> cold start🆑
Error: Administrator use only
> administrator🆑
Password:
# cold start🆑
Password:
Restarting ...

C:\Users\ujpadmin>C:\Users\ujpadmin\Desktop\ntttcp.exe -s -m 2,*,192.168.20.155 -t 30🆑
Copyright Version 5.39
Network activity progressing...


Thread  Time(s) Throughput(KB/s) Avg B / Compl
======  ======= ================ =============
     0   29.998        86055.870     65536.000
     1   30.000        29085.867     65536.000


#####  Totals:  #####


   Bytes(MEG)    realtime(s) Avg Frame Size Throughput(MB/s)
================ =========== ============== ================
     3373.125000      30.002       1460.699          112.428🈁


Throughput(Buffers/s) Cycles/Byte       Buffers
===================== =========== =============
             1798.850       3.069     53970.000


DPCs(count/s) Pkts(num/DPC)   Intr(count/s) Pkts(num/intr)
============= ============= =============== ==============
     6244.447         1.409       10007.101          0.879


Packets Sent Packets Received Retransmits Errors Avg. CPU %
============ ================ =========== ====== ==========
     2421429           263942         386      0      5.625

C:\Users\ujpadmin>

$ grep X-Mailer INBOX |sort|uniq -c|sort -r > /var/tmp/xmailer.txt🆑
$ head -n 15 /var/tmp/xmailer.txt🆑
    290 X-Mailer: Microsoft Outlook Express 6.00.2900.5512
     73 X-Mailer: Supmailer 38.2.0
     26 X-Mailer: Microsoft Windows Live Mail 16.4.3505.912
     26 X-Mailer: Microsoft Outlook Express 6.00.2900.5931
     19 X-Mailer: Microsoft Outlook 16.0
     19 X-Mailer: Foxmail 7, 0, 1, 91[cn]
     12 X-Mailer: Microsoft Outlook 15.0
     10 X-Mailer: Microsoft Outlook 14.0
      8 X-Mailer: Microsoft Windows Live Mail 15.4.3508.1109
      8 X-Mailer: Microsoft Outlook Express 6.00.2900.2180
      8 X-Mailer: Microsoft Outlook Express 6.00.2800.1106
      6 X-Mailer: Supmailer 37.0.3
      6 X-Mailer: Microsoft Office Outlook 11
      5 X-Mailer: ClickM@iler
      5 	h=From:To:Subject:Date:MIME-Version:X-Mailer:Content-Type;
$

9933 header __XM_MS_IN_GENERAL     X-Mailer =~ /\bMSCRM\b|Microsoft (?:CDO|Outlook|Office Outlook)\b/
9934
9935 header __XM_OL_10_0_4115    X-Mailer =~ /^Microsoft Outlook, Build 10.0.4115$/
9936
9937 header __XM_OL_28001441    X-Mailer =~ /^Microsoft Outlook Express 6.00.2800.1441$/
9938
9939 header __XM_OL_28004682    X-Mailer =~ /^Microsoft Outlook Express 6.00.2800.4682$/
9940
9941 header __XM_OL_48072300    X-Mailer =~ /^Microsoft Outlook Express 5.50.4807.2300$/
9942
9943 header __XM_OL_4_72_2106_4  X-Mailer =~ /^Microsoft Outlook Express 4.72.2106.4$/
9944
9945 header __XM_OUTLOOK_EXPRESS    X-Mailer =~ /^Microsoft Outlook Express \d/
9946
9947 header      __XM_PHPMAILER_FORGED  X-Mailer =~ /PHPMailer\s.*version\D+$/
9948
9949 header     __XM_RANDOM                 X-Mailer =~ /q(?!(?:q|box|i\s)?mail|\d|[-\w]*=+;)[^u]/i
9950
9951 header   __XM_SKYRI             X-Mailer =~ /^SKYRiXgreen/

9945 header __XM_UJP001 X-Mailer =~ /^Microsoft Outlook Express 6.00.$/
9946 header __XM_UJP002 X-Mailer =~ /^Supmailer$/
9947 header __XM_UJP003 X-Mailer =~ /^Microsoft Windows Live Mail$/
9948 header __XM_UJP004 X-Mailer =~ /^Foxmail$/

3960 ##{ SPAMMY_XMAILER
3961
3962 meta SPAMMY_XMAILER (__XM_OL_28001441||__XM_OL_48072300||__XM_OL_28004682||__XM_OL_10_0_4115||__XM_OL_4_72_2106_4)
3963 describe SPAMMY_XMAILER X-Mailer string is common in spam and not in ham
3964 ##} SPAMMY_XMAILER
3965

3962 meta SPAMMY_XMAILER (__XM_UJP001||__XM_UJP002||__XM_UJP003||__XM_UJP04||__XM_OL_28001441||__XM_OL_48072300|
     |__XM_OL_28004682||__XM_OL_10_0_4115||__XM_OL_4_72_2106_4)
3963 describe SPAMMY_XMAILER X-Mailer string is common in spam and not in ham
3964 ##} SPAMMY_XMAILER

64 bytes from 192.168.20.55: icmp_seq=235 ttl=64 time=2.511 ms
64 bytes from 192.168.20.55: icmp_seq=236 ttl=64 time=1.541 ms
64 bytes from 192.168.20.55: icmp_seq=237 ttl=64 time=1.735 ms
64 bytes from 192.168.20.55: icmp_seq=238 ttl=64 time=2.530 ms
64 bytes from 192.168.20.55: icmp_seq=239 ttl=64 time=2.373 ms
Request timeout for icmp_seq 240
64 bytes from 192.168.20.55: icmp_seq=241 ttl=64 time=1.989 ms
64 bytes from 192.168.20.55: icmp_seq=242 ttl=64 time=2.677 ms
64 bytes from 192.168.20.55: icmp_seq=243 ttl=64 time=1.983 ms
64 bytes from 192.168.20.55: icmp_seq=244 ttl=64 time=3.233 ms

juno:$ uptime🆑
 2:59  up 665 days,  9:28, 2 users, load averages: 0.18 0.30 0.31
juno:$

juno$ /opt/local/apache2/bin/apachectl -V|grep MPM🆑
Server MPM:     Prefork
 -D APACHE_MPM_DIR="server/mpm/prefork"
juno$

juno$ cat /opt/local/apache2/conf/extra/httpd-mpm.conf🆑
# worker MPM
<IfModule mpm_worker_module>
    StartServers          2
    MaxClients          200
    MinSpareThreads      25
    MaxSpareThreads      75
    ThreadsPerChild      25
    MaxRequestsPerChild   5000
</IfModule>

deny from 192.168.0.1 #コメント

#コメント
deny from 192.168.0.1 

$ grep "SELECT" acc.log |awk '{print $1'}|sort|uniq -c|sort -r🆑
   1616 193.56.113.14
    986 193.56.113.69
    941 193.56.113.62
    765 193.56.113.7
    709 193.56.113.47
    679 193.56.113.52
    618 193.56.113.24
    592 193.56.113.34
    589 193.56.113.43
    546 193.56.113.29
    431 193.56.113.17
    422 193.56.113.39
$

$ grep "193.56.113.14" acc.log.1699488000 |head -n 5|awk '{print $7}'
index.php?page=%2D1756%20%27%29%20ORDER%20BY%2021%2D%2D
index.php?page=%2D2047%20%27%20UNION%20ALL%20SELECT%20NULL%20FROM%20DUAL%2D%2D
index.php?page=%2D8371%20%27%29%20UNION%20ALL%20SELECT%20NULL%20FROM%20DUAL%2D%2D
index.php?page=%2D9856%20%27%20UNION%20ALL%20SELECT%20CHR%2866%29%7C%7CCHR%2879%29
%7C%7CCHR%2871%29%7C%7CCHR%28100%29%7C%7CCHR%28114%29%7C%7CCHR%28117%29%7C%7CCHR
%2874%29%7C%7CCHR%28100%29%7C%7CCHR%2899%29%7C%7CCHR%2872%29%20FROM%20DUAL%2D%2D
index.php?page=%2D9456%20%27%29%20ORDER%20BY%201%2D%2D
$

%2D1756%20%27%29%20ORDER%20BY%2021%2D%2D
↓
-1756 ') ORDER BY 21--

page=%2D9856%20%27%20UNION%20ALL%20SELECT%20CHR%2866%29%7C%7CCHR%2879%29%7C%7CCHR%2871%29%
↓
page=-9856 ' UNION ALL SELECT CHR(66)||CHR(79)||CHR(71)%