109.46
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/188/28003_
2.482522154887160.00.63110.04
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/231/28452_
2.481936151606610.00.82110.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/193/28562_
2.477273148705250.00.69110.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/236/28380_
2.481253174605500.00.88109.50
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-059200/209/27381_
2.48735155403850.00.71106.08
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-059200/196/28018_
2.4710804150178560.00.75108.31
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-059200/187/27873_
2.4710250154362010.00.67107.55
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET //bac-login.cloudworkengine.net/module.php/core/frontpage_w

1-059200/222/27996_
2.47827281159166790.00.77109.72
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?client-request-id=6876c76f-9ef

1-059200/218/29066_
2.479726159776930.00.84113.81
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0592010/220/28117W
2.50001523384711.50.76109.54
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

1-059200/198/28201_
2.471346924172425430.00.68110.88
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-059200/169/29174_
2.4788029157250750.00.60114.01
127.0.0.1http/1.1ip-10-1-93-107.ap-sou

Found on 2025-10-08 12:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186b505c636

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 06-Oct-2025 11:21:20 UTC
Restart Time: Wednesday, 09-Jul-2025 07:07:41 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  89 days 4 hours 13 minutes 38 seconds
Server load: 0.99 1.37 1.42
Total accesses: 1686733 - Total Traffic: 6.4 GB - Total Duration: 964321478
CPU Usage: u79.61 s134.05 cu567.17 cs302.32 - .0141% CPU load
.219 requests/sec - 891 B/second - 4073 B/request - 571.71 ms/request
1 requests currently being processed, 49 idle workers
__________________________________________W_______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295330/214/30105_
2.231268224165461000.00.62117.29
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0295330/222/31071_
2.2214116165492340.00.76121.00
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/179/30941_
2.255430177482210.00.54119.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8658aed2c3d04

0-0295330/182/30272_
2.24917158075330.00.56117.40
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/182/29453_
2.2312915176337970.00.61113.58
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/160/29524_
2.2213516161619180.00.48115.12
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/207/30815_
2.25151166316310.00.72120.07
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/189/29872_
2.238716159394070.00.56114.14
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/207/30671_
2.2311881172739840.00.74119.42
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/180/30981_
2.239763170569890.00.64121.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/191/30702_
2.2312261179445990.00.66120.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/164/30599_
2.2311117170958570.00.55117.88
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/168/30704_
2.2312113180299660.00.61119.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/219/30485_
2.23104431155210030.00.74119.56
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/196/30294_
2.247516160788320.00.68118.53
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/188/30043_
2.246918180508400.00.67117.94
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/198/29818_
2.242116165194590.00.63114.33
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/201/30551_
2.2411027178804390.00.57119.01
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0295330/254/30947_
2.241518153502110.00.67119.79
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/287/31364_
2.243316161379670.00.68121.60
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/197/30241_
2.244962169599870.00.68117.60
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295330/218/29974_
2.243916169879430.00.76116.02
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/186/30756_
2.246316169997570.00.56119.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/186/30214_
2.245716165364060.00.61117.62
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0295330/182/29850_
2.2444527174886610.00.60115.81
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0120700/880/29142_
10.7412802152203880.02.99112.24
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/898/27496_
10.7412194161474380.03.11105.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0120700/866/27143_
10.77673154379380.02.78104.60
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/781/27632_
10.7413682140103770.02.52105.99
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/884/28649_
10.755116137701180.02.77110.44
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0120700/841/28264_
10.7412511151715670.02.68109.76
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/863/27479_
10.748116151453250.02.75105.39
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0120700/886/27178_
10.7561832151901630.03.05104.70
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0120700/854/27880_
10.7537011167028270.02.94108.06
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/919/27643_
10.756732154498450.03.08108.79
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0120700/899/28096_
10.7573030151088990.02.95108.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0120700/906/28200_
10.7413294148187910.03.00109.47
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0120700/1027/28022_
10.771304174146560.03.43108.22
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0120700/890/27037_
10.754516154981080.03.14104.83
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0120700/858/27688_
10.771825149697440.02.84107.05
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://broughton-l

1-0120700/934/27561_
10.77315154015950.03.13106.47
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0120700/872/27654_
10.77974158731110.03.07108.57
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-01207010/966/28701W
10.77001592574211.53.21112.48
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /server-status HTTP/1.1

1-0120700/890/27772_
10.752716152105160.02.73108.35
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0120700/926/27856_
10.754210171876860.03.00109.70
127.0.0.1http/1.1ip-10-1-93-107.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0120700/945/28854_
10.741185102156783220.03.32112.87
1

Found on 2025-10-06 11:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81864bbb79ac

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 18-Nov-2024 10:50:29 UTC
Restart Time: Monday, 18-Nov-2024 05:18:52 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 hours 31 minutes 36 seconds
Server load: 0.65 1.31 1.58
Total accesses: 4575 - Total Traffic: 22.0 MB - Total Duration: 1268462
CPU Usage: u2.3 s1.31 cu0 cs0 - .0181% CPU load
.23 requests/sec - 1157 B/second - 5033 B/request - 277.259 ms/request
1 requests currently being processed, 49 idle workers
______W___________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/104/104_
1.4997161499300.00.480.48
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/77/77_
1.49160224152930.00.370.37
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/93/93_
1.4914132210940.00.510.51
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/97/97_
1.491857220300.00.450.45
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/81/81_
1.48266467180.00.340.34
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_81e579877dd0e

0-0360/130/130_
1.4922650223980.00.630.63
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-03614/92/92W
1.50002127928.10.380.38
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /server-status HTTP/1.1

0-0360/89/89_
1.465404128780.00.450.45
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_10e34ea465edd

0-0360/121/121_
1.474535161920.00.550.55
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_cf8d8fd630d88

0-0360/87/87_
1.474421218580.00.410.41
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0360/86/86_
1.50385221150.00.560.56
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/77/77_
1.464924203910.00.490.49
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_265083eb81982

0-0360/51/51_
1.46514540550.00.190.19
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_38d3bc62e78a1

0-0360/68/68_
1.49775315150.00.290.29
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/94/94_
1.484051358560.00.460.46
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0360/72/72_
1.484235255500.00.360.36
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/80/80_
1.48375170188330.00.450.45
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/105/105_
1.483031685040.00.520.52
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

0-0360/81/81_
1.483435207220.00.410.41
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d7ec4db71c71d

0-0360/68/68_
1.483054264680.00.320.32
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c8eaa1ad7c48e

0-0360/76/76_
1.482864175190.00.370.37
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_44b6f14ef76fc

0-0360/115/115_
1.492055187870.00.600.60
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/106/106_
1.491228593150.00.480.48
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/80/80_
1.5020158277580.00.390.39
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0360/84/84_
1.49557265730.00.380.38
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/65/65_
1.495296169350.00.260.26
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/124/124_
1.504360209540.00.660.66
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /resources/post.js HTTP/1.1

1-0370/64/64_
1.50434474980.00.340.34
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_d9146e5dd1b9f

1-0370/107/107_
1.51394809137070.00.500.50
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/118/118_
1.513052265100.00.620.62
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0370/84/84_
1.513884169820.00.480.48
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a5eb7364a7fff

1-0370/120/120_
1.513591379280.00.550.55
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0370/106/106_
1.512966435640.00.450.45
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/95/95_
1.513266218380.00.480.48
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/92/92_
1.512795346430.00.400.40
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0370/71/71_
1.522434315170.00.330.33
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_8706b44f3d15c

1-0370/67/67_
1.532131452164200.00.320.32
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.POST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/122/122_
1.531734479670.00.640.64
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_164c40d716b7e

1-0370/121/121_
1.531964220210.00.560.56
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_3fdeb27b56023

1-0370/62/62_
1.531302273310.00.290.29
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/wstrust/mex.php HTTP/1.1

1-0370/96/96_
1.531514177680.00.410.41
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_fc70e7608a925

1-0370/62/62_
1.531094311860.00.260.26
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_1c8caea53ec00

1-0370/66/66_
1.53875175620.00.280.28
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_65a1f4cb98179

1-0370/103/103_
1.53694307560.00.480.48
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_a94ef010f8763

1-0370/108/108_
1.53474211810.00.500.50
127.0.0.1http/1.1ip-10-1-106-216.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_25c47e6630e9c

1-0370/86/86_
1.53294186000.00.400.40
127.0.0.1http/1.1

Found on 2024-11-18 10:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818679f01c8e

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 15:20:19 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 9 hours 49 minutes 41 seconds
Server load: 1.65 0.97 1.16
Total accesses: 1010287 - Total Traffic: 4.2 GB - Total Duration: 420818734
CPU Usage: u75.26 s110.27 cu388.05 cs184.26 - .0128% CPU load
.171 requests/sec - 758 B/second - 4437 B/request - 416.534 ms/request
1 requests currently being processed, 74 idle workers
_________W______________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212440/1330/19184_
20.83137684296360.05.4581.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8569b4f57b591

0-0212440/1279/18497_
20.82475575770820.05.4879.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ef4244e94134

0-0212440/1258/18382_
20.82344681745110.05.2278.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1262/19244_
20.81566379485000.05.5580.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1471/19083_
20.82446582560260.06.1479.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1403/18640_
20.81704166584960.06.0078.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212440/1434/19490_
20.82411575363360.05.6982.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e5a905437aee7

0-0212440/1332/18521_
20.81681473530250.05.2177.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_204fb39b4e3c1

0-0212440/1453/19029_
20.81923567425580.06.0279.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212449/1480/19005W
20.8300754972612.86.2679.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212440/1350/18942_
20.81824574742510.05.6780.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1338/18588_
20.8310117383491990.05.4278.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1174/18165_
20.821924271800040.04.6875.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1425/19003_
20.81884474576540.06.0579.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ce8bdeb434eea

0-0212440/1265/19445_
20.81786577659120.05.2482.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5de22167346a5

0-0212440/1378/18882_
20.81748574910270.05.9479.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1603/19166_
20.81856272474170.06.6280.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1404/19374_
20.82371878702970.05.6081.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1530/18993_
20.8361275595480.06.3479.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1355/18734_
20.8160518077273650.05.8879.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1537/19046_
20.82266687319620.06.2479.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1320/19252_
20.8252916482521400.05.4881.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/1424/19249_
20.8333474093390.06.0480.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_849b3c01d81fd

0-0212440/1299/19435_
20.82231671508200.05.6181.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8bdc76f8e0fd1

0-0212440/1378/18144_
20.82308477059630.05.7977.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d434952add0d8

1-0223790/341/18729_
6.2995517772531900.01.5480.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/493/17723_
6.2987114175293150.02.1774.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/436/17159_
6.29505469377720.01.7271.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_56a438e381bc1

1-0223790/389/17844_
6.29359477064440.01.6777.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8cca55c0c828f

1-0223790/386/18576_
6.29215676059400.01.6978.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/267/18145_
6.292563375846180.01.1576.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/368/18023_
6.29331477707160.01.5576.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_955e453c84905

1-0223790/447/18051_
6.2946418674667300.01.7775.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/408/18061_
6.29593471520580.01.7076.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9ebb0f50a9002

1-0223790/364/17395_
6.301233271274760.01.6473.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/433/17589_
6.29665873590110.01.8973.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/499/17635_
6.312217380590640.02.1675.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/385/17884_
6.29435567191040.01.5375.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad4a33538b7f2

1-0223790/410/17852_
6.2939718173929020.01.7576.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0223790/355/17752_
6.29178483167000.01.5774.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c230673525abf

1-0223790/432/18322_
6.299105275368220.01.8577.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_75b257f0022ed

1-0223790/304/17183_
6.3084476226820.01.2872.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9554585c4c42

1-0223790/352/17648_
6.3059469135400.01.5073.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_804f5d3822fd7

1-0223790/631/18941_
6.29848777797900.02.7580.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOSe

Found on 2024-11-16 15:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81863aaa66d6

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 17:17:24 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  66 days 11 hours 46 minutes 46 seconds
Server load: 1.41 1.82 2.04
Total accesses: 987272 - Total Traffic: 4.1 GB - Total Duration: 402501858
CPU Usage: u63.87 s102.69 cu388.05 cs184.26 - .0129% CPU load
.172 requests/sec - 762 B/second - 4438 B/request - 407.691 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212440/975/18829_
14.86381280586240.03.9079.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/905/18123_
14.84989371333570.03.9177.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/923/18047_
14.8238773578800160.03.7776.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/868/18850_
14.8410743176343380.03.6678.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1086/18698_
14.85867378948530.04.4077.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/996/18233_
14.85694264180790.04.1777.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1037/19093_
14.86184471097810.04.1581.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/953/18142_
14.8422393771024500.03.6776.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_151ee4711f0d1

0-0212440/978/18554_
14.824254164447360.04.0277.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1162/18687_
14.832956071765930.04.8078.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212440/891/18483_
14.8422743772431280.03.6678.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/960/18210_
14.86130480770400.03.8077.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

0-0212440/832/17823_
14.8414766066894790.03.3274.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1044/18622_
14.823543470637150.04.4278.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/873/19053_
14.8328744475491600.03.6480.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1035/18539_
14.85654172325130.04.5377.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1174/18737_
14.842125270095680.04.7978.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1075/19045_
14.85382177144320.04.2679.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1102/18565_
14.841701672407270.04.5577.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=studentcafe_02&RelaySt

0-0212440/1059/18438_
14.854743674212830.04.5877.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/1123/18632_
14.8327406182653530.04.5377.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6dce683929f78

0-0212440/941/18873_
14.823355780107870.03.8879.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/1027/18852_
14.842598172291870.04.3579.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/903/19039_
14.8419453568725260.03.9280.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/995/17761_
14.8426643874647710.04.2975.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84c517a146b9c

1-0223790/22/18410_
0.232756070868130.00.0778.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0223790/13/17243_
0.232957073862980.00.0472.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0223790/36/16759_
0.2332773665759590.00.1670.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/17/17472_
0.233784471901610.00.0776.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/15/18205_
0.2334753572847230.00.0976.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/16/17894_
0.2326773773878740.00.0775.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/10/17665_
0.232598374226630.00.0375.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/19/17623_
0.232253572431460.00.0673.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0223790/7/17660_
0.2325323868815100.00.0275.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04eb96dbcd2af

1-0223790/16/17047_
0.232172468559130.00.0971.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/16/17172_
0.2320773271833350.00.0971.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/11/17147_
0.2317136075940060.00.0373.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0223790/9/17508_
0.231674365231130.00.0373.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/14/17456_
0.231253570454200.00.0574.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/11/17408_
0.2499521380221460.00.0472.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_151cd0e5964a1

1-0223790/16/17906_
0.248763770493080.00.0775.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0223790/6/16885_
0.24704474057280.00.0170.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/24/17320_
0.24694266924270.00.0872.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/12/18322_
0.24604373260250.00.0477.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/16/17805_
0.24382473878260.00.0476.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/13/17639_
0.24382268732610.00.0375.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0223790/19/17969_
0.242763373959880.00.09<

Found on 2024-11-14 17:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186884f9fd7

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 12:41:04 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  64 days 7 hours 10 minutes 27 seconds
Server load: 0.74 0.84 0.93
Total accesses: 941547 - Total Traffic: 3.9 GB - Total Duration: 387307933
CPU Usage: u59.02 s97.59 cu372.59 cs177.09 - .0127% CPU load
.169 requests/sec - 752 B/second - 4441 B/request - 411.353 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
______W____.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212440/57/17911_
1.27365476236960.00.2676.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b561fe3288c4

0-0212440/104/17322_
1.27455468658880.00.4874.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/85/17209_
1.27484675336890.00.3073.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/139/18121_
1.2743329573762500.00.6375.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0212440/84/17696_
1.275065476247140.00.3173.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e147812e9395

0-0212440/82/17319_
1.27557561133210.00.3473.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8958d62aed8d

0-0212440/90/18146_
1.27541268554230.00.3777.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212440/81/17270_
1.26605567799360.00.3373.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1797b7b6c1f43

0-0212440/93/17669_
1.26580459834780.00.3673.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1015a3abe0da

0-0212440/112/17637_
1.27202468886300.00.5673.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fcb94cccd4190

0-0212440/76/17668_
1.27263469570290.00.3075.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c5ec78864946

0-0212440/89/17339_
1.27174077953430.00.3373.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212440/85/17076_
1.28146464623910.00.3571.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_95d571a161c13

0-0212440/110/17688_
1.2867168157270.00.4174.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/89/18269_
1.27228472884720.00.3177.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_236767284d009

0-0212440/114/17618_
1.288568895800.00.5273.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9a943d0540f8c

0-0212440/88/17651_
1.28122466766440.00.3574.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6bfdbdc028966

0-0212440/78/18048_
1.27416273817180.00.3375.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212440/78/17541_
1.27319668406290.00.3273.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7524303452b41

0-0212440/94/17473_
1.27393470373100.00.3173.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b61aaa2e80d5a

0-0212440/62/17571_
1.27292479540320.00.2273.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f53726751f505

0-0212440/67/17999_
1.2897477728750.00.3076.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aea416294eea0

0-0212440/103/17928_
1.27342467540200.00.4275.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9124529dfabb1

0-0212440/70/18206_
1.2841565780570.00.2876.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e4fe12ac5793

0-0212440/71/16837_
1.26628472308490.00.3171.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1cdd1b2007dd0

1-0-0/0/18388.
0.0023057570857200.00.0078.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ae367f366b8b

1-0-0/0/17230.
0.0023057473861380.00.0072.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4b83ddd34e8a

1-0-0/0/16723.
0.0023057265635730.00.0070.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/17455.
0.0023057571795920.00.0076.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0-0/0/18190.
0.0023057572794230.00.0076.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da1dfd9f9b6ff

1-0-0/0/17878.
0.0023057473864840.00.0074.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/17655.
0.0023057074206560.00.0075.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/17604.
0.0023057472333970.00.0073.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e421229533ea4

1-0-0/0/17653.
0.0023057068808650.00.0075.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/17031.
0.002305716668554780.00.0071.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0-0/0/17156.
0.0023057471714630.00.0071.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a1068becb86da

1-0-0/0/17136.
0.0023057575922110.00.0073.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/17499.
0.002305717065215080.00.0073.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/17442.
0.0023057270444850.00.0074.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/17397.
0.0023057580189530.00.0072.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0-0/0/17890.
0.0023057670472180.00.0075.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0-0/0/16879.
0.0023057574054910.00.0070.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c91b3b5a59ca

1-0-0/0/17296.
0.0023057266811730.00.0072.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/18310.
0.0023057273244780.00.0077.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/17789.
0.0023057073778070.00.0076.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/script.js HTTP/1.1

Found on 2024-11-12 12:40

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186b7c45ba0

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 12:48:55 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  62 days 7 hours 18 minutes 17 seconds
Server load: 0.98 0.82 0.94
Total accesses: 893825 - Total Traffic: 3.7 GB - Total Duration: 363929615
CPU Usage: u69.17 s100.1 cu340.83 cs162.09 - .0125% CPU load
.166 requests/sec - 737 B/second - 4440 B/request - 407.16 ms/request
1 requests currently being processed, 49 idle workers
__________________________________W_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151810/1053/17319_
16.70597572467660.04.5273.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/907/16837_
16.71237666819630.03.7771.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/1050/16644_
16.71474472324300.04.4370.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_43cc25f11c276

0-0151810/958/17444_
16.706473671976290.03.9572.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ea779ad39159f

0-0151810/1012/17099_
16.71505473955360.04.1670.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_27e000fbe2eef

0-0151810/1020/16803_
16.70623558840450.04.5671.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1173/17479_
16.71376465858810.05.1174.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9019114b55ce6

0-0151810/1168/16795_
16.71206265162980.04.9571.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/1051/17217_
16.70569458164680.04.3772.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_97aadffa7cc2e

0-0151810/1082/17049_
16.7143324165536840.04.2571.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJfTdJUb

0-0151810/1065/17123_
16.71336467122010.04.7772.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_801b9b6bb9969

0-0151810/1115/16931_
16.717623376266950.04.7372.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1117/16608_
16.70668462789720.04.6269.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dea5359ac95b8

0-0151810/1040/17194_
16.7143764723350.04.5172.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1228/17668_
16.711228269105420.05.1074.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/982/17123_
16.71110766622040.04.1771.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1033/17066_
16.71182965047600.04.3571.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1157/17525_
16.71406471844230.04.8073.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_253609f7612cb

0-0151810/1051/16970_
16.71264565584060.04.2571.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_58bf6ceada1f1

0-0151810/1086/17000_
16.71137235268322180.04.6871.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1170/17102_
16.70691477072540.04.9471.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0151810/1253/17450_
16.71214575714280.05.7473.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1114/17357_
16.697163365458890.04.6272.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0151810/1098/17546_
16.71537463502630.04.8373.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_376f7dd3ed4b4

0-0151810/971/16337_
16.71298470783600.04.4169.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0373574c09cc5

1-0286030/731/17625_
10.87360567665080.03.0475.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/739/16465_
10.86488569701590.02.9268.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/742/16084_
10.8646020662872190.02.9067.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/613/16467_
10.86552166592440.02.6071.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/831/17223_
10.86421569241590.03.2572.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/795/17122_
10.8739016471101240.03.2771.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/740/16834_
10.872291769690660.03.0171.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b04f660a1ea02

1-0286030/636/16873_
10.87284568578560.02.6870.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/694/16934_
10.87160464985730.02.7971.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b35c0e7eca636

1-02860311/789/16249W
10.8700646439416.63.3368.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0286030/689/16386_
10.87206267922130.02.8068.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/658/16351_
10.87193470223700.02.7869.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/723/16758_
10.8724217961780350.03.0270.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/770/16648_
10.8758566537190.03.2171.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5050eb8d74531

1-0286030/856/16628_
10.86640474695420.03.3569.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_902984a0db0c1

1-0286030/703/17051_
10.8727567624800.02.9671.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf6cdf2832810

1-0286030/798/16060_
10.866543069833650.03.0267.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0286030/577/16491_
10.87122263604990.02.3969.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/752/17519_
10.8791469594190.03.1573.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1097f649221ae

1-0<

Found on 2024-11-10 12:48

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81862be062e9

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 07:50:22 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  60 days 2 hours 19 minutes 44 seconds
Server load: 0.65 1.08 1.33
Total accesses: 878663 - Total Traffic: 3.6 GB - Total Duration: 359334146
CPU Usage: u61.35 s94.08 cu340.83 cs162.09 - .0127% CPU load
.169 requests/sec - 752 B/second - 4447 B/request - 408.956 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0151810/797/17063_
12.271077171947390.03.5572.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0151810/658/16588_
12.30288165933090.02.7070.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0151810/768/16362_
12.289583971423440.03.3769.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/663/17149_
12.271168071497670.02.8771.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0151810/707/16794_
12.299013973284540.03.0969.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a468a389dab91

0-0151810/768/16551_
12.271077158471600.03.5370.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/884/17190_
12.305335265233420.03.9973.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/907/16534_
12.30288163754750.03.9470.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/729/16895_
12.281010257741160.03.3171.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/711/16678_
12.29800164711870.02.8169.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/704/16762_
12.304794466093500.03.2871.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_33881f700730d

0-0151810/845/16661_
12.31155274162880.03.6771.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0151810/769/16260_
12.26119141061615620.03.2068.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/745/16899_
12.3266363359990.03.3871.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/884/17324_
12.26137730367965640.03.8273.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLdT8IwEH%2F3r1j63n3

0-0151810/684/16825_
12.31923465744850.03.0470.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/753/16786_
12.31164164159550.03.2970.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/832/17200_
12.2985315271012420.03.6472.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0151810/714/16633_
12.30257164741940.03.0470.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/785/16699_
12.31180167259120.03.4370.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0151810/888/16820_
12.261292375941510.03.8670.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/950/17147_
12.261522474918050.04.5472.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0151810/861/17104_
12.271102164894110.03.5771.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0151810/766/17214_
12.281033662943040.03.6572.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0151810/663/16029_
12.29774170208780.03.1468.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0286030/452/17346_
6.35799166967040.02.0374.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0286030/444/16170_
6.33941168762150.01.7567.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0286030/437/15779_
6.321033161533080.01.7866.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0286030/317/16171_
6.32104944065965490.01.3670.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0286030/452/16844_
6.356924168366470.01.7770.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/493/16820_
6.348532870309050.01.9470.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0286030/398/16492_
6.36279069154910.01.7470.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0286030/345/16582_
6.35525067835040.01.4669.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0286030/360/16600_
6.371635563349810.01.5370.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/417/15877_
6.29121130863415470.01.8966.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0286030/423/16120_
6.36257466255360.01.8367.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0286030/365/16058_
6.36247169430700.01.5668.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0286030/378/16413_
6.353584260693370.01.6168.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/418/16296_
6.37143065869630.01.7569.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0286030/499/16271_
6.301102273848100.02.0368.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0286038/402/16750W
6.380066739169.51.6870.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0286030/543/15805_
6.291168269247500.02.1966.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0286030/384/16298_
6.37155161712690.01.6868.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0286030/428/17195_
6.3773168713260.01.8472.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0286030/465/16806_
6.321073168617450.02.0971.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0286030/448/16463_
6.2912121164396530.02.0570.74
127.0

Found on 2024-11-08 07:50

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186bc38647c

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 05:01:35 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  57 days 23 hours 30 minutes 57 seconds
Server load: 3.89 2.87 2.08
Total accesses: 838873 - Total Traffic: 3.5 GB - Total Duration: 341655796
CPU Usage: u75.9 s99.66 cu307.25 cs145.14 - .0125% CPU load
.167 requests/sec - 743 B/second - 4440 B/request - 407.28 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/1599/16222_
23.02927368768670.06.2068.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/1466/15909_
23.051954564097470.06.2067.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/1438/15581_
23.02821167191150.06.1566.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0240640/1541/16470_
23.051563569361180.06.3068.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/1445/16069_
23.06122269243690.06.0166.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1429/15757_
23.05140155315470.06.0566.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0240640/1583/16284_
23.068160633580.06.4268.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1355/15591_
23.05160158522890.05.8265.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0240640/1769/16115_
23.04375254180090.07.3967.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1445/15920_
23.02900260307960.05.9566.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1589/16034_
23.0659363029500.06.4767.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1511/15778_
23.03775170714330.06.4567.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1543/15472_
23.01941258162370.06.3665.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1639/16135_
23.04473259884240.06.5767.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1552/16386_
23.0675064607350.06.5269.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/1482/16103_
23.0696463391230.05.8467.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx88

0-0240640/1532/16010_
23.05171261596300.06.3567.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1536/16350_
23.0362118367974200.06.3568.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeXdfda

0-0240640/1491/15898_
23.05148061719670.05.8866.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0240640/1469/15878_
23.03509263475970.06.0566.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1538/15913_
23.04416373329740.06.1766.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1486/16165_
23.02862070392910.06.0567.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/1500/16217_
23.04221158895980.06.3768.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1575/16417_
23.04273259552960.06.5869.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/1441/15322_
23.04331266702740.06.2465.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1252/16497_
20.851063762059720.05.2470.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/1311/15375_
20.85140166101710.05.5364.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0294910/1321/14991_
20.82341458947200.05.4262.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1329/15512_
20.84213462909350.05.5467.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0294910/1399/16030_
20.85140565549290.05.6967.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0294910/1285/15877_
20.85195165139160.05.2466.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0294910/1316/15770_
20.858713566823340.05.2767.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d98I

1-0294910/1300/15877_
20.8163528163502050.05.4166.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=133&StateId=

1-0294910/1275/15880_
20.8158418360557000.05.3967.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=http%3A%2F%2Fbroughton

1-0294910/1373/15158_
20.8666058495680.05.6763.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0294910/1382/15335_
20.864088763233140.05.9764.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeXXfV6

1-0294910/1395/15343_
20.79965066614770.05.7465.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0294910/1462/15655_
20.8227835658066840.06.1465.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFLa8MwEIT%2FitE9fih

1-0294910/1459/15542_
20.85160563364720.06.6066.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0294910/1310/15392_
20.81485268548580.05.4264.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294918/1398/15873W
20.860063684279.55.7266.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0294910/1263/14922_
20.807835865183830.05.3162.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/1321/15587_
20.79907058287570.05.6265.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0294910/1440/16399_
20.808739165302880.06.0369.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/1441/16019_
20.82383363706470.06.2968.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/1383/15614_
20.80844060926970.05.9566.79
127.0.0.1http/1.1ip-10-1-110

Found on 2024-11-06 05:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81862258d9b1

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 08:18:06 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  56 days 2 hours 47 minutes 28 seconds
Server load: 3.14 1.52 1.42
Total accesses: 799104 - Total Traffic: 3.3 GB - Total Duration: 321774625
CPU Usage: u57.78 s88.53 cu307.25 cs145.14 - .0123% CPU load
.165 requests/sec - 731 B/second - 4440 B/request - 402.669 ms/request
1 requests currently being processed, 49 idle workers
__________________________________W_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/835/15458_
10.4510764565074880.03.2065.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/664/15107_
10.451112560365040.02.8664.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e0b908b9c97ab

0-0240640/757/14900_
10.4511624663944290.03.1763.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/667/15596_
10.4968465100810.02.7665.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2fcf07cc92651

0-0240640/648/15272_
10.431187464081400.02.6163.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_482d361eb4bba

0-0240640/591/14919_
10.502051936650.02.4562.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0240640/720/15421_
10.457883157427860.02.8565.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/679/14915_
10.4654834455914490.02.7962.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx%2B

0-0240640/832/15178_
10.4571480750573090.03.5963.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHNasMwEIRfxegey1b8K

0-0240640/745/15220_
10.4588722556255990.03.0664.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/764/15209_
10.45947259862420.03.0764.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/726/14993_
10.46494467098570.03.1863.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5627406e0b401

0-0240640/745/14674_
10.45854356236750.03.0761.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/796/15292_
10.47466055784050.03.1064.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/676/15510_
10.4833517159000250.02.8165.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/667/15288_
10.46608156763590.02.4263.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0240640/667/15145_
10.4745118857315020.02.5363.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFPa4NAEMW%2Fiuw97p%

0-0240640/676/15490_
10.49107564785420.02.6665.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/671/15078_
10.48367555987600.02.5863.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/672/15081_
10.48240559313400.02.8463.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cHEAD /saml2/idp/SSOService.php?SAMLRequest=fZJfT8IwFMXf%2FRRL37

0-0240640/682/15057_
10.48397768876990.02.6562.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_b7596

0-0240640/593/15272_
10.48313065486370.02.2563.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/757/15474_
10.47418155298090.03.2064.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/805/15647_
10.4814518356104650.03.2865.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/614/14495_
10.48260263315060.02.5761.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/566/15811_
8.63518560180100.02.2667.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847d838549a8a

1-0294910/574/14638_
8.64382862229400.02.3761.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4040cc99b611

1-0294910/424/14094_
8.63466054853450.01.7459.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0294910/540/14723_
8.644374958681730.02.2464.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0294910/559/15190_
8.64329462686620.02.1664.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84bddc01f3a8c

1-0294910/540/15132_
8.641135660657440.02.1063.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0294910/570/15024_
8.643552359981810.02.1764.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0294910/581/15158_
8.64270960527040.02.4763.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294910/542/15147_
8.64179356846690.02.1664.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-02949112/614/14399W
8.6600545447721.92.3860.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0294910/654/14607_
8.62906659361490.02.7960.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7c603ab0484df

1-0294910/663/14611_
8.621163563210200.02.6262.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0294910/664/14857_
8.657368054254100.02.9062.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0294910/555/14638_
8.621082859654330.02.3962.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0294910/552/14634_
8.6211273362094290.02.2161.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8fc86c3e2174e

1-0294910/557/15032_
8.63728460394630.02.3663.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0294910/553/14212_
8.621000661224390.02.3359.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_387816d3ead78

1-0294910/546/14812_
8.63615155567370.02.2862.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0294910/671/15630_
8.62869560859480.02.6865.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0294910/609/15187_
8.63589459678130.02.6764.79
127.0.0.1http/1.1ip-10-1-110-84.ap-sou

Found on 2024-11-04 08:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186b352e4ea

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 09:27:45 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  54 days 3 hours 57 minutes 7 seconds
Server load: 0.55 1.21 1.66
Total accesses: 768620 - Total Traffic: 3.2 GB - Total Duration: 311563219
CPU Usage: u58.71 s86.2 cu293 cs138.19 - .0123% CPU load
.164 requests/sec - 730 B/second - 4446 B/request - 405.354 ms/request
1 requests currently being processed, 49 idle workers
____W_____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0240640/131/14754_
1.5810194362884380.00.4863.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0240640/128/14571_
1.571042259219580.00.5962.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/93/14236_
1.57108337062178450.00.3360.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=406&StateId=

0-0240640/76/15005_
1.571111163558050.00.3062.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0240649/113/14737W
1.6000627516812.20.4161.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0240640/92/14420_
1.6042050582280.00.4160.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/89/14790_
1.58100028455616230.00.3862.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=90&StateId=_

0-0240640/114/14350_
1.599143454457040.00.4460.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/102/14448_
1.58981048353310.00.4560.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0240640/93/14568_
1.598494154232340.00.3561.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/118/14563_
1.5982417258332530.00.3961.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/118/14385_
1.59741464891230.00.5961.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a53fe67352f2c

0-0240640/104/14033_
1.597673754270680.00.3258.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/107/14603_
1.596916354018190.00.3861.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/112/14946_
1.59586356468360.00.4863.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/138/14759_
1.59662205155135030.00.4561.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0240640/122/14600_
1.596143454982980.00.5361.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0240640/121/14935_
1.59552362510650.00.4762.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/113/14520_
1.5950016153414170.00.4261.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/76/14485_
1.59454554991850.00.3061.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2675268fe34dc

0-0240640/91/14466_
1.59405266134080.00.3260.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0240640/95/14774_
1.5935018562692400.00.3362.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0240640/104/14821_
1.59262453708940.00.3762.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ccacdd092cac9

0-0240640/112/14954_
1.60150554210190.00.4462.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_24ffb10102fcf

0-0240640/104/13985_
1.59241461870570.00.4159.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34518a57b5bcb

1-0113630/1469/15211_
20.63484558893360.06.4765.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1355/14017_
20.63675660799000.05.4258.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_414c3125763b5

1-0113630/1337/13619_
20.632493753043890.05.4657.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1282/14135_
20.63374257537050.05.5861.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1364/14595_
20.63429761101490.05.9061.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1431/14548_
20.63780659035700.05.8961.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_915a53c68d5cf

1-0113630/1398/14397_
20.63733558633280.06.1561.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1442/14544_
20.641663259157850.06.2061.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1398/14575_
20.6436355325830.05.9161.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1352/13745_
20.621037152345410.05.5557.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0113630/1388/13897_
20.63860456495100.05.5158.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf84f3909c1da

1-0113630/1359/13892_
20.621068161421540.05.5859.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0113630/1325/14162_
20.621111152582050.05.3659.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0113630/1313/14050_
20.62109717257638840.05.3359.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0113630/1436/14044_
20.639341460202060.05.7158.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1201/14445_
20.63988456003570.04.8460.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_49ad6ad6a58d9

1-0113630/1291/13631_
20.63513459150220.05.2057.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3b2bc7a896437

1-0113630/1347/14221_
20.63834253083250.05.5459.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1506/14923_
20.63716358429960.06.3962.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1490/14514_
20.63275456984960.06.4161.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGE

Found on 2024-11-02 09:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186bd93f357

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 04:14:14 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  52 days 22 hours 43 minutes 36 seconds
Server load: 2.09 2.35 2.67
Total accesses: 759353 - Total Traffic: 3.1 GB - Total Duration: 308835223
CPU Usage: u70.14 s90.39 cu276.99 cs130.09 - .0124% CPU load
.166 requests/sec - 739 B/second - 4452 B/request - 406.708 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________________W__..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0317520/1631/14555_
22.85688162333720.06.9362.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0317520/1327/14355_
22.872936158834620.05.6461.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1486/14058_
22.882024561435080.05.9159.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1608/14836_
22.85464262830640.06.6662.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1615/14561_
22.881281562204750.06.8560.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c75d908696e9e

0-0317520/1600/14254_
22.88165050280890.06.6560.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0317520/1480/14617_
22.87219455011570.06.1962.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02bf058482fc2

0-0317520/1550/14121_
22.881914152807300.06.7059.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1622/14283_
22.86379148023430.06.8959.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-0317520/1405/14389_
22.84739353890750.05.9760.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1618/14394_
22.85608557892890.07.0461.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a8bcf88ceb615

0-0317520/1652/14203_
22.881794364365190.07.0660.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0317520/1454/13870_
22.889020553868100.06.3258.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hZJPU4MwEMW%2FCpM7BCh

0-0317520/1357/14434_
22.8816553311060.05.4660.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8e9a555b17e1d

0-0317520/1506/14764_
22.85425655994660.06.2062.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_282c6ee4e3017

0-0317520/1558/14503_
22.85624354569770.06.6460.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1497/14412_
22.84717193754643720.06.0660.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0317520/1715/14726_
22.85581462069110.07.2862.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1320/14326_
22.86316253060990.05.5660.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1466/14299_
22.863013754654680.06.3060.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1602/14299_
22.85556365882060.06.6460.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/1803/14614_
22.84789362508210.07.3561.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1618/14664_
22.85498353032010.06.6561.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/1549/14728_
22.85668653798060.06.3861.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0317520/1421/13788_
22.87237461457080.05.9858.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1298/15040_
17.80547358078150.05.7264.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1170/13832_
17.8056428159937940.04.7658.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1147/13429_
17.83293152669140.04.8056.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0113630/1111/13964_
17.82357256943680.04.8561.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1175/14406_
17.82307360654010.05.2261.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1212/14329_
17.79639258644370.05.1060.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1126/14125_
17.7968714657926290.04.9260.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0113630/1272/14374_
17.83237458743110.05.4960.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1249/14426_
17.832113354873540.05.3661.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/1172/13565_
17.8696451918530.04.8457.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1224/13733_
17.797255655923780.04.9057.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b0fc1648c4add

1-0113630/1194/13727_
17.86144260391730.05.0658.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/1145/13982_
17.85180451740590.04.7058.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0113630/1153/13890_
17.851723757220310.04.7559.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0113630/1222/13830_
17.79768659489720.04.8458.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0113630/1052/14296_
17.865819954917830.04.3760.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1127/13467_
17.81447558566080.04.6156.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ae44829e917f3

1-0113630/1165/14039_
17.79711652323200.04.8258.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/1280/14697_
17.7961447057770580.05.5262.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d18uK

1-0113630/1326/14350_
17.832745256589150.05.7861.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.p

Found on 2024-11-01 04:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818623b442b9

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 05:03:46 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  50 days 23 hours 33 minutes 8 seconds
Server load: 1.96 2.72 2.25
Total accesses: 718766 - Total Traffic: 3.0 GB - Total Duration: 293610747
CPU Usage: u52.35 s79.79 cu276.99 cs130.09 - .0122% CPU load
.163 requests/sec - 727 B/second - 4455 B/request - 408.493 ms/request
2 requests currently being processed, 48 idle workers
_________________W______________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0317520/841/13765_
11.0148458550990.03.6159.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8b7832a6a69dc

0-0317520/681/13709_
11.00194255507450.02.8758.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/661/13233_
10.99250258910750.02.6756.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/654/13882_
10.97446460445380.02.5958.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5e99997fef89

0-0317520/801/13747_
10.96492559821680.03.5257.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/810/13464_
10.97471548204860.03.5356.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/576/13713_
10.97372452540620.02.4358.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26fb92f3febc0

0-0317520/775/13346_
10.98330249798130.03.2856.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/677/13338_
10.97409445386630.02.9155.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c21dec83906a7

0-0317520/682/13666_
11.00219951122020.02.9557.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4134fb166670

0-0317520/782/13558_
11.0189125954663540.03.2857.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0317520/841/13392_
11.011617761341470.03.7157.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/696/13112_
11.00145351726240.02.9055.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/593/13670_
11.01136121849568040.02.5457.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0317520/747/14005_
10.95574952145540.03.0659.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_891b0ae265741

0-0317520/698/13643_
11.00174450403850.02.8857.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4270351e70aa2

0-0317520/739/13654_
11.01117552615870.03.0057.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-03175224/852/13863W
11.0200582222435.93.5058.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0317520/665/13671_
11.00202850522070.02.9558.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0317520/741/13574_
10.97356251888220.03.1957.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/736/13433_
11.0169561593150.02.9956.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0317520/784/13595_
10.99241159801950.03.2957.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0317520/732/13778_
10.96514550041620.03.1758.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b39f3cf9df401

0-0317520/657/13836_
10.96531350954970.02.8158.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4b833c002e181

0-0317520/652/13019_
10.98307458704020.02.7055.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01383e0a3eead

1-0113630/352/14094_
5.9458454929550.01.5660.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6197e44349e3

1-0113630/424/13086_
5.93895257052440.01.7855.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/369/12651_
5.905513048414780.01.5853.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/374/13227_
5.9422453901730.01.5357.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2648045678117

1-0113630/321/13552_
5.90581556934180.01.3557.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5bc917f27945

1-0113630/377/13494_
5.93150355409270.01.5356.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/367/13366_
5.91320654766570.01.5557.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5fee822c130ab

1-0113630/422/13524_
5.90503555059410.01.7656.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/436/13613_
5.91343551745110.01.9057.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/355/12748_
5.91337448897990.01.5253.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6070a0139a3a3

1-0113630/414/12923_
5.92192553385100.01.6954.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/370/12903_
5.90485356996900.01.5355.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e33ae58c0fd0

1-0113630/430/13267_
5.90462449018590.01.7655.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6e4baf5ace10

1-0113630/361/13098_
5.92202554907840.01.4855.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0113630/361/12969_
5.90434455901720.01.5754.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eab0c36b71062

1-0113630/387/13631_
5.91232451219490.01.5657.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_656b092533331

1-0113630/387/12727_
5.91379556354420.01.5853.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/342/13216_
5.91261448219010.01.4555.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0113630/408/13825_
5.92161254949580.01.7358.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0113630/361/13385_
5.90524453963490.01.54

Found on 2024-10-30 05:03

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81865473303d

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 28-Oct-2024 04:54:25 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  48 days 23 hours 23 minutes 47 seconds
Server load: 1.71 1.21 1.28
Total accesses: 674505 - Total Traffic: 2.8 GB - Total Duration: 276920809
CPU Usage: u62.09 s81.78 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 710 B/second - 4455 B/request - 410.554 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/1445/12771_
18.93758255620640.06.2954.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1273/12935_
18.9655152337340.05.4755.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1528/12395_
18.94566355602720.06.6253.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/1379/13085_
18.96265257440750.05.4455.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/1379/12794_
18.96224555627800.05.7252.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1360/12525_
18.94500153944482890.05.6852.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHRaoMwFIZfRXJftTHVG

0-065990/1409/12986_
18.92819050195490.06.3055.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/1417/12419_
18.961013147175120.05.8052.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7a50a3a7b5b25

0-065990/1618/12517_
18.96148042235770.06.3952.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/1578/12849_
18.9742147420640.06.7254.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1548/12592_
18.93708251781780.06.5553.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1309/12356_
18.928003257291420.05.6052.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a99153b60038f

0-065990/1278/12264_
18.9371519748311530.05.2351.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1473/12942_
18.94645147185660.06.2554.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/1343/13099_
18.937764547897290.05.7055.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/1202/12810_
18.94691247993370.05.0653.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1328/12776_
18.94634449329760.05.4854.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1517/12847_
18.95354452851390.06.1154.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71cdbeee84129

0-065990/1206/12867_
18.9538325147638970.04.7954.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9dx%2B

0-065990/1295/12634_
18.94595448836420.05.3553.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45c0b5ece99eb

0-065990/1314/12517_
18.96116058645530.05.7552.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET //broughton-login.cloudworkengine.net/module.php/core/front

0-065990/1382/12616_
18.94473656373440.05.9353.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1448/12889_
18.95318146761170.05.8654.39
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/1297/12958_
18.96136548760730.05.3854.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/1309/12239_
18.9713256169380.05.4951.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1122/13083_
14.47679251610090.04.7556.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1040/12211_
14.47708254339070.04.3551.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/894/11819_
14.46795244897600.03.7549.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/996/12383_
14.47750050808690.04.3954.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/1085/12788_
14.48644153269040.04.6853.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1052/12549_
14.50101451723730.04.6852.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eddd5e49e9fe1

1-0179180/989/12565_
14.477005451191290.04.1753.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b8f07be5205e

1-0179180/1164/12464_
14.46804450339120.04.9051.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0179180/1159/12659_
14.5035248514010.04.7753.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/928/11874_
14.48606045064370.03.9749.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0179180/968/12071_
14.4955321350236100.04.0550.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77ee322360f09

1-0179180/1007/12005_
14.4857929852977270.04.2751.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=parentlounge_02&RelayS

1-0179180/967/12327_
14.4936326646237510.03.9651.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9GmN

1-0179180/1061/12204_
14.49260450010300.04.2352.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6fd8c26b2e92

1-0179180/1153/11989_
14.49499052486180.04.8150.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/1001/12764_
14.49339247383340.04.1953.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/1154/11792_
14.49427113153819430.04.9749.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d3dZM

1-0179180/1162/12443_
14.501475244932900.04.8052.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/1131/12897_
14.507532652029790.04.8154.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFNa4NAEIb%2Fiuw9fqx

1-0179180/1164/12516_
14.5055150647510.04.7053.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

Found on 2024-10-28 04:54

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818669546e75

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 03:51:20 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 22 hours 20 minutes 42 seconds
Server load: 0.32 0.97 1.35
Total accesses: 645093 - Total Traffic: 2.7 GB - Total Duration: 267977380
CPU Usage: u49.49 s73.98 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 708 B/second - 4455 B/request - 415.409 ms/request
2 requests currently being processed, 48 idle workers
_______________K_________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/820/12146_
11.00264253893590.03.6452.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/794/12456_
10.99822450592640.03.5753.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-065990/866/11733_
11.0224410954034600.03.7050.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/867/12573_
10.991209056206420.03.3553.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/835/12250_
10.991291353196060.03.5550.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/828/11993_
10.9719023743117250.03.5050.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/831/12408_
11.00691348728300.03.6152.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/786/11788_
11.0031814245314110.03.1449.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb5226e61ea63

0-065990/981/11880_
11.007724440647720.03.7749.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/915/12186_
11.00743345825370.03.8451.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/908/11952_
11.02212349738010.03.6750.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/748/11795_
11.00268555816610.03.1050.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/738/11724_
11.02149146376970.03.0749.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-065990/867/12336_
11.0291345669390.03.7052.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/682/12438_
11.004494545834660.02.7552.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_767867a5b5307

0-065993/646/12254K
11.023046600855.12.7351.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

0-065990/857/12305_
10.971699747472790.03.4952.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-065990/874/12204_
10.9913834351173660.03.4251.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/629/12290_
10.981415045881850.02.4552.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-065990/721/12060_
10.962044047174920.03.1751.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-065990/676/11879_
10.99122822555231830.02.9049.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92b1ce502ac50

0-065990/752/11986_
10.971962254616850.03.2650.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/799/12240_
10.971581345086800.03.1851.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/776/12437_
10.9910053747236300.03.2952.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-065990/722/11652_
11.00521254767890.02.9149.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-01791825/548/12509W
6.5100499272264.22.2753.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0179180/492/11663_
6.4222034552543230.02.1549.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/383/11308_
6.491023844039010.01.5347.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/476/11863_
6.49243181248663090.02.0351.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/531/12234_
6.422389352310430.02.4051.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/509/12006_
6.4699963549219150.02.2750.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/388/11964_
6.49183206350073040.01.6351.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0179180/422/11722_
6.4945635847862220.01.6548.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BR

1-0179180/536/12036_
6.47763146202320.02.1951.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0179180/414/11360_
6.442044042805810.01.6947.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/430/11533_
6.442058248121300.01.7548.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/466/11464_
6.4420678451076630.01.9949.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/502/11862_
6.441891345157430.02.0549.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/400/11543_
6.451411047437410.01.4049.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/544/11380_
6.44193618850512690.02.1647.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJLTwIxEL77Kza9d588G

1-0179180/492/12255_
6.451551444970400.02.0551.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/525/11163_
6.451608052415720.02.0446.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/536/11817_
6.4513023543323470.02.1949.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/466/12232_
6.4610134749985990.01.9351.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0179180/492/11844_
6.477023349278400.02.0050.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/598/11820_
6.461219045080860.02.3850.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTT

Found on 2024-10-26 03:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186c1e2d9e5

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 19:28:00 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 13 hours 57 minutes 22 seconds
Server load: 0.45 0.86 1.14
Total accesses: 625671 - Total Traffic: 2.6 GB - Total Duration: 260701951
CPU Usage: u41.26 s68.7 cu247.63 cs116.09 - .012% CPU load
.159 requests/sec - 708 B/second - 4457 B/request - 416.676 ms/request
1 requests currently being processed, 49 idle workers
________W_________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-065990/450/11776_
5.702283051967000.02.0650.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/403/12065_
5.70257448666440.01.8051.73
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/472/11339_
5.70338751517170.02.0848.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1eb58c0c1b58

0-065990/489/12195_
5.70318054730220.01.8951.57
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/420/11835_
5.705153451084030.01.7448.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-065990/422/11587_
5.69668542479210.01.8249.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/402/11979_
5.70196547337120.01.7450.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a122d7276975

0-065990/360/11362_
5.7147644452490.01.4347.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0b39d65a457e2

0-0659911/511/11410W
5.7100393661614.11.9248.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-065990/444/11715_
5.70139444808800.01.7249.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77e00fa47b021

0-065990/548/11592_
5.6879316048655450.02.2949.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/388/11435_
5.68842153857680.01.6548.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-065990/366/11352_
5.70170444955490.01.5447.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d153ff0fb3baf

0-065990/365/11834_
5.68823043448360.01.4950.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-065990/351/12107_
5.7174444753150.01.4751.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/355/11963_
5.69769945086100.01.5150.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_296936b2e9390

0-065990/414/11862_
5.68809045697400.01.6850.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-065990/499/11829_
5.7057628049907440.01.8849.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-065990/319/11980_
5.70593044898680.01.2150.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-065990/321/11660_
5.697237346492630.01.3949.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f91e9f32cfcb1

0-065990/334/11537_
5.70546454196650.01.4648.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e31719793bf14

0-065990/343/11577_
5.7064979553704400.01.4849.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-065990/399/11840_
5.7045913843789860.01.7050.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-065990/418/12079_
5.70450345705030.01.7951.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e826bbe88731b

0-065990/369/11299_
5.70415552923800.01.5047.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0179180/104/12065_
1.2185735548763110.00.3751.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9aqL

1-0179180/85/11256_
1.2366451070870.00.3947.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5327c5c225ef

1-0179180/95/11020_
1.23313142783970.00.4146.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0179180/95/11482_
1.231123547872600.00.3550.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0179180/78/11781_
1.23149450723530.00.2949.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4a3c750f62232

1-0179180/93/11590_
1.231812947966820.00.4448.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0179180/96/11672_
1.23278447772130.00.4049.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c37ae3c3c5b66

1-0179180/70/11370_
1.23247046277080.00.2647.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0179180/82/11582_
1.23214444885070.00.3049.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15d21be1b8b18

1-0179180/88/11034_
1.21836241515640.00.3446.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/92/11195_
1.22815446969290.00.3746.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0179180/100/11098_
1.22801549812920.00.4247.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0179180/84/11444_
1.22782443879300.00.2547.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c0577c623c8a0

1-0179180/101/11244_
1.22750445873060.00.3448.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_981acab5e9323

1-0179180/99/10935_
1.22713449071150.00.3546.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45f40d2560fef

1-0179180/159/11922_
1.22655544024310.00.6750.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0179180/106/10744_
1.22618450163900.00.4045.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84c0a1de199ac

1-0179180/71/11352_
1.22593042072770.00.2847.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0179180/99/11865_
1.2256118048433550.00.4149.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFRa4MwFIX%2FiuS9xsR

1-0179180/102/11454_
1.22531546543470.00.4048.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.

Found on 2024-10-24 19:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec818664d840ce

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 14:30:47 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 9 hours 9 seconds
Server load: 2.17 1.42 1.11
Total accesses: 585063 - Total Traffic: 2.4 GB - Total Duration: 245491999
CPU Usage: u57.94 s73.61 cu212.93 cs100.48 - .0119% CPU load
.156 requests/sec - 696 B/second - 4462 B/request - 419.599 ms/request
2 requests currently being processed, 48 idle workers
__W________________________________K______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147920/1258/10910_
18.361172249312460.05.4746.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0147920/1322/11285_
18.37227546292400.05.3648.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-01479216/1206/10511W
18.3700483303122.15.0345.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0147920/1448/11345_
18.37278351408360.06.0448.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0147920/1209/11042_
18.37144448456790.05.0045.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da9a5ed488787

0-0147920/1137/10728_
18.36876439383650.04.8745.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ef9e8fc8d8164

0-0147920/1308/11238_
18.3610033844613100.05.3547.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1169/10657_
18.36110019542015440.05.1045.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1169/10538_
18.361303436495350.04.9544.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1158/10897_
18.3771442268940.04.8245.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9ca645d48881

0-0147920/1054/10670_
18.36925643948510.04.3445.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7258d30c9842d

0-0147920/1425/10645_
18.361074451155250.05.7645.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c238585aa0f2

0-0147920/1269/10549_
18.3681618442556950.05.5744.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1212/11029_
18.36712440909070.04.8346.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_11230078e7f2a

0-0147920/1417/11338_
18.36687641018730.05.9248.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1256/11122_
18.36793542147950.05.0846.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ebfbc24252626

0-0147920/1276/11100_
18.37322542811900.05.2147.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da3754315599c

0-0147920/1159/10950_
18.37389945924570.04.8246.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php HTTP/1.1

0-0147920/1207/11161_
18.36653442111160.05.1547.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0147920/1193/10873_
18.36760444230810.05.0846.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cc20cb3c29410

0-0147920/1088/10675_
18.36604649836610.04.4744.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/1037/10787_
18.374033851263870.03.9845.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1400/11005_
18.37103440776150.06.0846.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/1257/11141_
18.3751818742668590.05.4947.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/1014/10550_
18.375449125750.04.3144.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1065/11259_
15.161194646285990.04.6048.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_691059ab191f8

1-0218350/888/10398_
15.16808547560480.03.5343.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/950/10212_
15.16457240236760.03.9043.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0218350/1000/10604_
15.16983243436360.04.4946.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0218350/1147/10806_
15.16634448064960.04.8545.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_886be107315ce

1-0218350/849/10700_
15.167918344603900.03.6144.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/894/10866_
15.1631423942937800.04.0746.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/981/10652_
15.16892443023130.03.9644.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fec123125d98f

1-0218350/1069/10841_
15.16703542167380.04.6246.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218350/1146/10426_
15.16772638920950.05.0643.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db1ef631129b7

1-0218351/951/10460K
15.183243887711.73.9543.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0218350/923/10283_
15.163384747175580.03.8644.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5471f67746eb1

1-0218350/965/10547_
15.161314540685920.03.8844.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1066/10448_
15.16852642717790.04.8644.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_58f9f263a5508

1-0218350/1073/10092_
15.16680546383670.04.4942.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d7117fa7a745

1-0218350/1169/10969_
15.16395541745710.05.0546.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9d5fc11a8478

1-0218350/958/9990_
15.1761546816100.03.9842.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0218350/1172/10526_
15.16736439622330.05.3244.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_66a60869da7bd

1-0218350/934/11016_
15.161141445344320.03.9446.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5cb4d8889e845

1-0218350/1019/10646_
15.16118544010610.0

Found on 2024-10-22 14:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186a42ce5fa

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 12:52:29 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 7 hours 21 minutes 52 seconds
Server load: 0.33 0.66 0.87
Total accesses: 536844 - Total Traffic: 2.2 GB - Total Duration: 227465013
CPU Usage: u35.92 s61.68 cu212.93 cs100.48 - .0115% CPU load
.15 requests/sec - 670 B/second - 4460 B/request - 423.708 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0147920/267/9919_
3.55469044676190.01.0342.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0147920/248/10211_
3.54524342831460.00.9643.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0147920/269/9574_
3.546394345283690.01.0941.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/279/10176_
3.54631547130880.01.0543.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/270/10103_
3.5458216345467690.01.1241.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/170/9761_
3.53869536462820.00.6241.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/242/10172_
3.55502140891500.00.9043.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0147920/209/9697_
3.554382737455770.00.8940.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0076353df34a2

0-0147920/229/9598_
3.55386432977750.00.9640.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_015f192eb6beb

0-0147920/274/10013_
3.55367139368810.01.0642.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0147920/215/9831_
3.5527545640435490.00.8141.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/337/9557_
3.5531242945973680.01.3040.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=409&StateId=

0-0147920/269/9549_
3.55138437325460.01.0339.88
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_623d398b038a6

0-0147920/233/10050_
3.55223537745550.00.8242.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0147920/260/10181_
3.55174536744740.00.9743.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_678fa37738567

0-0147920/264/10130_
3.5596639031710.01.0142.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/224/10048_
3.56614440053470.00.8142.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/281/10072_
3.5636543660700.01.0342.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0147920/325/10279_
3.54779439795960.01.4843.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f05be81a932f2

0-0147920/234/9914_
3.57579741348230.00.7741.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0147920/316/9903_
3.538333647276310.01.2341.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0147920/223/9973_
3.53810448047850.00.8442.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64b5a46cc8e69

0-0147920/227/9832_
3.54762436502300.00.9441.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0147920/287/10171_
3.54663440156270.01.1142.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f8258539a4def

0-0147920/227/9763_
3.5471518644307440.00.8941.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/58/10252_
0.65625543165050.00.2144.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/45/9555_
0.66398443175180.00.1840.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed44acf7848ab

1-0218350/32/9294_
0.67298138316080.00.1139.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-0218350/80/9684_
0.66362040387190.00.3842.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0218350/56/9715_
0.66351844571420.00.1940.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218350/50/9901_
0.66502541312540.00.2041.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0218350/36/10008_
0.67236439286690.00.1942.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4852e309f231

1-0218350/52/9723_
0.66452339232120.00.1940.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218350/73/9845_
0.6648130439680180.00.3142.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=409&StateId=

1-0218350/53/9333_
0.67193535412170.00.2038.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40d957964355c

1-0218350/28/9537_
0.68157439091950.00.1240.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_20245e1d20ebc

1-0218350/51/9411_
0.6811916744328530.00.2140.65
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/42/9624_
0.687519235943170.00.2040.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBa4NAEIX%2Fiuw9rq5

1-0218350/24/9406_
0.6565417438277800.00.1340.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/32/9051_
0.65632042360330.00.1237.99
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0218350/73/9873_
0.65571737649170.00.3341.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0218350/38/9070_
0.6845543365340.00.1538.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0609cf177351b

1-0218350/34/9388_
0.6820835422070.00.1438.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218350/80/10162_
0.6582015640348890.00.3142.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-02183520/69/9696W
0.6900408216027

Found on 2024-10-20 12:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186499eab7c

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 18-Oct-2024 09:11:26 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  39 days 3 hours 40 minutes 48 seconds
Server load: 1.15 1.57 1.76
Total accesses: 512019 - Total Traffic: 2.1 GB - Total Duration: 220483005
CPU Usage: u54.07 s68.23 cu184.17 cs86.37 - .0116% CPU load
.151 requests/sec - 678 B/second - 4485 B/request - 430.615 ms/request
1 requests currently being processed, 49 idle workers
___________________________W______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0260810/1203/9401_
19.5710503743521550.05.0040.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_48a556f7ffe59

0-0260810/1318/9710_
19.578613841837540.05.4942.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_754fc75d26d46

0-0260810/1246/9103_
19.57798444093740.05.2139.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_32d104221d3d3

0-0260810/1277/9644_
19.5833136045663420.05.4641.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeXddN1

0-0260810/1352/9556_
19.57368443906810.05.5039.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bc30e322608e3

0-0260810/1193/9377_
19.57938535383310.04.9839.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/1232/9688_
19.573453738710470.05.2441.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_534f9b056d7e1

0-0260810/1328/9269_
19.59131436507220.05.3439.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1327/9098_
19.57736432041400.05.6338.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6da759cd86020

0-0260810/1411/9529_
19.57566438197520.05.9640.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb3f928e7b166

0-0260810/1190/9379_
19.57760438810000.04.8040.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_804dec6e09e87

0-0260810/1069/8946_
19.57680344695830.04.6238.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/1198/9061_
19.5797819335577840.04.9038.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1188/9552_
19.591525936398580.05.1940.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/1153/9719_
19.5747217035697970.04.9541.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/1360/9637_
19.595236237928390.05.6540.54
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL3zKyLfnTh

0-0260810/1425/9584_
19.571077338788060.05.9141.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/1308/9543_
19.57395342301500.05.5640.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e1d008206016

0-0260810/1553/9758_
19.58261438064240.06.5941.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d00f85cb9278b

0-0260810/1364/9500_
19.5919740022890.05.7140.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/totp.php?StateId=_b1867eb6f7a

0-0260810/1375/9373_
19.57720446157480.05.7439.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bab5da387ae02

0-0260810/1443/9530_
19.58202547231130.06.2540.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1f1d3b19f82b2

0-0260810/1429/9360_
19.58239134831760.06.1739.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/1395/9643_
19.58291438776950.05.7340.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/1294/9317_
19.57847143043800.05.5039.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/1130/9712_
13.95947441255240.05.0142.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ace42e1458d5

1-069740/1127/9086_
13.9746440390410.04.8338.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

1-0697429/991/8832W
13.9800370025761.24.0637.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-069740/923/9132_
13.97162538816030.03.9740.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b79ff54e64b6a

1-069740/874/9118_
13.965551542565680.03.5638.55
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/980/9412_
13.96787540141980.04.2439.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c799e65cf1118

1-069740/1067/9532_
13.96750538094720.04.4940.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6151df0a0fffb

1-069740/782/9197_
13.95847237467390.03.0638.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/900/9239_
13.96705538151410.03.7039.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/822/8873_
13.959003234295300.03.4337.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/987/9036_
13.97138638066560.04.0338.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_225e577b6f89f

1-069740/959/8897_
13.96300343312180.04.4038.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/932/9154_
13.9725417934694800.03.8638.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/875/8962_
13.96359436916950.03.6438.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f7d4c439a42e

1-069740/903/8558_
13.968134740876190.03.7336.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-069740/875/9283_
13.96405436468820.03.6239.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aabc1eac3d756

1-069740/927/8554_
13.963751642001340.03.8436.27
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-069740/890/8909_
13.96650559534034160.03.6137.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-069740/1002/9658_
13.97230139127060.04.2340.97
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/911/9181_

Found on 2024-10-18 09:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186628c54a9

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 16-Oct-2024 12:03:03 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  37 days 6 hours 32 minutes 25 seconds
Server load: 2.45 2.10 1.73
Total accesses: 469010 - Total Traffic: 2.0 GB - Total Duration: 200154679
CPU Usage: u35.56 s56.92 cu184.17 cs86.37 - .0113% CPU load
.146 requests/sec - 654 B/second - 4495 B/request - 426.76 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0260810/356/8554_
6.769035240133750.01.5837.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/407/8799_
6.78108536822250.01.5738.10
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/444/8301_
6.7493430039881930.01.9336.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFLa8MwEIT%2FitE91sM

0-0260810/432/8799_
6.765361140526220.01.9837.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/395/8599_
6.76807438679290.01.6535.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/472/8656_
6.769168431210230.01.9936.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0260810/362/8818_
6.76861334400020.01.5937.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/507/8448_
6.76630432812160.02.0535.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_61dca37dc8f68

0-0260810/556/8327_
6.7657017728585690.02.3735.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfy5J

0-0260810/563/8681_
6.76591134191120.02.5836.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0260810/343/8532_
6.76793635752320.01.4336.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04891326d5f15

0-0260810/372/8249_
6.76878341085620.01.5835.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/419/8282_
6.7743116432577920.01.8334.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHBaoNAEIZfRfYeddfV6

0-0260810/355/8719_
6.76516233233590.01.6337.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/376/8942_
6.76662631868170.01.5838.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/442/8719_
6.78363233139780.01.8936.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/464/8623_
6.77455535557690.01.9637.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/481/8716_
6.77502238585420.02.0637.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/591/8796_
6.78257434802470.02.6037.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1b69f37b124c

0-0260810/479/8615_
6.78323535424070.02.1336.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/391/8389_
6.78155241748400.01.6435.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0260810/360/8447_
6.78227542571860.01.5336.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-0260810/526/8457_
6.784113631013850.02.4136.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0260810/454/8702_
6.78132535238710.01.8036.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-0260810/520/8543_
6.7812038955400.02.2236.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-069740/45/8627_
1.18141535478170.00.2237.34
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/93/8052_
1.15923233497350.00.4034.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-069740/94/7935_
1.17504333483400.00.3333.94
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/84/8293_
1.17524334047650.00.3536.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0697413/105/8349W
1.1800379476416.10.3435.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-069740/94/8526_
1.1747617635757620.00.4435.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/82/8547_
1.15844534998940.00.3636.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/61/8476_
1.17587433189460.00.2435.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4b24dca54d39

1-069740/58/8397_
1.1680016934256860.00.2236.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-069740/48/8099_
1.16673430822810.00.1834.03
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_78baf77c32b75

1-069740/76/8125_
1.17266432917800.00.3334.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2307a6bef9b97

1-069740/87/8025_
1.17421038696030.00.4634.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-069740/63/8285_
1.17368231583610.00.2935.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/69/8156_
1.173463632573400.00.2534.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_073f793649178

1-069740/68/7723_
1.18236237200190.00.2732.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-069740/77/8485_
1.17559432427040.00.2836.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c0f0dc8a4b64

1-069740/71/7698_
1.18101438976990.00.3332.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eaf841ea0b8ee

1-069740/66/8085_
1.16620430540190.00.2833.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_96fe85b64ddcf

1-069740/49/8705_
1.18182634319300.00.1736.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1311b76e03cb

1-069740/86/8356_
1.16637435824900.00.4336.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e89196cb77100

1-069740/82/8223_

Found on 2024-10-16 12:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81868468a6d0

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 14-Oct-2024 09:45:27 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 4 hours 14 minutes 50 seconds
Server load: 2.88 1.78 1.62
Total accesses: 419286 - Total Traffic: 1.8 GB - Total Duration: 181029640
CPU Usage: u46.09 s59.73 cu151.64 cs70.81 - .0108% CPU load
.138 requests/sec - 621 B/second - 4503 B/request - 431.757 ms/request
2 requests currently being processed, 48 idle workers
W__________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069654/1104/7663W
14.104036554218.24.6633.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/1026/7887_
14.03489433434070.04.4734.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab7e4448c715c

0-069650/862/7355_
14.07172435782550.03.5232.09
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/952/7714_
14.0944235665580.03.8333.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/997/7652_
14.02655234733510.04.2632.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/981/7661_
14.06258328270700.04.3532.82
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b9e93b243e1d9

0-069650/963/7914_
14.062195031034510.04.0234.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/932/7459_
14.07844228346180.03.9131.84
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/846/7218_
14.07135525051360.03.4330.77
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/894/7424_
14.07101530117670.03.4531.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/929/7619_
14.07186232147510.03.8633.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/920/7417_
14.0268442537608910.03.8331.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/828/7143_
14.03543528513040.03.4030.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1097/7817_
14.05379530351630.04.5933.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1083/7969_
14.054775228666640.04.4734.04
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/915/7692_
14.02735329411670.03.8032.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

0-069650/995/7595_
14.02706531662620.03.9732.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a38b46c50f23c

0-069650/1129/7732_
14.054293134855770.04.8933.16
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/1048/7732_
14.026223330598520.04.4733.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/887/7610_
14.0276697431636110.03.5532.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BG

0-069650/898/7449_
14.02573437498350.03.7131.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/1095/7631_
14.06229438502400.04.6132.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/888/7363_
14.0922428579750.03.6831.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-069650/935/7651_
14.0628416431674350.03.9732.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/1141/7458_
14.06361035216930.04.8831.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0123230/955/7659_
11.98249331312450.04.1433.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/815/7010_
11.9915229658490.03.5029.81
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/704/7031_
11.96678430432260.03.1430.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9ed5a0d981e7b

1-0123230/866/7235_
11.96563229011850.03.8331.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/814/7218_
11.98267233154310.03.5330.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/1000/7565_
11.97470032047960.04.1731.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0123230/899/7562_
11.9739314031465620.03.6232.58
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0123230/820/7433_
11.96649428095270.03.5031.56
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d2d310e40ba6

1-0123230/838/7481_
11.96718231048330.03.6632.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0123230/909/7081_
11.98351426888980.03.9829.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9141b74ed7ed

1-01232321/820/7161W
11.9900283340825.93.3330.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

1-0123230/778/7136_
11.983795934160280.03.4330.89
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/810/7254_
11.98108528310960.03.4530.71
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa68b35f87f43

1-0123230/868/7133_
11.99654729333910.03.8330.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/766/6639_
11.9819619233915190.03.1628.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0123230/826/7426_
11.98182528028460.03.2631.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0123230/756/6820_
11.98166636336350.03.1829.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0123230/751/7189_
11.98220127085800.03.1730.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0123230/893/7542_
11.96696429890470.03.8631.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b0ace41bb71af

1-0123230/771/7357_
11.9995431848420.03.3131.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/co

Found on 2024-10-14 09:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186c9a50f6d

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 10:42:28 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 5 hours 11 minutes 50 seconds
Server load: 2.46 1.67 1.58
Total accesses: 376676 - Total Traffic: 1.6 GB - Total Duration: 161863775
CPU Usage: u39.46 s54.32 cu140.13 cs65.22 - .0104% CPU load
.131 requests/sec - 592 B/second - 4511 B/request - 429.716 ms/request
1 requests currently being processed, 49 idle workers
_______________________W__________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-069650/125/6684_
1.779084131876310.00.4628.93
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57120f202428f

0-069650/191/7052_
1.761086430436160.00.8930.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/104/6597_
1.761152032580400.00.3928.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-069650/92/6854_
1.77867531053950.00.3129.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a3a9cd0967a54

0-069650/138/6793_
1.76117116432636100.00.5828.40
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZHLasMwEEV%2FxWgfSxq

0-069650/138/6818_
1.781952724608680.00.6229.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/136/7087_
1.77528528578120.00.4530.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/122/6649_
1.761112423879080.00.5028.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_39e1db4639a5c

0-069650/97/6469_
1.77710622829530.00.4127.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/102/6632_
1.77787326714590.00.3328.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/113/6803_
1.77626427711740.00.4229.62
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_874434287dede

0-069650/140/6637_
1.77659233017250.00.5528.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/105/6420_
1.76100316525129970.00.3427.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/143/6863_
1.761039527212120.00.5529.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c8f92543002c

0-069650/169/7055_
1.779304525589860.00.6530.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-069650/117/6894_
1.7749420924340320.00.3529.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/109/6709_
1.77427526231940.00.3229.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/122/6725_
1.77353528469580.00.4528.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b035cbc57523

0-069650/174/6858_
1.7829116426285920.00.6229.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

0-069650/126/6849_
1.78269527893400.00.4929.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

0-069650/129/6680_
1.78200734804000.00.4828.22
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb00776494ab0

0-069650/127/6663_
1.78184134905890.00.5328.50
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-069650/148/6623_
1.7846426361360.00.6028.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8c5273753cf89

0-0696525/130/6846W
1.7900281724532.10.4029.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-069650/123/6440_
1.7774916929284690.00.4327.46
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1043/6675_
16.591161426911750.04.2428.92
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7b832b06d6ee

1-0305700/1050/6172_
16.60403526544760.04.1226.23
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1091/6302_
16.60276427180630.04.4427.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f4628f758f71

1-0305700/1027/6337_
16.60185224034220.04.2827.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/1084/6369_
16.60504527496150.04.2827.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1118/6539_
16.608115626962830.04.4127.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1039/6624_
16.60988526203990.04.1828.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f6cbba5d4cb5e

1-0305700/1106/6578_
16.591056424997110.04.7727.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4010e71a09525

1-0305700/965/6599_
16.601025424106930.04.1428.53
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbd756bb534ca

1-0305700/912/6112_
16.60768323199220.03.5225.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/1108/6313_
16.60891523994040.04.4426.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fportal.b

1-0305700/1081/6333_
16.60329430331890.04.3827.36
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dde7bc95b9779

1-0305700/1061/6415_
16.607401525314800.04.0927.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7837b141cf94

1-0305700/1065/6211_
16.60668424505870.04.2126.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94f9efdd9283f

1-0305700/971/5843_
16.6082218430289170.04.1325.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1143/6572_
16.591127525408830.05.0028.07
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22d50418f6758

1-0305700/1053/5999_
16.6055545733757730.04.3525.66
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1061/6397_
16.60457424615280.04.1026.80
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e09569601686a

1-0305700/1084/6589_
16.591102426660870.04.1327.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fbroughto

1-0305700/1183/6555

Found on 2024-10-12 10:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186640690da

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 10:00:14 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 4 hours 29 minutes 36 seconds
Server load: 8.72 2.54 1.53
Total accesses: 361170 - Total Traffic: 1.5 GB - Total Duration: 157701274
CPU Usage: u43.96 s53.95 cu128.04 cs59.76 - .0106% CPU load
.134 requests/sec - 607 B/second - 4535 B/request - 436.64 ms/request
2 requests currently being processed, 48 idle workers
______________W_____________K_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/884/6361_
14.97606130907940.03.7227.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212020/967/6713_
14.98309629239330.03.8629.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_7c124

0-0212020/832/6319_
14.961035331835770.03.1727.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/979/6574_
14.98258230457760.03.9428.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/893/6484_
14.98171431771140.03.5427.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/939/6474_
14.967297223770410.03.9227.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/1000/6805_
14.96705527941180.04.1929.64
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0212020/920/6338_
14.969041422999260.03.5527.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1011/6206_
14.974353822275020.04.0426.78
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/918/6337_
14.96976025709790.03.5527.35
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0212020/1051/6508_
14.96643426686410.04.2728.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/974/6304_
14.97503032305410.03.8627.29
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/904/6169_
14.9415904524270880.03.5526.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1295a4cab9e88

0-0212020/1006/6542_
14.97410326418200.03.8528.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-02120211/1006/6663W
14.9900246539012.04.0728.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/975/6622_
14.98103123837690.03.9528.21
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/953/6434_
14.98329625529860.03.9428.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_16ee4

0-0212020/930/6428_
14.951149227782360.03.5827.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/1015/6504_
14.9685046524878400.04.3628.13
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/1044/6553_
14.941476427135040.04.3428.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1008/6356_
14.951375234040060.03.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/1041/6388_
14.95120622734217090.04.2227.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?client-request-id=b02457f7-a5b

0-0212020/934/6307_
14.951259625489410.04.0027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_fca22

0-0212020/877/6542_
14.969853627228710.03.8227.98
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d0ba88be3256

0-0212020/881/6121_
14.951118228698820.03.5726.31
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/762/6394_
12.051067026191670.03.1527.83
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0305700/720/5842_
12.08315625368660.02.9125.02
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/accountinfo/password-expired.php?StateId=_9cb2a

1-0305700/751/5962_
12.09171126426180.03.0425.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057015/705/6015K
12.1040233165021.83.0126.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /.vscode/sftp.json HTTP/1.1

1-0305700/789/6074_
12.083723026631780.03.2126.05
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/785/6206_
12.03153418126088620.03.2626.14
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNTwIxEL37Kza97xcsI

1-0305700/753/6338_
12.051010325535540.03.1427.75
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/782/6254_
12.051143024224000.03.2926.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0305700/689/6323_
12.05976023338670.03.0327.42
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0305700/664/5864_
12.077055322523930.02.7024.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/763/5968_
12.06858223183080.03.1125.45
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/736/5988_
12.0928118429481450.03.0326.01
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFBa8MwDIX%2FSvC9ceI

1-0305700/754/6108_
12.0767236124466470.03.0326.12
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=87&StateId=_

1-0305700/765/5911_
12.07589223650700.03.1425.30
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/671/5543_
12.06822229818580.02.9823.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/819/6248_
12.0412393724490060.03.6326.70
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/accountinfo/password-expired.php HTTP/1.1

1-0305700/786/5732_
12.02462233062040.03.2724.59
127.0.0.1http/1.1

1-0305700/726/6062_
12.07421223753990.02.9025.60
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/672/6177_
12.05118438625588160.02.5826.17
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/cloudworkauth/mfa/hotp.php?hotp_id=102&StateId=

1-0305700/881/6253_
12.0412783928271370.03.8627.38
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/791/6060_
12.031401324426540.03.3626.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.c

Found on 2024-10-10 10:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186b36283f3

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:09 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 31 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352332 - Total Traffic: 1.5 GB - Total Duration: 153979012
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.028 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237304229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232643628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23409228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23150031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22883223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22864527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211163222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23759221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109322925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23629530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24291123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23678225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235611724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23234325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.247226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219243923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211549333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212028/762/6109W
12.2400321944118.52.9726.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111803726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211220828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241705624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2472422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201944325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201434323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111866123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211014522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22759221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22872222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23245228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23690423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201526423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23629531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23326423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016034727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2423222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057056/621/5791K
9.2500276565078.02.52

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81863772884e

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:09 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 31 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352331 - Total Traffic: 1.5 GB - Total Duration: 153979010
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.029 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237304229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232643628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23409228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23150031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22883223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22864527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211163222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23759221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109322925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23629530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24291123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23678225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235511724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23234325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.247226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219243923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211549333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212027/761/6108W
12.2400321944014.12.9726.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111803726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211220828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241705624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2472422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201944325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201434323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111866123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211014522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22759221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22872222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23245228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23690423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201526423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23629531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23326423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016034727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2423222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057056/621/5791K
9.2500276565078.02.52

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec8186e5b337d5

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:09 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 31 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352330 - Total Traffic: 1.5 GB - Total Duration: 153979008
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.031 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237304229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232643628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23409228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23150031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22883223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22864527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211163222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23759221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109322925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23788426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23629530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24281123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23678225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235511724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23234325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.247226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219243923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211849526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211549333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212026/760/6107W
12.240032194389.62.9626.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211462225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111803726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211220828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211170025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241705624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2444226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2472422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201944325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201434323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111866123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211014522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22759221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22872222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23245228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23759223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23690423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21890128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201526423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23629531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23326423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016024727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2423222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057056/621/5791K
9.2500276565078.02.52

Found on 2024-10-09 04:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31d5ec8186d5ec81861bbc5854

Apache Status

Apache Server Status for bac-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:17:09 UTC
Restart Time: Monday, 09-Sep-2024 05:30:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 22 hours 46 minutes 31 seconds
Server load: 1.31 1.27 1.20
Total accesses: 352328 - Total Traffic: 1.5 GB - Total Duration: 153979007
CPU Usage: u38.87 s50.58 cu128.04 cs59.76 - .0107% CPU load
.136 requests/sec - 617 B/second - 4536 B/request - 437.033 ms/request
2 requests currently being processed, 48 idle workers
_____________________W________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0212020/692/6169_
12.237304229494400.02.8426.87
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/809/6555_
12.232643628714850.03.2128.67
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/678/6165_
12.21137835331467830.02.5027.20
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/adfs/idp/prp.php?login_hint=MBennett%40students

0-0212020/803/6398_
12.23409228829100.03.1927.72
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/738/6329_
12.23150031486750.02.9326.51
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0212020/821/6356_
12.22883223158630.03.4227.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/821/6626_
12.22864527634500.03.4228.86
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/737/6155_
12.211163222530870.02.8726.44
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/803/5998_
12.23759221757080.03.1625.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/782/6201_
12.21109322925264950.02.9626.76
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZFda4MwFIb%2FiuS%2BJ

0-0212020/875/6332_
12.23787426259350.03.5327.74
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/768/6098_
12.23629530113390.03.0526.48
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/771/6036_
12.24281123585350.03.0825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/764/6300_
12.23678225476940.02.7827.08
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/819/6476_
12.235511724409560.03.3828.11
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/792/6439_
12.24456323354230.03.2027.47
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3fdf527e2f447

0-0212020/793/6274_
12.23234325081690.03.1527.26
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/799/6297_
12.247226772500.03.1827.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/820/6309_
12.219243923986330.03.5027.28
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212020/853/6362_
12.211848526836430.03.6227.52
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fbroug

0-0212020/825/6173_
12.211549333600430.03.2126.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0212024/758/6105W
12.240032194364.12.9626.18
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /server-status HTTP/1.1

0-0212020/757/6130_
12.211461225229680.03.2126.49
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0212020/702/6367_
12.2111803726776700.02.9027.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0212020/737/5977_
12.211220828255130.02.8925.63
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0305700/600/6232_
9.211169025813170.02.4727.15
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0305700/598/5720_
9.241705624902320.02.2624.37
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/605/5816_
9.2443226171350.02.4325.00
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/537/5847_
9.2472422227840.02.2825.96
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/536/5821_
9.23489526245400.02.1124.95
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/593/6014_
9.201944325496830.02.4425.32
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/540/6125_
9.201434323797250.02.1926.79
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0305700/622/6094_
9.2111866123419140.02.5425.68
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/519/6153_
9.211014522449470.02.3026.69
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/528/5728_
9.22759221773430.02.0724.06
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/574/5779_
9.22872222470860.02.2624.61
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/559/5811_
9.23245228309300.02.3625.33
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/594/5948_
9.23758223861120.02.3425.43
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/604/5750_
9.23690423050060.02.4324.59
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/518/5390_
9.21889128804860.02.2523.24
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/620/6049_
9.201526423958630.02.8325.90
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/632/5578_
9.23629531364950.02.6023.91
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/552/5888_
9.23326423289730.02.1624.85
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0305700/495/6000_
9.201231325092900.01.8325.41
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET / HTTP/1.1

1-0305700/651/6023_
9.2016024727666700.02.6826.19
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0305700/631/5900_
9.2423222828870.02.7026.25
127.0.0.1http/1.1ip-10-1-110-84.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-03057056/621/5791K
9.2500276565078.02.52

Found on 2024-10-09 04:17

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: clyps.io
Port: 443
URL: https://clyps.io

First seen 2024-09-15 19:37
Last seen 2025-10-23 04:34
Open for 402 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772ab5e76f67789cfbcc30a84a3f806ca89
```
Found 11 files trough .DS_Store spidering:

/favicon.ico
/flaticon.png
/icon.png
/icon@2x.png
/iconfinder.svg
/index.html
/logo.png
/manifest.json
/noun-project.svg
/robots.txt
/studio-polotno-preview.jpg
```
  Found on 2025-10-23 04:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: learn.tonyakubo.com
Port: 443
URL: https://learn.tonyakubo.com

First seen 2024-09-06 08:00
Last seen 2025-08-10 10:45
Open for 338 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b9dd4fa7c405f2c5d31ba2b029ceead48
```
Found 14 files trough .DS_Store spidering:

/.git
/_database
/application
/fe
/index.php
/license.txt
/package-lock.json
/package.json
/postcss.config.js
/readme.rst
/src
/system
/tailwind.config.js
/uploads
```
  Found on 2025-08-10 10:45
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.9.95.66
Domain: highlands-login.cloudworkengine.net
Port: 443
URL: https://highlands-login.cloudworkengine.net

First seen 2024-10-09 04:14
Last seen 2025-05-24 21:26
Open for 227 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d213428505

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 24-May-2025 21:26:21 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  76 days 16 hours 21 minutes 13 seconds
Server load: 0.91 0.60 0.63
Total accesses: 1205287 - Total Traffic: 4.6 GB - Total Duration: 330434569
CPU Usage: u116.24 s144.92 cu319.71 cs175.26 - .0114% CPU load
.182 requests/sec - 748 B/second - 4112 B/request - 274.154 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320610/4022/22892_
46.631063062491090.013.7988.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0320610/3967/23529_
46.65194364549370.013.1192.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/4054/23811_
46.6425118466105430.013.4192.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/4004/23051_
46.6587272591030.013.6491.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_434fa49f9287c

0-0320610/3528/22736_
46.6562362130090.012.2289.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/3277/22084_
46.65137259917480.011.1287.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdda922d34a3c

0-0320610/3286/23012_
46.637894367060590.011.1290.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0320610/4206/23738_
46.6313568160718520.014.8393.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0320610/3270/22826_
46.631460462707370.011.1889.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03206112/4004/23372W
46.6500679824917.213.1293.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0320610/4068/23648_
46.631160460931020.013.5592.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3611/23636_
46.63980561378670.012.4492.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3815/23271_
46.63860560909850.012.8891.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3816/23603_
46.631233363602950.012.6791.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8da82172b8305

0-0320610/3698/22712_
46.6538463478960.012.5788.44
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6fe336a8babfc

0-0320610/3669/22918_
46.63920561919080.012.4090.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3875/23448_
46.636137165820200.013.2892.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ba06e870bff3a

0-0320610/5413/22784_
46.636753968672920.018.9988.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0320610/3670/22946_
46.63740466652920.012.2290.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3578/23113_
46.635495561045650.012.2791.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0320610/4012/23015_
46.642924566495320.013.7491.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0320610/3965/23473_
46.63441563466350.013.0589.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/3585/23254_
46.63380463174500.011.9391.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/4432/24129_
46.631281564216400.014.8094.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/4261/23635_
46.65164266188140.014.4891.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e53ac2fa9386d

1-010020/4097/24020_
47.821040565830250.013.6497.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/4150/23579_
47.82800469659960.014.1890.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3493/22722_
47.821496397763503940.011.7987.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PBXgY

1-010020/4332/24001_
47.82500566151620.014.4891.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3937/23355_
47.8417340964104390.013.2290.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-010020/3894/23624_
47.821340467012340.013.0592.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3867/23148_
47.82757771646300.013.2492.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-010020/3972/23356_
47.821101465901570.013.4592.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3960/22831_
47.82954065735010.013.3288.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-010020/4123/23546_
47.84261564662050.013.7691.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3568/23264_
47.824143762350560.012.1191.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-010020/3037/22413_
47.82621463895760.010.5489.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/4420/23880_
47.8580563420690.014.9194.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3815/23013_
47.8554361957680.012.7991.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-010020/4067/23123_
47.8410419057637440.014.1491.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-010020/3804/23132_
47.82681562235540.012.8192.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/4256/24113_
47.821400461744450.014.5293.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/3918/23261_
47.843043767383990.013.2989.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-010020/3741/23171_
47.84156960888500.012.6490.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-010020/3927/23088_
47.82560460664560.013.1489.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.c

Found on 2025-05-24 21:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d26350e19d

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 22-May-2025 18:11:12 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  74 days 13 hours 6 minutes 4 seconds
Server load: 0.28 0.81 1.06
Total accesses: 1058574 - Total Traffic: 4.1 GB - Total Duration: 315537599
CPU Usage: u69.35 s115.7 cu319.71 cs175.26 - .0106% CPU load
.164 requests/sec - 690 B/second - 4200 B/request - 298.078 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0320610/889/19759_
10.59294419858495490.03.4978.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/868/20430_
11.102683361680290.03.0182.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3843243a9e81f

0-03206119/968/20725W
11.1600638962041.93.3782.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0320610/827/19874_
11.151052869772800.03.0180.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4c6da79be5c6

0-0320610/752/19960_
10.59306119059225870.02.6279.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/722/19529_
10.59287520157084650.02.6879.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/652/20378_
10.612651664236730.02.5382.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/885/20417_
10.602771557700830.03.5481.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/709/20265_
10.602712559844050.02.6380.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/975/20343_
10.592831465533820.03.2783.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/1212/20792_
10.652326458586760.04.1983.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/764/20789_
10.612591558044400.02.8283.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/992/20448_
10.801712457806540.03.4981.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/1090/20877_
10.751909560213340.03.6782.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/781/19795_
10.612527360627810.02.7778.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0320610/1062/20311_
10.7021142959725490.03.6381.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3d3c5d4373e0b

0-0320610/957/20530_
10.851500362234330.03.4882.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/2620/19991_
10.901133165220490.09.7479.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01f1ffc192d40

0-0320610/877/20153_
11.006834064022160.03.1181.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7e69055259d68

0-0320610/879/20414_
11.05487458623110.03.3982.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/1301/20304_
10.901235563885480.04.6581.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

0-0320610/1139/20647_
10.958963260238290.03.9680.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64db3eeda9c34

0-0320610/874/20543_
11.054143160457400.02.9682.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_87467a1f2b6ca

0-0320610/891/20588_
10.593012560692280.03.2583.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0320610/895/20269_
11.053822963225390.03.2180.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_de0e36d659dd5

1-010020/1130/21053_
11.082625262824560.04.0388.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4710d5833f96

1-010020/1096/20525_
11.082472564858430.04.0880.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/758/19987_
11.0828471060668070.02.8178.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-010020/928/20597_
11.47788562668500.03.2679.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/959/20377_
11.082952461607320.03.5281.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/779/20509_
11.082748364187160.02.7582.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_059ff086cf98a

1-010020/1335/20616_
11.371119468572560.04.7484.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/1177/20561_
11.2816204662986700.04.2383.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_375e128e95134

1-010020/1187/20058_
11.321368463161640.04.1879.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/750/20173_
11.52578461608320.02.6680.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/973/20669_
11.55425559912710.03.4283.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/783/20159_
11.658361752040.03.0682.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?RelayState=https%3A%2F%2Fal.highl

1-010020/1031/20491_
11.082891460380630.03.7883.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-010020/966/20164_
11.083051258711990.03.3881.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_981b855968c54

1-010020/775/19831_
11.08268019455190320.03.2480.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-010020/897/20225_
11.553903359420020.03.2782.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8dcefc0c1954e

1-010020/935/20792_
11.08280317558044790.03.2482.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-010020/498/19841_
11.563702964379400.01.9678.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_936ee1d95a1c0

1-010020/926/20356_
11.083071558193470.03.3481.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.ph

Found on 2025-05-22 18:11

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d268c64b41

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 20-May-2025 17:56:51 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  72 days 12 hours 51 minutes 43 seconds
Server load: 0.55 0.81 1.09
Total accesses: 997157 - Total Traffic: 3.9 GB - Total Duration: 303463135
CPU Usage: u85.43 s122.11 cu283.37 cs155 - .0103% CPU load
.159 requests/sec - 671 B/second - 4218 B/request - 304.328 ms/request
1 requests currently being processed, 74 idle workers
__________________W_____________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0185700/1280/18686_
16.201071756103680.04.8774.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1371/19357_
16.1919863958860610.05.1078.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0185700/1167/19572_
16.191850661462080.04.9577.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1404/18849_
16.193171767621450.05.9076.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1231/19035_
16.192391657081680.04.8276.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1259/18575_
16.192630654852160.04.5675.43
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1416/19582_
16.192991762564730.05.4179.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1493/19381_
16.192810855123070.05.5377.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1285/19382_
16.20291657975850.05.0877.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1556/19146_
16.192570663374750.06.1779.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1379/19402_
16.2013873256940400.05.4378.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0185700/1685/19831_
16.20171656187290.06.3179.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1482/19353_
16.20771856252510.05.9378.06
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1636/19610_
16.192751658094110.06.1378.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1190/18880_
16.20650659432980.04.8975.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1561/19096_
16.20471757580610.05.8977.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1525/19353_
16.19325218060115970.05.8878.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_362ca21806548

0-0185700/1439/18810_
16.193411762671140.05.3475.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-01857010/1384/19063W
16.2100612055411.85.3077.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0185700/1448/19346_
16.1921005556674760.05.3778.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c7443bff9389

0-0185700/1378/18840_
16.2015418662264700.05.3876.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_063d2a00e3514

0-0185700/1309/19326_
16.201671858580040.04.9776.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1312/19445_
16.192271758602870.05.1978.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1394/19518_
16.201251658539000.05.5679.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/1350/19214_
16.20890661052400.05.2076.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1507/19757_
17.192211760963950.05.9383.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1424/19253_
17.192090662753870.05.4075.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1379/19126_
17.192330758454240.05.0974.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1500/19498_
17.192511860415440.05.8375.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1597/19224_
17.1827893759945750.06.2476.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0182520/1696/19515_
17.192691662070880.06.5178.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1269/19112_
17.20410766452720.05.0078.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1483/19148_
17.183350860475870.05.7778.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1358/18692_
17.183111761163170.05.3474.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1548/19251_
17.182931659814280.05.9377.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1318/19512_
17.21231857424690.05.0278.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1452/19241_
17.191610759887430.05.7178.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1524/19302_
17.20831758115400.06.1878.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1376/18926_
17.191971756728270.05.6577.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1685/18892_
17.191191652756980.06.7676.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1528/19173_
17.207605056813740.06.2379.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5be660783ae5

1-0182520/1497/19655_
17.191370756023280.05.8578.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1316/19130_
17.20591762228380.05.0475.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1412/19288_
17.191791656096050.05.3277.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/1234/19009_
17.21110655833200.04.8775.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/fr

Found on 2025-05-20 17:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d27223e64e

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 18-May-2025 03:18:24 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 22 hours 13 minutes 16 seconds
Server load: 2.23 1.50 1.42
Total accesses: 935662 - Total Traffic: 3.7 GB - Total Duration: 289548192
CPU Usage: u64.49 s108.16 cu283.37 cs155 - .0101% CPU load
.155 requests/sec - 655 B/second - 4231 B/request - 309.458 ms/request
1 requests currently being processed, 74 idle workers
______________________________________________________W_________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0185700/546/17952_
7.05661354379550.02.1271.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_48e61c241720e

0-0185700/587/18573_
7.0394969456074280.02.2175.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2Bey

0-0185700/571/18976_
7.03923860547080.02.2375.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/608/18053_
7.031007065531210.02.2973.10
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0185700/632/18436_
7.0836355762010.02.4274.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/581/17897_
7.0883353537290.02.1773.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c8aa6e3135d0

0-0185700/648/18814_
7.0718317160662520.02.5676.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_993008add825e

0-0185700/618/18506_
7.07153453408240.02.4174.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/682/18779_
7.064104356635040.02.5874.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec2WzC

0-0185700/594/18184_
7.07194859393490.02.3275.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0185700/688/18711_
7.056913855376960.02.6475.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0185700/588/18734_
7.06462054159640.02.3175.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0185700/643/18514_
7.05590454624980.02.6174.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/676/18650_
7.07126056489680.02.5975.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0185700/549/18239_
7.05552456509790.02.2772.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/626/18161_
7.054933254766730.02.5374.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_853e420f59786

0-0185700/603/18431_
7.0635418757251830.02.3475.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/694/18065_
7.06246461474410.02.6072.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/595/18274_
7.06303359300300.02.2773.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e7adc05795f5

0-0185700/695/18593_
7.03894455112900.02.7475.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0185700/640/18102_
7.03813460582110.02.5573.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/614/18631_
7.03863656472450.02.4173.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/591/18724_
7.085957077170.02.3975.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0185700/705/18829_
7.047424057423730.02.8376.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e5f8bbdc993db

0-0185700/593/18457_
7.05623759498920.02.5273.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/689/18939_
7.40779358606820.02.6680.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2dfc887f8251b

1-0182520/678/18507_
7.40563761349590.02.5072.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/667/18414_
7.40723357359020.02.5572.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3e6a9322223b

1-0182520/697/18695_
7.40669458114810.02.7972.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://highlands-l

1-0182520/623/18250_
7.40894457957090.02.5573.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0182520/769/18588_
7.40880960342770.03.0675.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0182520/630/18473_
7.41138364831320.02.6376.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c56613bc25a09

1-0182520/612/18277_
7.39967358706000.02.3774.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b5cf9514dcfd

1-0182520/644/17978_
7.391027458998620.02.5171.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e8e911840f617

1-0182520/588/18291_
7.39938057514320.02.2473.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0182520/569/18763_
7.41188455675560.02.2776.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/639/18428_
7.4060019058709610.02.4875.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/707/18485_
7.41159756088710.02.8975.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0182520/587/18137_
7.40632454364110.02.3674.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/725/17932_
7.404213650949060.03.0772.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8ec0f0b563520

1-0182520/667/18312_
7.41317054476500.02.7175.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0182520/712/18870_
7.40484454213630.02.7175.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/630/18444_
7.4126018659928760.02.2972.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/544/18420_
7.40513354445020.02.2274.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2f1a1893181a

1-0182520/589/18364_
7.4193554233990.0

Found on 2025-05-18 03:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2b3e1b926

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 16-May-2025 05:56:09 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  68 days 51 minutes 1 second
Server load: 0.93 1.71 1.97
Total accesses: 918153 - Total Traffic: 3.6 GB - Total Duration: 286491906
CPU Usage: u58.17 s102.56 cu283.37 cs155 - .0102% CPU load
.156 requests/sec - 662 B/second - 4238 B/request - 312.031 ms/request
1 requests currently being processed, 74 idle workers
______________________________W_________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0185700/341/17747_
4.3213453954085960.01.4370.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0185700/387/18373_
4.37204055795940.01.5474.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0185700/314/18719_
4.3713880360215300.01.2674.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0185700/346/17791_
4.36263465097900.01.3472.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/382/18186_
4.36368755510800.01.5773.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/344/17660_
4.36412553044510.01.3572.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_83f2add4edd73

0-0185700/427/18593_
4.3652173960258490.01.8375.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUiAs

0-0185700/364/18252_
4.364739052908620.01.5173.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15e555da999f9

0-0185700/454/18551_
4.3589627656440840.01.8174.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9UzkO

0-0185700/366/17956_
4.3557722358661180.01.4074.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0185700/395/18418_
4.321229354827960.01.5474.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0185700/375/18521_
4.339583253878080.01.5674.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c0331e8f7a55

0-0185700/352/18223_
4.331179254282020.01.3973.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0185700/458/18432_
4.36456356147800.01.8674.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab85f8a2a2736

0-0185700/296/17986_
4.33992156051780.01.4071.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0185700/409/17944_
4.331088754411920.01.6473.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/371/18199_
4.3584349856881860.01.5174.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PAmIa

0-0185700/447/17818_
4.35668660981420.01.7171.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/412/18091_
4.3574136458825880.01.6373.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vCCBi

0-0185700/392/18290_
4.371044954383720.01.4574.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0185700/417/17879_
4.378760113760.01.6572.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/390/18407_
4.3754455991190.01.5272.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0185700/359/18492_
4.36308656635320.01.4575.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/375/18499_
4.321448956858430.01.5675.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0185700/357/18221_
4.321208759168830.01.5972.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/421/18671_
4.811229258204240.01.6579.06
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/471/18300_
4.821028660942500.01.6972.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/460/18207_
4.811328856986990.01.8571.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/454/18452_
4.821201157676520.01.8371.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET / HTTP/1.1

1-0182520/397/18024_
4.8435357592550.01.8172.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4b5b1d7fef40

1-01825210/474/18293W
4.8400598783711.81.9574.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0182520/397/18240_
4.834491264401830.01.7975.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/351/18016_
4.84128658393390.01.3173.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/418/17752_
4.84176458669260.01.7371.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/359/18062_
4.8496457157580.01.4272.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/365/18559_
4.824564755249920.01.5575.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c93c1

1-0182520/404/18193_
4.82983158367440.01.6174.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0182520/449/18227_
4.833942955762150.01.8474.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0182520/347/17897_
4.82114739154033560.01.4273.06
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0182520/454/17661_
4.82812050419880.02.1071.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0182520/404/18049_
4.8265218354048670.01.7474.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c48f3b00450b7

1-0182520/469/18627_
4.82900153915650.01.9174.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0182520/431/18245_
4.82548659581160.01.6872.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0182520/345/18221_
4.82944154045370.01.4973.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0182520/354/18129_
4.83337553870760.01.3471.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.c

Found on 2025-05-16 05:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d28289da27

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 14-May-2025 06:30:36 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  66 days 1 hour 25 minutes 28 seconds
Server load: 7.46 2.73 1.57
Total accesses: 881533 - Total Traffic: 3.5 GB - Total Duration: 274000380
CPU Usage: u69.86 s107.15 cu259.52 cs141.4 - .0101% CPU load
.154 requests/sec - 655 B/second - 4243 B/request - 310.823 ms/request
2 requests currently being processed, 48 idle workers
____________________K_________W___________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-034800/1374/17226_
16.38643552524080.05.3568.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-034800/1420/17764_
16.39575653805850.05.3572.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-034800/1429/18216_
16.396194258658400.05.7872.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-034800/1474/17253_
16.40334062816880.05.8770.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-034800/1440/17611_
16.3785892153489740.05.7170.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-034800/1373/17138_
16.38773751351770.05.7870.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-034800/1423/17905_
16.39498056858920.05.5472.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1434/17658_
16.404111151285550.05.5171.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-034800/1448/17927_
16.42206054116770.05.4971.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1479/17353_
16.38795557002300.05.5972.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-034800/1431/17808_
16.42194053260560.05.3472.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-034800/1513/17957_
16.4214924251866090.05.8372.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec90Ci

0-034800/1416/17646_
16.42249352572460.05.7471.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9bf5432754820

0-034800/1517/17782_
16.41289053451110.05.8371.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1626/17506_
16.38740554733010.06.4969.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-034800/1518/17349_
16.42161052556090.06.3570.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1516/17612_
16.38825053460590.05.8971.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1490/17153_
16.4279058273610.05.6869.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-034800/1383/17498_
16.4235656309190.05.2771.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-034800/1359/17690_
16.37898552443730.05.0471.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-034805/1346/17294K
16.423058505226.65.3170.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server HTTP/1.1

0-034800/1545/17812_
16.40361454062910.06.0470.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-034800/1549/17934_
16.3870324055117890.05.6172.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9awkJ

0-034800/1312/17914_
16.3953422254159310.05.3372.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSSAkQ

0-034800/1509/17658_
16.39455756945660.05.7370.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1407/18026_
16.7816721756009980.06.3776.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec4XAr

1-033000/1543/17664_
16.71916859369920.05.9269.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-033000/1502/17567_
16.76215655184350.06.2869.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1445/17824_
16.7853055536530.05.5669.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-033000/1416/17442_
16.78951155234630.05.6570.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0330013/1485/17604W
16.7800578992624.26.5471.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-033000/1518/17665_
16.73715062593520.06.2573.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-033000/1499/17492_
16.73806556478110.06.3071.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-033000/1621/17154_
16.72846456867020.06.4468.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-033000/1407/17506_
16.75510055518250.05.2970.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-033000/1486/17988_
16.73783053000180.05.6272.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-033000/1395/17608_
16.75554456506200.05.6372.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-033000/1508/17588_
16.73755653526870.05.7571.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1456/17342_
16.75463052474120.05.4170.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-033000/1431/17040_
16.74635748449430.05.6469.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1620/17484_
16.74691451579970.06.0172.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-033000/1355/17959_
16.764463951171040.05.2971.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-033000/1356/17644_
16.76395658418940.05.1069.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1627/17709_
16.76275852472950.06.6271.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-033000/1364/17612_
16.7815517451807370.05.0369.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec4UAs

1-033000/1337/17459_
16.76302054402460.05.3170.98
<

Found on 2025-05-14 06:30

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d235adf998

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 02-May-2025 12:19:19 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  54 days 7 hours 14 minutes 11 seconds
Server load: 0.72 0.58 0.64
Total accesses: 704327 - Total Traffic: 2.8 GB - Total Duration: 218161931
CPU Usage: u55.01 s87.37 cu213.83 cs115.97 - .0101% CPU load
.15 requests/sec - 642 B/second - 4277 B/request - 309.745 ms/request
1 requests currently being processed, 49 idle workers
_______W__________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0321880/895/13690_
11.501399638848950.04.0855.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/794/14147_
11.481345142149420.03.2857.57
127.0.0.1http/1.1

0-0321880/870/14610_
11.5015163848798870.03.5958.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c502f40463155

0-0321880/992/13783_
11.501578750492200.04.2156.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/841/13968_
11.5279742450480.03.9256.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/913/13827_
11.501639740490470.03.8756.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/925/14422_
11.501278646005710.03.9859.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03218810/880/14238W
11.5200413438311.83.8157.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0321880/989/14563_
11.51115671945053740.04.6459.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0321880/882/13884_
11.501218646057170.04.2758.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/939/14349_
11.511098742156710.04.1358.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/1034/14538_
11.51859742898900.04.8259.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/910/14226_
11.51935843619990.04.6857.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0321880/990/14227_
11.51978643947350.04.3358.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/920/13866_
11.51799842173060.03.9755.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/802/13657_
11.5169743042088080.03.4556.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vOECF

0-0321880/876/14111_
11.514574342749630.04.0158.43
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0321880/995/13397_
11.51258645242350.04.3154.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/939/14015_
11.5221615345749210.04.2957.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0321880/806/14222_
11.51318742451480.03.3658.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/979/13838_
11.51558647331220.04.1956.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/971/14177_
11.52186842967510.03.9556.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0321880/1066/14372_
11.52204120842612720.04.5259.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyQ0or

0-0321880/902/14460_
11.51379642058740.03.8658.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/882/14054_
11.51619743391610.03.7656.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/956/14439_
11.73216144986380.04.1061.43
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0320820/935/14016_
11.711459645927010.04.1955.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/846/14009_
11.721038744107580.03.5855.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/1031/14235_
11.7211382343804000.04.6055.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_9ec86f8014867752b

1-0320820/921/14001_
11.71162486143700190.03.8856.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0320820/1011/14198_
11.721183046192820.04.2857.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1

1-0320820/935/14105_
11.73139650591120.05.1959.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/876/13874_
11.7294058842944890.03.9856.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSh7kpBA6

1-0320820/905/13546_
11.73919645070930.03.7654.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/884/14094_
11.711525043191450.03.8057.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/909/14257_
11.73738744071010.04.4858.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/898/14040_
11.73670843571240.04.2658.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0320820/946/14123_
11.73810041290320.03.9357.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/898/13794_
11.735664741598950.04.1957.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0320820/942/13592_
11.73335739020380.04.0755.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0320820/858/13813_
11.73498640594880.04.0057.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/989/14311_
11.73438641129950.04.1357.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/967/14198_
11.711668046484740.04.1056.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/868/13881_
11.7327935841380120.03.7356.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyY3by

1-0320820/918/14203_
11.721236041364200.03.9957.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/931/14019_
11.73198644657170.04.6857.54
127.0.0.1http/1.1ip-10-

Found on 2025-05-02 12:19

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d254ed2566

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 30-Apr-2025 11:00:06 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  52 days 5 hours 54 minutes 58 seconds
Server load: 2.54 0.94 0.71
Total accesses: 674023 - Total Traffic: 2.7 GB - Total Duration: 205722930
CPU Usage: u43.69 s79.31 cu213.83 cs115.97 - .01% CPU load
.149 requests/sec - 636 B/second - 4263 B/request - 305.216 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0321880/354/13149_
3.951085735965040.01.6352.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/272/13625_
3.941265739451230.00.9955.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/282/14022_
3.9412143546302350.01.1655.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0321880/335/13126_
3.98245046882750.01.3953.73
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0321880/318/13445_
3.9865740394740.01.3453.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-03218810/283/13197W
3.9800376672611.81.2454.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0321880/285/13782_
3.95104917943354900.01.3657.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec89mw

0-0321880/278/13636_
3.951145638640640.01.1155.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/381/13955_
3.941193040831200.02.2156.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0321880/259/13261_
3.951017144081980.00.9855.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0321880/371/13781_
3.95845739702830.01.6856.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/341/13845_
3.959821039597290.01.8456.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0321880/332/13648_
3.9594121641242690.01.5554.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BVw

0-0321880/381/13618_
3.95725741214800.01.7755.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/333/13279_
3.97485040319320.01.4753.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0321880/230/13085_
3.95605740038480.01.0553.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/259/13494_
3.9746724840327920.01.0555.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PC8EY

0-0321880/378/12780_
3.974223042810180.01.7551.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0321880/308/13384_
3.97333043299510.01.6755.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0321880/288/13704_
3.97356040811430.01.2456.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0321880/335/13194_
3.97380745488980.01.5253.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0321880/390/13596_
3.98292140222300.01.5353.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0321880/444/13750_
3.98185740429600.01.6756.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0321880/287/13845_
3.982634139126820.01.3256.10
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0321880/298/13470_
3.9733410741575480.01.2753.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0320820/324/13807_
4.101205642769380.01.4358.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/268/13349_
4.121056043059480.01.2052.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/327/13490_
4.12965741688970.01.3952.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/319/13523_
4.121025642049090.01.6152.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/341/13421_
4.12997041496250.01.4054.06
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0320820/375/13562_
4.12905743099970.01.7154.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/346/13516_
4.14344047510210.02.2456.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0320820/279/13277_
4.12665740954850.01.3454.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/307/12948_
4.12492143208990.01.3752.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0320820/318/13528_
4.12785741397650.01.4655.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/277/13625_
4.1341280940874780.01.6655.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0320820/351/13493_
4.12545641659170.01.6555.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/332/13509_
4.134534439237000.01.4355.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0320820/262/13158_
4.14334039272290.01.1454.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0320820/318/12968_
4.1525117336979070.01.3852.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0320820/299/13254_
4.13365738547100.01.3655.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/319/13641_
4.14305738777710.01.2755.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/381/13612_
4.155644629900.01.6453.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/313/13326_
4.15245638784270.01.3954.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0320820/327/13612_
4.101224038272040.01.4654.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0320820/260/13348_
4.10130121341334440.01.6254.48

Found on 2025-04-30 11:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2e47a2631

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 28-Apr-2025 12:21:00 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  50 days 7 hours 15 minutes 52 seconds
Server load: 1.50 1.30 1.20
Total accesses: 645289 - Total Traffic: 2.5 GB - Total Duration: 192865324
CPU Usage: u56.19 s83.28 cu189.79 cs104.28 - .00998% CPU load
.148 requests/sec - 628 B/second - 4235 B/request - 298.882 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0167470/1119/12545_
14.27679633495500.04.6649.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1011/13049_
14.27656436500620.04.5952.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1022/13489_
14.27589443198280.04.0853.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1086/12542_
14.27606444820490.04.3551.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1226/12916_
14.27535538034880.04.9451.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1072/12683_
14.27507435273460.04.4551.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbfec6e61e1c2

0-0167470/1112/13220_
14.2756719440862610.06.0454.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1210/13140_
14.27480736685960.04.7652.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/942/13338_
14.28380339066770.03.7453.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c82b6d72a888e

0-0167470/1082/12706_
14.28360740702350.04.6253.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/1158/13166_
14.27460837831500.04.9353.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0167470/1223/13249_
14.27436737585450.05.4653.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0167470/1230/13059_
14.28328280338968920.04.9551.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1247/12961_
14.28403439006860.05.9152.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6dc69efa659e

0-0167470/1186/12699_
14.28300738389020.04.8150.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/986/12587_
14.28239337115970.04.7450.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3b82d885533c6

0-0167470/1057/13005_
14.28275336543190.04.5953.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b3f072038cf35

0-0167470/1094/12163_
14.28202339054300.04.1048.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c9b9acd5aa18

0-0167470/1143/12802_
14.28179640510090.04.8952.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/928/13164_
14.2860637675570.04.1554.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/1054/12598_
14.2885043451950.04.4751.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0167470/1151/12962_
14.27708337808490.04.5451.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_00989bf851dc0

0-0167470/1052/13113_
14.28740537177380.04.7053.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7JBAIN

0-0167470/1167/13269_
14.27729537118710.04.4953.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0167470/1099/12995_
14.2763019138815070.04.7251.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1384/13199_
14.5352021040448760.06.7755.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c13YZ

1-0162940/1128/12820_
14.52615441652800.04.7750.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a8d53209a6e7

1-0162940/1074/12980_
14.51688339949940.04.3150.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1f90b6f23b1b1

1-0162940/994/12953_
14.51644038935510.03.8849.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0162940/1045/12825_
14.51720937985540.04.4051.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/1085/12904_
14.53120740859730.04.1051.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/1174/12882_
14.52547344781130.04.8352.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_67bdb6e947789

1-0162940/1087/12722_
14.52597438791040.04.8451.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3175b000658a1

1-0162940/1106/12425_
14.52580340828680.05.4450.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bda0b3b5975b9

1-0162940/1075/12902_
14.5341920238966610.04.6652.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1092/13047_
14.5349219438507180.04.7452.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1135/12852_
14.53466639874530.05.0352.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1075/12966_
14.53343336800510.04.6452.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_81db12e25c488

1-0162940/1040/12647_
14.53442437615000.04.2052.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82b8da33df1ea

1-0162940/1102/12390_
14.53367434321330.05.1050.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1228/12746_
14.53294435737200.05.6252.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1048/13059_
14.53390436518710.04.4952.10
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1100/12984_
14.53256104541208040.04.3351.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0162940/1233/12762_
14.53214435828750.05.3851.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%

Found on 2025-04-28 12:20

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d29c08363b

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 26-Apr-2025 15:02:00 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  48 days 9 hours 56 minutes 52 seconds
Server load: 0.90 0.84 0.72
Total accesses: 616039 - Total Traffic: 2.4 GB - Total Duration: 185199108
CPU Usage: u45.2 s75.7 cu189.79 cs104.28 - .00992% CPU load
.147 requests/sec - 623 B/second - 4230 B/request - 300.629 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0167470/509/11935_
6.9716103031923600.02.1747.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a758cb9a255f

0-0167470/489/12527_
6.971499635401930.02.0450.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/450/12917_
6.971379741715680.01.9851.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/522/11978_
6.971679643271310.02.0548.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/608/12298_
6.971259636751010.02.5348.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/467/12078_
6.971139633849050.02.1049.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/485/12593_
6.98998039248540.02.6351.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST / HTTP/1.1

0-0167470/592/12522_
6.981079635575140.02.3650.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/473/12869_
6.988933837187530.01.8451.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_df4d4734f4f03

0-0167470/470/12094_
6.98779739264550.02.0750.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/624/12632_
6.98659636553820.02.4650.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/591/12617_
6.98539736365380.02.5450.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/582/12411_
6.98359637405170.02.3349.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/618/12332_
6.98479737240250.03.3449.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/558/12071_
6.98303036258320.02.2248.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /.git/config HTTP/1.1

0-0167470/482/12083_
6.9859736023460.02.7448.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/510/12458_
6.98179834888950.02.5151.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/596/11665_
6.962339638060580.02.0546.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/538/12197_
6.962459639324590.02.3149.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/409/12645_
6.962039735827490.01.5951.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/432/11976_
6.962159641994750.01.8048.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/492/12303_
6.962279635599820.01.9048.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/498/12559_
6.971739735725360.02.5951.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/615/12717_
6.971919735596120.02.3251.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/472/12368_
6.971799637693280.02.2649.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/726/12541_
7.3717823438732190.03.7952.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02a3ef2f5b854

1-0162940/527/12219_
7.372099740162480.02.5247.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/591/12497_
7.372219638885970.02.3648.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/452/12411_
7.372399637414390.01.7647.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/472/12252_
7.3722964736010260.02.0548.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0162940/579/12398_
7.39239739778260.02.1549.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/543/12251_
7.3716963942970890.02.2050.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0162940/543/12178_
7.371979737630920.02.6449.44
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/550/11869_
7.371859639290630.03.1547.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/492/12319_
7.371559637340780.02.2949.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/488/12443_
7.371619837074620.02.0650.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/446/12163_
7.371439638237250.02.3350.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/559/12450_
7.371199635431670.02.5350.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/494/12101_
7.371319636037440.02.0449.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/476/11764_
7.3710964232989640.02.2947.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0162940/522/12040_
7.371019633822400.02.8350.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/514/12525_
7.38839635155300.02.3749.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/486/12370_
7.38959638209940.01.8848.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/640/12169_
7.38719734052810.03.0349.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/553/12362_
7.38599733973990.02.2749.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/580/12266_
7.3841963606

Found on 2025-04-26 15:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d22ddf4d32

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 24-Apr-2025 18:55:06 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  46 days 13 hours 49 minutes 58 seconds
Server load: 0.56 0.64 0.78
Total accesses: 601430 - Total Traffic: 2.4 GB - Total Duration: 182579848
CPU Usage: u39.34 s70.65 cu189.79 cs104.28 - .01% CPU load
.149 requests/sec - 632 B/second - 4231 B/request - 303.576 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0167470/230/11656_
3.37143010731602640.01.0646.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2f578b54f01bf

0-0167470/250/12288_
3.371325735046950.01.1449.10
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/204/12671_
3.371265541350700.01.0050.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/273/11729_
3.371625542856570.01.1147.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/324/12014_
3.371145536170780.01.4347.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/206/11817_
3.371025533253650.01.0048.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/235/12343_
3.37965538826160.01.7650.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/271/12201_
3.37845635054150.01.1649.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/236/12632_
3.38725536773200.00.8950.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/220/11844_
3.38665538727930.01.0649.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/285/12293_
3.38545436053810.01.2149.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/243/12269_
3.38425536123720.01.2148.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/276/12105_
3.39185536739670.01.1148.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/251/11965_
3.38305636695820.01.6348.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/197/11710_
3.39804835714220.00.8446.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0167470/206/11807_
3.362405535294720.01.2047.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/213/12161_
3.395534252370.01.0949.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/215/11284_
3.372225537357730.00.8345.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/245/11904_
3.3723054538653180.01.0448.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0167470/182/12418_
3.371925635289380.00.7350.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/171/11715_
3.3720275041526640.00.7747.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec9eda028f30d

0-0167470/212/12023_
3.372105535029600.00.9447.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/214/12275_
3.371505535349500.01.0750.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/214/12316_
3.371865534953950.00.9950.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0167470/222/12118_
3.371745637105500.01.2948.40
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/350/12165_
3.8712814637913460.01.9251.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0162940/235/11927_
3.871565639679560.01.0746.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/240/12146_
3.871445438417370.01.1447.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/249/12208_
3.871805636916000.01.0347.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/236/12016_
3.871685635482720.01.0647.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/229/12048_
3.872165539379170.00.8348.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/282/11990_
3.871205442484920.01.1849.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/251/11886_
3.871385537157770.01.6548.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/247/11566_
3.871085538428530.01.5846.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/235/12062_
3.87905536650950.01.2948.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/250/12205_
3.8710073036638580.01.0949.06
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad7c682aecaab

1-0162940/187/11904_
3.876823637927140.01.2348.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0162940/291/12182_
3.87605534818770.01.4349.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/222/11829_
3.87785535572610.00.9748.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/279/11567_
3.87485532480410.01.5646.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/259/11777_
3.87245533052940.01.4848.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/193/12204_
3.87125534863640.01.1048.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/225/12109_
3.87365637844900.00.9647.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0162940/284/11813_
3.8765433553010.01.6648.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-01629410/205/12014W
3.8800335803911.80.9147.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0162940/212/11898_
3.8623

Found on 2025-04-24 18:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d290bb85dc

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 22-Apr-2025 11:47:52 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  44 days 6 hours 42 minutes 44 seconds
Server load: 0.63 0.83 0.98
Total accesses: 539476 - Total Traffic: 2.1 GB - Total Duration: 166262993
CPU Usage: u48.78 s73.89 cu158.15 cs86.16 - .00959% CPU load
.141 requests/sec - 599 B/second - 4248 B/request - 308.193 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________________W____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-048650/863/10454_
12.6016428836310.03.5641.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/960/10824_
12.60186330175110.04.3043.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ac7c8d8b9b8f

0-048650/990/11240_
12.60103337673190.03.9245.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc339a5db6419

0-048650/918/10532_
12.60242238499550.03.9043.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9ea23448730d3

0-048650/885/10832_
12.60131233508400.03.5743.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6ac5658b6aeb2

0-048650/911/10661_
12.6044153230967450.04.4043.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/1053/11319_
12.59651536854310.04.1845.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/976/10781_
12.59387433329170.05.2344.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/1045/11029_
12.6025823332665040.05.0644.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/942/10735_
12.59352533588750.04.2445.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/987/10818_
12.60290332063830.04.0144.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/906/10898_
12.6033221932623280.03.4743.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/745/10752_
12.6015112133685980.02.7543.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6fced3f52baf1

0-048650/895/11042_
12.60213334343570.03.6443.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5f49bc59d189b

0-048650/901/10800_
12.59412533731710.03.5143.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/903/10819_
12.6065233315740.03.5443.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5fe5927c40a4d

0-048650/1019/10986_
12.5971026631433820.04.2945.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BSb

0-048650/823/10256_
12.59689035548510.02.9041.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-048650/879/10694_
12.5966919434456200.03.7743.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/932/11008_
12.59584332673380.03.9145.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6f6c469c0b6b9

0-048650/924/10504_
12.59610334838830.03.4843.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/963/10559_
12.59452532894110.03.9042.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/937/10876_
12.5948621231230590.03.8144.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/920/10846_
12.59516432610480.03.8944.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/1090/11044_
12.59550033783850.04.1944.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-048120/857/10821_
12.56592534787260.03.8245.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/1064/10664_
12.5639618637209120.04.2042.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-048120/854/10868_
12.5657021434806770.03.2742.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/965/10722_
12.56469332520740.03.8341.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_100ef8f523842

1-048120/1003/10649_
12.56527331220450.04.1243.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_20d3dfc26f773

1-048120/995/11027_
12.57315336877590.03.9943.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_172035a1b4ad5

1-048120/981/10708_
12.56432435674870.03.9343.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_51e134af1614c

1-048120/1001/10562_
12.57360334074390.04.2543.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/868/10573_
12.57277333539010.03.7341.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f97dccd683dbe

1-048120/984/10571_
12.572481132222020.04.8543.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/964/11086_
12.573461133536350.03.9044.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7617d854ef807

1-048120/1016/10785_
12.57172634282990.04.0644.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/840/10858_
12.57229331336600.03.2944.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/931/10959_
12.57140332909490.03.7244.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/973/10521_
12.57200329529660.04.3142.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/917/10521_
12.58111529397900.04.2143.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/860/10817_
12.5882532709780.03.9743.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-048120/932/10948_
12.5825206535213870.03.9643.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-048120/890/10563_
12.54682231480110.03.7842.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4b4560b922cdb

1-048120/958/108

Found on 2025-04-22 11:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d253fcf224

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 21-Apr-2025 02:17:09 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  42 days 21 hours 12 minutes 1 second
Server load: 1.03 0.95 0.95
Total accesses: 509801 - Total Traffic: 2.0 GB - Total Duration: 158087257
CPU Usage: u36.88 s66.02 cu158.15 cs86.16 - .00937% CPU load
.138 requests/sec - 582 B/second - 4235 B/request - 310.096 ms/request
1 requests currently being processed, 49 idle workers
____________________________________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-048650/363/9954_
4.3915109927655600.01.4139.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgIN

0-048650/409/10273_
4.3979128216490.01.9841.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-048650/358/10608_
4.3957036260330.01.4743.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-048650/301/9915_
4.38398735898260.01.1940.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-048650/331/10278_
4.39128532011100.01.3040.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/369/10119_
4.399530121580.02.1841.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/388/10654_
4.37789535022870.01.3242.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/303/10108_
4.38429530929590.01.5340.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/393/10377_
4.385143430969170.01.3241.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-048650/369/10162_
4.38308532158530.01.5643.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/336/10167_
4.383764930591710.01.2641.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-048650/332/10324_
4.38249631323680.01.2741.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/291/10298_
4.38189531010750.01.0641.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/296/10443_
4.3916280432293850.01.1741.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-048650/335/10234_
4.38549532297000.01.2541.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/292/10208_
4.3923431758490.01.1640.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5KthK

0-048650/370/10337_
4.361209530105270.01.2742.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/303/9736_
4.361328534347630.01.0439.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/319/10134_
4.361089533316450.01.1341.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/292/10368_
4.37849530538030.01.0842.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/330/9910_
4.3610101533528470.01.1941.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-048650/334/9930_
4.37968530532780.01.1939.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/374/10313_
4.386063629895200.01.5042.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-048650/382/10308_
4.37669730424190.01.8342.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-048650/394/10348_
4.3858888432507980.01.4041.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-048120/331/10295_
4.3359821933484340.01.1942.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2Bdx

1-048120/407/10007_
4.3548748435446070.01.4739.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fZLNTuswEIX3SLxD5H2cN

1-048120/345/10359_
4.33728532502860.01.2740.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/305/10062_
4.336191031216680.01.1539.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/330/9976_
4.33908529360080.01.3540.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/373/10405_
4.33554133887560.01.3841.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-048120/352/10079_
4.35529133827770.01.3141.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-048120/351/9912_
4.354033432240220.01.3940.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/305/10010_
4.35366032301460.01.5639.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-048120/352/9939_
4.352833630696540.01.8340.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/378/10500_
4.35381132183530.01.5242.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-048120/346/10115_
4.351343832508100.01.3941.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/322/10340_
4.3634136630159840.01.1842.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcAUM37

1-048120/354/10382_
4.352053530950440.01.4142.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-048120/309/9857_
4.351744528116230.01.2639.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-048120/306/9910_
4.3679527671150.01.1740.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-048120/353/10310_
4.3669530331880.01.4140.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-048120/355/10371_
4.3616114633817440.01.8041.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyUbw

1-048120/341/10014_
4.331269630472330.01.3739.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0481210/325/10208W
4.3600300873211.81.1740.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-048120/303/10206_
4.3614184631930280.01.0041.39
12

Found on 2025-04-21 02:17

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2f77658ed

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 18-Apr-2025 16:27:54 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  40 days 11 hours 22 minutes 46 seconds
Server load: 0.31 0.63 0.78
Total accesses: 492292 - Total Traffic: 1.9 GB - Total Duration: 154070906
CPU Usage: u46.11 s69.56 cu141.51 cs75.54 - .00951% CPU load
.141 requests/sec - 596 B/second - 4238 B/request - 312.967 ms/request
2 requests currently being processed, 48 idle workers
_______________W_____________________________K____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083870/1050/9584_
13.37352327105430.03.5937.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77b19d561917b

0-083870/1030/9852_
13.37367227702900.03.6939.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8d95568d55fde

0-083870/1234/10242_
13.37336235726270.04.5741.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1990924c8c78b

0-083870/1166/9608_
13.37316234021100.04.1739.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e72a55c863935

0-083870/1308/9941_
13.3729116631311210.04.5039.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1133/9742_
13.37254329692130.04.0339.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1169/10257_
13.372403434283580.04.1041.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1333/9795_
13.3814118630404070.05.1039.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1296/9976_
13.3822118230567070.04.7539.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1249/9786_
13.38201330367150.04.4741.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1175/9824_
13.381723430033660.04.9040.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1246/9986_
13.39993430566260.04.1640.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1231/9997_
13.39122330327600.04.5040.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1208/10137_
13.397420331655860.04.1540.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1241/9889_
13.3950331104980.04.4139.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0838710/1171/9895W
13.3900309257813.94.4739.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-083870/1144/9959_
13.39193729039100.03.8540.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1234/9424_
13.37469733519350.04.5638.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1181/9804_
13.374915232787120.04.1739.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db68f7837a96c

0-083870/1056/10067_
13.3743720229691190.03.7941.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1124/9570_
13.3751519233043750.04.3139.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1032/9588_
13.37399229786930.03.6338.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d638dd030a12

0-083870/1002/9925_
13.37419327953200.03.4740.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/1233/9918_
13.37273329641170.04.6140.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/992/9944_
13.37387230877920.03.3440.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4c7337712648

1-082570/1276/9957_
13.64207232985870.04.8241.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2be30a0ec23b9

1-082570/1090/9595_
13.658434083090.03.8937.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57b2d8779edef

1-082570/1087/10009_
13.64162331716740.03.8539.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c7a2cf1036742

1-082570/1119/9737_
13.6529330930090.03.8437.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6ff091905da70

1-082570/1081/9638_
13.64131228022140.04.1338.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9e55b6096260b

1-082570/1211/10023_
13.64186231889670.04.3339.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_abeede18e9ce0

1-082570/1103/9718_
13.64457233377940.04.2639.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8cb8a5139208

1-082570/1120/9556_
13.643043530939460.03.9838.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-082570/1097/9698_
13.64263231927910.04.0138.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2cf442799c23

1-082570/1310/9582_
13.64113329977690.05.0638.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_21320d92a1ba0

1-082570/1380/10116_
13.6565331716070.04.9640.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_415d167375c1a

1-082570/1247/9764_
13.6492231891100.04.4840.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_824b8d46eb17d

1-082570/1197/10011_
13.64229329521350.04.2840.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d649dd1ab3218

1-082570/1127/10023_
13.64247230299570.04.5641.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a097216f32a1b

1-082570/1051/9538_
13.64281727474250.03.7637.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_229c05446865e

1-082570/1279/9596_
13.64413727336000.04.3838.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/1171/9947_
13.64343429607510.04.3639.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-082570/1224/10004_
13.64326333017410.04.4839.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-082570/1176/9663_
13.63485230057920.04.1538.47
127.0.0.1http/1.1ip-10-1

Found on 2025-04-18 16:27

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d200b72f20

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 16-Apr-2025 17:07:50 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  38 days 12 hours 2 minutes 42 seconds
Server load: 1.14 1.11 0.92
Total accesses: 476475 - Total Traffic: 1.9 GB - Total Duration: 151636383
CPU Usage: u40.03 s63.76 cu141.51 cs75.54 - .00964% CPU load
.143 requests/sec - 609 B/second - 4254 B/request - 318.246 ms/request
1 requests currently being processed, 49 idle workers
_____________________________________W____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083870/783/9317_
9.70290526433160.02.7036.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/733/9555_
9.70317327182400.02.7238.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2be6d3dd55224

0-083870/846/9854_
9.70410535003060.03.0740.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/896/9338_
9.7050533702030.03.1738.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/869/9502_
9.70230530408730.02.9738.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/818/9427_
9.682210629467520.03.0138.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/826/9914_
9.682270533932690.02.8840.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/947/9409_
9.6920463929689090.03.8338.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/1002/9682_
9.691970530237220.03.7838.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/863/9400_
9.6921325529825550.03.1340.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_234d733425b9d

0-083870/855/9504_
9.691850529483960.03.7439.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/857/9597_
9.691730630185460.02.9139.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/896/9662_
9.691610529308090.03.2039.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/890/9819_
9.691430631323390.03.1939.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/892/9540_
9.691490530486930.03.1438.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/864/9588_
9.691189530379060.03.3938.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/786/9601_
9.691310528558650.02.6839.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/855/9045_
9.691070633317420.03.2937.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/905/9528_
9.698463832284970.03.1838.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/825/9836_
9.69770529337110.02.8840.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/828/9274_
9.69950532685100.02.8938.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/776/9332_
9.70475329292280.02.7637.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/739/9662_
9.69650527314930.02.5340.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/897/9582_
9.70110529051810.03.3539.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/719/9671_
9.70590630400640.02.4539.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/854/9535_
9.942030532577180.03.2839.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/795/9300_
9.951250533775840.02.9036.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/820/9742_
9.941910631254690.02.8238.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/838/9456_
9.951370530264880.02.9837.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/788/9345_
9.941790627418320.02.7437.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/904/9716_
9.942090631586020.03.2638.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/825/9440_
9.95830533118500.03.3038.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/845/9281_
9.96170530470050.02.9937.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/810/9411_
9.96904431075610.03.0037.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/975/9247_
9.9414464229687820.03.8537.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/967/9703_
9.941550531229380.03.5839.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/969/9486_
9.941670531614710.03.4739.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0825710/777/9591W
9.9600290194311.82.6639.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-082570/815/9711_
9.942150630046200.03.3039.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/782/9269_
9.942242026792720.02.8737.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-082570/871/9188_
9.95470526858300.03.1337.64
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/843/9619_
9.952466329032500.03.1238.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/983/9763_
9.953065732636540.03.6239.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d2fa955e0c696

1-082570/877/9364_
9.95890529742620.03.1137.43
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/883/9509_
9.951130729102380.03.3638.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/849/9617_
9.951010531000010.03.0938.99
127.0.0.1http/1.1

Found on 2025-04-16 17:07

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d23b6b3e39

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 14-Apr-2025 17:18:45 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  36 days 12 hours 13 minutes 37 seconds
Server load: 1.52 0.94 0.75
Total accesses: 461773 - Total Traffic: 1.8 GB - Total Duration: 148969826
CPU Usage: u34.04 s57.79 cu141.51 cs75.54 - .00979% CPU load
.146 requests/sec - 624 B/second - 4263 B/request - 322.604 ms/request
1 requests currently being processed, 49 idle workers
_________________W________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083870/503/9037_
6.121424525744180.01.6835.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/513/9335_
6.121844526805480.01.9337.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/566/9574_
6.1215014733916320.01.9838.94
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/630/9072_
6.131244533184440.02.1937.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/560/9193_
6.131124529874270.01.8737.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/568/9177_
6.141004528936040.02.0537.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/566/9654_
6.149007633472540.01.9139.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/631/9093_
6.147575129237370.02.7036.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/675/9355_
6.146534529729640.02.4637.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/574/9111_
6.14824629488370.02.0139.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/526/9175_
6.14584629074180.02.0437.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/543/9283_
6.14464529823870.01.7737.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/500/9266_
6.14524728809710.01.8137.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/615/9544_
6.143003230809450.02.2038.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-083870/546/9194_
6.14404529928600.01.8737.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/539/9263_
6.14104529878470.02.0137.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/541/9356_
6.14224428222600.01.8738.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0838710/548/8738W
6.1400327873911.82.1036.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-083870/542/9165_
6.122084431762120.01.9837.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/549/9560_
6.122012528717140.01.8639.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/501/8947_
6.122144532125250.01.7937.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/521/9077_
6.121724528860550.01.8136.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/507/9430_
6.121964527014980.01.7539.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/609/9294_
6.131316028381500.02.1938.33
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

0-083870/483/9435_
6.121604530086270.01.6838.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/585/9266_
6.251064532296220.02.1938.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/490/8995_
6.27344533212270.01.7335.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/531/9453_
6.25764530523730.01.8037.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/576/9194_
6.274233429619140.01.9436.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/510/9067_
6.26644526927320.01.8036.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/574/9386_
6.25884430927030.02.0237.66
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/530/9145_
6.251784532394280.02.0537.51
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/581/9017_
6.251484430007660.02.0136.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/572/9173_
6.251364530872800.02.1236.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/592/8864_
6.274705829373000.02.1635.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-082570/542/9278_
6.256995030848700.02.0837.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-082570/568/9085_
6.265413730590330.02.1537.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/501/9315_
6.251304628536140.01.7238.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/553/9449_
6.25944529805590.02.3138.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/516/9003_
6.251184525942580.01.7836.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/579/8896_
6.251904526255550.02.0836.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/584/9360_
6.251544528391070.02.1337.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/689/9469_
6.251664431874060.02.3737.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/539/9026_
6.27164629235370.01.8036.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/577/9203_
6.27284528348710.02.2337.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/592/9360_
6.2744630489490.02.1238.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.c

Found on 2025-04-14 17:18

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d24fd35581

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 12-Apr-2025 23:47:29 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  34 days 18 hours 42 minutes 21 seconds
Server load: 0.37 0.61 0.65
Total accesses: 448019 - Total Traffic: 1.8 GB - Total Duration: 146980170
CPU Usage: u29.03 s52.96 cu141.51 cs75.54 - .00995% CPU load
.149 requests/sec - 637 B/second - 4277 B/request - 328.067 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-083870/283/8817_
3.07888325125180.00.9135.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/257/9079_
3.07979326301780.00.9336.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/295/9303_
3.07915116233722350.00.9837.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/257/8699_
3.07866232734700.00.9136.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0ee9917d2169e

0-083870/255/8888_
3.08851229662090.00.8435.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_150a9d3cf8245

0-083870/280/8889_
3.08808528565600.00.9336.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/334/9422_
3.08688533211000.01.1338.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/332/8794_
3.08670028837940.01.1735.44
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-083870/329/9009_
3.08604029293840.01.2736.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-083870/293/8830_
3.08508529028040.01.0038.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/295/8944_
3.08388628723570.01.0836.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/273/9013_
3.08262229309630.00.8736.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/246/9012_
3.08208528481580.00.9236.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/317/9246_
3.08148530439530.01.0637.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/277/8925_
3.0828529177100.00.9836.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/282/9006_
3.071145329242520.00.9936.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/271/9086_
3.071168527650530.00.9038.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/323/8513_
3.071133332381350.01.2635.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/258/8881_
3.071079331397480.00.9336.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/284/9295_
3.071065328204930.01.0638.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/235/8681_
3.071108531923090.00.8536.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-083870/249/8805_
3.071026176828539770.00.8635.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/245/9168_
3.071010326546100.00.8138.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-083870/308/8993_
3.07958328183690.01.1137.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd86f81b827e2

0-083870/247/9199_
3.07995329914300.00.8737.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-082570/306/8987_
3.20628531929220.01.0637.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/247/8752_
3.191138232699610.00.9034.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_264421aa8ed23

1-082570/275/9197_
3.211844230182130.00.9836.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0825712/227/8845W
3.2200293641622.30.7434.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-082570/242/8799_
3.21225826679580.00.8435.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/298/9110_
3.20568530516320.01.0936.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/274/8889_
3.20928531920880.01.0236.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/329/8765_
3.20878229619490.01.1136.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_afb80db5f4801

1-082570/266/8867_
3.20748530592830.00.9635.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/323/8595_
3.191157229029320.01.3034.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74e05b380af83

1-082570/298/9034_
3.20328530551040.01.1436.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/279/8796_
3.2188530009840.00.9936.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/236/9050_
3.208241328266780.00.8137.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-082570/248/9144_
3.20448629054670.01.2237.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-082570/255/8742_
3.20670125434660.00.8535.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_41063e0d0c9dd

1-082570/264/8581_
3.20969325968000.00.9835.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgIH

1-082570/346/9122_
3.20859427847740.01.2736.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-082570/418/9198_
3.20905331647300.01.4736.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b5851d5853e3

1-082570/263/8750_
3.191124328874200.00.8235.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa97984591319

1-082570/284/8910_
3.191087327973340.01.0335.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cG

Found on 2025-04-12 23:47

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d20f89c454

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 10-Apr-2025 16:59:39 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  32 days 11 hours 54 minutes 32 seconds
Server load: 0.53 0.56 0.60
Total accesses: 430147 - Total Traffic: 1.7 GB - Total Duration: 144358705
CPU Usage: u37.7 s56.1 cu126.36 cs65.99 - .0102% CPU load
.153 requests/sec - 658 B/second - 4297 B/request - 335.603 ms/request
1 requests currently being processed, 49 idle workers
________________________________________________W_..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136150/983/8456_
11.671178724598000.03.5433.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/979/8753_
11.673553826058660.03.6235.39
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136150/938/8918_
11.67758633313540.03.3536.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/945/8368_
11.6614186432167110.03.4835.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3391021d1ceb3

0-0136150/1044/8551_
11.679554529056170.03.7734.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136150/1011/8534_
11.671059628147850.03.6334.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/993/9016_
11.65197026532323400.03.5736.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0136150/1006/8373_
11.651599727956200.03.3333.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1001/8605_
11.651779728686490.03.4834.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/939/8480_
11.651898628636000.03.9136.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1090/8600_
11.651675528298530.04.3735.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136150/986/8672_
11.651539628916760.03.4635.81
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1077/8692_
11.671299727976180.04.0135.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1029/8866_
11.6521555129725800.03.7735.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136150/961/8548_
11.652079628557530.03.8135.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1004/8664_
11.652318628795650.03.5434.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/956/8727_
11.652439727134730.03.4036.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/952/8127_
11.67159731870640.03.4633.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/981/8551_
11.652235730866420.03.3835.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1124/8917_
11.67459627893050.04.0337.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1116/8368_
11.67279631481700.04.1535.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1030/8479_
11.675553628200160.04.0834.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a53b3cab2c3db

0-0136150/979/8863_
11.67639726176510.03.4437.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1064/8633_
11.6738627730190.03.7835.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/1104/8847_
11.67879629230670.03.8736.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1034/8620_
11.232379631479750.03.6636.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1005/8413_
11.2599732115860.03.3933.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1010/8836_
11.232199729288740.03.3235.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1025/8540_
11.232258728505810.03.4533.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/995/8496_
11.25519726330200.03.5134.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/963/8733_
11.241239730068530.03.3435.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1005/8563_
11.241359731189910.03.4735.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1095/8342_
11.241659729216750.04.2434.53
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1053/8545_
11.25578730272020.03.7934.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/958/8189_
11.24999628282840.03.4333.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1080/8662_
11.25699730275880.03.7235.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/926/8436_
11.25398829603720.03.2935.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1047/8756_
11.232139727667490.03.7136.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1014/8834_
11.241119728682670.03.5436.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1005/8408_
11.253391125035160.03.7733.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1028/8253_
11.231718725518690.03.7534.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/990/8691_
11.231959827397210.03.4434.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1000/8712_
11.231839731051150.03.4635.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/942/8384_
11.2415554128201960.03.4233.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0135470/1106/8572_
11.25218727287560.03.5934.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/1034/869

Found on 2025-04-10 16:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d23fe650ea

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 06-Apr-2025 16:31:38 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  28 days 11 hours 26 minutes 30 seconds
Server load: 0.82 0.87 0.89
Total accesses: 388791 - Total Traffic: 1.6 GB - Total Duration: 136065135
CPU Usage: u23.05 s43.2 cu126.36 cs65.99 - .0105% CPU load
.158 requests/sec - 687 B/second - 4352 B/request - 349.97 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136150/198/7671_
2.161086523106730.00.7231.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136150/137/7911_
2.177743823490740.00.5032.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2af1c910e3867

0-0136150/170/8150_
2.17878731642730.00.6333.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/176/7599_
2.171058630883840.00.6032.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/220/7727_
2.17698627558800.00.8531.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/232/7755_
2.17997626581050.00.7332.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/188/8211_
2.161169530541220.00.6333.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_00f5275db103a

0-0136150/186/7553_
2.16110917225796380.00.6031.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136150/157/7761_
2.161224427251570.00.5431.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_994660d3d7c6f

0-0136150/156/7697_
2.161252926967140.00.8633.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136150/223/7733_
2.161276626173950.00.7631.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136150/182/7868_
2.161201327251020.00.6733.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5aa902252b03c

0-0136150/179/7794_
2.17817626106010.00.5932.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/184/8021_
2.16133619327854950.00.6932.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136150/188/7775_
2.161298727187850.01.0432.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/210/7870_
2.161358727416460.00.8032.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/172/7943_
2.18158725051990.00.6533.63
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/164/7339_
2.17218730293380.00.5630.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/184/7754_
2.1837729532430.00.6632.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/169/7962_
2.17518625879070.00.5734.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/206/7458_
2.176641129888780.00.7531.85
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0136150/179/7628_
2.17444726848290.00.5831.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/125/8009_
2.174741025102910.00.4634.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136150/184/7753_
2.17338726070450.00.6932.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0136150/179/7922_
2.17590327339780.00.6933.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/186/7772_
2.031237429737320.00.6033.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/203/7611_
2.03126619830579540.00.7230.87
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/201/8027_
2.031101527995150.00.6232.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d258a80221e8d

1-0135470/191/7706_
2.031216426533310.00.5931.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/175/7676_
2.031323325075800.00.6531.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_deaebea05a4fd

1-0135470/178/7948_
2.04398628759890.00.5532.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/205/7763_
2.04577829353770.00.7232.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/188/7435_
2.03869127549260.00.6130.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0135470/199/7691_
2.04638727257120.00.7430.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/140/7371_
2.04458726208290.00.4530.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-01354710/196/7778W
2.0500288607013.50.7032.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0135470/186/7696_
2.031350328159980.00.6232.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_247ebab7b48b1

1-0135470/179/7888_
2.031157526156230.00.6233.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/191/8011_
2.04277727234330.00.6033.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/195/7598_
2.0596422774090.00.7030.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/188/7413_
2.0377919524290010.00.6631.18
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0135470/194/7895_
2.031022526009080.00.6531.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0135470/186/7898_
2.03938729508570.00.6232.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/203/7645_
2.03757726668140.00.7131.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0135470/191/7657_
2.031284325769510.00.6531.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2

Found on 2025-04-06 16:31

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d20305930a

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 18-Mar-2025 18:13:52 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  9 days 13 hours 8 minutes 44 seconds
Server load: 0.54 0.80 1.07
Total accesses: 145230 - Total Traffic: 598.6 MB - Total Duration: 48758652
CPU Usage: u28.34 s25.93 cu26.75 cs13.73 - .0115% CPU load
.176 requests/sec - 760 B/second - 4321 B/request - 335.734 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0217690/1201/2853_
16.98135018486850.04.9211.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET / HTTP/1.1

0-0217690/1388/3117_
16.98107188377570.05.5012.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1268/2964_
16.97158649644100.05.0712.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_106603b3cf956

0-0217690/1288/2856_
16.98771713222370.05.5212.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1378/2936_
16.9859178949790.05.5611.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1432/2952_
16.98917410513160.05.7612.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0217690/1464/3193_
16.98411711871390.06.1413.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1168/2769_
16.97153639511470.04.7511.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eff827cdb1f19

0-0217690/1439/2945_
16.98143179537270.06.3312.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1268/2839_
16.971610310539780.06.1313.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ba84b91f1d99

0-0217690/1385/2869_
16.98325387766930.05.8611.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0217690/1241/2921_
16.985179992250.05.3012.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1228/2847_
16.986715510487720.05.0711.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0217690/1207/2849_
16.98531109109410.05.2511.93
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1324/2916_
16.9817168162520.05.4112.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1264/2872_
16.9845399805950.05.0611.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0217690/1348/3077_
16.9823188588070.05.5512.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1230/2672_
16.981311711251780.04.9411.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1318/2935_
16.971567411356800.05.2911.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_047ceae37d157

0-0217690/1298/2950_
16.97163948063530.05.0812.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_804962c5932aa

0-0217690/1223/2670_
16.98119189471100.05.6711.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/1451/3066_
16.989492219414480.06.0212.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0217690/1365/3076_
16.981522818077650.05.7413.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4372ec894139a

0-0217690/1371/2940_
16.98931410562630.05.7212.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0217690/1391/3070_
16.98879410977510.05.9513.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_326940aefdbec

1-0218180/1465/3002_
16.27891710854820.05.9412.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1337/2794_
16.261011710258660.05.4511.49
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1292/2871_
16.261131712886080.05.1811.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218189/1374/2952W
16.280094776310.75.6411.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0218180/1318/2785_
16.261542159061990.05.1311.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0218180/1269/2859_
16.2742709793980.04.9911.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /.well-known/assetlinks.json HTTP/1.1

1-0218180/1338/2975_
16.2765179895590.05.5512.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1326/2719_
16.26157748152520.05.3311.41
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0218180/1192/2914_
16.2756689738690.04.7911.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218180/1171/2679_
16.2794248802860.04.6011.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8914f9a45909c

1-0218180/1214/2678_
16.274693610335440.05.1111.31
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_162c16d971c2c

1-0218180/1261/2914_
16.2771178992790.05.5712.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1346/3011_
16.2792549481660.05.8912.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0eae3a5915843

1-0218180/1349/2945_
16.2783178897230.05.8712.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1148/2745_
16.2735177906780.04.5210.60
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1196/2678_
16.2729179185190.05.3511.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1436/3095_
16.26132318980090.05.6612.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

1-0218180/1380/3029_
16.26149179834030.05.6212.25
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/1296/2866_
16.26159629910445030.04.9011.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0218180/1403/2891_
16.2711179974540.05.7311.88
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php H

Found on 2025-03-18 18:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2e7e3624d

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 17-Mar-2025 01:16:56 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 20 hours 11 minutes 48 seconds
Server load: 3.14 2.98 2.70
Total accesses: 121937 - Total Traffic: 494.3 MB - Total Duration: 38983300
CPU Usage: u18.75 s18.99 cu26.75 cs13.73 - .0115% CPU load
.18 requests/sec - 764 B/second - 4250 B/request - 319.7 ms/request
3 requests currently being processed, 47 idle workers
_______W_____________W______________________W_____..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0217690/764/2416_
10.4433197028850.02.859.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0217690/910/2639_
10.4188306533560.03.5310.29
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/787/2483_
10.446208435850.02.9510.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/803/2371_
10.4177599821310.03.4210.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/850/2408_
10.4259006667020.03.289.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/995/2515_
10.4184007920780.03.6610.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/916/2645_
10.4171579261690.03.6210.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217691/772/2373W
10.45006812551.13.109.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0217690/903/2409_
10.4335577735690.03.899.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/791/2362_
10.4321108978180.03.5810.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/872/2356_
10.424841905996610.03.669.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0Tc%2BSz

0-0217690/796/2476_
10.43397178501990.03.109.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0217690/830/2449_
10.4265579053770.03.319.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/802/2444_
10.424203747295730.03.4110.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BQQ

0-0217690/855/2447_
10.43269136317690.03.3310.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0217690/827/2435_
10.42533718494290.03.229.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0217690/910/2639_
10.432931856941850.03.6310.54
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec4MNF

0-0217690/872/2314_
10.448072888641480.03.369.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BRZ

0-0217690/873/2490_
10.4323579629710.03.369.82
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/813/2465_
10.431322376584480.03.0510.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PAw3P

0-0217690/759/2206_
10.44973696977930.03.219.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-02176910/921/2536W
10.450077606022.43.6710.30
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0217690/876/2587_
10.431514126642530.03.5410.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BN

0-0217690/904/2473_
10.4188208888250.03.2810.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/855/2534_
10.443508649990.03.4910.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0218180/898/2435_
10.0450208254220.03.479.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0218180/799/2256_
10.04693458079980.03.109.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/876/2455_
10.0475369855700.03.449.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218180/844/2422_
10.04867147243260.03.349.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218180/813/2280_
10.0488307342320.03.008.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0218180/871/2461_
10.05266338756670.03.269.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f550bccd8da1

1-0218180/909/2546_
10.0441577859800.03.6310.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/750/2143_
10.04835105938980.02.908.98
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/799/2521_
10.04565436198550.03.0510.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_41db4d9c1a017

1-0218180/737/2245_
10.04648147067400.02.639.21
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0218180/708/2172_
10.043722037563760.02.768.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BUQ

1-0218180/853/2506_
10.0447577266040.03.4010.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/899/2564_
10.04269117666770.03.7110.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0218180/919/2515_
10.043094697410450.03.8610.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PC8QY

1-0218180/755/2352_
10.05223435982380.02.858.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/825/2307_
10.0517576621250.03.739.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/812/2471_
10.084617032680.03.029.73
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0218180/902/2551_
10.084718597680.03.5910.22
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0218180/828/2398_
10.067969309138300.02.999.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyVZW

1-0218187/958/2446W
10.093086769425.13.8710.02
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0218180/939/2655_
10.092850088305520.03.6410.75
127.0.0.1http/1.1ip-10-1-90-244.

Found on 2025-03-17 01:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2730311f3

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 15-Mar-2025 01:55:37 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 20 hours 50 minutes 30 seconds
Server load: 1.27 1.23 1.23
Total accesses: 101969 - Total Traffic: 413.9 MB - Total Duration: 33167421
CPU Usage: u11.11 s12.43 cu26.75 cs13.73 - .0126% CPU load
.201 requests/sec - 856 B/second - 4256 B/request - 325.27 ms/request
1 requests currently being processed, 49 idle workers
__________________________________W_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0217690/434/2086_
5.45232436315430.01.648.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0217690/495/2224_
5.45243355810840.01.948.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0217690/432/2128_
5.4433687543980.01.518.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/433/2001_
5.45204338780350.01.938.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0217690/473/2031_
5.4711205181890.01.697.89
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/619/2139_
5.4713346854830.02.208.73
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0217690/524/2253_
5.4745566258046970.01.929.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0217690/421/2022_
5.4442575783680.01.668.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0217690/452/1958_
5.473676282640.02.058.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/391/1962_
5.4374307689560.01.588.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/468/1952_
5.428864645177310.01.927.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Gs3Z

0-0217690/382/2062_
5.42845367580030.01.468.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4e459160082c7

0-0217690/405/2024_
5.41105777704950.01.518.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/422/2064_
5.4791045713800.01.568.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php?username=Patonam&me

0-0217690/493/2085_
5.43773405637210.01.978.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0217690/415/2023_
5.479676783690.01.598.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/452/2181_
5.429518395437200.01.798.70
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0217690/437/1879_
5.4351676616240.01.698.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/500/2117_
5.4375678787320.01.948.40
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/437/2089_
5.4363775734330.01.648.61
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/378/1825_
5.4357685913270.01.837.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0217690/515/2130_
5.443881216676140.02.098.71
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php?username=Patonam%40

0-0217690/467/2178_
5.4372815692470.01.899.26
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0217690/498/2067_
5.4529807909880.01.828.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0217690/388/2067_
5.444401447508450.01.668.86
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/440/1977_
5.132076814280.01.637.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0218180/337/1794_
5.1359416877470.01.327.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/464/2043_
5.1346600599024760.01.798.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0218180/472/2050_
5.13126496340130.01.857.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/449/1916_
5.1321776416040.01.617.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/479/2069_
5.1159107451910.01.838.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0218180/505/2142_
5.1099686584480.01.928.50
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/339/1732_
5.1379454671000.01.257.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/450/2172_
5.1093675304090.01.768.72
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218189/397/1905W
5.130056023410.71.387.95
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0218180/379/1843_
5.1081776371600.01.497.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/422/2075_
5.1087776171050.01.588.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/458/2123_
5.11696146708520.01.858.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/400/1996_
5.107492496075450.01.508.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PCFwY

1-0218180/380/1977_
5.10766374751460.01.257.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0218180/407/1889_
5.1070247315138100.01.938.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0218180/431/2090_
5.1230505489380.01.548.24
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0218180/515/2164_
5.1239787278470.01.928.56
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/460/2030_
5.114142007975450.01.658.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php?username=patonam&me

1-0218180/476/1964_
5.1145677362750.01.908.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0218180/490/2206_
5.1227677010880.01.8

Found on 2025-03-15 01:55

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2d7fa84ed

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 13-Mar-2025 05:56:17 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 51 minutes 9 seconds
Server load: 1.61 1.61 1.68
Total accesses: 74568 - Total Traffic: 306.8 MB - Total Duration: 26390543
CPU Usage: u27.98 s18.82 cu0 cs0 - .0134% CPU load
.214 requests/sec - 922 B/second - 4313 B/request - 353.912 ms/request
1 requests currently being processed, 49 idle workers
_______W__________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0390/1546/1546_
19.254534521690.06.196.19
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f46538611fc5c

0-0390/1598/1598_
19.2323634515620.06.276.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_033d30ca5116c

0-0390/1576/1576_
19.2143686041650.06.656.65
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/1480/1480_
19.2137237514770.06.586.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64874475be617

0-0390/1451/1451_
19.2150334372230.05.795.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f9306cc126afb

0-0390/1408/1408_
19.2410545419090.06.076.07
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/1612/1612_
19.2315834905580.06.626.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44d9fde9c3cbd

0-03916/1493/1493W
19.250041236939.66.056.05
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

0-0390/1408/1408_
19.251674783460.05.745.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/1468/1468_
19.215345285838400.06.426.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5IvNl

0-0390/1368/1368_
19.20556113409700.05.365.36
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/1583/1583_
19.2148676353600.06.466.46
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1214ddf69a167

0-0390/1529/1529_
19.2140836934700.06.146.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6101e2a0f96ad

0-0390/1503/1503_
19.2230874645030.06.176.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c6290e3e3d3b

0-0390/1490/1490_
19.2151634491580.06.426.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46097add9d5ac

0-0390/1523/1523_
19.2228635717780.06.156.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_95b300f1d461c

0-0390/1628/1628_
19.2232433882920.06.476.47
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_99508364c2a67

0-0390/1375/1375_
19.2141955399770.06.036.03
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/1448/1448_
19.2317936997830.05.795.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f3db2e2e45da0

0-0390/1552/1552_
19.21447424634440.06.596.59
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0390/1352/1352_
19.2134044481350.05.585.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1ae4d89f0309a

0-0390/1521/1521_
19.2321045350540.06.286.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ed1d2ebc440c

0-0390/1606/1606_
19.2573334877950.06.966.96
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0390/1476/1476_
19.2057436303050.06.376.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c89676a9b91e2

0-0390/1606/1606_
19.2411736425570.06.916.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3392403dc44d7

1-0400/1437/1437_
18.6351045865230.05.785.78
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1394/1394_
18.6349545043470.05.805.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1451/1451_
18.6522546814540.05.995.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1492/1492_
18.643311954806770.05.805.80
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1348/1348_
18.6445005611620.05.485.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0400/1495/1495_
18.6352465990580.06.126.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1517/1517_
18.6516965333510.06.096.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1308/1308_
18.6436443536430.05.775.77
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1623/1623_
18.653254268970.06.556.55
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1436/1436_
18.643932984470530.06.346.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyOBb

1-0400/1325/1325_
18.6514744907870.05.695.69
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1559/1559_
18.659644737000.06.386.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_984f07157ca31

1-0400/1545/1545_
18.66604831660.06.236.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0400/1469/1469_
18.635488824775320.06.126.12
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1508/1508_
18.644084354046100.05.755.75
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyEJW

1-0400/1383/1383_
18.634653233930800.05.835.83
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJOSrY

1-0400/1543/1543_
18.6512714458400.06.206.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0400/1537/1537_
18.6443036125660.06.236.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_90c5ff4e5576b

1-0400/1501/1501_
18.6531656313700.06.166.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/1419/1419_
18.6358045695670.05.88</

Found on 2025-03-13 05:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d277082c8a

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Mar-2025 18:59:51 UTC
Restart Time: Sunday, 09-Mar-2025 05:05:07 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 13 hours 54 minutes 43 seconds
Server load: 1.21 1.11 1.14
Total accesses: 28304 - Total Traffic: 110.8 MB - Total Duration: 9438328
CPU Usage: u10.81 s7.18 cu0 cs0 - .0132% CPU load
.207 requests/sec - 850 B/second - 4103 B/request - 333.463 ms/request
1 requests currently being processed, 49 idle workers
____________________________W_____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0390/648/648_
7.3646961401120.02.382.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/543/543_
7.3659071310320.01.991.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/655/655_
7.35137631698260.02.522.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/591/591_
7.34191092453470.02.422.42
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/530/530_
7.3635071239710.02.002.00
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/571/571_
7.3667032149900.02.582.58
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/574/574_
7.3577071817810.02.082.08
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/672/672_
7.371468181972900.02.672.67
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0390/504/504_
7.3622961959850.01.971.97
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/634/634_
7.34221071514540.02.842.84
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/498/498_
7.37507896290.01.681.68
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/678/678_
7.34185633163840.02.742.74
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/469/469_
7.34166973560110.01.791.79
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/479/479_
7.341981441211100.01.761.76
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71ce4eabcc40e

0-0390/522/522_
7.34209071277780.02.322.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/542/542_
7.34179072399040.01.921.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/635/635_
7.35151371396080.02.352.35
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/584/584_
7.35155082673520.02.622.62
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/509/509_
7.3589064114000.01.901.90
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/653/653_
7.35149072326410.02.452.45
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/554/554_
7.35133132012650.02.142.14
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0390/596/596_
7.35125081544000.02.322.32
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/573/573_
7.35107071209890.02.162.16
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0390/636/636_
7.35962531502480.02.482.48
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0390/617/617_
7.35117651466790.02.522.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/560/560_
7.1229061250230.02.092.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/490/490_
7.1241071452890.01.921.92
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/613/613_
7.08187532881020.02.172.17
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0409/527/527W
7.120016336010.81.911.91
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /server-status HTTP/1.1

1-0400/556/556_
7.08173082896880.02.092.09
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/532/532_
7.10131081536770.02.042.04
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/522/522_
7.10150712865600.01.991.99
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0400/592/592_
7.11120131230200.02.572.57
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/631/631_
7.12101071536880.02.522.52
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/546/546_
7.07203071287060.02.202.20
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/430/430_
7.10142971435820.02.012.01
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/538/538_
7.1270971518550.02.282.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/620/620_
7.1253071935750.02.342.34
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/538/538_
7.1283071685180.02.272.27
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/570/570_
7.07215071068800.02.132.13
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/566/566_
7.1211061469760.02.232.23
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/595/595_
7.10136331448960.02.282.28
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0400/536/536_
7.08196962199600.02.112.11
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/587/587_
7.12165451736600.02.382.38
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0400/563/563_
7.11113072155480.02.372.37
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0400/551/551_
7.091528411933940.02.152.15
127.0.0.1http/1.1ip-10-1-90-244.ap-southeast-2.cGET /saml2/idp/

Found on 2025-03-10 18:59

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2b74fec1a

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Mar-2025 21:25:52 UTC
Restart Time: Friday, 24-Jan-2025 06:06:09 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 15 hours 19 minutes 43 seconds
Server load: 0.40 0.80 1.08
Total accesses: 610859 - Total Traffic: 2.7 GB - Total Duration: 233244440
CPU Usage: u42.13 s72.38 cu238.2 cs113 - .0124% CPU load
.162 requests/sec - 758 B/second - 4681 B/request - 381.83 ms/request
1 requests currently being processed, 49 idle workers
__W_______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0180300/576/12282_
6.911791946528060.02.2653.58
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/540/12614_
6.911671946610160.02.0854.61
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180309/626/12096W
6.9500455510910.82.4754.45
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /server-status HTTP/1.1

0-0180300/556/12219_
6.94171951538250.02.0753.51
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/603/12141_
6.9462044097470.02.2552.83
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /favicon.ico HTTP/1.1

0-0180300/571/12073_
6.94291953277260.02.1254.97
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/530/11865_
6.911911942219300.02.0153.27
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/593/12007_
6.911551845169840.02.1953.34
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/633/12165_
6.9314697746475520.02.3955.36
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0180300/644/12413_
6.931371946312190.02.3954.48
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/610/12150_
6.931512051204550.02.2855.97
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /resources/script.js HTTP/1.1

0-0180300/547/11784_
6.931257745171760.02.0351.94
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

0-0180300/566/12238_
6.931311848261550.02.2454.21
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/621/12271_
6.9312205446703270.02.2954.76
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.POST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0180300/538/12364_
6.931191946860840.01.9054.69
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/556/12579_
6.941011947317430.02.1754.88
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/551/12790_
6.931146144324520.01.8957.11
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0180300/540/11886_
6.931071945604210.02.0054.51
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/552/11863_
6.94831943355540.02.2052.40
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/616/12177_
6.949511049647810.02.6358.07
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/542/11808_
6.94891845254550.02.0453.08
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/550/12225_
6.94711951554930.02.2353.92
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/615/12163_
6.94531942659820.02.4454.08
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/534/12309_
6.94651844680090.02.1155.89
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0180300/489/12184_
6.94411949252340.01.8956.05
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/566/12565_
6.8511311050148010.01.9655.95
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/607/12677_
6.8610644349995620.02.3254.91
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_c6749d9914518

1-0183040/580/12537_
6.869826647121050.01.9656.22
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0183040/606/12183_
6.841209050686790.02.2754.46
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0183040/537/12659_
6.8690256452661250.01.9955.32
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSZwEW

1-0183040/471/11892_
6.86849043218170.01.8151.25
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /favicon.ico HTTP/1.1

1-0183040/538/12220_
6.866803745251300.01.8054.63
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/loginuserpass.php?AuthState=_7d2507170a6b6

1-0183040/567/12628_
6.86344939958620.02.0957.01
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/637/12445_
6.86771951648110.02.4555.55
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/543/12122_
6.86591946501410.02.0154.79
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/571/11937_
6.8418511048911960.02.0951.06
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/507/12041_
6.86471943020510.01.9053.94
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/622/12650_
6.86231947249090.02.3054.58
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/666/12430_
6.86111839534110.02.5357.98
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/629/12434_
6.8651944236990.02.2753.21
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/483/12046_
6.841731945392840.01.7955.25
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/576/11990_
6.841491946050880.02.2054.49
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/606/12518_
6.8419711043336620.02.2155.20
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/502/12076_
6.841611946013050.01.8756.81
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0183040/587/12351_
6.8413653847994740.02.0954.70
127.0.0.1http/1.1ip-10-1-107-235.ap-southeast-2.GET /saml2/idp/metadata.php HTTP/1.1

1-0183040/613/11992_
6.841431943901290.02.2151.31
127.0.

Found on 2025-03-08 21:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2a5c8de88

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 22-Nov-2024 09:25:34 UTC
Restart Time: Friday, 15-Nov-2024 04:34:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  7 days 4 hours 50 minutes 56 seconds
Server load: 0.87 1.13 1.42
Total accesses: 73650 - Total Traffic: 385.0 MB - Total Duration: 29965100
CPU Usage: u11.99 s12.28 cu25.8 cs10.67 - .00976% CPU load
.118 requests/sec - 648 B/second - 5.4 kB/request - 406.858 ms/request
1 requests currently being processed, 74 idle workers
________________________________________________________________
________W__.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0204740/288/1475_
4.081537444392170.01.517.63
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0204740/334/1398_
4.05244505299270.01.677.15
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/274/1453_
4.09342294654420.01.407.49
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0204740/279/1496_
4.09143706087680.01.808.15
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0204740/351/1417_
4.05265507485780.01.836.92
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/197/1389_
4.07166805455590.00.937.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/282/1537_
4.07173905526320.01.248.30
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0204740/272/1569_
4.09103605666460.01.387.87
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/264/1510_
4.071950337349570.01.367.56
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0204740/248/1441_
4.072015315949940.01.287.46
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_958bf41cb8349

0-0204740/257/1415_
4.097312137144170.01.227.21
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec2e1i

0-0204740/248/1519_
4.072041475922770.01.628.11
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0204740/266/1388_
4.08162205636020.01.237.30
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

0-0204740/275/1476_
4.06223605688950.01.457.53
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/168/1275_
4.071895345635750.00.886.63
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_1f78c0544298b

0-0204740/274/1469_
4.0717902205561980.01.497.50
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyHAA

0-0204740/202/1294_
4.052517446181550.01.186.56
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0204740/309/1582_
4.09121005392940.01.798.55
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0204740/233/1482_
4.08145414645410.01.237.30
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0204740/272/1697_
4.0923506433910.01.398.54
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/196/1339_
4.0720912775728350.01.397.06
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwXyD8QvIt6p

0-0204740/326/1614_
4.06216107741070.01.668.25
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.css HTTP/1.1

0-0204740/211/1419_
4.05230316280960.01.197.28
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0204740/237/1579_
4.07206107418950.01.278.45
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0204740/245/1332_
4.09124805565090.01.608.29
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0205720/225/1490_
3.922634416696290.01.077.12
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/226/1330_
4.02124804508170.01.196.83
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0205720/300/1400_
4.021486814380.01.667.18
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php HTTP/1.1

1-0205720/261/1431_
4.00162435715270.01.467.31
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /logout.php HTTP/1.1

1-0205720/241/1454_
4.0257805507580.01.288.06
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0205720/232/1431_
4.001642405282850.01.227.65
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/281/1480_
4.0230205303390.01.507.48
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0205720/308/1334_
4.029964575472100.01.557.22
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5KuJu

1-0205720/282/1453_
4.021258347519350.01.467.43
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/302/1529_
3.92251005387030.01.477.59
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.css HTTP/1.1

1-0205720/248/1455_
3.92233106702440.01.187.05
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0205720/271/1419_
4.021185525824780.01.457.60
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/238/1364_
4.00153715814110.01.317.24
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0205720/175/1448_
3.99218111174864640.01.047.84
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0205720/313/1676_
3.99212305451070.01.749.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0205720/257/1444_
3.982291648779760.01.587.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/zxcvbn.js HTTP/1.1

1-0205720/184/1354_
4.00145415405450.01.067.44
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0205720/183/1469_
3.99205496992060.00.877.33
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0205720/206/1273_
3.992091424484760.01.116.50
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/235/1352_
3.992033536372380.01.326.76
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0205720/300/1436_
3.992015335375780.01.647.48
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_eba5bfe8938fd

1-0205720/252/1424_
3.9919174505023950.01.708.54

Found on 2024-11-22 09:25

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2816299fc

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 20-Nov-2024 10:22:26 UTC
Restart Time: Friday, 15-Nov-2024 04:34:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  5 days 5 hours 47 minutes 48 seconds
Server load: 1.07 1.59 1.94
Total accesses: 53747 - Total Traffic: 277.7 MB - Total Duration: 19570740
CPU Usage: u27.37 s16.85 cu0 cs0 - .00976% CPU load
.119 requests/sec - 643 B/second - 5.3 kB/request - 364.127 ms/request
1 requests currently being processed, 49 idle workers
___________________W______________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/1091/1091_
16.58193003226610.05.605.60
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/932/932_
16.581644393668320.04.434.43
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/986/986_
16.5817664053121780.05.115.11
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9bSix

0-0360/1100/1100_
16.57225303946070.05.715.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/960/960_
16.63104454767520.04.574.57
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/cloudworkauth/403.php?StateId=_834700720c9d303f

0-0360/1091/1091_
16.59158303363030.06.126.12
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/1090/1090_
16.61151003512040.06.206.20
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0360/1171/1171_
16.60153213548450.05.835.83
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0360/1132/1132_
16.611400374505680.05.665.66
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0360/1083/1083_
16.61146712880790.05.625.62
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0360/1081/1081_
16.63107515192980.05.665.66
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0360/1180/1180_
16.61138203809540.06.026.02
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0360/976/976_
16.631058423979060.05.425.42
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1071/1071_
16.62110603847560.05.395.39
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

0-0360/995/995_
16.631004394386480.05.145.14
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1112/1112_
16.63978283399290.05.585.58
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/cloudworkauth/403.php?StateId=_5c6f994dd2dce0b2

0-0360/1007/1007_
16.62127503318920.04.934.93
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/1110/1110_
16.645102692598860.05.725.72
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0Tc%2BTB

0-0360/1165/1165_
16.6483503470590.05.655.65
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0368/1227/1227W
16.64004202679.76.086.08
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /server-status HTTP/1.1

0-0360/1066/1066_
16.582125924040970.05.225.22
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1179/1179_
16.5820485995104110.05.985.98
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec92wB

0-0360/1061/1061_
16.63957444355030.05.415.41
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/1209/1209_
16.59163705715570.06.556.55
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/990/990_
16.5721641014250250.06.106.10
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1141/1141_
16.3510931964860850.05.495.49
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /saml2/idp/SSOService.php HTTP/1.1

1-0370/980/980_
16.341467392831160.05.005.00
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/990/990_
16.30160313140540.04.934.93
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0370/1031/1031_
16.35135573550700.04.794.79
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/1102/1102_
16.30164402823760.06.236.23
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/1050/1050_
16.30205912133848460.05.695.69
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYQ

1-0370/1086/1086_
16.35138213350400.05.395.39
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/932/932_
16.34149703377120.05.145.14
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /resources/post.js HTTP/1.1

1-0370/1030/1030_
16.36102334417870.05.275.27
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /logout.php HTTP/1.1

1-0370/1111/1111_
16.35128813501170.05.485.48
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/1127/1127_
16.351070354828940.05.495.49
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1041/1041_
16.369672543947250.05.575.57
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJHG2U

1-0370/963/963_
16.36997303760390.05.195.19
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1181/1181_
16.29226613716180.06.216.21
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/1219/1219_
16.36104522143793030.07.127.12
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/1076/1076_
16.3021722105771830.05.545.54
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/1093/1093_
16.3688203959680.05.875.87
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/1216/1216_
16.301660375092000.06.086.08
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/970/970_
16.365524663570460.04.884.88
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Itox

1-0370/1019/1019_
16.301876104201170.04.954.95
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/1029/1029_
16.364834693963540.05.185.18
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0Tc%2BUy

1-0

Found on 2024-11-20 10:22

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d25651eaee

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 18-Nov-2024 08:45:42 UTC
Restart Time: Friday, 15-Nov-2024 04:34:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  3 days 4 hours 11 minutes 5 seconds
Server load: 1.47 1.30 1.46
Total accesses: 30986 - Total Traffic: 158.6 MB - Total Duration: 10286991
CPU Usage: u16.03 s10.01 cu0 cs0 - .00949% CPU load
.113 requests/sec - 606 B/second - 5.2 kB/request - 331.988 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/671/671_
9.6235171364860.03.473.47
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0360/527/527_
9.622802361764010.02.552.55
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9bKUV

0-0360/634/634_
9.6242101717050.03.403.40
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/547/547_
9.6259402429710.02.792.79
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/549/549_
9.59131102068360.02.572.57
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/622/622_
9.63852111852130.03.273.27
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSXA2y

0-0360/677/677_
9.6313202094290.03.543.54
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/667/667_
9.59141831914290.03.363.36
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/664/664_
9.59134142755600.03.343.34
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0368/565/565W
9.63001647089.73.193.19
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /server-status HTTP/1.1

0-0360/602/602_
9.6012974243485760.03.163.16
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9YwSu

0-0360/691/691_
9.59139031878720.03.423.42
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/504/504_
9.5913672102325820.02.542.54
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/681/681_
9.60122032319210.03.423.42
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/534/534_
9.60126222184030.02.662.66
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_b6589ff9fea8f

0-0360/609/609_
9.60119721669120.03.073.07
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/588/588_
9.60128321620310.02.822.82
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_878d075e1df83

0-0360/603/603_
9.601185391659110.03.123.12
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/610/610_
9.60116032097000.03.013.01
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_05ab7d905aa02

0-0360/721/721_
9.6011068782500830.03.653.65
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/599/599_
9.6110404351827820.02.932.93
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dek5Bst

0-0360/694/694_
9.629598362317270.03.373.37
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/614/614_
9.6289976852445330.03.143.14
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwMWW

0-0360/703/703_
9.6247302700350.03.633.63
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/608/608_
9.626604271958630.03.753.75
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgIW

1-0370/765/765_
9.53130522072700.03.713.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_69c94a64f228e

1-0370/575/575_
9.57213011741450.03.043.04
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/581/581_
9.53142821684760.02.832.83
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_980cb9c797f65

1-0370/556/556_
9.53140641777860.02.402.40
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_12046f6b51182

1-0370/591/591_
9.5797501498890.03.293.29
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/622/622_
9.573934412114680.03.443.44
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUiWF

1-0370/600/600_
9.53137822051830.02.882.88
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_2d14ed35a57fd

1-0370/530/530_
9.53135122060210.02.852.85
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_853e591b4c788

1-0370/594/594_
9.53132922047600.02.982.98
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_fa77f0f39be25

1-0370/596/596_
9.531294121712940.02.892.89
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0370/626/626_
9.55122532726700.03.033.03
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0370/636/636_
9.55118512475110.03.743.74
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

1-0370/591/591_
9.55117522689600.02.942.94
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0370/673/673_
9.5511188922363000.03.573.57
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/694/694_
9.53127341773140.04.224.22
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0370/587/587_
9.5510782162858010.02.842.84
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeSeKQc

1-0370/626/626_
9.55120832221870.03.133.13
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_cff1a9ba94709

1-0370/677/677_
9.5696511708770.03.303.30
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0370/618/618_
9.56985381566010.02.992.99
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/562/562_
9.5688201652460.02.562.56
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/620/620_
9.566152571737160.03.123.12
127.0.0.

Found on 2024-11-18 08:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d208a4b3a9

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 16-Nov-2024 06:57:05 UTC
Restart Time: Friday, 15-Nov-2024 04:34:37 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 day 2 hours 22 minutes 27 seconds
Server load: 0.46 0.75 0.90
Total accesses: 6454 - Total Traffic: 40.0 MB - Total Duration: 2841420
CPU Usage: u4.18 s2.81 cu0 cs0 - .00736% CPU load
.068 requests/sec - 441 B/second - 6.3 kB/request - 440.257 ms/request
1 requests currently being processed, 49 idle workers
___________________________________W______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0360/115/115_
2.2182641423980.00.660.66
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/119/119_
2.219271417460.00.710.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0360/157/157_
2.21103437481710.01.071.07
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0360/148/148_
2.19156581888230.00.910.91
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_40e82708ddcbc

0-0360/141/141_
2.182985832775400.00.750.75
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0360/168/168_
2.223550425920.01.061.06
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /robots.txt HTTP/1.1

0-0360/150/150_
2.22657214800780.00.920.92
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0360/128/128_
2.22576766501710.00.780.78
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyVLi

0-0360/130/130_
2.2216637341830.00.900.90
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0360/158/158_
2.183448231461910.00.980.98
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5GsbU

0-0360/135/135_
2.1826244411146180.00.810.81
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeSXC4d

0-0360/97/97_
2.22457553170.00.580.58
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

0-0360/79/79_
2.183078461402480.00.390.39
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLbtswELz7Kwzd9aykt

0-0360/99/99_
2.18275041539020.00.640.64
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_e3bdc9145b130

0-0360/98/98_
2.1925604201369910.00.570.57
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Decy2Xr

0-0360/141/141_
2.192587221307480.00.900.90
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0360/102/102_
2.1922240381910.00.560.56
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/127/127_
2.1922090594800.00.680.68
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0360/122/122_
2.1921224430070.00.760.76
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/chromebook/jquery.js HTTP/1.1

0-0360/115/115_
2.191905495590380.00.740.74
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfI%

0-0360/116/116_
2.191848249429640.00.660.66
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSh7EpLSS

0-0360/124/124_
2.191829243772920.00.780.78
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT%2BMwEL2vxH%2Bwf

0-0360/144/144_
2.1917010628550.00.970.97
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

0-0360/130/130_
2.191438736484430.00.810.81
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BQa

0-0360/137/137_
2.2111061643700.00.850.85
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0370/161/161_
2.3737839697980.00.920.92
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/132/132_
2.36881222379460.00.830.83
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PKHAt

1-0370/122/122_
2.369230416840.00.710.71
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/110/110_
2.35105935603350.00.680.68
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_d45dbe63d7513

1-0370/192/192_
2.35118330659260.01.271.27
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_02666e088a0fe

1-0370/131/131_
2.3514801837554940.01.151.15
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUhYk

1-0370/137/137_
2.368261583800.00.680.68
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0370/112/112_
2.375942970300640.00.650.65
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0370/105/105_
2.3727434291060.00.620.62
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/79/79_
2.3753416558220.00.460.46
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8A4Htk

1-0378/157/157W
2.3700460729.70.910.91
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /server-status HTTP/1.1

1-0370/145/145_
2.332611361208400.01.291.29
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_8e8f69a6e68c8

1-0370/88/88_
2.332994248472580.00.450.45
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec6OwA

1-0370/117/117_
2.33276133566020.00.760.76
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_7408dfb40a12b

1-0370/164/164_
2.33343449397070.01.081.08
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/metadata.php HTTP/1.1

1-0370/137/137_
2.3325772321576610.00.850.85
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0370/91/91_
2.33273232339610.00.510.51
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /module.php/core/loginuserpass.php?AuthState=_aeb834d374c38

1-0370/111/111_
2.34220943333800.00.610.61
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0370/135/135_
2.3422800514520.00.770.77
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/107/107_
2.3521170299300.00.560.56
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/130/130_
2.3421990594720.00.760.76
127.0.0.1http/1.1ip-10-1-97-78.ap-southeast-2.coGET /favicon.ico HTTP/1.1

1-0370/168/168_
2

Found on 2024-11-16 06:57

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2ea0f47d5

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 05:52:23 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  65 days 23 hours 14 minutes 24 seconds
Server load: 1.23 1.14 1.17
Total accesses: 571940 - Total Traffic: 2.5 GB - Total Duration: 224467735
CPU Usage: u77.41 s107.54 cu181.21 cs89.85 - .008% CPU load
.1 requests/sec - 480 B/second - 4785 B/request - 392.467 ms/request
1 requests currently being processed, 74 idle workers
_______________________W________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0115560/762/11147_
9.27946145770020.03.8451.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0115560/693/10667_
9.287204142188810.03.1347.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/565/10377_
9.2516363640630250.02.5348.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/575/10994_
9.25182537138923020.02.8651.04
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dek5Bso

0-0115560/564/10993_
9.26129316940924350.02.5748.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4af45fb39b443

0-0115560/627/10747_
9.24243038458240.02.7749.19
127.0.0.1http/1.1

0-0115560/628/10670_
9.25189919446209190.03.0549.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PAkKt

0-0115560/582/10784_
9.26113627342798560.02.7249.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BST

0-0115560/747/11031_
9.287893343052860.03.6549.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a34c87d0b62b5

0-0115560/706/10483_
9.27100823137570340.03.2248.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUjCr

0-0115560/593/10538_
9.301882753040314710.02.6947.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0115560/581/10984_
9.301924837768910.03.0550.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/701/10815_
9.303055939749080.03.0650.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/695/10752_
9.30445043137650.03.1948.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/559/10939_
9.26104094343633410.02.8848.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0115560/687/10417_
9.302694640375810.03.0947.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/618/10729_
9.295233941469160.02.8249.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/680/10363_
9.288693043468170.03.2448.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6bb26d723134d

0-0115560/626/10778_
9.261363841649850.02.9548.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/569/10614_
9.30106849373020.02.6447.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/654/11277_
9.25156925440390210.03.0550.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec6Owg

0-0115560/591/10850_
9.28621040978330.02.7249.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0115560/590/10441_
9.261182142138756020.02.7948.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcgQBLs

0-0115569/630/10734W
9.3100435968017.93.4048.84
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0115560/714/10937_
9.2857219139075490.03.6250.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgaA

1-0242130/1451/8374_
22.61711030866120.06.7738.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0242130/1471/8448_
22.6181041034269420.07.8339.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dek5DLQ

1-0242130/1452/8382_
22.62513032801930.07.2537.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1588/8543_
22.62309132121200.07.9038.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0242130/1481/9064_
22.61723032772500.07.4940.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0242130/1404/8766_
22.591597029759940.06.9139.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1604/8711_
22.6474033825480.07.5838.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0242130/1633/8859_
22.631194234003890.07.7339.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/1396/8626_
22.6013845133467900.07.1038.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/1530/8617_
22.62228680732117020.06.9438.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0242130/1453/8537_
22.62272261530238870.07.1037.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0242130/1483/9225_
22.601182033015180.07.6039.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1636/9019_
22.5819083434043500.08.7141.64
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/1528/8643_
22.58166343233503160.07.5839.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PMkFx

1-0242130/1598/8566_
22.60123813033095840.08.0340.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b13f25f6694ca

1-0242130/1630/8878_
22.601349031380420.07.9540.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1708/8890_
22.622071343732936180.08.6140.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0242130/1496/8573_
22.581825031044280.07.2939.02
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0242130/1759/8607_
22.60901031457900.08.3938.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0242130/1570/8873_
22.601076032434820.07.5340.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1535/9129_
22.601016313122

Found on 2024-11-14 05:52

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2392b91e5

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 06:43:02 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  64 days 5 minutes 3 seconds
Server load: 1.42 1.31 1.41
Total accesses: 552789 - Total Traffic: 2.5 GB - Total Duration: 215708589
CPU Usage: u67.99 s100.89 cu181.21 cs89.85 - .00796% CPU load
.1 requests/sec - 477 B/second - 4772 B/request - 390.219 ms/request
1 requests currently being processed, 74 idle workers
___________________________________________________W____________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0115560/429/10814_
5.49574044611430.02.2549.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/383/10357_
5.49396040612270.01.6346.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/311/10123_
5.47154683639665670.01.3646.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyW1J6

0-0115560/324/10743_
5.4718953437490390.01.5649.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ef6d432f85f2

0-0115560/351/10780_
5.48103617640163700.01.5447.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0115560/341/10461_
5.472278136869760.01.5147.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0115560/372/10414_
5.471649152545506370.01.7947.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec3FYo

0-0115560/344/10546_
5.4994918741759790.01.4947.92
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrpswEN3nKyL2QKCEN

0-0115560/467/10751_
5.49722042278850.02.4747.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/464/10241_
5.498494536616050.02.0947.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/346/10291_
5.472187038127060.01.5746.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0115560/350/10753_
5.47202224936777000.01.7149.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb9QwEL0j8R8s3%2BM

0-0115560/425/10539_
5.494552038723580.01.8448.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwV2t

0-0115560/367/10424_
5.452483288341415210.01.7447.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0115560/292/10672_
5.49906042285600.01.4247.34
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/353/10083_
5.46244568438850970.01.6245.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec3HCL

0-0115560/370/10481_
5.4623785540389140.01.6848.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/378/10061_
5.49295041071730.01.6946.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/407/10559_
5.481444040464540.01.9047.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/365/10410_
5.471774048480910.01.6546.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/353/10976_
5.48112226439413900.01.7248.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BIfI%

0-0115560/368/10627_
5.452551222240212330.01.7148.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNb9wgEL1X6n9A3I0%2

0-0115560/345/10196_
5.48123239337872660.01.5146.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJOQDt

0-0115560/303/10407_
5.4718314142270240.01.8347.27
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/426/10649_
5.4922045238053690.02.3148.84
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVJNT9wwEL1X6n%2BwfI%

1-0242130/1228/8151_
18.85107647430113710.05.6836.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Decy1XC

1-0242130/1251/8228_
18.851353033268940.06.8338.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1227/8157_
18.8586984932038720.06.2136.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0242130/1338/8293_
18.8576224030975490.06.7637.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d220c9f412e0

1-0242130/1213/8796_
18.85113288632051980.06.0438.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSXBKK

1-0242130/1191/8553_
18.832320028690020.05.8338.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0242130/1304/8411_
18.8324128632760400.06.3736.89
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/1391/8617_
18.832483312832804990.06.5638.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0242130/1153/8383_
18.83203522232764240.05.4837.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec4eya

1-0242130/1240/8327_
18.85312130758510.05.7237.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0242130/1227/8311_
18.8545740129363720.06.0936.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgCI

1-0242130/1283/9025_
18.841836132395630.06.5338.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0242130/1405/8788_
18.83246385532838980.07.5140.44
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BWx

1-0242130/1327/8442_
18.8611238831504680.06.5438.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUhIF

1-0242130/1318/8286_
18.831931032325890.06.6538.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0242130/1355/8603_
18.832196130564750.06.4638.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0242130/1418/8600_
18.8560736831590220.06.9039.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW

1-0242130/1247/8324_
18.860029299560.06.0537.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /.vscode/sftp.json HTTP/1.1

1-0242130/1493/8341_
18.841462030561310.07.1937.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/1341/8644_
18.84179320731779180.06.4839.83
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecyNsY<

Found on 2024-11-12 06:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2e1598e33

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 19:42:01 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  62 days 13 hours 4 minutes 3 seconds
Server load: 0.68 0.83 0.96
Total accesses: 529816 - Total Traffic: 2.4 GB - Total Duration: 203861204
CPU Usage: u57.48 s94.18 cu181.21 cs89.85 - .00782% CPU load
.098 requests/sec - 467 B/second - 4763 B/request - 384.777 ms/request
1 requests currently being processed, 74 idle workers
________________________________________________________________
______W____.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0115560/53/10438_
0.9213329742579790.00.2747.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/49/10023_
0.92112154439625660.00.2344.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3d8359a0f7c4a

0-0115560/77/9889_
0.932080038648440.00.2845.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/45/10464_
0.933948136707690.00.2248.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET / HTTP/1.1

0-0115560/88/10517_
0.938064539289220.00.4146.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bc8fef4027d48

0-0115560/73/10193_
0.9262123735652870.00.3246.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/70/10112_
0.9328564144567210.00.3546.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/56/10258_
0.9344037340352160.00.2746.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0115560/57/10341_
0.92136064039397150.00.2745.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/89/9866_
0.9213425835608760.00.3945.96
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/65/10010_
0.93421913637177470.00.3145.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee4178c85cbc3

0-0115560/74/10477_
0.9256103835772910.00.3248.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9cd3c9408766e

0-0115560/59/10173_
0.9299634036273800.00.3347.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/61/10118_
0.9289633439086580.00.3246.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eb904382a2c81

0-0115560/57/10437_
0.93164040868170.00.3346.25
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0115560/70/9800_
0.92791011637702810.00.3844.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1af2970a4b7ad

0-0115560/51/10162_
0.9265953538646050.00.2046.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/88/9771_
0.92101953939498080.00.4345.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/74/10226_
0.931344139285060.00.2746.04
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0115560/66/10111_
0.9326243947345840.00.2544.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/60/10683_
0.938724238004540.00.2847.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0115560/56/10315_
0.92959643337400550.00.2546.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0115560/85/9936_
0.931503157636871150.00.3645.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0115560/51/10155_
0.9330994941379800.00.2945.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0115560/78/10301_
0.92109291134598330.00.3446.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/920/7843_
14.25254141529110410.04.2535.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BV

1-0242130/986/7963_
14.251441031877210.05.2436.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/985/7915_
14.27855130029480.05.0235.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0242130/1004/7959_
14.277423628705610.05.1536.02
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/958/8541_
14.251544030260470.04.9037.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/890/8252_
14.2485293827454830.04.3537.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/947/8054_
14.23110894230120150.04.9135.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc2f0f122468d

1-0242130/921/8147_
14.2313558730551450.04.5636.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/941/8171_
14.24708324131879330.04.5836.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0242130/948/8035_
14.27322028762170.04.4436.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/960/8044_
14.23116536928162750.04.7035.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f22c8165dac00

1-0242130/989/8731_
14.2461304531351900.05.0637.44
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/1092/8475_
14.23134154029892640.05.5938.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b5aa7e988c962

1-0242130/991/8106_
14.24106588929607430.05.1036.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/1008/7976_
14.2464804831029640.05.2337.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/967/8215_
14.249413029105870.04.6537.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0242130/1059/8241_
14.27121029989510.04.9937.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/930/8007_
14.2498084327814330.04.6736.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/1167/8015_
14.2529953929592970.05.5335.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/1070/8373_
14.2454643930806670.05.1538.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f844d4fc76cf0

1-0242130/996/8590_
14.254180168829324440.05.2237.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

<

Found on 2024-11-10 19:41

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d286d37786

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 19:57:02 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  60 days 13 hours 19 minutes 4 seconds
Server load: 0.80 0.73 0.88
Total accesses: 521776 - Total Traffic: 2.3 GB - Total Duration: 200504971
CPU Usage: u66.57 s96.16 cu167.58 cs83.22 - .0079% CPU load
.0997 requests/sec - 474 B/second - 4758 B/request - 384.274 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325520/1436/10296_
18.9583264842029390.06.9046.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_186f4e1c89ab3

0-0325520/1216/9881_
18.9631214638761690.05.6944.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3dbb453a18e8b

0-0325520/1255/9693_
18.971893738159480.05.9244.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1248/10348_
18.93109873936204810.05.9747.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1293/10363_
18.93112095138784460.05.8745.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1351/9995_
18.962886035195810.06.5045.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/1292/9987_
18.95108324944062950.05.8745.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/1225/10092_
18.9571194839696880.06.2945.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1366/10175_
18.9576081038640300.06.6844.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1362/9701_
18.9573963735135920.07.0645.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1349/9873_
18.9577975236684600.06.6044.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9e31c2a530ad6

0-0325520/1320/10328_
18.9635383235042680.06.4847.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1315/10046_
18.9537933835499350.06.0646.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1380/9945_
18.95612847038594920.07.3045.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BTC

0-0325520/1343/10303_
18.9710423840145240.06.4845.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_61f83ab1394bb

0-0325520/1368/9665_
18.9545533737213740.06.9143.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0325520/1658/10024_
18.9624668238237000.07.5845.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a72f46f971d1

0-0325520/1120/9575_
18.9540094138965740.06.0344.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1217/10058_
18.961844138658320.05.9845.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0325520/1399/9971_
18.97328046501900.06.6844.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/1329/10539_
18.9594305437314340.06.2646.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1346/10166_
18.9622303836575860.06.5145.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/1405/9784_
18.961804036321840.07.1444.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/1309/9995_
18.95107367440783110.06.4344.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325528/1421/10109W
18.970033927889.76.6245.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

1-0242130/818/7741_
11.94262841528505860.03.7135.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2Bex

1-0242130/846/7823_
11.941844131331730.04.5636.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0242130/799/7729_
11.9418294929391650.04.0734.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/845/7800_
11.9417543428138430.04.5235.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_59ebd7ae5bea1

1-0242130/770/8353_
11.94289647229320440.03.9436.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BWw

1-0242130/765/8127_
11.93104374426943420.03.7636.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4157206b9ba53

1-0242130/826/7933_
11.93118305029642870.04.2734.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/799/8025_
11.944084429878330.04.0036.07
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/779/8009_
11.9310832130927050.03.7435.34
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0242130/801/7888_
11.94303628205500.03.7835.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/827/7911_
11.94734127429870.04.0634.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/804/8546_
11.938559730453360.03.9336.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0242130/892/8275_
11.93111054428904750.04.6937.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/847/7962_
11.93108694328888270.04.0335.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/826/7794_
11.9379245930403030.04.1936.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_742b575e6e323

1-0242130/826/8074_
11.9372723728602220.04.0236.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/882/8064_
11.9346308229456640.04.4036.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/784/7861_
11.9342759227255950.03.9935.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_89558739e3aba

1-0242130/985/7833_
11.9376603328840240.04.7034.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_51ebfed3c74a9

1-0242130/910/8213_
11.9375053330162400.04.4837.83
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/817/8411_
11.9339053628439650.04.4336.79
127.0.0.1htt

Found on 2024-11-08 19:56

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d23d124087

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 19:45:03 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  58 days 13 hours 7 minutes 5 seconds
Server load: 2.29 1.27 1.33
Total accesses: 501710 - Total Traffic: 2.2 GB - Total Duration: 191343801
CPU Usage: u56.81 s90 cu167.58 cs83.22 - .00786% CPU load
.0992 requests/sec - 469 B/second - 4732 B/request - 381.383 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325520/1052/9912_
13.253297140159050.05.0444.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0325520/812/9477_
13.262223036690490.03.6942.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/859/9297_
13.23595621836344460.03.9443.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0325520/886/9986_
13.236312634886700.04.2246.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/918/9988_
13.255095037499750.04.0543.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-03255210/992/9636W
13.2800337228816.54.6143.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0325520/974/9669_
13.25427425042347950.04.1744.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0325520/842/9709_
13.2630874237809420.04.1643.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/932/9741_
13.2711684736664070.04.4542.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15c78525b8f04

0-0325520/908/9247_
13.253404633303040.04.5042.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0325520/970/9494_
13.263239034611220.04.7643.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0325520/951/9959_
13.27479033676720.04.6945.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/908/9639_
13.2715116933802420.04.1744.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/959/9524_
13.2628123336476960.05.0843.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/945/9905_
13.236687738371180.04.3643.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/886/9183_
13.283864335515000.04.3241.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/1175/9541_
13.28328036043550.05.2543.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/778/9233_
13.274933737366270.04.2742.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/819/9660_
13.23737672836444110.04.1543.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

0-0325520/1007/9579_
13.2451784044579090.04.7042.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/971/10181_
13.2551013335866310.04.5444.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/925/9745_
13.2845035057490.04.4343.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/1009/9388_
13.2367943334677850.04.7242.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0325520/993/9679_
13.253453739055140.04.7243.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0325520/890/9578_
13.2364313632133890.04.1143.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/420/7343_
6.0269013826980930.01.8233.14
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/328/7305_
6.059029376200.01.4132.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/413/7343_
6.02782219327765450.02.1032.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0242130/398/7353_
6.0266946326192950.01.9732.84
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cb72a6f742471

1-0242130/379/7962_
6.045837528185880.01.9334.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec202C

1-0242130/352/7714_
6.033289825310700.01.6034.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0242130/393/7500_
6.0265704827518350.01.9532.47
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/430/7656_
6.03631719427823760.02.2134.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0242130/413/7643_
6.035990028902700.01.9233.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0242130/427/7514_
6.035105126776210.02.1033.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0242130/394/7478_
6.0355565425355360.01.7932.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec079d14ad042

1-0242130/408/8150_
6.033419027692890.01.9334.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /.env.example HTTP/1.1

1-0242130/467/7850_
6.035168027293880.02.2035.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0242130/472/7587_
6.03495943927276480.02.2133.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyQ2Wb

1-0242130/349/7317_
6.0339123328167290.01.7733.89
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/481/7729_
6.033311725736720.02.1434.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0242130/453/7635_
6.04889027437280.02.0734.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/438/7515_
6.0329664025658900.02.0433.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0242130/568/7416_
6.0420703727575490.02.7932.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d927d530f2cf2

1-0242130/465/7768_
6.0324926727994040.02.2135.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ca4d34bf9d930

1-0242130/461/8055_
6.04119520526532560.02.6034.96
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0242130/337/7159_
6.033193

Found on 2024-11-06 19:44

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2eae787e3

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 04-Nov-2024 21:26:10 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  56 days 14 hours 48 minutes 12 seconds
Server load: 0.47 0.79 1.03
Total accesses: 481650 - Total Traffic: 2.1 GB - Total Duration: 183075703
CPU Usage: u47.72 s83.02 cu167.58 cs83.22 - .0078% CPU load
.0985 requests/sec - 464 B/second - 4717 B/request - 380.101 ms/request
1 requests currently being processed, 49 idle workers
___________W______________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325520/627/9487_
7.3726838538493970.03.2343.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbbtswDH3PVwR%2Btx2

0-0325520/471/9136_
7.3715519735396680.02.0440.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYR

0-0325520/533/8971_
7.3741728734850880.02.3941.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec3HC3

0-0325520/533/9633_
7.37516033530320.02.4544.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/524/9594_
7.37477035328230.02.1842.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0325520/525/9169_
7.35102318531601820.02.3841.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec21CF

0-0325520/497/9192_
7.37403339963970.02.1542.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/403.php?StateId=_a990d86c3be187b8

0-0325520/485/9352_
7.37238036317700.02.3441.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/565/9374_
7.378337334897430.02.6840.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUg2i

0-0325520/517/8856_
7.37368031686790.02.7340.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/527/9051_
7.32127419833419840.02.6040.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Ivsl

0-0325529/504/9512W
7.3800319135817.52.2343.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0325520/514/9245_
7.37210032444840.02.2942.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/625/9190_
7.321237034968800.03.3241.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/496/9456_
7.3697185736326090.02.2341.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0325520/525/8822_
7.3410554034111610.02.5039.34
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/615/8981_
7.321220034396600.02.5940.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0325520/501/8956_
7.32115523936195550.02.2040.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=fVLLbtswELwH6D8IvIuSj

0-0325520/449/9290_
7.359943034764820.02.2441.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7279a8bc1be83

0-0325520/627/9199_
7.37609042668450.02.8240.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/546/9756_
7.36847033973760.02.5542.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

0-0325520/496/9316_
7.341094033484840.02.1741.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/596/8975_
7.36863033024580.02.6440.44
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/527/9213_
7.37351037346490.02.4940.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0325520/459/9147_
7.36725030726060.01.9041.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/15/6938_
0.34818025634550.00.0931.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/10/6987_
0.33946027883620.00.0631.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/19/6949_
0.34847126531110.00.0830.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0242130/35/6990_
0.33987124498520.00.1831.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/simplewebauthn.es5.umd.min.js HTT

1-0242130/14/7597_
0.311009026262780.00.0832.96
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/21/7383_
0.30123118023579870.00.1032.83
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5As2B

1-0242130/23/7130_
0.3470125326186140.00.1530.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BST

1-0242130/27/7253_
0.34607026390360.00.1432.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/30/7260_
0.34484126939120.00.1931.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0242130/31/7118_
0.34435024918770.00.1631.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/17/7101_
0.3540320323445640.00.1030.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0242130/16/7758_
0.3537735725763870.00.0832.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUjIL

1-0242130/28/7411_
0.35351025085010.00.1633.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/15/7130_
0.3626840225573350.00.0831.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNdj5swEHzPr4h4BwKXO

1-0242130/23/6991_
0.372353326622490.00.1432.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0242130/30/7278_
0.37228024220630.00.1532.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/21/7203_
0.3716239126030610.00.0832.25
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PHm1F

1-0242130/26/7103_
0.3713217524036540.00.1931.92
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0242130/22/6870_
0.371636625483890.00.1330.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec22Wp

1-0242130/28/7331_
0.30129888026219150.00.1833.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0242130/27/7621_
0.301262025206670.00.1032.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0242130/18/6840_
0.3

Found on 2024-11-04 21:26

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2fd423536

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 23:43:31 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  54 days 17 hours 5 minutes 33 seconds
Server load: 1.05 1.28 1.37
Total accesses: 463378 - Total Traffic: 2.0 GB - Total Duration: 175507195
CPU Usage: u52.6 s83.12 cu154.42 cs76.87 - .00776% CPU load
.098 requests/sec - 461 B/second - 4710 B/request - 378.756 ms/request
1 requests currently being processed, 49 idle workers
______________________W__.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325520/191/9051_
2.131266436594400.01.2441.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_749ec1ce379a5

0-0325520/155/8820_
2.131312432670190.00.7139.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/140/8578_
2.121345033669490.00.6339.69
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/174/9274_
2.121362032239430.00.7442.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/172/9242_
2.1213964034254620.00.6740.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/145/8789_
2.143253830512720.00.6239.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0c0666941f844

0-0325520/129/8824_
2.131158106837904340.00.5640.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0325520/209/9076_
2.13112421835341220.01.1940.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcA4GFt

0-0325520/154/8963_
2.131049333070430.00.6338.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/145/8484_
2.139983129414010.00.5338.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9a8761a420f82

0-0325520/154/8678_
2.1373714431905210.00.9639.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf16f1d663126

0-0325520/158/9166_
2.146945231068560.00.6341.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_96ce1c81aa949

0-0325520/108/8839_
2.14654331203550.00.4341.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6b500f34c3604

0-0325520/177/8742_
2.14558333604110.00.8338.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2ed196b597691

0-0325520/171/9131_
2.14495633869280.00.6439.69
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_325cc0a3a1f4b

0-0325520/150/8447_
2.1446928932523460.00.6937.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUgIs

0-0325520/247/8613_
2.14359633498080.00.8339.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/132/8587_
2.14414134660850.00.5439.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0325520/133/8974_
2.1418818733855010.00.6139.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/170/8742_
2.141614041151580.00.7838.27
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8839958bd0fbc

0-0325520/145/9355_
2.16343632716820.00.6041.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/147/8967_
2.14133432216140.00.5439.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325528/196/8575W
2.160031586739.70.8638.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0325520/122/8808_
2.121514435166320.00.5338.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/119/8807_
2.1214193729678230.00.4639.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6923.
0.005029374925581900.00.0031.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6977.
0.00502937427697870.00.0031.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6930.
0.00502937026415620.00.0030.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6955.
0.00502937024423830.00.0030.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7583.
0.00502937026212220.00.0032.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7362.
0.00502937023522420.00.0032.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7107.
0.005029373726095070.00.0030.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7226.
0.005029374126212250.00.0032.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7230.
0.00502937412326897110.00.0031.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcA4SlG

1-0-0/0/7087.
0.00502937024835800.00.0031.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7084.
0.005029373023375770.00.0030.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26afe3175ea33

1-0-0/0/7742.
0.005029375725708620.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7383.
0.00502937025003170.00.0032.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/7115.
0.005029374325470790.00.0031.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6968.
0.0050293718026426400.00.0032.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7248.
0.00502937424079770.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/7182.
0.00502937025985300.00.0032.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7077.
0.00502937023971470.00.0031.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6848.
0.00502937225398320.00.0030.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7303.
0.005029374726036590.00.0033.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7594.
0.00</

Found on 2024-11-02 23:43

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2d5708dd3

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 22:36:11 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  53 days 15 hours 58 minutes 13 seconds
Server load: 1.60 1.53 1.43
Total accesses: 458575 - Total Traffic: 2.0 GB - Total Duration: 174167495
CPU Usage: u50.19 s80.79 cu154.42 cs76.87 - .00781% CPU load
.0989 requests/sec - 466 B/second - 4713 B/request - 379.802 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................______________
______W____.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0325520/78/8938_
0.83386436395300.00.4040.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/73/8738_
0.83568332352220.00.3238.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7525879b89288

0-0325520/53/8491_
0.8362219533316140.00.2539.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/58/9158_
0.8372070531903590.00.2742.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/56/9126_
0.83850433853970.00.2340.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/52/8696_
0.82171143430158070.00.2239.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUggF

0-0325520/51/8746_
0.83329901037431160.00.2640.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeybWhr

0-0325520/127/8994_
0.8313724635130740.00.8340.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/44/8853_
0.83186332599400.00.1738.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da5c62eaba4aa

0-0325520/54/8393_
0.83544929057820.00.2138.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/74/8598_
0.83274031636710.00.6738.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0325520/68/9076_
0.8320030834160.00.2441.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0325520/44/8775_
0.812084331045740.00.1840.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_98d41ad973eb0

0-0325520/37/8602_
0.812070433347120.00.1538.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/64/9024_
0.811997333677910.00.2439.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ebcba06695c7c

0-0325520/50/8347_
0.811936332296110.00.2137.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2c00f0a962851

0-0325520/142/8508_
0.821874033214930.00.3738.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0325520/44/8499_
0.82184219334471410.00.2138.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/51/8892_
0.82161537733622500.00.2439.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJHHKb

0-0325520/54/8626_
0.82145217940939910.00.2937.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0325520/35/9245_
0.821278332375020.00.1340.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_505c7a42631e8

0-0325520/42/8862_
0.821196032009840.00.1439.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0325520/47/8426_
0.821174031382150.00.2138.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0325520/50/8736_
0.831007534943250.00.2338.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2641e4c6d3472

0-0325520/42/8730_
0.83943629538480.00.1639.47
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0-0/0/6923.
0.004124984925581900.00.0031.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6977.
0.00412498427697870.00.0031.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6930.
0.00412498026415620.00.0030.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6955.
0.00412498024423830.00.0030.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7583.
0.00412498026212220.00.0032.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7362.
0.00412498023522420.00.0032.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7107.
0.004124983726095070.00.0030.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7226.
0.004124984126212250.00.0032.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7230.
0.00412498412326897110.00.0031.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcA4SlG

1-0-0/0/7087.
0.00412498024835800.00.0031.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7084.
0.004124983023375770.00.0030.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26afe3175ea33

1-0-0/0/7742.
0.004124985725708620.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7383.
0.00412498025003170.00.0032.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/7115.
0.004124984325470790.00.0031.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6968.
0.0041249818026426400.00.0032.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7248.
0.00412498424079770.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/7182.
0.00412498025985300.00.0032.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7077.
0.00412498023971470.00.0031.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6848.
0.00412498225398320.00.0030.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7303.
0.004124984726036590.00.0033.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7594.
0.00

Found on 2024-11-01 22:36

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2e1647ef1

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 14:00:09 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  51 days 7 hours 22 minutes 10 seconds
Server load: 0.91 0.54 0.57
Total accesses: 434436 - Total Traffic: 1.9 GB - Total Duration: 163949533
CPU Usage: u54.75 s80.75 cu139.11 cs69.6 - .00776% CPU load
.098 requests/sec - 461 B/second - 4705 B/request - 377.385 ms/request
1 requests currently being processed, 49 idle workers
_______________________W_.........................______________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163980/1442/8398_
16.831213334547620.07.3037.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4fb7d9a5a8bae

0-0163980/1214/8179_
16.82155323130336530.05.4136.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1262/8056_
16.82144221231359650.06.2537.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1171/8664_
16.821960330115050.06.1639.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_594eea6445f4c

0-0163980/1254/8661_
16.822110632545410.05.7538.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e56631404783

0-0163980/1237/8290_
16.82235623528540050.05.9837.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1176/8249_
16.82182018434094380.05.3937.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1367/8353_
16.821751532667700.06.3537.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_702d94e1c609a

0-0163980/1167/8427_
16.83928530894730.05.7236.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c2c078bc5c59

0-0163980/1138/7987_
16.821363427983800.05.4936.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1206/8002_
16.834323727689150.05.6935.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0163980/1263/8499_
16.83669528331400.06.4638.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01029161dca7a

0-0163980/1164/8318_
16.83125921129309510.06.0938.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1224/8117_
16.83539331489920.05.8436.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fd3d241d7a0d7

0-0163980/1238/8552_
16.833083831404110.05.8437.25
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0163980/1102/7824_
16.8344530370830.05.2934.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbc5a1c1c57e6

0-0163980/1118/7950_
16.838413831410750.05.7636.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_443802740c9bd

0-0163980/1290/8036_
16.83254332028720.06.0336.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d7898ce793f9b

0-0163980/1247/8490_
16.822705531374020.05.7137.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2bd0e715dac1

0-0163980/1084/8148_
16.8317120038907280.05.3735.30
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1135/8812_
16.83114623430633030.05.2538.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/1280/8407_
16.822414329957600.06.1437.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8f7df338ab0ad

0-0163980/1248/8013_
16.822010529615080.05.8635.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9d26e7876db47

0-0163988/1186/8240W
16.830033663399.75.4736.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0163980/1267/8295_
16.8318828095500.05.8737.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/6923.
0.002087354925581900.00.0031.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6977.
0.00208735427697870.00.0031.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/6930.
0.00208735026415620.00.0030.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6955.
0.00208735024423830.00.0030.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7583.
0.00208735026212220.00.0032.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7362.
0.00208735023522420.00.0032.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7107.
0.002087353726095070.00.0030.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7226.
0.002087354126212250.00.0032.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7230.
0.00208735412326897110.00.0031.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj5swEL3nV0TcA4SlG

1-0-0/0/7087.
0.00208735024835800.00.0031.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7084.
0.002087353023375770.00.0030.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26afe3175ea33

1-0-0/0/7742.
0.002087355725708620.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/7383.
0.00208735025003170.00.0032.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/7115.
0.002087354325470790.00.0031.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/6968.
0.0020873518026426400.00.0032.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-0-0/0/7248.
0.00208735424079770.00.0032.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/7182.
0.00208735025985300.00.0032.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/7077.
0.00208735023971470.00.0031.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6848.
0.00208735225398320.00.0030.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/7303.
0.002087354726036590.00.0033.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_lo

Found on 2024-10-30 14:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d288a35b8b

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 09:16:57 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  47 days 2 hours 38 minutes 59 seconds
Server load: 1.72 1.51 1.54
Total accesses: 395308 - Total Traffic: 1.7 GB - Total Duration: 145245348
CPU Usage: u49.65 s74.39 cu125.79 cs62.66 - .00768% CPU load
.0971 requests/sec - 451 B/second - 4647 B/request - 367.423 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163980/461/7417_
5.62634029203980.02.2032.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/486/7451_
5.6012363327307970.01.8932.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_438e23afe9da4

0-0163980/426/7220_
5.6012013427432240.02.0232.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0163980/360/7853_
5.6013406927416090.01.6735.27
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0163980/416/7823_
5.601492028498990.01.9034.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/495/7548_
5.5918316725548830.02.3533.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1ffcebf72c8a

0-0163980/499/7572_
5.61686030726910.02.0434.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/479/7465_
5.623362929118100.02.0132.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c586bb0351d0f

0-0163980/443/7703_
5.5730363627894940.01.9932.69
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5eb82315af92

0-0163988/351/7200W
5.620023992989.71.4832.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0163980/431/7227_
5.592517124191490.01.8432.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0163980/554/7790_
5.59248283826271970.02.7734.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0163980/398/7552_
5.57280625125695460.01.7134.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/491/7384_
5.582778026058590.02.1732.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/398/7712_
5.5925093627175260.01.7633.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/417/7139_
5.592360026962560.01.9131.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/370/7202_
5.592443165326545800.01.7232.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0163980/461/7207_
5.5924363328386140.02.2632.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b13774a503c83

0-0163980/417/7660_
5.5921353228270120.01.6433.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b519725974fd7

0-0163980/399/7463_
5.5924133934141870.01.6731.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/379/8056_
5.58273321226248790.01.6334.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a6bf7bab3cde1

0-0163980/428/7555_
5.6015773226451120.01.9032.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0163980/402/7167_
5.5922173625101960.01.6831.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45559ba62da42

0-0163980/457/7511_
5.6015363530277510.01.9132.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_839bf9b550b87

0-0163980/393/7421_
5.601709024731570.01.7633.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/1274/6618_
16.3822263724056480.06.3329.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/1279/6755_
16.372443026438110.06.3930.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/1218/6616_
16.3824233625377720.05.2229.16
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/1312/6709_
16.3915023023530380.05.5929.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/1219/7293_
16.3724923424684430.05.1631.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2e8619c3d2d7e

1-062270/1365/7150_
16.41922022314730.05.9931.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/1228/6835_
16.37245015024830970.05.2929.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/1179/6921_
16.391467724937750.05.0430.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/1225/6857_
16.391680825555630.05.3729.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/1197/6803_
16.382190023960440.05.2830.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/1195/6844_
16.40121880422142000.05.6829.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/1246/7486_
16.391544124701270.05.2331.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-062270/1321/7088_
16.4012663123722260.05.6531.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b1247e6d7bbc

1-062270/1403/6848_
16.3431154824310590.06.2630.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/1325/6654_
16.41595025534160.05.9430.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/1216/6966_
16.416534922880610.05.2130.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/1203/6944_
16.352806124579570.05.4831.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-062270/1369/6803_
16.362515122882400.06.1730.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-062270/1222/6609_
16.413411624519570.05.4428.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_30d9132bea224

1-062270/1228/7049_
16.352791125098420.06.0332.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-062270/1230/7274_
16.35281381924057290.05.0430

Found on 2024-10-26 09:16

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d218374778

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 08:15:33 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  45 days 1 hour 37 minutes 35 seconds
Server load: 1.63 1.16 1.27
Total accesses: 377245 - Total Traffic: 1.6 GB - Total Duration: 139671268
CPU Usage: u42.27 s68.22 cu125.79 cs62.66 - .00768% CPU load
.0969 requests/sec - 450 B/second - 4654 B/request - 370.24 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________________W..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0163980/105/7061_
0.9753418328403480.00.5930.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vHjkE

0-0163980/102/7067_
0.97638025816190.00.3631.14
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/65/6859_
0.97556026861030.00.2931.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/68/7561_
0.9774824726516510.00.3033.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/40/7447_
0.97899027444970.00.2032.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/93/7146_
0.9694821223416230.00.6232.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/101/7174_
0.97258429853040.00.4332.89
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/68/7054_
0.9737845328046460.00.2731.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecxWXr

0-0163980/80/7340_
0.9718042626853120.00.4131.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeczOXX

0-0163980/61/6910_
0.97145323027590.00.3131.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_be6e334174d68

0-0163980/47/6843_
0.9791023050260.00.2630.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0163980/70/7306_
0.9768025281360.00.3332.44
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/93/7247_
0.9733524800940.00.4333.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cdd4865efe92e

0-0163980/57/6950_
0.97254624903900.00.3230.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9aa2ec8b9772e

0-0163980/74/7388_
0.9414923925630230.00.3731.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/73/6795_
0.951403025767770.00.4029.82
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/67/6899_
0.9514303325709460.00.3931.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/39/6785_
0.9512343226723220.00.1930.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/57/7300_
0.9512894527275680.00.3032.21
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/66/7130_
0.9512063533056140.00.2730.21
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92a082e2777ed

0-0163980/50/7727_
0.951133025525530.00.2533.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0163980/56/7183_
0.9610743024789330.00.2931.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0163980/70/6835_
0.96101618823872430.00.2930.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/66/7120_
0.9793219629163810.00.3231.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0163980/83/7111_
0.97812323888350.00.4331.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b3ea52c2f2fc

1-062270/890/6234_
11.923917723075330.04.5928.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /saml2/idp/SSOService.php HTTP/1.1

1-062270/944/6420_
11.92914325171690.04.3828.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/856/6254_
11.881392623954560.03.7327.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/964/6361_
11.90106682422514530.04.1328.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/845/6919_
11.92574023803420.03.7230.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/892/6677_
11.90818160321203670.04.0429.70
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/923/6530_
11.92803823592190.04.0427.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/905/6647_
11.909232123355780.03.9429.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/959/6591_
11.891145824663710.04.2728.66
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/816/6422_
11.881462322486610.03.7028.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c5defab9b3f79

1-062270/867/6516_
11.9098619021262730.04.2027.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5GvZp

1-062270/880/7120_
11.881227114923122190.03.7329.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/945/6712_
11.901100522682700.04.1529.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-062270/992/6437_
11.908052023048420.04.4828.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-062270/888/6217_
11.90740324615560.04.0528.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4977edd889fcd

1-062270/839/6589_
11.9093818921492600.03.6329.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BdQ

1-062270/855/6596_
11.90513523821310.04.0529.64
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/965/6399_
11.91245421820130.04.4328.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/861/6248_
11.90584423710990.03.8827.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/837/6658_
11.9128579523911920.04.4230.57
127.0.0.1http/1.1ip-10-1-88-194.ap-s

Found on 2024-10-24 08:15

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2b95cd46d

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 11:52:03 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  43 days 5 hours 14 minutes 5 seconds
Server load: 0.59 0.83 0.83
Total accesses: 359784 - Total Traffic: 1.6 GB - Total Duration: 132522685
CPU Usage: u47.01 s68.84 cu112.92 cs56.32 - .00763% CPU load
.0964 requests/sec - 446 B/second - 4638 B/request - 368.34 ms/request
2 requests currently being processed, 48 idle workers
____________W_____________________K_______________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-099900/1069/6669_
15.31314425908310.04.8328.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_89fb4004a8f2f

0-099900/1174/6713_
15.309203124135300.05.4629.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e48b5829d61b5

0-099900/1041/6534_
15.301221524969310.05.0229.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/1087/7162_
15.301666325100850.04.9631.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/1018/7130_
15.3010303725918600.04.3031.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1db416a1ffea2

0-099900/1276/6843_
15.301856022168110.05.9430.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-099900/1096/6723_
15.30181940228194550.04.9330.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BWT

0-099900/1094/6745_
15.3018783326734640.04.8829.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_33f50175aaecd

0-099900/1103/6930_
15.311064125787810.04.7729.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/1052/6629_
15.3140512821415000.04.5829.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/1051/6513_
15.3148018421773860.04.8829.07
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/1232/6884_
15.301696324028850.05.6230.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b1006eed96870

0-099908/1087/6896W
15.3100236466116.85.3431.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-099900/1138/6550_
15.29192915423873440.05.0828.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-099900/1032/7039_
15.301776024361890.04.5730.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cHEAD /%D0%90%D1%80%D1%85%D0%B8%D0%B2.tar.gz HTTP/1.1

0-099900/1173/6493_
15.3016735724170180.05.3628.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/1046/6468_
15.3015833224173480.05.1029.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/1199/6451_
15.282105325797030.05.5229.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eee461ee3febb

0-099900/1133/7027_
15.31570126059690.05.6331.02
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-099900/1053/6840_
15.2920203432084910.04.4229.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_37c4b11ac5a9e

0-099900/1080/7396_
15.31627524193960.04.9731.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/1035/6886_
15.301451623820250.04.8029.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d59e170946230

0-099900/1043/6453_
15.3011553522836350.04.7628.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d7f02b3fc657c

0-099900/1137/6781_
15.3179917827657390.04.8629.84
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/1000/6844_
15.31350522566410.04.6930.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_388038765890c

1-062270/494/5838_
7.05597021875940.02.2925.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/uitheme1.8/jquery-ui.css HTTP/1.1

1-062270/553/6029_
7.059113624256030.02.5026.64
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d24a2bdb85800

1-062270/559/5957_
7.052115422431230.02.4026.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-062270/641/6038_
7.0568020686670.02.6626.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/473/6547_
7.0534288022401210.02.0428.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/517/6302_
7.0317523919000630.02.3327.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/539/6146_
7.05562022160350.02.3826.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-062270/515/6257_
7.02191882321364850.02.1627.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/538/6170_
7.0119413123437070.02.3526.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_25376def1151a

1-062271/518/6124K
7.051021168251.02.2427.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /about HTTP/1.1

1-062270/511/6160_
7.0318253820068540.02.4126.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/602/6842_
7.02184676821881780.02.4228.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/562/6329_
7.012044021061150.02.5428.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/607/6052_
7.041665021754920.02.8326.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/525/5854_
7.031808022157230.02.3126.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/535/6285_
7.041675520644540.02.2428.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-062270/539/6280_
7.04127311522849850.02.3927.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d1703a302320

1-062270/581/6015_
7.0597931520562500.02.6226.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7vAniW

1-062270/537/5924_
7.041638421741250.02.4225.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/543/6364_
7.041164522848820.02.6528.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?Au

Found on 2024-10-22 11:51

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2adb950ca

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 11:01:33 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  41 days 4 hours 23 minutes 35 seconds
Server load: 2.62 1.76 1.26
Total accesses: 338724 - Total Traffic: 1.5 GB - Total Duration: 123789424
CPU Usage: u38.15 s62.07 cu112.92 cs56.32 - .00757% CPU load
.0952 requests/sec - 440 B/second - 4632 B/request - 365.458 ms/request
1 requests currently being processed, 49 idle workers
______W___________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-099900/678/6278_
9.741443123961550.02.9727.07
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/693/6232_
9.7262521522455610.03.2327.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec91lA

0-099900/618/6111_
9.716854322749210.02.8827.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/650/6725_
9.7110973923833840.03.1429.89
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/592/6704_
9.711062523752320.02.6629.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b1bc968018cfd

0-099900/792/6359_
9.7111354121029230.03.7828.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099908/677/6304W
9.740024740509.73.0128.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-099900/733/6384_
9.7497024510780.03.2828.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-099900/714/6541_
9.741543624429130.03.0927.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_20f1da8b87bc1

0-099900/649/6226_
9.73368020061060.02.8328.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/666/6128_
9.73502020680110.03.1927.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/702/6354_
9.701314322185900.03.0027.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fef421392a34

0-099900/655/6464_
9.7482022031930.03.4729.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-099900/643/6055_
9.701349021094940.02.9726.21
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-099900/605/6612_
9.711239023192680.02.6428.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-099900/759/6079_
9.717944122684470.03.5726.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/722/6144_
9.7170318222542550.03.4327.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/776/6028_
9.74117423751660.03.5627.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-099900/740/6634_
9.73383624741110.03.8529.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b2613aa1e2e2f

0-099900/643/6430_
9.74252030212190.02.6227.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-099900/638/6954_
9.71663022843320.02.8629.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/647/6498_
9.725743022494850.03.0028.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/654/6064_
9.73479021249950.03.0627.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-099900/709/6353_
9.735134026077610.02.7827.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/608/6452_
9.74320121508680.02.8128.74
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-062270/139/5483_
1.44148120101280.00.6124.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-062270/123/5599_
1.4325244623021790.00.4824.62
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec2ODw

1-062270/118/5516_
1.45923520641820.00.4824.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/181/5578_
1.4592018706690.00.6624.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/124/6198_
1.4413886021128410.00.4526.83
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/133/5918_
1.41919017503090.00.5126.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-062270/124/5731_
1.40129591720542260.00.4924.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-062270/99/5841_
1.4513018273840.00.4026.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/106/5738_
1.401338320218480.00.4724.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8efd78e56889f

1-062270/86/5692_
1.4013613719516730.00.3525.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-062270/74/5723_
1.401208418940630.00.3123.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_66b95fe15d8bb

1-062270/127/6367_
1.401120320071920.00.4926.47
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e3f5bb4c0e4eb

1-062270/127/5894_
1.401089019440600.00.5826.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-062270/155/5600_
1.41777320307310.00.7324.83
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c270a7749ef1

1-062270/96/5425_
1.41697320786320.00.3824.92
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d63478bbd2752

1-062270/105/5855_
1.41689019057870.00.4626.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-062270/105/5846_
1.4163918320586840.00.3725.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-062270/113/5547_
1.41614418656680.00.3924.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_90ff5552df02a

1-062270/138/5525_
1.4156833920585360.00.5923.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PCEVW

1-062270/113/5934_
1.41507020314200.00.4126.55
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-062270/100/6144_
1.42453520663340.00.40

Found on 2024-10-20 11:01

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2788afbbb

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 16-Oct-2024 12:02:59 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  37 days 5 hours 25 minutes 1 second
Server load: 0.86 1.06 1.06
Total accesses: 307488 - Total Traffic: 1.3 GB - Total Duration: 108160712
CPU Usage: u36.7 s56.91 cu99.51 cs49.59 - .00755% CPU load
.0956 requests/sec - 442 B/second - 4624 B/request - 351.756 ms/request
1 requests currently being processed, 49 idle workers
_________________________.........................___W__________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-099900/53/5653_
0.819013720738940.00.2224.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/79/5618_
0.831854519417960.00.4324.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/40/5533_
0.81648319453820.00.2124.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e20c096ad674d

0-099900/37/6112_
0.824903721606230.00.1926.94
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/55/6167_
0.815623319769860.00.3227.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/75/5642_
0.811034259118760780.00.3824.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/44/5671_
0.811123119424880.00.1825.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-099900/62/5713_
0.811257021281240.00.3225.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/50/5877_
0.81121019920090580.00.2524.64
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeczEK2

0-099900/58/5635_
0.811194417215370.00.2625.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/37/5499_
0.81116522317794320.00.1524.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSUiAs

0-099900/59/5711_
0.81101414518916340.00.2525.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cc88b0bdd7c31

0-099900/75/5884_
0.817963218142180.00.4226.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/42/5454_
0.8169638917094370.00.2123.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BST

0-099900/37/6044_
0.81663119362330.00.1725.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-099900/48/5368_
0.823743120233400.00.2723.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_564efe02bef3d

0-099900/50/5472_
0.824154119902070.00.3024.35
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-099900/68/5320_
0.811089020753150.00.3124.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/48/5942_
0.83164021353970.00.1925.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-099900/46/5833_
0.79161420625698520.00.2124.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/52/6368_
0.7915235420489680.00.2627.14
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-099900/31/5882_
0.801472419935220.00.2025.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/75/5485_
0.801437417770320.00.4024.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-099900/34/5678_
0.801316522559330.00.1325.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45c46153a5f44

0-099900/46/5890_
0.8013823419076900.00.2226.15
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_60891c7484c87

1-0-0/0/5344.
0.0026289419780520.00.0023.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0-0/0/5476.
0.0026289422597710.00.0024.14
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/5398.
0.0026289292220121870.00.0023.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwOWT

1-0-0/0/5397.
0.002628926318250940.00.0024.09
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwOS3

1-0-0/0/6074.
0.002628912220551440.00.0026.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/5785.
0.0026289017165530.00.0025.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/5607.
0.002628922518767370.00.0023.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec4MEt

1-0-0/0/5742.
0.0026289117337300.00.0025.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0-0/0/5632.
0.0026289118558990.00.0024.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/5606.
0.002628925219247540.00.0024.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec92EZ

1-0-0/0/5649.
0.0026289110218495910.00.0023.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/6240.
0.0026289019798500.00.0025.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/5767.
0.002628916218888350.00.0025.47
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_87f5a1302b025

1-0-0/0/5445.
0.0026289212219757390.00.0024.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/5329.
0.0026289020436230.00.0024.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/5750.
0.0026289018341470.00.0025.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/5741.
0.00262895220337300.00.0025.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/5434.
0.00262898918210330.00.0024.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_701146206b13a

1-0-0/0/5387.
0.0026289619890720.00.0023.31
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/5821.
0.0026289019925750.00.0026.14
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/6044.
0.0026289020414870.00.0025.55

Found on 2024-10-16 12:02

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2b417ed74

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 14-Oct-2024 09:45:25 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  35 days 3 hours 7 minutes 27 seconds
Server load: 0.93 0.68 0.83
Total accesses: 286277 - Total Traffic: 1.2 GB - Total Duration: 96456812
CPU Usage: u63.17 s69.41 cu63.25 cs29.31 - .00742% CPU load
.0943 requests/sec - 432 B/second - 4590 B/request - 336.935 ms/request
1 requests currently being processed, 74 idle workers
_______________________________________________________________W
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/2276/5331_
24.91436718168730.08.4122.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1827/5345_
24.9018626417863370.07.0923.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPLrtowEN3zFSj7PEtAt

0-0136710/1852/5246_
24.894633318006680.07.5523.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26bbae25fbfe2

0-0136710/2068/5863_
24.861539419797170.08.5125.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/2152/5873_
24.8910063017529480.08.5525.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2145237e5c0f9

0-0136710/2121/5280_
24.871227116972760.08.4322.96
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0136710/1989/5402_
24.903133318180490.08.1724.25
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/2052/5408_
24.90135318774510.07.8723.27
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5003d3f66c5b7

0-0136710/2060/5593_
24.861409118649580.07.3923.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0136710/1896/5320_
24.871269015448590.07.3723.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/2120/5158_
24.8976067915943910.08.4322.82
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeycVJq

0-0136710/2117/5367_
24.861754155216598530.08.5923.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BWI

0-0136710/2000/5618_
24.871157616801580.08.4525.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

0-0136710/1861/5220_
24.89785015548580.06.9622.34
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0136710/2245/5739_
24.86163210418329380.08.3424.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/2148/5109_
24.871119018047440.08.4221.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/2021/5207_
24.8615173217393970.07.8323.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/2008/5017_
24.871402119497410.07.8922.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0136710/2133/5600_
24.871211019740100.07.7023.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0136710/2229/5528_
24.86170612424121130.08.4423.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/2201/6094_
24.871344019143770.08.2425.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0136710/2142/5650_
24.89457418648460.08.1924.27
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1810/5124_
24.90269416412630.06.8922.60
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1951/5414_
24.8956319120982300.07.3623.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/2361/5545_
24.89862543817368290.08.9124.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BM

1-0136140/1754/5122_
24.462054318887700.06.8722.33
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1926/5299_
24.451240321780170.07.6323.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04771093a2a27

1-0136140/1753/5212_
24.4664619718459720.07.0323.04
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1779/5142_
24.441725417194350.07.2722.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/2188/5828_
24.45130121218380610.08.9825.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJCGg3

1-0136140/2046/5573_
24.46295016451800.07.3324.68
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/2300/5371_
24.44177622816913220.08.5722.79
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/2002/5445_
24.45137277916070730.07.8423.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0136140/1867/5372_
24.451669017578000.07.4123.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0136140/2001/5403_
24.463922118344250.08.5024.02
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/2157/5422_
24.451211016984670.07.9922.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.js HTTP/1.1

1-0136140/2609/5980_
24.451523018325600.09.2124.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0136140/2115/5427_
24.451401116688240.08.0523.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

1-0136140/2100/5218_
24.46370017905430.08.4623.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1608/5058_
24.45156120619456710.06.2323.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec2c3Y

1-0136140/2030/5558_
24.45778317009670.07.9124.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e6a34d9517f99

1-0136140/2274/5512_
24.4615223419408980.08.6824.42
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec6MBs

1-0136140/1732/5201_
24.46484417037190.07.2923.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1822/5109_
24.45116220417667050.07.3221.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec21Yw

1-0136140/2113/5573_
24.4594240617917110.08.8924.98
1

Found on 2024-10-14 09:45

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d2cdf0b7ca

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 10:42:30 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  33 days 4 hours 4 minutes 32 seconds
Server load: 1.39 1.08 1.09
Total accesses: 266735 - Total Traffic: 1.1 GB - Total Duration: 88690329
CPU Usage: u54.56 s62.92 cu63.25 cs29.31 - .00733% CPU load
.0931 requests/sec - 425 B/second - 4573 B/request - 332.504 ms/request
1 requests currently being processed, 74 idle workers
_____________W__________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/2014/5069_
21.3217854216463300.07.2521.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1607/5125_
21.32214121017291250.06.0022.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1615/5009_
21.322414017044520.06.2621.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1837/5632_
21.341262318372470.07.4724.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f3927d240fa1

0-0136710/1907/5628_
21.35181516581780.07.2624.39
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c276af1be23ff

0-0136710/1912/5071_
21.345434416246940.07.4622.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1694/5107_
21.322258517253370.06.8522.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1806/5162_
21.322040418095780.06.8622.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_83faad26e1059

0-0136710/1859/5392_
21.341211252317943210.06.5322.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0136710/1688/5112_
21.34978414599350.06.4123.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1790/4828_
21.35123314912000.06.9021.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f42e89b275e9a

0-0136710/1853/5103_
21.321708015901300.07.3422.17
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1792/5410_
21.34487416174550.07.4524.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9e8999b162f0d

0-01367126/1624/4983W
21.3500148323533.75.9221.30
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0136710/1990/5484_
21.321650017057780.07.0723.02
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0136710/1804/4765_
21.35301316936700.06.9220.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_822b07204b84b

0-0136710/1763/4949_
21.34127651215768130.06.6221.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec3FIW

0-0136710/1697/4706_
21.341162418343760.06.4321.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1907/5374_
21.34678421318689870.06.7222.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0136710/2027/5326_
21.331519023056280.07.5922.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1887/5780_
21.341106417771520.06.8024.34
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

0-0136710/1783/5291_
21.322644417471510.06.6222.69
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1569/4883_
21.32249346815455650.05.8521.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1628/5091_
21.312696019812090.05.9522.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1963/5147_
21.35394316044130.07.1922.64
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8f511a9c26f60

1-0136140/1443/4811_
20.831971318185840.05.4320.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1b3714fa8d74

1-0136140/1695/5068_
20.8541944420769430.06.5622.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYR

1-0136140/1492/4951_
20.8325593517605390.05.8921.90
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1498/4861_
20.841174016478850.05.6021.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

1-0136140/1844/5484_
20.84825517020300.07.5623.77
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_567605ca935db

1-0136140/1880/5407_
20.8417224015368410.06.6223.97
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/2074/5145_
20.841339516344370.07.6021.82
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c9884c01fcccf

1-0136140/1781/5224_
20.85504415087240.06.7622.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1626/5131_
20.84127645116845770.06.4322.19
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwU2q

1-0136140/1730/5132_
20.8415277616925260.07.2022.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1924/5189_
20.8522419615769180.06.9321.44
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/2404/5775_
20.8411134017100250.08.3624.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1895/5207_
20.855516215392770.07.1422.87
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1861/4979_
20.83207819017133670.06.9621.63
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1365/4815_
20.8412224118575560.05.2422.30
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1773/5301_
20.8324386116320980.06.9023.96
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/2047/5285_
20.84165936918345510.07.7223.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1456/4925_
20.83226819716054290.06.0321.76
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1582/4869_
20.85318515706130.06.1820.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cb3f19afdee21

1-0136140/1797/5257_
2

Found on 2024-10-12 10:42

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d24942f608

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 10:00:09 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 3 hours 22 minutes 11 seconds
Server load: 4.07 1.64 1.19
Total accesses: 251725 - Total Traffic: 1.1 GB - Total Duration: 83623077
CPU Usage: u46.99 s57.41 cu63.25 cs29.31 - .00732% CPU load
.0936 requests/sec - 425 B/second - 4552 B/request - 332.2 ms/request
1 requests currently being processed, 74 idle workers
___________W____________________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/1797/4852_
18.4111741215841400.06.2020.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeSQKUJ

0-0136710/1426/4944_
18.41329016491550.05.2121.40
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1394/4788_
18.416635616112730.05.3621.07
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1639/5434_
18.371782117587810.06.1623.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0136710/1684/5405_
18.391019015922740.06.2923.41
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1688/4847_
18.39137540615444090.06.1920.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeScylA

0-0136710/1450/4863_
18.41549716013870.05.7421.82
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136710/1609/4965_
18.4124524617113820.05.9721.37
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPZrtowEH3nK1DeyUIJi

0-0136710/1701/5234_
18.381723017296280.05.9021.81
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0136710/1485/4909_
18.38154439814127620.05.4722.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya1hd

0-0136710/1554/4592_
18.3994322814514640.05.7520.13
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyW3Zz

0-01367116/1614/4864W
18.4200149547919.36.2321.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

0-0136710/1575/5193_
18.391312015656040.06.4423.48
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1421/4780_
18.40818114274470.05.0820.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/cloudworkauth/webauthn.js HTTP/1.1

0-0136710/1790/5284_
18.3719374316503450.06.0521.99
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1543/4504_
18.391064016333650.05.6619.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1604/4790_
18.3718154015107910.05.7821.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1499/4508_
18.38173724317391040.05.5420.24
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1719/5186_
18.39145614317960660.05.9222.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/accountinfo/reset.php HTTP/1.1

0-0136710/1823/5122_
18.3718824422354430.06.6621.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1688/5581_
18.38165324017040830.05.8423.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/accountinfo/reset.php HTTP/1.1

0-0136710/1587/5095_
18.40763716900560.05.6821.75
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0136710/1411/4725_
18.41373014548640.05.1920.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1439/4902_
18.39873118959030.05.0721.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0136710/1709/4893_
18.391248115393680.05.9821.43
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0136140/1267/4635_
18.02188017508000.04.5520.01
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1

1-0136140/1501/4874_
18.011294020175220.05.6621.21
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1299/4758_
18.01745016879960.05.0621.07
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /resources/icons/clipboard.svg HTTP/1.1

1-0136140/1308/4671_
17.991742115538630.04.7420.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1609/5249_
17.99153612616357350.06.4522.65
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/accountinfo/reset.php HTTP/1.1

1-0136140/1696/5223_
17.982006614740570.05.7723.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BVx

1-0136140/1796/4867_
17.9918933315694290.06.2320.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1549/4992_
18.01137122314537400.05.6621.71
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyXVpi

1-0136140/1414/4919_
17.9918024416169670.05.5021.26
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/accountinfo/start-reset.php HTTP/1.1

1-0136140/1540/4942_
17.991857016350870.06.3321.85
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1715/4980_
18.01104918815316940.05.9420.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZLdatwwEIVfxajXtmRZj

1-0136140/2154/5525_
17.991699284516214540.07.1322.82
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0136140/1701/5013_
18.001422514905670.06.2021.93
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/accountinfo/reset.php?username=24085&code=88325

1-0136140/1623/4741_
18.023474016221220.05.9120.58
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1193/4643_
17.991782117992560.04.4121.46
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1549/5077_
18.014313915473670.05.8322.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1846/5084_
18.026721317824860.06.7522.49
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeSbh2w

1-0136140/1315/4784_
18.0230637015528980.05.1920.92
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeSUKaX

1-0136140/1363/4650_
18.01122122715291780.05.1819.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DeyZWWj

1-0136140/1601/5061_
18.018134016302210.06.2422.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0</

Found on 2024-10-10 10:00

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d24f479558

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:14:45 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 36 minutes 46 seconds
Server load: 1.31 1.22 1.28
Total accesses: 234584 - Total Traffic: 1013.2 MB - Total Duration: 77303644
CPU Usage: u39.51 s52.55 cu63.25 cs29.31 - .00715% CPU load
.0908 requests/sec - 411 B/second - 4529 B/request - 329.535 ms/request
3 requests currently being processed, 47 idle workers
______________K___________________K_W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/1552/4607_
14.5386514883200.05.0719.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4702_
14.524913415675440.04.1020.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fd949dd3f7e4

0-0136710/1128/4522_
14.52618014857730.04.1519.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0136710/1435/5230_
14.5246721117086350.05.1622.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Au2L

0-0136710/1428/5149_
14.5238017914914490.05.2522.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwNEw

0-0136710/1393/4552_
14.501009514480460.04.7919.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1122/4535_
14.5222740114917470.03.9820.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya3Zp

0-0136710/1212/4568_
14.5252043416118970.04.1019.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42a

0-0136710/1432/4965_
14.49115618516534370.04.6720.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYB

0-0136710/1179/4603_
14.53198313269870.04.1320.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2932137b6cf09

0-0136710/1328/4366_
14.52345513501280.04.6619.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1284/4534_
14.5350014313840.04.7219.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1264/4882_
14.4910955214757070.04.9221.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1109/4468_
14.53951713285040.03.6219.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya2hJ

0-01367147/1515/5009K
14.5410157698071.34.9220.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET / HTTP/1.1

0-0136710/1269/4230_
14.491126515558170.04.3117.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1314/4500_
14.491182313771540.04.4219.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_86754fdb49ee1

0-0136710/1236/4245_
14.5182572016309880.04.2118.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1454/4921_
14.50962517052530.04.8421.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1553/4852_
14.51816121746480.05.2520.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0136710/1451/5344_
14.5179352916106730.04.6622.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1266/4774_
14.52659015530160.04.4620.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1149/4463_
14.50912513913240.04.0119.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4647_
14.51823282916820310.03.9320.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYJ

0-0136710/1443/4627_
14.51773514703590.04.7720.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1087/4455_
14.4580133117029570.03.6519.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1246/4619_
14.45894719600770.04.4319.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1031/4490_
14.431095115847400.03.7919.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1044/4407_
14.44977514611930.03.6019.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1424/5064_
14.4737014991110.05.1621.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1442/4969_
14.43116418313975670.04.7622.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BSS

1-0136140/1553/4624_
14.431148815138200.05.0119.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1323/4766_
14.4648020513642280.04.5420.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW

1-0136140/1156/4661_
14.46367915562650.04.2720.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_54e53f403993e3530

1-0136144/1312/4714K
14.473615875229.55.2520.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42o

1-0136140/1448/4713_
14.45669714576790.04.7619.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-01361434/1841/5212W
14.4800151176663.05.8521.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136140/1416/4728_
14.45808514204490.04.8820.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1334/4452_
14.441084015407830.04.5119.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/971/4421_
14.45918317413270.03.4720.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1221/4749_
14.4563063114282090.04.4721.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c%2B2

1-0136140/1550/4788_
14.477418816914200.05.3421.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSSCwu

1-0136140/1088/4557_
14.46324714926640.04.2219.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1106/4393_
14.45826114453700.03.9618.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1346/4806_
14.47182314904660

Found on 2024-10-09 04:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d291f8a3b6

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:14:44 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 36 minutes 46 seconds
Server load: 1.31 1.22 1.28
Total accesses: 234573 - Total Traffic: 1013.2 MB - Total Duration: 77303637
CPU Usage: u39.51 s52.55 cu63.25 cs29.31 - .00715% CPU load
.0908 requests/sec - 411 B/second - 4529 B/request - 329.55 ms/request
3 requests currently being processed, 47 idle workers
______________K___________________K_W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/1552/4607_
14.5386514883200.05.0719.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4702_
14.524913415675440.04.1020.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fd949dd3f7e4

0-0136710/1128/4522_
14.52618014857730.04.1519.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0136710/1435/5230_
14.5246621117086350.05.1622.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Au2L

0-0136710/1428/5149_
14.5237917914914490.05.2522.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwNEw

0-0136710/1393/4552_
14.501009514480460.04.7919.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1122/4535_
14.5222640114917470.03.9820.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya3Zp

0-0136710/1212/4568_
14.5251943416118970.04.1019.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42a

0-0136710/1432/4965_
14.49115518516534370.04.6720.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYB

0-0136710/1179/4603_
14.53197313269870.04.1320.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2932137b6cf09

0-0136710/1328/4366_
14.52345513501280.04.6619.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1284/4534_
14.5350014313840.04.7219.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1264/4882_
14.4910955214757070.04.9221.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1109/4468_
14.53951713285040.03.6219.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya2hJ

0-01367147/1515/5009K
14.5400157698071.34.9220.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET / HTTP/1.1

0-0136710/1269/4230_
14.491126515558170.04.3117.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1314/4500_
14.491181313771540.04.4219.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_86754fdb49ee1

0-0136710/1236/4245_
14.5182572016309880.04.2118.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1454/4921_
14.50962517052530.04.8421.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1553/4852_
14.51815121746480.05.2520.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0136710/1451/5344_
14.5179252916106730.04.6622.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1266/4774_
14.52659015530160.04.4620.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1149/4463_
14.50911513913240.04.0119.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4647_
14.51822282916820310.03.9320.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYJ

0-0136710/1443/4627_
14.51773514703590.04.7720.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1087/4455_
14.4580033117029570.03.6519.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1246/4619_
14.45893719600770.04.4319.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1031/4490_
14.431095115847400.03.7919.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1044/4407_
14.44977514611930.03.6019.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1424/5064_
14.4736014991110.05.1621.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1442/4969_
14.43116418313975670.04.7622.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BSS

1-0136140/1553/4624_
14.431148815138200.05.0119.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1323/4766_
14.4648020513642280.04.5420.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW

1-0136140/1156/4661_
14.46367915562650.04.2720.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_54e53f403993e3530

1-0136144/1312/4714K
14.473615875229.55.2520.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42o

1-0136140/1448/4713_
14.45669714576790.04.7619.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-01361423/1830/5201W
14.4800151176042.75.8321.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136140/1416/4728_
14.45807514204490.04.8820.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1334/4452_
14.441084015407830.04.5119.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/971/4421_
14.45918317413270.03.4720.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1221/4749_
14.4563063114282090.04.4721.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c%2B2

1-0136140/1550/4788_
14.477318816914200.05.3421.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSSCwu

1-0136140/1088/4557_
14.46324714926640.04.2219.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1106/4393_
14.45825114453700.03.9618.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1346/4806_
14.47182314904660.

Found on 2024-10-09 04:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d26039c592

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:14:45 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 36 minutes 47 seconds
Server load: 1.31 1.22 1.28
Total accesses: 234604 - Total Traffic: 1013.3 MB - Total Duration: 77303648
CPU Usage: u39.51 s52.55 cu63.25 cs29.31 - .00715% CPU load
.0908 requests/sec - 411 B/second - 4528 B/request - 329.507 ms/request
3 requests currently being processed, 47 idle workers
______________K___________________K_W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/1552/4607_
14.5387514883200.05.0719.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4702_
14.524923415675440.04.1020.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fd949dd3f7e4

0-0136710/1128/4522_
14.52619014857730.04.1519.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0136710/1435/5230_
14.5246721117086350.05.1622.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Au2L

0-0136710/1428/5149_
14.5238117914914490.05.2522.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwNEw

0-0136710/1393/4552_
14.501010514480460.04.7919.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1122/4535_
14.5222740114917470.03.9820.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya3Zp

0-0136710/1212/4568_
14.5252043416118970.04.1019.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42a

0-0136710/1432/4965_
14.49115618516534370.04.6720.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYB

0-0136710/1179/4603_
14.53198313269870.04.1320.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2932137b6cf09

0-0136710/1328/4366_
14.52346513501280.04.6619.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1284/4534_
14.5351014313840.04.7219.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1264/4882_
14.4910965214757070.04.9221.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1109/4468_
14.531051713285040.03.6219.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya2hJ

0-01367147/1515/5009K
14.5420157698071.34.9220.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET / HTTP/1.1

0-0136710/1269/4230_
14.491127515558170.04.3117.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1314/4500_
14.491183313771540.04.4219.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_86754fdb49ee1

0-0136710/1236/4245_
14.5182672016309880.04.2118.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1454/4921_
14.50963517052530.04.8421.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1553/4852_
14.51816121746480.05.2520.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0136710/1451/5344_
14.5179452916106730.04.6622.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1266/4774_
14.52660015530160.04.4620.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1149/4463_
14.50912513913240.04.0119.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4647_
14.51823282916820310.03.9320.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYJ

0-0136710/1443/4627_
14.51774514703590.04.7720.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1087/4455_
14.4580133117029570.03.6519.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1246/4619_
14.45894719600770.04.4319.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1031/4490_
14.431096115847400.03.7919.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1044/4407_
14.44978514611930.03.6019.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1424/5064_
14.4737014991110.05.1621.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1442/4969_
14.43116518313975670.04.7622.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BSS

1-0136140/1553/4624_
14.431149815138200.05.0119.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1323/4766_
14.4648120513642280.04.5420.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW

1-0136140/1156/4661_
14.46368915562650.04.2720.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_54e53f403993e3530

1-0136144/1312/4714K
14.474615875229.55.2520.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42o

1-0136140/1448/4713_
14.45670714576790.04.7619.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-01361454/1861/5232W
14.4800151177186.65.8721.56
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136140/1416/4728_
14.45808514204490.04.8820.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1334/4452_
14.441085015407830.04.5119.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/971/4421_
14.45919317413270.03.4720.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1221/4749_
14.4563163114282090.04.4721.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c%2B2

1-0136140/1550/4788_
14.477418816914200.05.3421.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSSCwu

1-0136140/1088/4557_
14.46325714926640.04.2219.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1106/4393_
14.45826114453700.03.9618.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1346/4806_
14.4718331490466

Found on 2024-10-09 04:14

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c1e751d2c1e751d22562a5d2

Apache Status

Apache Server Status for highlands-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:14:44 UTC
Restart Time: Monday, 09-Sep-2024 06:37:58 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  29 days 21 hours 36 minutes 46 seconds
Server load: 1.31 1.22 1.28
Total accesses: 234581 - Total Traffic: 1013.2 MB - Total Duration: 77303642
CPU Usage: u39.51 s52.55 cu63.25 cs29.31 - .00715% CPU load
.0908 requests/sec - 411 B/second - 4529 B/request - 329.539 ms/request
3 requests currently being processed, 47 idle workers
______________K___________________K_W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0136710/1552/4607_
14.5386514883200.05.0719.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4702_
14.524913415675440.04.1020.29
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fd949dd3f7e4

0-0136710/1128/4522_
14.52618014857730.04.1519.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0136710/1435/5230_
14.5246721117086350.05.1622.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du5Au2L

0-0136710/1428/5149_
14.5238017914914490.05.2522.38
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1DecwNEw

0-0136710/1393/4552_
14.501009514480460.04.7919.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1122/4535_
14.5222640114917470.03.9820.06
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya3Zp

0-0136710/1212/4568_
14.5252043416118970.04.1019.50
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42a

0-0136710/1432/4965_
14.49115618516534370.04.6720.57
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYB

0-0136710/1179/4603_
14.53197313269870.04.1320.73
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2932137b6cf09

0-0136710/1328/4366_
14.52345513501280.04.6619.05
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1284/4534_
14.5350014313840.04.7219.54
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1264/4882_
14.4910955214757070.04.9221.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1109/4468_
14.53951713285040.03.6219.00
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Deya2hJ

0-01367147/1515/5009K
14.5410157698071.34.9220.86
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET / HTTP/1.1

0-0136710/1269/4230_
14.491126515558170.04.3117.88
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1314/4500_
14.491182313771540.04.4219.67
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_86754fdb49ee1

0-0136710/1236/4245_
14.5182572016309880.04.2118.91
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1454/4921_
14.50962517052530.04.8421.10
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1553/4852_
14.51815121746480.05.2520.32
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0136710/1451/5344_
14.5179352916106730.04.6622.20
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0136710/1266/4774_
14.52659015530160.04.4620.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0136710/1149/4463_
14.50912513913240.04.0119.72
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

0-0136710/1184/4647_
14.51823282916820310.03.9320.45
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BYJ

0-0136710/1443/4627_
14.51773514703590.04.7720.22
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1087/4455_
14.4580133117029570.03.6519.11
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136140/1246/4619_
14.45894719600770.04.4319.98
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1031/4490_
14.431095115847400.03.7919.80
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1044/4407_
14.44977514611930.03.6019.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1424/5064_
14.4736014991110.05.1621.36
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/1442/4969_
14.43116418313975670.04.7622.12
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1Du%2BSS

1-0136140/1553/4624_
14.431148815138200.05.0119.23
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0136140/1323/4766_
14.4648020513642280.04.5420.59
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjtowEH3nK1Dec%2BW

1-0136140/1156/4661_
14.46367915562650.04.2720.03
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_54e53f403993e3530

1-0136144/1312/4714K
14.473615875229.55.2520.78
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuJE42o

1-0136140/1448/4713_
14.45669714576790.04.7619.28
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-01361431/1838/5209W
14.4800151176556.95.8421.53
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136140/1416/4728_
14.45807514204490.04.8820.61
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1334/4452_
14.441084015407830.04.5119.18
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136140/971/4421_
14.45918317413270.03.4720.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fal.highl

1-0136140/1221/4749_
14.4563063114282090.04.4721.52
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVPbjpswEH3PV0S8c%2B2

1-0136140/1550/4788_
14.477318816914200.05.3421.08
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hVNNj9owEL3zK1DuSSCwu

1-0136140/1088/4557_
14.46324714926640.04.2219.95
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Fhighl

1-0136140/1106/4393_
14.45825114453700.03.9618.51
127.0.0.1http/1.1ip-10-1-88-194.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136140/1346/4806_
14.47182314904660

Found on 2024-10-09 04:14

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.66
Domain: o0ezqqozi9.xyz
Port: 443
URL: https://o0ezqqozi9.xyz

First seen 2023-10-23 10:46
Last seen 2024-02-02 02:40
Open for 101 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 02:40
  
  220 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.66
Domain: ditg7ejene.xyz
Port: 443
URL: https://ditg7ejene.xyz

First seen 2023-11-04 21:20
Last seen 2024-02-02 00:10
Open for 89 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 00:10
  
  239 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: dev.web.myinnercise.com
Port: 80
URL: http://dev.web.myinnercise.com

First seen 2022-10-27 22:57
Last seen 2022-12-10 07:56
Open for 43 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df46ca378f46ca378f46ca378f46ca378
```
Found 1 files trough .DS_Store spidering:

/.well-known
```
  Found on 2022-12-10 07:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d7dd6b4067dd6b4067dd6b4067dd6b406
```
Found 1 files trough .DS_Store spidering:

/1280.mp4
```
  Found on 2022-10-27 22:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.66
Domain: dev.web.myinnercise.com
Port: 443
URL: https://dev.web.myinnercise.com

First seen 2022-10-27 22:57
Last seen 2022-12-10 07:56
Open for 43 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df46ca378f46ca378f46ca378f46ca378
```
Found 1 files trough .DS_Store spidering:

/.well-known
```
  Found on 2022-12-10 07:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d7dd6b4067dd6b4067dd6b4067dd6b406
```
Found 1 files trough .DS_Store spidering:

/1280.mp4
```
  Found on 2022-10-27 22:57
Create report

Open service 65.9.95.66:80 · litefcp-test-dyaew0msbs.605941533838.lambda-lite.global.on.aws

2026-01-12 23:28

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 12 Jan 2026 23:28:21 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 d05dc840d6cf3901928326ad8b6d38c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 8qe72euNRKLkDpaE9VL4fvVZO7O_zkSkNUSKkOXRr-0TVUUvPn6N2g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 8qe72euNRKLkDpaE9VL4fvVZO7O_zkSkNUSKkOXRr-0TVUUvPn6N2g==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.66:443 · litefcp-test-dyaew0msbs.605941533838.lambda-lite.global.on.aws

2026-01-12 23:28

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Mon, 12 Jan 2026 23:28:21 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 6fc3cae9692b6db972e4990be9921fae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: d1zWND9Nj-MGfmmxG7A7vNfZ1hODejN8cVCDRjkwak88_eI4Yf_zbQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: d1zWND9Nj-MGfmmxG7A7vNfZ1hODejN8cVCDRjkwak88_eI4Yf_zbQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.66:80 · litefcp-test-xtnnkoflfp.026898548523.lambda-lite.global.on.aws

2026-01-12 15:08

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 12 Jan 2026 15:08:45 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 d05dc840d6cf3901928326ad8b6d38c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 5cpPJqWSqvV3V7gmhrSjG-QxUR_GIbKOdzKEjtL_b_-cIymMr_hC4g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 5cpPJqWSqvV3V7gmhrSjG-QxUR_GIbKOdzKEjtL_b_-cIymMr_hC4g==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.66:443 · litefcp-test-xtnnkoflfp.026898548523.lambda-lite.global.on.aws

2026-01-12 15:08

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Mon, 12 Jan 2026 15:08:45 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 91afcef6d5c7e90d0a4bb2c3a456c690.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: jtnjwhgQ4AlVb2lgw4fs8BR90NorMTkSS6KlRx6el8UeKqxt59zzMg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: jtnjwhgQ4AlVb2lgw4fs8BR90NorMTkSS6KlRx6el8UeKqxt59zzMg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-12 by HttpPlugin

Create report

Open service 65.9.95.66:80 · painel.gcidades.com.br

2026-01-09 20:26

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 647
Connection: close
Date: Fri, 09 Jan 2026 20:26:17 GMT
Last-Modified: Wed, 11 Dec 2024 16:25:22 GMT
ETag: "ef567ec70c0f961a1301c374fe7daf1a"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 93fcd07b66eaf26b036f14e2ec9d73ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: X3IbJpgsMb2nrzaK4cenqLuICGP9qH_U8lIrejQ9BqDcYEuhqxtHWg==
Age: 2

Page title: G Cidades

<!doctype html><html lang="pt-br"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>G Cidades</title><script defer="defer" src="/static/js/main.bd983fbc.js"></script><link href="/static/css/main.f029a054.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.66:443 · www.borrowly.com.au

2026-01-09 19:38

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 41906
Connection: close
Date: Wed, 07 Jan 2026 11:43:01 GMT
X-Amzn-Trace-Id: Root=1-695e46c5-5d24cfda5e94de2504af002d;Parent=75866805e878abb9;Sampled=0;Lineage=1:a1aa723a:0
x-amzn-RequestId: 595f610a-2a07-47ee-a26a-f6ff308a1595
x-nextjs-cache: MISS
x-amzn-Remapped-content-length: 41906
x-opennext: 1
Cache-Control: s-maxage=31536000, stale-while-revalidate=2592000
ETag: "3rp6k0nbpcw8n"
x-powered-by: Next.js
Vary: RSC,Next-Router-State-Tree,Next-Router-Prefetch
X-Cache: Hit from cloudfront
Via: 1.1 2a5c925255bb252ff0ed65977311f74e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: q_XpCqVBoNo2KtxpidtJXBIx1PTdIhmq6VRR8RuxX7fk5SNbP1qFEw==
Age: 201301

Page title: Online Loans at Borrowly - Apply now to search Australia's top lenders

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/0484562807a97172-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/8888a3826f4a3af4-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/b957ea75a84b6ea7-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/eafabf029ad39a43-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" as="image" href="/svg/logo-dark.svg"/><link rel="preload" as="image" href="/svg/lock-dark.svg"/><link rel="preload" as="image" href="/svg/blue-icons/secure.svg"/><link rel="preload" as="image" href="/svg/blue-icons/user-check.svg"/><link rel="preload" as="image" href="/svg/blue-icons/timer.svg"/><link rel="preload" as="image" href="/svg/circle-check-solid.svg"/><link rel="preload" as="image" href="/svg/blue-icons/warning.svg"/><link rel="stylesheet" href="/_next/static/css/3a0a9c337dd8cfeb.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/842decc460cfa4f6.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/88a3c4613c64537e.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/4f402c032ee897c9.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-9a12fcad342b59ce.js"/><script src="/_next/static/chunks/fd9d1056-a6fe535d3338d38c.js" async=""></script><script src="/_next/static/chunks/749-4e19cf55be69da6f.js" async=""></script><script src="/_next/static/chunks/main-app-0b056b4b81a2b26d.js" async=""></script><script src="/_next/static/chunks/231-afbbf1a88c18d85d.js" async=""></script><script src="/_next/static/chunks/851-22dbed16ee83d0aa.js" async=""></script><script src="/_next/static/chunks/app/(page)/page-fa7ced2dbdc24333.js" async=""></script><script src="/_next/static/chunks/461-bc7c87eea5da2f91.js" async=""></script><script src="/_next/static/chunks/app/(page)/layout-f411a5a8fb76467e.js" async=""></script><link rel="preload" href="https://www.googletagmanager.com/gtag/js?id=G-PYQ8N9LZ74" as="script"/><title>Online Loans at Borrowly - Apply now to search Australia&#x27;s top lenders</title><meta name="description" content="We search Australia&#x27;s top lenders to find you the right loan at the right price. Up to $15,000 deposited in the same day. Apply now!"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><meta name="next-size-adjust"/><script src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js" noModule=""></script></head><body class="__className_f367f3 __variable_6bee3b min-h-full"><!--$!--><template data-dgst="BAILOUT_TO_CLIENT_SIDE_RENDERING"></template><div></div><!--/$--><main class="min-h-screen"><header class="absolute left-0 right-0 top-0 z-50"><nav aria-label="Global" class="mx-auto flex max-w-7xl items-center justify-between p-6 lg:px-8"><div class="flex lg:flex-1"><a href="/" class="-m-1.5 p-1.5"><img src="/svg/logo-dark.svg" class="w-[6.5625rem]"/></a></div><div class="flex lg:hidden"><button type="button" class="-m-2.5 inline-flex items-center justify-center rounded-md p-2.5 text-gray-700"><span class="sr-only">Open main menu</span><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" aria-hidden="true" data-slot="icon" class="size-6 w-8 text-white"><path stroke-linecap="round" stroke-linejoin="round" d="M3.75 6.75h16.5M3.75 12h16.5m-16.5 5.25h16.5"></path></svg></button></div><div class="hidden lg:flex lg:gap-x-12"><a href="/" class="text-sm/6 font-semibold text-white">Home</a><a href="/faqs" class="text-sm/6 font-semibold text-white">FAQs</a><a href="/contact" class="text-sm/6 font-semibold text-white">Contact</a></div><div class="hidden lg:flex lg:flex-1 lg:jus

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.66:443 · thegroupbuyexperiment.com

2026-01-09 17:26

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 21909
Connection: close
Date: Fri, 09 Jan 2026 06:20:52 GMT
Last-Modified: Mon, 05 Apr 2021 00:27:05 GMT
ETag: "e4ada472d90bb757ee45269c16486b88"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b031f43146c9801101822eabdc464390.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: ePVZnUWL86d42fNRqKmvxOq6xfVHyM9vRpXAnciPsfiC046p0kbwkQ==
Age: 39963

Page title: The Group Buy ExperimentThe Group Buy Experiment

<!doctype html><html><meta charset=utf-8><title>The Group Buy Experiment</title><link rel=stylesheet href=/main.min.17f84ce77f5895a4d0b4621bfde1487d7717579d49381b931d25bc2835272b7b.css><meta name=theme-color content="#ffffff"><link rel=icon href=/favicon.d8951f1e807a0639b62ae2e60302a1e27474d5b3f537e2861e90a93bbc259fa3.svg><link rel=mask-icon href=/favicon.d8951f1e807a0639b62ae2e60302a1e27474d5b3f537e2861e90a93bbc259fa3.svg color=#26180c><script async defer data-domain=thegroupbuyexperiment.com src=https://analytics.thegroupbuyexperiment.com/js/index.js></script><body><div id=main><div class=wrapper><div class=row><div class="col-12 logo"><svg class="logo" version="1.2" viewBox="0 0 393.99 91.298" xmlns="http://www.w3.org/2000/svg"><style/><title>The Group Buy Experiment</title><path d="m2.8701 10.123c.791-.856 2.154-.924 3.29-1.188 3.717-.866 7.453-1.7 11.237-2.196 12.517-1.641 25.119-2.583 37.637-4.211 4.479-.583 8.859-1.793 13.332-2.42 1.007-.141 2.079-.185 3.047.124.857.274 2.04.67 2.206 1.553.177.938-.753 1.816-1.448 2.47-.529.498-1.306.713-2.028.804-16.573 2.069-33.238 3.393-49.785 5.666-5.211.716-10.478 1.529-15.434 3.294-.87.31-1.094 1.65-1.034 2.572.587 9.038 2.119 17.991 2.956 27.01.154 1.657.11 3.332.013 4.993-.502 8.608-1.004 17.219-1.81 25.803-.027.286-.387.477-.665.546-.544.135-1.323.467-1.68.036-1.271-1.533-2.717-3.334-2.704-5.324.036-5.768 2.336-11.323 2.846-17.068.442-4.976.298-10 0-14.986-.36-6.03-1.492-11.993-1.972-18.014-.135-1.686.087-3.382.13-5.072m222.38 17.44c.866-.675 1.89-1.326 2.325-2.335.404-.934.168-2.048.001-3.052-.066-.397-.792-.617-.674-1.002.28-.92 1.012-1.657 1.693-2.336.154-.155.465-.115.654-.008.86.487 1.807.949 2.401 1.739.571.759 1.14 1.765.934 2.692-.472 2.135-1.709 4.041-2.838 5.914-.435.721-1.081 1.332-1.797 1.776-1.135.705-2.363 1.324-3.666 1.617-1.32.296-2.712.274-4.056.119-.647-.075-1.386-.281-1.786-.795-.832-1.071-1.393-2.375-1.703-3.696-.232-.991-.207-2.088.12-3.053.637-1.878 1.65-3.621 2.711-5.297.115-.182.467-.127.647-.007.53.351 1.154.735 1.359 1.337.327.954.274 2.024.134 3.022-.1.709-.693 1.277-.837 1.978-.137.671-.475 1.57.009 2.054.566.564 1.582.418 2.376.326.398-.047.644-.478.966-.717m123.01 47.877c-8.356.781-16.659 2.06-25.002 2.972-.353.038-.747.046-1.059-.124-.852-.464-1.798-.926-2.342-1.729-.31-.458-.093-1.123.047-1.658.075-.284.275-.63.565-.676 5.62-.887 11.273-1.589 16.94-2.085 15.911-1.393 31.832-2.726 47.781-3.582 1.059-.057 2.016.705 3.066.853.988.139 2.001.104 2.993-.001.471-.049 1.176-.014 1.347-.456.366-.95.174-2.05.009-3.054-.116-.706-.822-1.262-.837-1.978-.265-12.66-.408-25.332-.001-37.989.295-9.187 1.068-18.362 2.106-27.494.039-.336.751-.124 1.008.094.661.563 1.139 1.327 1.555 2.088.215.394.299.862.302 1.311.098 13.33.266 26.663.0 39.99-.015.716-.666 1.283-.837 1.978-.162.657-.142 1.349-.147 2.026-.039 4.665-.256 9.339.014 13.996.061 1.052.902 1.956.97 3.007.214 3.335.17 6.696-.134 10.023-.039.435-.499.749-.871.977-.441.27-.966.522-1.48.466-1.044-.113-1.955-.898-3.004-.954-4.989-.265-10-.276-14.989-.001-7.037.387-14.033 1.323-21.05 1.985m-47.983-65.851c1.347-.19 2.799-.468 4.08-.01 1.534.548 2.788 1.737 3.948 2.88.371.366.43.968.482 1.486.067.671.273 1.481-.133 2.02-.752.998-2.093 1.377-3.041 2.191-.914.784-3.199 1.59-2.522 2.586 1.209 1.777 4.094 1.397 5.958 2.468.921.529 1.628 1.393 2.256 2.249.308.42.455.966.483 1.486.089 1.672.297 3.404-.134 5.022-.208.784-.943 1.415-1.674 1.767-3.113 1.496-6.34 2.823-9.683 3.693-1.308.34-2.734.177-4.053-.12-1.304-.294-2.517-.941-3.669-1.619-.978-.576-2.022-1.181-2.668-2.114-.322-.465-.092-1.143.028-1.696.51-2.34 1.581-4.563 1.854-6.944.305-2.656.287-5.379-.135-8.019-.097-.611-.804-1.563-1.349-1.272-1.378.735-1.903 2.49-3.007 3.595-.098.098-.325-.158-.294-.293.089-.379.721-.635.598-1.005-.269-.809-1.602-1.146-1.598-1.999.003-.803.953-1.332 1.615-1.788 1.212-.836 2.59-1.405 3.924-2.031 1.21-.568 2.404-1.223 3.701-1.547 1.003-.25 2.066-.1 3.099-.15m-18.033 45.03c.996-.15 2.03-.061 3.019.133.383.076.583.646.974.652.4.006.667-.793 1.028-.621 1.005.478 1.996 1.255 2.443 2.274.251.571-.068 1.616-.678 1.743-6.556 1.367-13.32

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.66:443 · daofu-higobashi.com

2026-01-09 09:28

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 09:28:14 GMT
Link: <https://daofu-higobashi.com/wp-json/>; rel="https://api.w.org/"
Link: <https://daofu-higobashi.com/wp-json/wp/v2/pages/63>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://daofu-higobashi.com/>; rel=shortlink
Server: nginx/1.28.0
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 e14614617e85116e937d5168b35a94de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: qvSnWdJJMcFUYPAgGw7RqoU0v1wgAvixTt9s6U8WR1vOlrNcxAYSPA==

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.95.66:443 · broughton-login.cloudworkengine.net

2026-01-08 22:29

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Thu, 08 Jan 2026 22:29:28 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://broughton-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 32f35b6a71829a460d6fdae31f270164.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: O38YDGzV0bCfPydiXaPlfEX73aha_eBdwPoMzSOi-Rk_eAiOQ9xAhw==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://broughton-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://broughton-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://broughton-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.66:443 · bac-login.cloudworkengine.net

2026-01-08 19:12

HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Thu, 08 Jan 2026 19:12:18 GMT
Pragma: no-cache
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, no-store, must-revalidate
Location: https://bac-login.cloudworkengine.net/module.php/core/frontpage_welcome.php
X-Cache: Miss from cloudfront
Via: 1.1 93fcd07b66eaf26b036f14e2ec9d73ea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: f4FjS389jLXoUtE0ojscwSlh1sOjhRZMVPQ61PN7WRxIdcxJBCC_SQ==

Page title: Redirect

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta http-equiv="refresh" content="0;URL='https://bac-login.cloudworkengine.net/module.php/core/frontpage_welcome.php'">
    <title>Redirect</title>
  </head>
  <body>
    <h1>Redirect</h1>
      <p>You were redirected to: <a id="redirlink" href="https://bac-login.cloudworkengine.net/module.php/core/frontpage_welcome.php">https://bac-login.cloudworkengine.net/module.php/core/frontpage_welcome.php</a>
        <script type="text/javascript">document.getElementById("redirlink").focus();</script>
      </p>
  </body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.66:443 · clyps.io

2026-01-08 19:08

HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Thu, 08 Jan 2026 19:08:48 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 db66f1cc00a415c34c42ad011b26850c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: trP2QtBb7rRJU2GJM8wYq-D_fLo39lYIFGcnUMK2AFvTBfoFEmXf6Q==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: trP2QtBb7rRJU2GJM8wYq-D_fLo39lYIFGcnUMK2AFvTBfoFEmXf6Q==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.66:80 · status.sezzle.com

2026-01-08 06:18

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 06:18:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://status.sezzle.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d5da174e34f35b7d1482b8432bf7e084.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: Vxb_Rz1NAyb5ll9nzdpY5E2K6rU7Ysm5cOjI6D6eQPzkhH1icjBoqQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.66:443 · status.sezzle.com

2026-01-08 06:18

HTTP/1.1 405 Not Allowed
Server: CloudFront
Date: Thu, 08 Jan 2026 06:18:10 GMT
Content-Length: 2521
Connection: close
x-amzn-waf-action: captcha
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: OPTIONS,GET,POST
Access-Control-Expose-Headers: x-amzn-waf-action
X-Cache: Error from cloudfront
Via: 1.1 6fc3cae9692b6db972e4990be9921fae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: gPT3p5ocjxxR_Pg4lgCY-dRhbaWZY5t4uTu0GgdBhEODDz4yve2XmA==

Page title: Human Verification

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Human Verification</title>
    <style>
        body {
            font-family: "Arial";
        }
    </style>
    <script type="text/javascript">
    window.awsWafCookieDomainList = [];
    window.gokuProps = {
"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AEdft0AgrV0zLI1UgZkD+j2AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM2+yoNpnTalcGarSUAgEQgDuOfcxwo1GG9Kug+37qnuqDeN8PQi/8oAUGTr6LiiUeYFaIWzSQUOGzSiuPwGa4rYGeIlu4tlY7EX2jnA==",
          "iv":"CuGRrADlywAAQajI",
          "context":"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"
};
    </script>
    <script src="https://ee28f20db1d4.05b7bb8c.eu-central-1.token.awswaf.com/ee28f20db1d4/ad2baaf17ece/56bffaabe4c2/challenge.js"></script>
    <script src="https://ee28f20db1d4.05b7bb8c.eu-central-1.captcha.awswaf.com/ee28f20db1d4/ad2baaf17ece/56bffaabe4c2/captcha.js"></script>
</head>
<body>
    <div id="captcha-container"></div>
    <script type="text/javascript">
        AwsWafIntegration.saveReferrer();
        window.addEventListener("load", function() {
          const container = document.querySelector("#captcha-container");
          CaptchaScript.renderCaptcha(container, async (voucher) => {
              await ChallengeScript.submitCaptcha(voucher);
              window.location.reload(true);
          }
      );
    });
    </script>
    <noscript>
        <h1>JavaScript is disabled</h1>
        In order to continue, you need to verify that you're not a robot by solving a CAPTCHA puzzle.
         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.
    </noscript>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 65.9.95.66:80 · litefcp-test-b6l3yykbjy.470715245230.lambda-lite.global.on.aws

2026-01-07 04:42

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 04:42:38 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9ed2eeec8748ea461af0d1cbf998da0e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: mm-Odmbfev3n1nWaJbcvsTsOPnHX8Z_GWAHll26o6A0bLP3B71K6Ew==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: mm-Odmbfev3n1nWaJbcvsTsOPnHX8Z_GWAHll26o6A0bLP3B71K6Ew==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin

Create report

Open service 65.9.95.66:443 · litefcp-test-b6l3yykbjy.470715245230.lambda-lite.global.on.aws

2026-01-07 04:42

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Wed, 07 Jan 2026 04:42:38 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 7bb80b5d9f75710222feac15033d6af0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 187mRml2D_uIcK6Qj28BOP0vM9a06OM5vZbNmdJf12LZLoNCf5Re3Q==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 187mRml2D_uIcK6Qj28BOP0vM9a06OM5vZbNmdJf12LZLoNCf5Re3Q==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-07 by HttpPlugin