LeakIX - Host cloud.losiento.cz

Domain cloud.losiento.cz

Finland

Hetzner Online GmbH

Debian

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 65.109.32.26
Domain: cloud.losiento.cz
Port: 443
URL: https://cloud.losiento.cz

First seen 2023-10-24 06:11
Last seen 2023-10-26 23:21
Open for 2 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a72da6d3a72da6d336334f7b

Apache Status

Apache Server Status for cloud.losiento.cz (via 10.0.2.100)

Server Version: Apache/2.4.57 (Debian) PHP/8.2.11
Server MPM: prefork
Server Built: 2023-04-13T03:26:51

Current Time: Thursday, 26-Oct-2023 23:21:12 UTC
Restart Time: Tuesday, 24-Oct-2023 06:10:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 17 hours 10 minutes 27 seconds
Server load: 5.56 3.32 3.60
Total accesses: 2649 - Total Traffic: 30.4 MB - Total Duration: 363232
CPU Usage: u72.95 s11.66 cu2.75 cs1.17 - .0377% CPU load
.0113 requests/sec - 135 B/second - 11.8 kB/request - 137.12 ms/request
1 requests currently being processed, 9 idle workers
.._____.._W__._.................................................
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/14.
0.00191353022720.00.000.24
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

1-0-0/0/8.
0.00191350011380.00.000.04
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

2-0580/290/290_
11.708818380340.00.780.78
10.0.2.100http/1.110.0.2.100:80GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=

3-03450/244/250_
8.325880548810.03.883.94
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/files/nachadan/ HTTP/1.1

4-0600/271/271_
8.682819335000.07.367.36
10.0.2.100http/1.110.0.2.100:80GET /ocs/v2.php/apps/user_status/api/v1/user_status?format=json

5-03460/240/245_
7.348881315150.00.630.64
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/files/nachadan/ HTTP/1.1

6-0620/267/267_
7.3511882325840.00.690.69
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/files/nachadan/ HTTP/1.1

7-0-0/0/11.
0.00215950014350.00.003.42
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

8-0-0/0/19.
0.00191352016020.00.000.09
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

9-0650/239/239_
6.598815307400.00.550.55
10.0.2.100http/1.110.0.2.100:80GET /ocs/v2.php/apps/user_status/api/v1/user_status?format=json

10-0668/257/257W
6.97003176710.53.943.94
10.0.2.100http/1.110.0.2.100:80GET /server-status HTTP/1.1

11-0670/253/253_
6.572882313320.04.104.10
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/files/nachadan/ HTTP/1.1

12-0680/260/260_
6.392823317570.00.670.67
10.0.2.100http/1.110.0.2.100:80GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=

13-0-0/0/3.
0.00215953000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

14-0700/252/252_
8.2614881406660.03.963.96
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/files/nachadan/ HTTP/1.1

15-0-0/0/2.
0.00215952000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

16-0-0/0/2.
0.00215951000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

17-0-0/0/1.
0.00234533000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

18-0-0/0/1.
0.00234532000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

19-0-0/0/1.
0.00234531000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

20-0-0/0/1.
0.00234530000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

21-0-0/0/1.
0.00234529000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0

22-0-0/0/1.
0.00234528000.00.000.00
::1http/1.110.0.2.100:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

Apache/2.4.57 (Debian) Server at cloud.losiento.cz Port 80

Found on 2023-10-26 23:21

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a72da6d3a72da6d3b1c06d7a

Apache Status

Apache Server Status for cloud.losiento.cz (via 10.0.2.100)

Server Version: Apache/2.4.57 (Debian) PHP/8.2.11
Server MPM: prefork
Server Built: 2023-04-13T03:26:51

Current Time: Tuesday, 24-Oct-2023 06:11:59 UTC
Restart Time: Tuesday, 24-Oct-2023 06:10:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  1 minute 15 seconds
Server load: 2.77 1.37 0.94
Total accesses: 11 - Total Traffic: 19 kB - Total Duration: 2839
CPU Usage: u1.26 s.1 cu.24 cs.95 - 3.4% CPU load
.147 requests/sec - 259 B/second - 1768 B/request - 258.091 ms/request
1 requests currently being processed, 7 idle workers
__W_____........................................................
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0560/2/2_
0.55211811750.00.010.01
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/calendars/nachadan/personal/ HTTP/1.1

1-0570/1/1_
0.502153710740.00.000.00
10.0.2.100http/1.110.0.2.100:80PROPFIND /remote.php/dav/calendars/nachadan/contact_birthdays/ 

2-0588/8/8W
0.280058910.60.010.01
10.0.2.100http/1.110.0.2.100:80GET /server-status HTTP/1.1


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 DurSum of milliseconds required to process all requests
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 

Apache/2.4.57 (Debian) Server at cloud.losiento.cz Port 80

Found on 2023-10-24 06:11

Create report

Domain summary

cloud.losiento.cz 2

1 recorded

IP summary

65.109.32.26 1

1 recorded