The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ff2de2e9ff2de2e9a2da5ebf
Apache Status Apache Server Status for www.kindzazaz.ru (via 127.0.0.1) Server Version: Apache/2.4.10 (Debian) mpm-itk/2.4.7-02 OpenSSL/1.0.1t Server MPM: prefork Server Built: Sep 30 2019 19:32:08 Current Time: Monday, 22-Aug-2022 03:59:58 MSK Restart Time: Monday, 22-Aug-2022 00:01:55 MSK Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 3 hours 58 minutes 3 seconds Server load: 10.81 10.39 10.80 Total accesses: 49576 - Total Traffic: 3.4 GB CPU Usage: u3.17 s1.36 cu0 cs0 - .0317% CPU load 3.47 requests/sec - 250.7 kB/second - 72.2 kB/request 5 requests currently being processed, 2 idle workers WWW_W_R......................................................... ................................................................ ............ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest 0-5538010/55/5123W 0.00000.01.14342.95 91.108.6.94avto-vozim.ru:8080POST /autobot/telegram/hook HTTP/1.0 1-5537970/61/4996W 0.00100.01.42280.84 54.90.255.123thorplife.ru:8080GET /.git/config HTTP/1.0 2-5537990/52/4854W 0.63200.01.25129.84 114.119.145.7xn----jtbjhmcfvcbh.xn--p1ai:808GET /marin77f/bfecb375253.htm HTTP/1.0 3-5537980/50/4908_ 0.4204390.01.49560.21 90.156.128.160thorplife.ru:8080POST /wp-cron.php?doing_wp_cron=1661129997.81567502021789550781 4-5538000/52/4838W 0.52000.00.90149.47 173.255.252.198kindzazaz.ru:8080GET /server-status HTTP/1.0 5-5539080/48/4559_ 0.5606170.01.19492.93 91.108.6.94avto-vozim.ru:8080POST /autobot/telegram/hook HTTP/1.0 6-5540700/34/4418R 0.00010.00.44541.65 127.0.0.1 7-1-0/0/4333. 0.811208900.00.00138.32 173.231.60.194prostoymaster.ru:8080GET /fitingi-pnd/ugol-pnd-du40kh1-vnutrenn HTTP/1.0 8-1-0/0/3506. 0.5589500.00.00315.53 161.156.29.33morpeh.com:8080GET / HTTP/1.0 9-0-0/0/3046. 0.2925898700.00.00234.65 193.188.21.9abk-63.ru:8080GET /content/kontakty HTTP/1.0 10-0-0/0/1998. 0.00638510.00.00258.01 84.39.116.180xn--80ag5acafkm.xn--p1ai:8080POST /xmlrpc.php HTTP/1.0 11-0-0/0/1998. 0.7540297740.00.0035.18 20.110.4.10forza-nero.ru:8080GET /wp-content/uploads/cgialfa HTTP/1.0 12-0-0/0/999. 0.0040097690.00.0017.19 154.54.249.199sampogroup.ru:8080GET /shop/klei-zhidkij-plastik-ochistiteli/ochistiteli-cosmofen SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.10 (Debian) Server at www.kindzazaz.ru Port 80
The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31ff2de2e9ff2de2e92908dd38
Apache Status Apache Server Status for www.kindzazaz.ru (via 127.0.0.1) Server Version: Apache/2.4.10 (Debian) mpm-itk/2.4.7-02 OpenSSL/1.0.1t Server MPM: prefork Server Built: Sep 30 2019 19:32:08 Current Time: Monday, 22-Aug-2022 03:59:54 MSK Restart Time: Monday, 22-Aug-2022 00:01:55 MSK Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 3 hours 57 minutes 59 seconds Server load: 10.80 10.38 10.80 Total accesses: 49537 - Total Traffic: 3.4 GB CPU Usage: u1.62 s.78 cu0 cs0 - .0168% CPU load 3.47 requests/sec - 250.7 kB/second - 72.3 kB/request 7 requests currently being processed, 0 idle workers CCWWWCC......................................................... ................................................................ ............ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest 0-5538010/47/5115R 0.00020.01.04342.85 173.255.252.198kindzazaz.ru:8080GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-5537971/56/4991C 0.00010.61.41280.82 173.255.252.198kindzazaz.ru:8080GET /.DS_Store HTTP/1.0 2-5537990/51/4853W 0.00000.01.25129.84 165.22.200.76drivelandcruiser.ru:8080GET /wp-login.php HTTP/1.0 3-5537980/44/4902W 0.00000.01.47560.19 171.244.139.185driveclassic.ru:8080POST /wp-login.php HTTP/1.0 4-5538000/46/4832W 0.00000.00.83149.40 173.255.252.198kindzazaz.ru:8080GET /server-status HTTP/1.0 5-5539081/42/4553C 0.00010.71.11492.85 173.255.252.198kindzazaz.ru:8080GET /telescope/requests HTTP/1.0 6-5540701/27/4411C 0.000394.00.41541.62 173.255.252.198kindzazaz.ru:8080GET / HTTP/1.0 7-1-0/0/4333. 0.811168900.00.00138.32 173.231.60.194prostoymaster.ru:8080GET /fitingi-pnd/ugol-pnd-du40kh1-vnutrenn HTTP/1.0 8-1-0/0/3506. 0.5589100.00.00315.53 161.156.29.33morpeh.com:8080GET / HTTP/1.0 9-0-0/0/3046. 0.2925858700.00.00234.65 193.188.21.9abk-63.ru:8080GET /content/kontakty HTTP/1.0 10-0-0/0/1998. 0.00638110.00.00258.01 84.39.116.180xn--80ag5acafkm.xn--p1ai:8080POST /xmlrpc.php HTTP/1.0 11-0-0/0/1998. 0.7540257740.00.0035.18 20.110.4.10forza-nero.ru:8080GET /wp-content/uploads/cgialfa HTTP/1.0 12-0-0/0/999. 0.0040057690.00.0017.19 154.54.249.199sampogroup.ru:8080GET /shop/klei-zhidkij-plastik-ochistiteli/ochistiteli-cosmofen SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.10 (Debian) Server at www.kindzazaz.ru Port 80
The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31137a3880137a3880aec5afec
Apache Status Apache Server Status for kindzazaz.ru (via 127.0.0.1) Server Version: Apache/2.4.10 (Debian) mpm-itk/2.4.7-02 OpenSSL/1.0.1t Server MPM: prefork Server Built: Sep 30 2019 19:32:08 Current Time: Monday, 22-Aug-2022 03:59:52 MSK Restart Time: Monday, 22-Aug-2022 00:01:55 MSK Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 3 hours 57 minutes 57 seconds Server load: 10.80 10.38 10.80 Total accesses: 49519 - Total Traffic: 3.4 GB CPU Usage: u1.62 s.78 cu0 cs0 - .0168% CPU load 3.47 requests/sec - 250.8 kB/second - 72.3 kB/request 6 requests currently being processed, 1 idle workers WCCRWC_......................................................... ................................................................ ............ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest 0-5538010/44/5112W 0.00000.00.98342.79 95.163.255.66morpeh.com:8080GET /komanduiushchii-sostav-bf/baltiiskii-flot/komanduiushchii- 1-5537971/53/4988C 0.000294.01.31280.73 46.101.189.134kindzazaz.ru:8080GET / HTTP/1.0 2-5537991/50/4852C 0.00010.61.25129.84 46.101.189.134kindzazaz.ru:8080GET /.git/config HTTP/1.0 3-5537980/43/4901R 0.00010.01.47560.19 46.101.189.134kindzazaz.ru:8080GET /.env HTTP/1.0 4-5538000/43/4829W 0.00000.00.81149.38 46.101.189.134kindzazaz.ru:8080GET /server-status HTTP/1.0 5-5539081/39/4550C 0.00010.61.02492.76 46.101.189.134kindzazaz.ru:8080GET /telescope/requests HTTP/1.0 6-5540700/23/4407_ 0.00050.00.31541.52 46.101.189.134kindzazaz.ru:8080GET /?rest_route=/wp/v2/users/ HTTP/1.0 7-1-0/0/4333. 0.811148900.00.00138.32 173.231.60.194prostoymaster.ru:8080GET /fitingi-pnd/ugol-pnd-du40kh1-vnutrenn HTTP/1.0 8-1-0/0/3506. 0.5589000.00.00315.53 161.156.29.33morpeh.com:8080GET / HTTP/1.0 9-0-0/0/3046. 0.2925848700.00.00234.65 193.188.21.9abk-63.ru:8080GET /content/kontakty HTTP/1.0 10-0-0/0/1998. 0.00637910.00.00258.01 84.39.116.180xn--80ag5acafkm.xn--p1ai:8080POST /xmlrpc.php HTTP/1.0 11-0-0/0/1998. 0.7540247740.00.0035.18 20.110.4.10forza-nero.ru:8080GET /wp-content/uploads/cgialfa HTTP/1.0 12-0-0/0/999. 0.0040047690.00.0017.19 154.54.249.199sampogroup.ru:8080GET /shop/klei-zhidkij-plastik-ochistiteli/ochistiteli-cosmofen SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.10 (Debian) Server at kindzazaz.ru Port 80
The server-status page (usually /server-status
) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31137a3880137a388037ce47d4
Apache Status Apache Server Status for kindzazaz.ru (via 127.0.0.1) Server Version: Apache/2.4.10 (Debian) mpm-itk/2.4.7-02 OpenSSL/1.0.1t Server MPM: prefork Server Built: Sep 30 2019 19:32:08 Current Time: Monday, 22-Aug-2022 03:59:54 MSK Restart Time: Monday, 22-Aug-2022 00:01:55 MSK Parent Server Config. Generation: 6 Parent Server MPM Generation: 5 Server uptime: 3 hours 57 minutes 59 seconds Server load: 10.80 10.38 10.80 Total accesses: 49543 - Total Traffic: 3.4 GB CPU Usage: u1.62 s.78 cu0 cs0 - .0168% CPU load 3.47 requests/sec - 250.7 kB/second - 72.3 kB/request 3 requests currently being processed, 4 idle workers __WW__W......................................................... ................................................................ ............ Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqConnChildSlotClientVHostRequest 0-5538010/49/5117_ 0.00010.01.04342.85 46.101.189.134kindzazaz.ru:8080GET /.env HTTP/1.0 1-5537970/57/4992_ 0.00010.01.41280.82 46.101.189.134kindzazaz.ru:8080GET /.DS_Store HTTP/1.0 2-5537990/51/4853W 0.00000.01.25129.84 165.22.200.76drivelandcruiser.ru:8080GET /wp-login.php HTTP/1.0 3-5537980/44/4902W 0.00000.01.47560.19 171.244.139.185driveclassic.ru:8080POST /wp-login.php HTTP/1.0 4-5538000/48/4834_ 0.00010.00.83149.40 46.101.189.134kindzazaz.ru:8080GET /s/39302e3135362e3132382e313632/_/;/META-INF/maven/com.atla 5-5539080/43/4554_ 0.00010.01.11492.85 46.101.189.134kindzazaz.ru:8080GET /telescope/requests HTTP/1.0 6-5540700/27/4411W 0.00000.00.41541.62 46.101.189.134kindzazaz.ru:8080GET /server-status HTTP/1.0 7-1-0/0/4333. 0.811168900.00.00138.32 173.231.60.194prostoymaster.ru:8080GET /fitingi-pnd/ugol-pnd-du40kh1-vnutrenn HTTP/1.0 8-1-0/0/3506. 0.5589100.00.00315.53 161.156.29.33morpeh.com:8080GET / HTTP/1.0 9-0-0/0/3046. 0.2925858700.00.00234.65 193.188.21.9abk-63.ru:8080GET /content/kontakty HTTP/1.0 10-0-0/0/1998. 0.00638110.00.00258.01 84.39.116.180xn--80ag5acafkm.xn--p1ai:8080POST /xmlrpc.php HTTP/1.0 11-0-0/0/1998. 0.7540257740.00.0035.18 20.110.4.10forza-nero.ru:8080GET /wp-content/uploads/cgialfa HTTP/1.0 12-0-0/0/999. 0.0040057690.00.0017.19 154.54.249.199sampogroup.ru:8080GET /shop/klei-zhidkij-plastik-ochistiteli/ochistiteli-cosmofen SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot SSL/TLS Session Cache Status: cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss Apache/2.4.10 (Debian) Server at kindzazaz.ru Port 80