Apache
tcp/443 tcp/80
The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.
This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb3138903c4a38903c4a42cddceb
Apache Status Apache Server Status for static-qa2.mega-image.ro (via 10.199.25.153) Server Version: Apache/2.4.62 (Oracle Linux Server) OpenSSL/3.2.2 Server MPM: worker Server Built: Oct 25 2024 00:00:00 Current Time: Wednesday, 22-Jan-2025 07:00:52 UTC Restart Time: Wednesday, 22-Jan-2025 04:08:28 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 2 hours 52 minutes 23 seconds Server load: 0.00 0.00 0.00 Total accesses: 3719 - Total Traffic: 18.8 MB - Total Duration: 362558 CPU Usage: u6.67 s2.2 cu0 cs0 - .0858% CPU load .36 requests/sec - 1906 B/second - 5.2 kB/request - 97.488 ms/request 20 requests currently being processed, 0 workers gracefully restarting, 55 idle workers __K__K___K__K_____K_____K_KK________K___KK_____K__K_____K__K____ ____KKKK_W_..................................................... ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-09140/27/27_ 2.1012217195840.00.590.59 10.199.25.169http/1.1 0-09140/18/18_ 2.279289444540.00.050.05 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /api/v1/?operationName=PredictMyProducts&variables=%7B%22pr 0-09144/11/11K 2.3337583156225.30.350.35 10.199.25.169http/1.1hybris.ahdlhcloud.prv:443GET /api/v1/?operationName=getWishList&variables=%7B%22listId%2 0-09140/39/39_ 2.221393860200.01.091.09 10.199.25.169http/1.1hybris.ahdlhcloud.prv:443GET /medias/sys_master/h9d/h8f/9169813635102.png HTTP/1.1 0-09140/20/20_ 2.03486737330.00.150.15 10.199.25.169http/1.1 0-09142/15/15K 2.3164149210.40.030.03 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443POST /backoffice/zkau HTTP/1.1 0-09140/20/20_ 2.19110111880.00.100.10 10.199.25.169http/1.1 0-09140/38/38_ 1.971731334290.00.420.42 10.199.25.21http/1.1 0-09140/45/45_ 2.18122031690.00.170.17 10.199.25.169http/1.1 0-09141/10/10K 2.29129017011.90.100.10 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json/a.ico?query=type:base%20limit:..1& 0-09140/27/27_ 2.053660200180.00.280.28 10.199.25.169http/1.1 0-09140/35/35_ 1.25152422126580.00.730.73 10.199.25.21http/1.1 0-09141/17/17K 2.29132016391.90.200.20 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json;%0aa.png?query=type:base%20limit:. 0-09140/12/12R 2.15249362690.00.040.04 10.199.25.169http/1.1 0-09140/33/33_ 2.21280101140.00.470.47 10.199.25.169http/1.1 0-09140/45/45_ 2.145419149620.00.800.80 10.199.25.21http/1.1 0-09140/18/18_ 2.041740960.00.040.04 10.199.25.169http/1.1 0-09140/88/88_ 2.04216042810.00.710.71 10.199.25.169http/1.1 0-09141/18/18K 2.31630117371.90.060.06 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /?SPX_KEY=stag&SPX_UI_URI=/ HTTP/1.1 0-09140/33/33_ 2.13822394250.00.450.45 10.199.25.21http/1.1 0-09140/6/6_ 2.032702790.00.030.03 10.199.25.169http/1.1 0-09140/47/47_ 2.279271857020.00.480.48 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /api/v1/?operationName=ProductsFromCategory&variables=%7B%2 0-09140/29/29_ 2.2212941212840.00.300.30 10.199.25.21http/1.1 0-09140/33/33_ 2.078804070.00.100.10 10.199.25.169http/1.1 0-09142/17/17K 2.316401003.20.040.04 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /?SPX_KEY=prd&SPX_UI_URI=/ HTTP/1.1 1-09150/10/10_ 3.321321042140.00.030.03 10.199.25.169http/1.1 1-09151035/1035/1035K 3.6404101151057.91.031.03 10.199.25.169http/1.1hybris.ahdlhcloud.prv:443GET /robots.txt HTTP/1.1 1-09151033/1033/1033K 3.649497461055.81.031.03 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /robots.txt HTTP/1.1 1-09150/19/19_ 3.222804220.00.110.11 10.199.25.169http/1.1 1-09150/7/7_ 3.3717404660.00.030.03 10.199.25.169http/1.1 1-09150/8/8_ 3.421024023780.00.040.04 10.199.25.21http/1.1 1-09150/33/33_ 3.321631614290.00.190.19 10.199.25.21http/1.1 1-09150/5/5_ 3.214703980.00.020.02 10.199.25.21http/1.1 1-09150/40/40_ 3.161291452020.00.220.22 10.199.25.21http/1.1 1-09150/43/43_ 3.34901124300.00.160.16 10.199.25.169http/1.1 1-09150/36/36_ 3.2054088310.00.300.30 10.199.25.169http/1.1 1-09151/28/28K 3.60131028192.20.160.16 10.199.25.21http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json/a.png?query=type%3Abase+limit%3A.. 1-09150/12/12_ 3.2361511720.00.250.25 10.199.25.169http/1.1 1-09150/15/15_ 3.481201111620.00.070.07 10.199.25.169http/1.1hybris.ahdlhcloud.prv:443POST /backoffice/zkau HTTP/1.1 1-09150/37/37_ 3.4383011220.00.140.14 10.199.25.169http/1.1 1-09151/5/5K 3.60133275.30.020.02 10.199.25.21http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json/a.4.2.1...json?query=type:base%20l 1-09151/34/34K 3.60132012905.20.350.35 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json?query=type:base%20limit:..1&pathPr 1-09150/11/11_ 3.461382918220.00.060.06 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /medias/sys_master/hb4/h8f/9169814093854.png HTTP/1.1 1-09150/18/18_ 3.421111726770.00.080.08 10.199.25.169http/1.1 1-09150/22/22_ 3.52644450160.01.251.25 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /api/v1/?operationName=WishLists&variables=%7B%220%22%3A%22 1-09150/15/15_ 3.435406440.00.060.06 10.199.25.21http/1.1 1-09150/24/24_ 3.215302980.00.070.07 10.199.25.21http/1.1 1-09152/13/13K 3.6210805656.60.380.38 10.199.25.169http/1.1cdn.ahdlhcloud.prv:443GET /bin/wcm/search/gql.json/a.png?query=type:base%20limit:..1& 1-09150/15/15_ 3.4382010860.00.190.19 10.199.25.21http/1.1 1-09150/10/10_ 3.5092348294370.00.250.25 10.199.25.21http/1.1hybris.ahdlhcloud.prv:443GET /api/v1/?operationName=LeftHandNavigationBar&variables=%7B% 2-0131513/16/16K 1.80184203063223.20.230.23 10.199.25.169http/1.1hybris.ahdlhcloud.prv:443POST /backoffice/zkau HTTP/1.1 2-013150/28/28_ 1.72162052510.00.340.34 10.199.25.21http/1.1cdn.ahdlhcloud.prv:443GET /static-qa2.mega-image.ro/error.log HTTP/1.1 2-013150/4/4_ 1.6327306890.00.020.02 10.199.25.21http/1.1 2-013150/4/4_ 1.5316304320.00.020.02 10.199.25.21http/1.1 2-013150/5/5_ 1.5150200.00.020.02 10.199.25.21http/1.1 2-013150/26/26_ 1.609712132060.00.220.22 10.199.25.169http/1.1 2-013151/43/43K 1.81
Open service 2.16.183.25:443 · static-qa2.mega-image.ro
2026-01-22 19:46
HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 X-Akamai-Transformed: 0 - 0 - Cache-Control: max-age=2592000 Date: Thu, 22 Jan 2026 19:46:54 GMT Content-Length: 307 Connection: close Alt-Svc: h3=":443"; ma=93600 Ak-access-mobile: Access traceresponse: 00-1a2fc3a504c3cf4dc597256c5ddf12f2-5d8266d187fb5978-00 X-DLH-True-Client-IP: 159.89.127.165 X-Content-Type-Options: nosniff Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' https: blob:;object-src https://*.mega-image.ro; base-uri https://tau.collect.igodigital.com/; upgrade-insecure-requests; frame-ancestors 'self' https://*.mega-image.ro https://*.svc.mega-image.ro/; Strict-Transport-Security: max-age=31536000; includeSubDomains Server: Apache x-dlh-image-optimization: origin Vary: Accept-encoding, Origin X-DLH-Cache-Status: Hit from child Set-Cookie: _abck=B8263A666D7DA4C9351180E10E52FEDD~-1~YAAQ2R0QAn/XjtebAQAASto+5w8yjWrwHPyGXcuAJH+nU1ExYdcHtXpY6Bty3lIu7E0+FTgMal2H3+VLKznAT/kTkUv1ZDoV4goRPQWEVPav8z7TbRWGzmjYmUlIkxlKrg/dA7Cj1jiXEtOocNhNOwVuKB5Tb2wHZovhiI1Yg4HNBYykavdwK6izGi+Rd8wufqfebl9qVUYLM892Gr/UI9rMvezJlaOradxvc5osGJStyDnGZRJVazaoYZR5cUoq+qnr/evt4O4VBHQuqZN+hDccgwJSOXDBLQANcBPa04ouH0KmD39DGtWQy/hkoHqoq8mgOhomHqFUFavHwbymS5Yj6cFY1nBEhE+IWWdyZ5oW3gW4nJNfbDeYYVfEsQ3nFHem7cTE9Ln+dN/mlkr/92fYCSNPXoYcvzmo7aRpHBVMmsMKJ9sDRUMzq5g+ZJmMku4SXFgV0jo=~-1~-1~-1~-1~-1; Domain=.mega-image.ro; Path=/; Expires=Fri, 22 Jan 2027 19:46:54 GMT; Max-Age=31536000; Secure Set-Cookie: bm_sz=0AE7B592D0075FBF417E06F06B8A4829~YAAQ2R0QAoDXjtebAQAASto+5x6nk3idsoH76/MfN7Wq9HBS2PuGVzJSS9HEGoJhvbSx4fdAzq14l9Q+m0lj5WJpJp6uQR5OP7hCZmCTtjRJVRrovmNVm2JdFGKuZQ7bhMWeAtvtJ4c3UWmZwuJmcZqv8gJkcjsVfzh0krfjf3AptwVJ9sGI8zLfRaoDb5oPAktS7FdLwoD4KvFXoZQ5zjysvTm3dZCNRSxHapvghl271/f3RBXdyZGZcglFiK6hK8UWY0kJEAi3kuEmEkKbwNyZMEFehG80dYE4dDLxIV/ExpVIRFJcazCIXMN5Bs/Qz5tpGDSbNrqp6f14Ccxl996Py/e/JPjlQ7m/k604b3TG~4470085~3617840; Domain=.mega-image.ro; Path=/; Expires=Thu, 22 Jan 2026 23:46:54 GMT; Max-Age=14400 Page title: 404 Not Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <script type="text/javascript" src="/ibu9bfBPvJ/l9UZm2Lc/iR/mErE6b3LYcN5pwGOuE/ATJQAQ/MQt1Al/8mdCYB"></script></body></html>
Open service 2.16.183.20:443 · static-qa2.mega-image.ro
2026-01-22 19:46
HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 X-Akamai-Transformed: 0 - 0 - Cache-Control: max-age=2592000 Date: Thu, 22 Jan 2026 19:46:54 GMT Content-Length: 307 Connection: close Alt-Svc: h3=":443"; ma=93600 Ak-access-mobile: Access traceresponse: 00-618cdeb3fd2a75ca27c7605987ca1519-d28935350e01dda6-00 X-DLH-True-Client-IP: 159.89.127.165 X-Content-Type-Options: nosniff Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' https: blob:;object-src https://*.mega-image.ro; base-uri https://tau.collect.igodigital.com/; upgrade-insecure-requests; frame-ancestors 'self' https://*.mega-image.ro https://*.svc.mega-image.ro/; Strict-Transport-Security: max-age=31536000; includeSubDomains Server: Apache x-dlh-image-optimization: origin Vary: Accept-encoding, Origin X-DLH-Cache-Status: Miss from child, Miss from parent Set-Cookie: _abck=126986FC018A969B43069B7304E0F8A1~-1~YAAQ1B0QAqgBaN2bAQAAhNo+5w+f44bzZq7uiOZr+Idbq6B4oIw0M9HLvH0iDUogOwjJ1SEeGIkXn68Gcn6tLiFkJleeekSGoS9NBLjA8Z2R7e5VFkVv0Ptl70BI0lTZbTx86SK28kTJqT1BTwm1PYuoNsT3HOxwjIUbwhb3peUJiZ0o54NzGB6YE6fYUh3v24tVnmUqSSsinuxY3WMxBGz7bPfakAkq/15JQ6LDhDQ/RXlJwpJO+FswpieDTSp+uZE4bVpgOb0b1ey3mT9iBZ2LL5q1Pj/1/Z3OzIEnLwE8hazU47Y9a45bnXCyw7IhCbW5oaUWrY8j2DZK5bLVpPEAuwBAvV78I2TK16bXRPbCFMoR5delcpUjUzAmPTl4YtNO/yEByMDpXcEbiSXk555i56azSjv0wtCxB1nJCvcK9w2UxA8l/NPaAFFyjAvtLaz4VRDLaE4=~-1~-1~-1~-1~-1; Domain=.mega-image.ro; Path=/; Expires=Fri, 22 Jan 2027 19:46:54 GMT; Max-Age=31536000; Secure Set-Cookie: bm_sz=8EB1FEB6CD56D8D6CE1B745A20439FDA~YAAQ1B0QAqkBaN2bAQAAhNo+5x7JE7zvK2smj+QGRuzZwf9AgmbB/pkZvdlJkakXmxB9ZokNL4R/3OwhtAZzmHili+svY5xAgjUCBVpYIRf5pyt0NyYzCqxn2SfcswhkWCdyHnyanjdyzjrn6IAeV2qLWtjSHXiTy2CvZiE79EC7ZEmvyWJ34b0xAKaOojLWqxGvvBvSdUOwmfai68NIKemC8vNm5cMFXqx2j1kQE/Rp4fb1ubHjIhKlNyG7Cyys8aq3hRl7XNOY46G7U0yWazsLgkrV2FFjtSDDce8Z+BQ1tWhHggpUcUbMTvwOFTbF6e5S7iGcY/LVojK0zuvFlh4ggPGXmymrOd6Ns/6D1rWq~4470085~3617840; Domain=.mega-image.ro; Path=/; Expires=Thu, 22 Jan 2026 23:46:54 GMT; Max-Age=14400 Page title: 404 Not Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <script type="text/javascript" src="/ibu9bfBPvJ/l9UZm2Lc/iR/mErE6b3LYcN5pwGOuE/ATJQAQ/MQt1Al/8mdCYB"></script></body></html>
Open service 2.16.183.25:80 · static-qa2.mega-image.ro
2026-01-22 19:46
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://static-qa2.mega-image.ro/ Cache-Control: max-age=0 Date: Thu, 22 Jan 2026 19:47:16 GMT Connection: close Ak-access-mobile: Access traceresponse: 00-014a083444bda9da515fb21d2b73545f-21538f2b619301de-00 X-DLH-True-Client-IP: 159.89.127.165 X-Content-Type-Options: nosniff Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' https: blob:;object-src https://*.mega-image.ro; base-uri https://tau.collect.igodigital.com/; upgrade-insecure-requests; frame-ancestors 'self' https://*.mega-image.ro https://*.svc.mega-image.ro/; Strict-Transport-Security: max-age=31536000; includeSubDomains Server: Apache x-dlh-image-optimization: origin Vary: Accept-encoding, Origin X-DLH-Cache-Status: Redirect from child AK-redirect: redirected_to_https Set-Cookie: _abck=44946B732F53B077F195E30BC3A8FEF0~-1~YAAQ2R0QAgEAj9ebAQAAVDA/5w8ZKTZke9gPKWM4aRazlaMOlLM+wfmpsWKvpLpLl9NzI/X4Ou6w7sgX0b823VVW+fQEQR+1NxU5HRpVyUq6FsPR5BisDKQnUGKtW5/dqayNoY782FcPMBmLtD0OakoWXFRxDbgSIGbJSY01xiKI+jtxlBvK2Gh9dOPwYVgPI7PwGkIEs0BT6VIfu2A61ELz2eMBJtxW+TwjZSbn33kw1pqTUCGyyF3jXwMLSe2b3EGQrFoZ7HCFKp/5ZljKpT3V2Xmfl/RGKgDxQ+MVf8FPk5E+wBR63ijQwohulAIpL/YVAeEOLJTQ+mmjGCbBFj+vJWiLYzb09tyIrJEfcx3xGDdtgeMQHxrv8mfeWGDJAxNFNSI+/z0=~-1~-1~-1~-1~-1; Domain=.mega-image.ro; Path=/; Expires=Fri, 22 Jan 2027 19:47:16 GMT; Max-Age=31536000 Set-Cookie: bm_sz=6B2FFBEDD6F29342B7E055610BB55EA9~YAAQ2R0QAgIAj9ebAQAAVDA/5x5RVCFDp6SHty+xQx9xFRYSFYpP4PNx9+uQYVLb28df8GiOjHBDv5Hb8JgyxgYvyKhKrLgkfaQZmxzOWF9TJndOyFe7iwyyRnJWh+INMjFHbU2ow0mMLWgzFQsi4U7cCrgnpI4doHrWztO8Za7xLKwB3lXzouQqToJiPN64EiVMU540kX+ftygOKaJqkifl/ygSTOzh4nCS9ka1xF59C4l3rcyZnpHYgrcb/oaHJJBTbSiWnN2cZ5HUKkyTTxQn3TJVQMLXU1MGi0FZTO/RefpLDkfQSKl2mr2tusszDwyjxikR5kupwz5lHAzqSXiEwTWAT+ynWnvu08BuVlLM~4404537~4403504; Domain=.mega-image.ro; Path=/; Expires=Thu, 22 Jan 2026 23:47:16 GMT; Max-Age=14400
Open service 2.16.183.20:80 · static-qa2.mega-image.ro
2026-01-22 19:46
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://static-qa2.mega-image.ro/ Cache-Control: max-age=0 Date: Thu, 22 Jan 2026 19:47:16 GMT Connection: close Ak-access-mobile: Access traceresponse: 00-079780864cf7a54b2afcccd1a1b9c061-fdd536881c34978e-00 X-DLH-True-Client-IP: 138.68.86.32 X-Content-Type-Options: nosniff Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' https: blob:;object-src https://*.mega-image.ro; base-uri https://tau.collect.igodigital.com/; upgrade-insecure-requests; frame-ancestors 'self' https://*.mega-image.ro https://*.svc.mega-image.ro/; Strict-Transport-Security: max-age=31536000; includeSubDomains Server: Apache x-dlh-image-optimization: origin Vary: Accept-encoding, Origin X-DLH-Cache-Status: Redirect from child AK-redirect: redirected_to_https Set-Cookie: _abck=D2B3DC62B00AEF8C63DB75D00EBAD02E~-1~YAAQ1B0QAs1AaN2bAQAAwy0/5w+VbYvh7kz4KCHHD0IcWv3fe6ub3L7cutK4koxt16uEoYmjSyix1jhwIcKFlUz3o8iEFPD2XX9vOwgCmLRcWqZN+Ibj1uIJv6qk6CJYkjfKsz4HnE/k1mvy+6i1m2kgTbN7zE7Wc043m7p6tbG3w1uy0JmHA2HcD8ayP52ekrM6Y/bktxkLWBU4D0LwO/+dZgIkyZ4ezsSEYfraot3/gPwDpsed5SJvKTIgx8G7E+2YU02663iSb+04bg2mNvTRy7IDWlO6jnnaeNGrA1LlXmnUnmAlvxH4frFnko5I76/dUTGA5dtfSSCNVC+850ffEBmRUphjk5E6jBydse5pZIuZ+vrWfPurdNqA71myqCI+tAK8ZVg=~-1~-1~-1~-1~-1; Domain=.mega-image.ro; Path=/; Expires=Fri, 22 Jan 2027 19:47:16 GMT; Max-Age=31536000 Set-Cookie: bm_sz=3208501CF02C483FF56682FA6FBC2881~YAAQ1B0QAs5AaN2bAQAAwy0/5x7sQmUW2JkEFDUvrnos/w/7SvlbRJT0rarsv2BTfGUVfWAe7oH16DZaOw8Ic7KH0mG3mkt3FerS8gyPdBorEdaMJAB5gbaaiCqxYvyr5u/vKqUWq5tsCm65ei82b6D7QWwaVApT/JFQYl6/nAyLvHOvt4d7JmsTrjV6Ww36hGok7RA6QY/cA9HLt/oJJ089yhodZVGzEwoMCcrqgN1TOEAE2qvCuVBstEx2war89gtIYKccX45EFHyLH8cgPiVrY6fArKwp9niVx4hZj5oWoO0fKCjUSPPRm9fHe4GypFqFuOKRJXIZDnJApqMF6VUIf6QRM/txN3FfU5//K7s=~4404537~4403504; Domain=.mega-image.ro; Path=/; Expires=Thu, 22 Jan 2026 23:47:16 GMT; Max-Age=14400