The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31dcac7e3cdcac7e3cf692505c
Apache Status Apache Server Status for afri-fun.com (via 10.0.1.214) Server Version: Apache/2.4.46 (Amazon) Server MPM: prefork Server Built: Aug 24 2020 18:40:26 Current Time: Thursday, 23-Feb-2023 15:24:49 CET Restart Time: Wednesday, 08-Feb-2023 01:16:31 CET Parent Server Config. Generation: 11 Parent Server MPM Generation: 10 Server uptime: 15 days 14 hours 8 minutes 18 seconds Server load: 1.57 1.93 1.89 Total accesses: 12606105 - Total Traffic: 391.6 GB - Total Duration: 10313537856 CPU Usage: u91.28 s160.61 cu930696 cs116086 - 77.7% CPU load 9.36 requests/sec - 304.9 kB/second - 32.6 kB/request - 818.138 ms/request 3 requests currently being processed, 8 idle workers W_W______W_..................................................... ................................................................ ................................................................ ........ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-10185600/41/989576W 3.18007259836770.01.8132409.62 10.0.0.227http/1.1lws.alb.cloudioo.net:81GET /downctb-za-241/index.html?aff_sub=652628532211753550&zonei 1-10132530/90/977584_ 6.38047237194450.04.3932182.27 10.0.1.171http/1.1lws.alb.cloudioo.net:81GET /telescope/requests HTTP/1.1 2-10200450/20/967498W 1.85107190139640.03.2331561.42 10.0.0.154http/1.1landings.za.api.cloudioo.net:80GET /detection-back?detection_session_id=20230223152447af309ac2 3-10208610/12/959265_ 0.6001857048326170.00.2331349.84 10.0.1.171http/1.1lws.alb.cloudioo.net:81GET /topvblwin11c/index.html?w_id=19420814548&a_id=643140696367 4-1062270/161/947067_ 11.77046971220060.05.3830789.49 10.0.0.227http/1.1lws.alb.cloudioo.net:81GET /s/131313e29393e22333e23313/_/;/META-INF/maven/com.atlassia 5-10267860/257/933824_ 29.210186928154930.013.0430550.82 10.0.1.171http/1.1lws.alb.cloudioo.net:81GET /continue-2/index.html?w_id=16799626537&a_id=641453746225&p 6-1039800/176/909550_ 15.94046771288200.08.1129608.07 10.0.0.227http/1.1lws.alb.cloudioo.net:81GET /.env HTTP/1.1 7-1091630/141/890676_ 11.680316566052780.04.2429168.14 10.0.1.177http/1.1secure-landings.api.cloudioo.neGET /redirect-to-opc/20230223152440ZA36563f777284772e HTTP/1.1 8-10133880/84/865873_ 5.49086389285990.02.4728158.85 10.0.1.177http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230222015918ZA65063f568e6c6 9-10150350/73/819706W 4.36006079874420.01.9726628.65 10.0.1.171http/1.1lws.alb.cloudioo.net:81GET /server-status HTTP/1.1 10-10205040/15/744880_ 0.4901905598984390.01.4623448.58 10.0.0.227http/1.1lws.alb.cloudioo.net:81GET /topvblwin11c/index.html?w_id=19420814548&a_id=643140696367 11-10-0/0/651043. 0.009504997727600.00.0019753.13 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 12-10-0/0/542716. 0.001041834237751990.00.0016386.22 10.0.1.177http/1.1landings.za.api.cloudioo.net:80GET /detection-back?detection_session_id=202302231523038a79e421 13-10-0/0/411366. 0.001003333977420.00.0012079.47 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 14-10-0/0/288267. 0.0067392406350110.00.008304.25 10.0.1.177http/1.1dob.api.cloudioo.net:80GET /vodacomdirect_za/vc_callback/20230223152320e48b479bbdd1e2a 15-10-0/0/187467. 0.0048401732347500.00.005144.44 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 16-10-0/0/136274. 0.0063201325767890.00.003763.35 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 17-10-0/0/95456. 0.0043540936714760.00.002496.99 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 18-10-0/0/63829. 0.00116410690275440.00.001701.51 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 19-10-0/0/42873. 0.00116690484438330.00.001158.26 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 20-10-0/0/30860. 0.00163620380404580.00.00791.89 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 21-10-0/0/20485. 0.001688167306429980.00.00525.28 10.0.0.154http/1.1landings.api.cloudioo.net:80GET /session-status?cfg_sessionid=20230223104321ZA90063f73539c8 22-10-0/0/14997. 0.00173190235599300.00.00368.37 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 23-10-0/0/12829. 0.00171900198798630.00.00301.56 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 24-10-0/0/11212. 0.00173200258824410.00.00281.00 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 25-10-0/0/10012. 0.00172850165332290.00.00236.68 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 26-10-0/0/8519. 0.00173280152462240.00.00201.79 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 27-10-0/0/6743. 0.00172480197236260.00.00170.55 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 28-10-0/0/6560. 0.00180010135200150.00.00140.08 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 29-10-0/0/4474. 0.00181370178205580.00.0084.75 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 30-10-0/0/4638. 0.00179900105212190.00.00118.31 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 31-10-0/0/4182. 0.001810019589578400.00.00118.89 10.0.0.227http/1.1lws.alb.cloudioo.net:81GET /topvblvr36/index.html?w_id=18967654997&a_id=636583411814&p 32-10-0/0/2765. 0.00181310138371110.00.0061.53 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 33-10-0/0/2711. 0.00180770136477480.00.0072.03 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 34-10-0/0/2405. 0.00180520135701270.00.0047.88 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 35-10-0/0/2709. 0.0018148064819740.00.0058.55 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 36-10-0/0/2387. 0.0018275055690210.00.0046.75 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 37-10-0/0/1787. 0.00182980121560960.00.0030.48 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 38-10-0/0/1915. 0.0018277047948050.00.0043.24 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 39-10-0/0/1378. 0.0018296032457570.00.0020.06 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 40-10-0/0/1575. 0.0018250034461750.00.0039.80 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 41-10-0/0/1263. 0.0018274026311700.00.0025.05 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 42-10-0/0/1228. 0.00180930103895470.00.0049.86 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 43-10-0/0/828. 0.0018271023469960.00.0013.52 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 44-10-0/0/754. 0.0018285092889020.00.0011.80 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 45-10-0/0/776. 0.0018301094846480.00.0017.68 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 46-10-0/0/648. 0.0018314016347410.00.0018.71 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 47-10-0/0/471. 0.0018218014420920.00.008.85 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 48-10-0/0/573. 0.0018268093551520.00.0011.07 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 49-10-0/0/614. 0.0018152019885930.00.0018.15 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 50-10-0/0/482. 0.0018273014679420.00.008.24 ::1http/1.1lws.alb.cloudioo.net:81OPTIONS * HTTP/1.0 51-10-0/0/574