The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b50996f8b50996f801bdf92b
Apache Status Apache Server Status for hydrawhat.top (via 81.91.178.190) Server Version: Apache/2.4.63 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4 Phusion_Passenger/6.0.23 Server MPM: worker Server Built: Feb 3 2025 12:56:30 Current Time: Saturday, 07-Jun-2025 13:13:29 EEST Restart Time: Wednesday, 16-Apr-2025 04:58:19 EEST Parent Server Config. Generation: 766 Parent Server MPM Generation: 765 Server uptime: 52 days 8 hours 15 minutes 10 seconds Server load: 6.11 7.48 8.18 Total accesses: 127401872 - Total Traffic: 3018.0 GB - Total Duration: 121578379463 CPU Usage: u2359.79 s1257.5 cu250152 cs126941 - 8.42% CPU load 28.2 requests/sec - 0.7 MB/second - 24.8 kB/request - 954.29 ms/request 16 requests currently being processed, 0 workers gracefully restarting, 109 idle workers W________W___W___W__W________W__W___W__W_____________W__________ ___W___________W_________________________W_WW____W___________... ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-765335951/13/876131W 0.96008317841043.20.7120996.99 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/9/876251_ 0.78640788395460010.00.5921053.27 81.91.178.190http/1.1cenforce200italia.com.sh5070930POST //xmlrpc.php HTTP/1.1 0-765335950/13/878988_ 0.9322098286555150.00.1521194.50 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/7/877921_ 0.78728374331310.00.0221527.73 127.0.0.1http/1.1s33.server-panel.net:81GET //media/wp-includes/wlwmanifest.xml HTTP/1.1 0-765335950/5/882441_ 0.72908266519980.00.0121206.08 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/C0J6AnQrPZXuA9X02hz0H4FYIbG3gqw 0-765335950/3/879151_ 0.711008410877360.00.0021112.39 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/_Xg0hv8Mf5ripeC7sckD_otmwfAhvw5 0-765335950/4/880239_ 0.7110858470080730.00.0121378.04 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/_Xg0hv8Mf5ripeC7sckD_otmwfAhvw5 0-765335950/5/878429_ 0.7110988265954980.00.0021318.80 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/x1W9iT40b39qG6hsgocnJqi6Oj8eqUH 0-765335950/6/871811_ 0.711008384928550.00.4821537.07 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/0UPaAdAHj1ckjaI3F_nsHlnHzaD-MTq 0-765335955/8/878747W 0.9030824222803556.20.6821158.36 81.91.178.190http/1.1cenforce50.com.sh5070930.b.had.GET /aaa.php HTTP/1.1 0-765335950/8/872639_ 0.70111908172578910.00.7921048.31 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/14/880655_ 0.7592098385632390.00.6321063.68 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/4/876133_ 0.72908411142660.00.0021173.51 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/C0J6AnQrPZXuA9X02hz0H4FYIbG3gqw 0-7653359519/22/870466W 0.8740837152394563.50.5621047.31 81.91.178.190http/1.1vidalista-acheter.com.sh5070930POST //xmlrpc.php HTTP/1.1 0-765335950/9/868118_ 0.7110778293799410.00.5620933.11 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/0UPaAdAHj1ckjaI3F_nsHlnHzaD-MTq 0-765335950/7/877413_ 0.8451928212752760.00.1621680.45 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/7/880505_ 0.7682178254238680.00.1122096.82 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335951/5/881282W 0.85508290968012.00.0021214.80 81.91.178.190http/1.1addurls.net.sh4520168.c.had.su:GET /my-account/?action=register HTTP/1.1 0-765335950/4/876832_ 0.95008345167920.00.0121108.31 81.91.178.190http/1.1bg-portal.ru.sh4393622.b.had.suGET /0.php HTTP/1.1 0-765335950/16/873704_ 0.8552208415472170.00.2120935.86 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 0-765335959/11/875197W 0.950082451215910.60.0221197.18 81.91.178.190http/1.1vidalista-svenska.com.sh5070930GET /order/order-liv52-online-nl.html?cur=AUD HTTP/1.1 0-765335950/6/876083_ 0.93216118200784010.00.1121193.49 81.91.178.190http/1.1pinco-apk-vs.info.sh4350282.b.hPOST //xmlrpc.php HTTP/1.1 0-765335950/2/871302_ 0.701008502588300.00.0020886.55 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/0UPaAdAHj1ckjaI3F_nsHlnHzaD-MTq 0-765335950/3/873625_ 0.701008138593430.00.0021290.72 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/_Xg0hv8Mf5ripeC7sckD_otmwfAhvw5 0-765335950/3/872690_ 0.701008355862650.00.0321242.82 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/xoE_V73RUgttgP6beWj0rj66rILSH9Z 1-765340760/8/883109_ 0.8541948335126340.00.5721329.07 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 1-765340760/4/876948_ 0.699548325093950.00.5420910.14 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/C0J6AnQrPZXuA9X02hz0H4FYIbG3gqw 1-765340760/23/879587_ 0.92012758209800560.00.7921175.01 81.91.178.190http/1.1pinco-apk-vs.info.sh4350282.b.hPOST //xmlrpc.php HTTP/1.1 1-765340760/15/880929_ 0.8922178460610630.00.9421084.63 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 1-765340763/5/876213W 0.9300831768861659.70.6621959.55 81.91.178.190http/1.1cajunspirits.com.sh5274211.c.haPOST //xmlrpc.php HTTP/1.1 1-765340760/7/872282_ 0.6810928280703280.00.0121388.66 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/_Xg0hv8Mf5ripeC7sckD_otmwfAhvw5 1-765340760/19/876337_ 0.73836218385399400.00.6221525.47 81.91.178.190http/1.1vidalista-acheter.com.sh5070930POST //xmlrpc.php HTTP/1.1 1-7653407614/19/882523W 0.920083006621345.90.0521430.02 81.91.178.190http/1.1cenforce200italia.com.sh5070930POST //xmlrpc.php HTTP/1.1 1-765340760/3/880077_ 0.689798260500890.00.0021157.27 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/C0J6AnQrPZXuA9X02hz0H4FYIbG3gqw 1-765340760/20/871726_ 0.8061698330420300.01.1220947.96 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 1-765340760/6/867253_ 0.86443178237915580.00.0121121.38 81.91.178.190http/1.1vidalista-acheter.com.sh5070930POST //xmlrpc.php HTTP/1.1 1-765340765/7/874553W 0.8630834387874134.20.1320865.43 81.91.178.190http/1.1cajunspirits.com.sh5274211.c.haPOST //xmlrpc.php HTTP/1.1 1-765340760/18/876917_ 0.8732378148530970.00.6121255.88 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 1-765340760/3/875970_ 0.82628361767810.00.0221056.72 127.0.0.1http/1.1s33.server-panel.net:81GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1 1-765340760/6/879162W 0.65008213481670.00.0120885.88 81.91.178.190http/1.1vela.co.il.sh5159727.c.had.su:8GET /?_bd_prev_page=http%3A%2F%2Fvela.co.il%2Ffile.html%3Fprodu 1-765340760/15/875293_ 0.9201968338829690.00.6121226.04 81.91.178.190http/1.1trixyaviation.com.sh4338011.b.hPOST //xmlrpc.php HTTP/1.1 1-765340760/3/881287_ 0.68101098327015050.00.0021371.64 81.91.178.190http/1.1proxy-subdomains-vhost.localhosGET /.well-known/acme-challenge/0UPaAdAHj1ckjaI3F_nsHlnHzaD-MTq 1-765340760/5/874982_ 0.70932038387865750.00.2621247.54 81.91.178.190http/1.1cenforce-pillola.com.sh5070930.POST //xmlrpc.php HTTP/1.1 1-765340760/10/880077_ 0.651008221775490.00.2421564.72 81.91.178.190http/1.1lyllocasino.net.sh5295190.b.hadGET /.well-known/acme-challenge/xoE_V73RUgttgP6beWj0rj66rILSH9Z 1-765340760/3/878278_ 0.651018267225820.00.0221177.47 127.0.0.1http/1.1s33.server-panel.net:81GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1 1-765340760/8/868377_ 0.6610908423015980.00.0520889.71 81.91.178.190http/1.1