LeakIX - Host emsregion1.org

Domain emsregion1.org

CLOUDFLARENET

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 172.67.152.65
Domain: emsregion1.org
Port: 443
URL: https://emsregion1.org

First seen 2023-06-22 02:49
Last seen 2023-06-22 02:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c3897e27c3897e27e605bbbe

Apache Status

Apache Server Status for emsregion1.org (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 22-Jun-2023 02:49:06 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  363 days 20 hours 2 minutes 15 seconds
Server load: 0.18 0.26 0.21
Total accesses: 1615050777 - Total Traffic: 15337.1 GB - Total Duration: 79464920304
CPU Usage: u622.44 s41321.3 cu5190110 cs1227210 - 20.5% CPU load
51.4 requests/sec - 511.6 kB/second - 10.0 kB/request - 49.2027 ms/request
1 requests currently being processed, 6 idle workers
_W_____.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-638230190/19/196086810_
0.050040277027480.00.081848553.88
162.158.155.64http/1.1unixpimps.org:80GET /wp-content/plugins/featured-image-from-url/includes/?C=D;O

1-638230180/30/188294240W
0.080039208691060.00.131762268.88
162.158.159.176http/1.1emsregion1.org:80GET /server-status HTTP/1.1

2-638230200/17/182541426_
0.050138329240580.00.121698780.38
172.70.230.227http/1.1emsregion1.org:80GET /telescope/requests HTTP/1.1

3-638230210/8/171845256_
0.010036989126910.00.021600604.13
172.70.114.62http/1.1emsregion1.org:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

4-638230220/8/164307287_
0.020035786465030.00.031525737.00
162.158.63.85http/1.1emsregion1.org:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-638230230/7/159692172_
0.010134927116550.00.011480582.13
172.70.110.196http/1.1emsland-aktuell.com:80GET / HTTP/1.1

6-638230240/7/153823984_
0.010033946279040.00.011428671.63
162.158.62.200http/1.1fc-dnepr.com:80HEAD /arena-football-associations-2022-season-kicks-off-this-we

7-63-0/0/108239875.
0.002028201307450.00.001068275.63
172.70.111.42http/1.1kenkepelicula.com:80GET //wp-json/oembed/1.0/embed?url=https://kenkepelicula.com/ H

8-63-0/0/63412597.
0.002421763218530.00.00675919.81
172.70.110.219http/1.1gpsdrive.cc:80GET /santa-is-hitchhiking-around-town-with-the-bay-shore-firefi

9-63-0/0/45818474.
0.002118287889180.00.00495241.22
162.158.155.14http/1.1dubuqueriverrides.com:80HEAD /wollongong-surf-group-gong-gurfers-urges-women-to-get-in-

10-63-0/0/31562406.
0.001265015383427480.00.00350579.97
172.70.230.12http/1.1satgtu.org:80HEAD /nba-injury-report-april-9-updates-for-ja-morant-brandon-i

11-63-0/0/20413821.
0.008148012990835650.00.00237332.64
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17556400.
0.008150012071525280.00.00203969.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16318311.
0.008151011524604600.00.00189480.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12925840.
0.008134710526818070.00.00150572.63
172.70.230.142http/1.1coachoutletonlinespick.org:80GET /first-solar-adds-700-mw-to-4-gw-solar-module-supply-contra

15-63-0/0/7065188.
0.003825918857869700.00.0083330.95
162.158.155.50http/1.1sidereal7.org:80GET /privacy-policy/ HTTP/1.1

16-63-0/0/4589989.
0.0013723707875401810.00.0054465.70
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3687996.
0.0046711707362608650.00.0043834.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3060108.
0.0046707527000335130.00.0036454.17
162.158.154.64http/1.1recyckl.com:80GET /robots.txt HTTP/1.1

19-63-0/0/2648536.
0.0046711806713380790.00.0031467.37
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2432220.
0.0046711306537007630.00.0028990.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2209391.
0.0046707596349804400.00.0026378.69
172.70.111.59http/1.1yoimise.info:80GET /natural-grocers-updates-its-n-power-loyalty-program/ HTTP/

22-63-0/0/2029094.
0.00108432706181255300.00.0024195.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926195.
0.00108429306055624340.00.0022989.95
162.158.158.197http/1.1phvapartmentphuket.com:80GET /wp-content/themes/smart-mag/admin/demo-data/tech//%22http:

24-63-0/0/1850581.
0.00108433705958174980.00.0022076.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800381.
0.00108431805869600020.00.0021467.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1752883.
0.00108433105800563260.00.0020908.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722515.
0.00108429255727846320.00.0020531.16
162.158.62.199http/1.1orus-int.org:80GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1

28-63-0/0/1673396.
0.00108432305657401340.00.0019975.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1646670.
0.00108432005607226510.00.0019640.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1510726.
0.00108433005486943260.00.0018013.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1246934.
0.00242376105270277600.00.0014896.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103626.
0.00399903305120281220.00.0013199.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017665.
0.00399901694994807860.00.0012180.77
172.69.104.71http/1.1

34-63-0/0/946019.
0.00399901684878033510.00.0011301.12
172.69.181.70http/1.1

35-63-0/0/891339.
0.00399903204802988970.00.0010659.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852063.
0.00399903804725113800.00.0010235.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822187.
0.00399901604638470590.00.009850.92
111.31.42.198http/1.1

38-63-0/0/771925.
0.00399903104545853660.00.009250.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747678.
0.00399904004488097660.00.009003.36
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

40-63-0/0/721712.
0.00399902604425045900.00.008669.69
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709464.
0.00399904204368882770.00.008505.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/687902.
0.00399901614319584760.00.008241.85
172.70.190.73http/1.1

43-63-0/0/670476.
0.00579180604266296980.00.008022.81
162.158.62.130http/1.1arena-kiev.com:80GET /robots.txt HTTP/1.1

44-63-0/0/652896.
0.00579181304206802080.00.007817.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/639958.
0.00579180664161529460.00.007667.46
162.158.62.90http/1.1xantipus.com:80GET /lacson-security-tips-for-online-banking/ HTTP/1.1

46-63-0/0/630649.
0.00579181904117453120.00.007532.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618441.
0.00579183004061002870.00.007380.54
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614327.
0.00579183704046102230.00.007359.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606806.
0.00579182004005780920.00.007267.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599016.
0.00579182803980841010.00.007186.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593135.
0.00579184303939287

Found on 2023-06-22 02:49

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c3897e27c3897e2703a9309d

Apache Status

Apache Server Status for emsregion1.org (via 142.93.127.194)

Server Version: Apache/2.4.41 (Ubuntu) OpenSSL/1.1.1f
Server MPM: prefork
Server Built: 2022-06-14T13:30:55

Current Time: Thursday, 22-Jun-2023 02:49:05 UTC
Restart Time: Thursday, 23-Jun-2022 06:46:50 UTC
Parent Server Config. Generation: 64
Parent Server MPM Generation: 63
Server uptime:  363 days 20 hours 2 minutes 14 seconds
Server load: 0.18 0.26 0.21
Total accesses: 1615050742 - Total Traffic: 15337.1 GB - Total Duration: 79464920175
CPU Usage: u622.38 s41321.3 cu5190110 cs1227210 - 20.5% CPU load
51.4 requests/sec - 511.6 kB/second - 10.0 kB/request - 49.2027 ms/request
1 requests currently being processed, 6 idle workers
___W___.........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-638230190/14/196086805_
0.040140277027250.00.071848553.88
172.70.230.226http/1.1emsregion1.org:80GET / HTTP/1.1

1-638230180/25/188294235_
0.070039208690760.00.111762268.88
162.158.158.117http/1.1jazdhealthcare.com:80GET /prevention-not-treatment-should-be-the-focus/ HTTP/1.1

2-638230200/13/182541422_
0.0401438329240370.00.101698780.38
172.70.111.134http/1.1ufc238.com:80GET /ali-abdelaziz-shares-health-update-on-rumble-anthony-johns

3-638230210/2/171845250W
0.000036989126770.00.001600604.13
162.158.159.105http/1.1emsregion1.org:80GET /server-status HTTP/1.1

4-638230220/3/164307282_
0.010535786464800.00.031525737.00
162.158.155.114http/1.1mountainviewhse.com:80GET /server-status HTTP/1.1

5-638230230/2/159692167_
0.000134927116480.00.011480582.13
172.70.230.164http/1.1emsregion1.org:80GET / HTTP/1.1

6-638230240/2/153823979_
0.000133946278930.00.001428671.63
162.158.62.235http/1.1emsregion1.org:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

7-63-0/0/108239875.
0.001028201307450.00.001068275.63
172.70.111.42http/1.1kenkepelicula.com:80GET //wp-json/oembed/1.0/embed?url=https://kenkepelicula.com/ H

8-63-0/0/63412597.
0.001421763218530.00.00675919.81
172.70.110.219http/1.1gpsdrive.cc:80GET /santa-is-hitchhiking-around-town-with-the-bay-shore-firefi

9-63-0/0/45818474.
0.001118287889180.00.00495241.22
162.158.155.14http/1.1dubuqueriverrides.com:80HEAD /wollongong-surf-group-gong-gurfers-urges-women-to-get-in-

10-63-0/0/31562406.
0.001264015383427480.00.00350579.97
172.70.230.12http/1.1satgtu.org:80HEAD /nba-injury-report-april-9-updates-for-ja-morant-brandon-i

11-63-0/0/20413821.
0.008148012990835650.00.00237332.64
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

12-63-0/0/17556400.
0.008150012071525280.00.00203969.42
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

13-63-0/0/16318311.
0.008151011524604600.00.00189480.27
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

14-63-0/0/12925840.
0.008134710526818070.00.00150572.63
172.70.230.142http/1.1coachoutletonlinespick.org:80GET /first-solar-adds-700-mw-to-4-gw-solar-module-supply-contra

15-63-0/0/7065188.
0.003825818857869700.00.0083330.95
162.158.155.50http/1.1sidereal7.org:80GET /privacy-policy/ HTTP/1.1

16-63-0/0/4589989.
0.0013723707875401810.00.0054465.70
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

17-63-0/0/3687996.
0.0046711707362608650.00.0043834.79
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

18-63-0/0/3060108.
0.0046707427000335130.00.0036454.17
162.158.154.64http/1.1recyckl.com:80GET /robots.txt HTTP/1.1

19-63-0/0/2648536.
0.0046711806713380790.00.0031467.37
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

20-63-0/0/2432220.
0.0046711306537007630.00.0028990.91
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

21-63-0/0/2209391.
0.0046707496349804400.00.0026378.69
172.70.111.59http/1.1yoimise.info:80GET /natural-grocers-updates-its-n-power-loyalty-program/ HTTP/

22-63-0/0/2029094.
0.00108432706181255300.00.0024195.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

23-63-0/0/1926195.
0.00108429306055624340.00.0022989.95
162.158.158.197http/1.1phvapartmentphuket.com:80GET /wp-content/themes/smart-mag/admin/demo-data/tech//%22http:

24-63-0/0/1850581.
0.00108433705958174980.00.0022076.38
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

25-63-0/0/1800381.
0.00108431805869600020.00.0021467.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

26-63-0/0/1752883.
0.00108433105800563260.00.0020908.07
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

27-63-0/0/1722515.
0.00108429255727846320.00.0020531.16
162.158.62.199http/1.1orus-int.org:80GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1

28-63-0/0/1673396.
0.00108432305657401340.00.0019975.71
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

29-63-0/0/1646670.
0.00108432005607226510.00.0019640.21
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

30-63-0/0/1510726.
0.00108433005486943260.00.0018013.47
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

31-63-0/0/1246934.
0.00242376005270277600.00.0014896.89
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

32-63-0/0/1103626.
0.00399903305120281220.00.0013199.82
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

33-63-0/0/1017665.
0.00399901594994807860.00.0012180.77
172.69.104.71http/1.1

34-63-0/0/946019.
0.00399901584878033510.00.0011301.12
172.69.181.70http/1.1

35-63-0/0/891339.
0.00399903204802988970.00.0010659.26
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

36-63-0/0/852063.
0.00399903804725113800.00.0010235.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

37-63-0/0/822187.
0.00399901504638470590.00.009850.92
111.31.42.198http/1.1

38-63-0/0/771925.
0.00399903104545853660.00.009250.90
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

39-63-0/0/747678.
0.00399904004488097660.00.009003.36
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

40-63-0/0/721712.
0.00399902504425045900.00.008669.69
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

41-63-0/0/709464.
0.00399904204368882770.00.008505.92
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

42-63-0/0/687902.
0.00399901514319584760.00.008241.85
172.70.190.73http/1.1

43-63-0/0/670476.
0.00579180504266296980.00.008022.81
162.158.62.130http/1.1arena-kiev.com:80GET /robots.txt HTTP/1.1

44-63-0/0/652896.
0.00579181204206802080.00.007817.18
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

45-63-0/0/639958.
0.00579180564161529460.00.007667.46
162.158.62.90http/1.1xantipus.com:80GET /lacson-security-tips-for-online-banking/ HTTP/1.1

46-63-0/0/630649.
0.00579181804117453120.00.007532.55
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

47-63-0/0/618441.
0.00579182904061002870.00.007380.54
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

48-63-0/0/614327.
0.00579183604046102230.00.007359.14
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

49-63-0/0/606806.
0.00579181904005780920.00.007267.45
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

50-63-0/0/599016.
0.00579182703980841010.00.007186.81
::1http/1.1127.0.1.1:80OPTIONS * HTTP/1.0

51-63-0/0/593135.
0.00579184203939287670.00.0

Found on 2023-06-22 02:49

Create report

Domain summary

emsregion1.org 2

1 recorded

IP summary

104.21.1.135 1 172.67.152.65 1

2 recorded