The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3159272fd159272fd1c1fb5db8
Apache Status Apache Server Status for hetnieuwenaturalisme.nl (via 77.74.54.129) Server Version: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Jun 15 2022 09:35:31 Current Time: Friday, 15-Jul-2022 00:53:12 CEST Restart Time: Wednesday, 13-Jul-2022 04:12:02 CEST Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 1 day 20 hours 41 minutes 10 seconds Server load: 6.93 6.06 5.40 Total accesses: 799530 - Total Traffic: 8.4 GB - Total Duration: 681899193 CPU Usage: u64.91 s11.52 cu2659.84 cs455.27 - 1.98% CPU load 4.97 requests/sec - 55.1 kB/second - 11.1 kB/request - 852.875 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06308no13yes1630011 13745no22yes11530119 Sum2035 121160130 ____________________W___________________________________________ ___R__R_W______R______________R_R_W_____R_WR_________________R__ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-563080/140/5805_ 36.341160237664000.00.8971.17 2a01:7e01::f03c:93ff:fe7a:8ddah2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/137/5886_ 36.54164635902530.01.1163.59 172.104.234.191h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/130/5647_ 36.41355635351800.00.7275.89 2600:3c04::f03c:93ff:fe7a:8d54http/1.1www.chocworld.nl:80GET / HTTP/1.1 0-563080/127/6047_ 36.23432135579290.00.6762.22 2600:3c01::f03c:93ff:fe7a:8d39http/1.1www.foodsparring.nl:443GET / HTTP/1.1 0-563080/134/5792_ 36.742034825830.01.2863.62 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /.git/config HTTP/1.1 0-563080/145/5677_ 36.742036615550.02.2654.37 2400:8902::f03c:93ff:fe7a:8d2chttp/1.1shared.domain:443HELP 0-563080/188/5750_ 36.102199136903080.01.0369.68 136.143.177.50http/1.1 0-563080/117/5933_ 36.674204135554450.00.6385.83 172.104.234.191http/1.1www.chocworld.nl:443GET / HTTP/1.1 0-563080/135/5682_ 35.633036599550.00.6153.71 2a01:7e01::f03c:93ff:fe7a:8ddah2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/129/5842_ 36.502137194240.00.9180.14 66.249.66.89http/1.1www.stormracing.nl:80GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP 0-563080/109/5895_ 36.85067035206560.01.8060.05 209.172.60.196http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/134/5791_ 36.682036335180.00.7665.11 45.33.51.181http/1.1shared.domain:443HELP 0-563080/138/5835_ 36.84081734895340.01.0966.85 114.119.148.233http/1.1www.oosterikopenhaardhout.nl:44GET /robots.txt HTTP/1.1 0-563080/142/5843_ 36.26286735633810.00.7155.78 128.199.94.64http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/131/5613_ 35.66078932866870.00.9851.42 188.165.79.151http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/132/5740_ 36.25275433725630.00.9160.58 172.104.234.191h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/132/5727_ 36.34143135572460.01.3584.31 45.33.51.181http/1.1 0-563080/111/5733_ 36.75254635390150.00.6766.35 44.194.33.146http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/125/5845_ 36.683036799130.00.6466.91 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /.git/config HTTP/1.1 0-563080/132/5846_ 36.692038674630.00.8269.20 2400:8902::f03c:93ff:fe7a:8d2chttp/1.1shared.domain:80\x16\x03\x01\x01\x0e\x01 0-563081/128/5696W 36.660034394740.00.7352.30 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:443GET /server-status HTTP/1.1 0-563080/145/5656_ 36.673203338236710.00.8860.39 172.104.234.191http/1.1www.chocworld.nl:443GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-563080/130/5685_ 36.682035353560.02.7761.95 2a01:7e01::f03c:93ff:fe7a:8ddahttp/1.1www.hetnieuwenaturalisme.nl:80GET / HTTP/1.1 0-563080/127/5797_ 36.664130333601540.01.3169.82 103.58.102.183http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/141/6001_ 36.712035749680.01.1963.70 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /login.action HTTP/1.1 0-563080/132/5700_ 36.321135635087390.01.7272.58 172.104.234.191http/1.1 0-563080/130/5952_ 36.252035478080.00.9263.64 136.143.177.50http/1.1www.zorg4noord.nl:443GET / HTTP/1.1 0-563080/104/5641_ 36.66096937593180.00.6450.73 45.33.51.181h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/124/5826_ 36.673038410540.00.7555.93 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET / HTTP/1.1 0-563080/127/5673_ 36.742034463570.01.2259.74 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /s/37372e37342e35342e313239/_/;/META-INF/maven/com.atlassia 0-563080/126/5731_ 36.355196136573180.00.7762.67 172.104.234.191http/1.1shared.domain:80HELP 0-563080/121/5698_ 35.861036341080.00.8571.68 66.249.66.159http/1.1 0-563080/132/5856_ 36.683035047380.03.4265.47 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-563080/132/5637_ 36.673168337836440.00.8150.22 2400:8500:1301:738:133:130:103:36http/1.1www.zwaminspectie.nl:443POST /wp-login.php HTTP/1.1 0-563080/129/5688_ 36.252835272970.00.7951.32 184.75.221.171http/1.1www.oostdorpenomgeving.nl:80POST /xmlrpc.php HTTP/1.1 0-563080/144/5658_ 36.752038792700.01.2360.82 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /config.json HTTP/1.1 0-563080/125/5853_ 36.683037294700.00.9186.25 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-563080/123/5756_ 36.32242636630110.00.8354.76 45.33.51.181h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/128/5722_ 35.65522833119150.00.7654.22 104.248.172.107h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/125/5736_ 36.472133372670.00.7870.13 66.249.66.91http/1.1www.stormracing.nl:80GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.6 HTTP/1.1 0-563080/120/5690_ 36.24375833550930.00.9563.53 2600:3c04::f03c:93ff:fe7a:8d17h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/134/5649_ 36.452113235739290.01.2357.27 172.104.
The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a5f87180a5f871806887c788
Apache Status Apache Server Status for www.hetnieuwenaturalisme.nl (via 77.74.54.129) Server Version: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips Server MPM: event Server Built: Jun 15 2022 09:35:31 Current Time: Friday, 15-Jul-2022 00:53:13 CEST Restart Time: Wednesday, 13-Jul-2022 04:12:02 CEST Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 1 day 20 hours 41 minutes 10 seconds Server load: 6.93 6.06 5.40 Total accesses: 799546 - Total Traffic: 8.4 GB - Total Duration: 681899967 CPU Usage: u64.98 s11.52 cu2659.84 cs455.27 - 1.98% CPU load 4.97 requests/sec - 55.1 kB/second - 11.1 kB/request - 852.859 ms/request 12 requests currently being processed, 116 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusyidlewritingkeep-aliveclosing 06308no13yes8560011 13745no24yes4600121 Sum2037 121160132 __WR___R_____________R_R_________________________R________R____W __________________W________R________________________WR__________ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ ................................................................ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-563080/140/5805_ 36.341160237664000.00.8971.17 2a01:7e01::f03c:93ff:fe7a:8ddah2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/137/5886_ 36.54164635902530.01.1163.59 172.104.234.191h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563081/130/5647W 36.410035351800.00.7275.89 51.15.172.31http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/127/6047R 36.23432135579290.00.6762.22 45.33.51.181http/1.1 0-563080/134/5792_ 36.743034825830.01.2863.62 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /.git/config HTTP/1.1 0-563080/145/5677_ 36.743036615550.02.2654.37 2400:8902::f03c:93ff:fe7a:8d2chttp/1.1shared.domain:443HELP 0-563080/188/5750_ 36.103199136903080.01.0369.68 136.143.177.50http/1.1 0-563080/117/5933R 36.674204135554450.00.6385.83 45.33.51.181http/1.1 0-563080/135/5682_ 35.634036599550.00.6153.71 2a01:7e01::f03c:93ff:fe7a:8ddah2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/129/5842_ 36.502137194240.00.9180.14 66.249.66.89http/1.1www.stormracing.nl:80GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP 0-563080/109/5895_ 36.85067035206560.01.8060.05 209.172.60.196http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/134/5791_ 36.683036335180.00.7665.11 45.33.51.181http/1.1shared.domain:443HELP 0-563080/138/5835_ 36.84181734895340.01.0966.85 114.119.148.233http/1.1www.oosterikopenhaardhout.nl:44GET /robots.txt HTTP/1.1 0-563080/142/5843_ 36.26386735633810.00.7155.78 128.199.94.64http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/131/5613_ 35.66078932866870.00.9851.42 188.165.79.151http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/132/5740_ 36.25375433725630.00.9160.58 172.104.234.191h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/132/5727_ 36.34143135572460.01.3584.31 45.33.51.181http/1.1 0-563080/111/5733_ 36.75254635390150.00.6766.35 44.194.33.146http/1.1www.sanavestagroothandel.nl:80POST /admin/ HTTP/1.1 0-563080/125/5845_ 36.683036799130.00.6466.91 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /.git/config HTTP/1.1 0-563080/132/5846_ 36.693038674630.00.8269.20 2400:8902::f03c:93ff:fe7a:8d2chttp/1.1shared.domain:80\x16\x03\x01\x01\x0e\x01 0-563080/129/5697_ 36.860534394800.00.7452.32 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:443GET /server-status HTTP/1.1 0-563080/145/5656R 36.674203338236710.00.8860.39 45.33.51.181http/1.1 0-563080/130/5685_ 36.683035353560.02.7761.95 2a01:7e01::f03c:93ff:fe7a:8ddahttp/1.1www.hetnieuwenaturalisme.nl:80GET / HTTP/1.1 0-563080/127/5797R 36.665130333601540.01.3169.82 45.33.51.181http/1.1 0-563080/141/6001_ 36.713035749680.01.1963.70 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /login.action HTTP/1.1 0-563080/132/5700_ 36.322135635087390.01.7272.58 172.104.234.191http/1.1 0-563080/130/5952_ 36.253035478080.00.9263.64 136.143.177.50http/1.1www.zorg4noord.nl:443GET / HTTP/1.1 0-563080/104/5641_ 36.66096937593180.00.6450.73 45.33.51.181h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/124/5826_ 36.673038410540.00.7555.93 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET / HTTP/1.1 0-563080/127/5673_ 36.743034463570.01.2259.74 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /s/37372e37342e35342e313239/_/;/META-INF/maven/com.atlassia 0-563080/126/5731_ 36.350196136573180.00.7762.67 172.104.234.191http/1.1shared.domain:80HELP 0-563080/121/5698_ 35.862036341080.00.8571.68 66.249.66.159http/1.1 0-563080/132/5856_ 36.683035047380.03.4265.47 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /?rest_route=/wp/v2/users/ HTTP/1.1 0-563080/132/5637_ 36.674168337836440.00.8150.22 2400:8500:1301:738:133:130:103:36http/1.1www.zwaminspectie.nl:443POST /wp-login.php HTTP/1.1 0-563080/129/5688_ 36.253835272970.00.7951.32 184.75.221.171http/1.1www.oostdorpenomgeving.nl:80POST /xmlrpc.php HTTP/1.1 0-563080/144/5658_ 36.753038792700.01.2360.82 45.79.93.245http/1.1www.hetnieuwenaturalisme.nl:80GET /config.json HTTP/1.1 0-563080/125/5853_ 36.683037294700.00.9186.25 172.104.234.191http/1.1www.hetnieuwenaturalisme.nl:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 0-563080/123/5756_ 36.32242636630110.00.8354.76 45.33.51.181h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/128/5722_ 35.65022833119150.00.7654.22 45.33.51.181h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/125/5736_ 36.473133372670.00.7870.13 66.249.66.91http/1.1www.stormracing.nl:80GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.6 HTTP/1.1 0-563080/120/5690_ 36.24475833550930.00.9563.53 2600:3c04::f03c:93ff:fe7a:8d17h2done, streams: 0/0/0/0/0 (open/recv/resp/push/rst) 0-563080/134/5649_ 36.453113235739290.01.2357.27 172.104.234.191http/1.1www.chocworld.nl:80GET /info.php HTTP/1.1 0-563080/138/6081_ 36