LeakIX report : Porsche

Creation
Validation
Communication & fix
Disclosure

Porsche / Server Status Information Disclosure

iampritam reported 2021-11-01

Description

It is possible to obtain an overview of the remote Apache web server's activity and performance by requesting the URL '/server-status'. This overview includes information such as current hosts and requests being processed, the number of workers idle and service requests, and CPU utilization.

Vulnerable URL:

https://porsche24-api.porsche.nl/server-status

Impact

An attacker can gather information about the internals of the target web server, such as: Server uptime Individual request-response statistics and CPU usage of the working processes Current HTTP requests, client IP addresses, requested paths, and processed virtual hosts This type of information can help the attacker gain a greater understanding of the system in use and the other potential avenues of attack available.

IP:

3.125.128.139

Port:

443

Detected protocol:

https

Vulnerable URL:

https://porsche24-api.porsche.nl/server-status


Apache Status

Apache Server Status for porsche24-api.porsche.nl (via 127.0.0.1)

Server Version: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.1 mod_wsgi/4.5.17 Python/3.6
Server MPM: event
Server Built: 2021-09-28T11:01:16

Current Time: Sunday, 31-Oct-2021 09:40:52 CET
Restart Time: Friday, 29-Oct-2021 13:30:01 CEST
Parent Server Config. Generation: 3
Parent Server MPM Generation: 2
Server uptime:  1 day 21 hours 10 minutes 51 seconds
Server load: 0.00 0.00 0.00
Total accesses: 19730 - Total Traffic: 133.7 MB
CPU Usage: u1.18 s.31 cu0 cs0 - .000916% CPU load
.121 requests/sec - 862 B/second - 6.9 kB/request
1 requests currently being processed, 49 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
02155no0yes124000
12156no0yes025000
Sum200 149000

_____W____________________________________________..............
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientProtocolVHostRequest

0-221550/20/433_
0.80010.00.072.77
127.0.0.1http/1.1localhost:8080GET /info.php HTTP/1.0

0-221550/19/433_
0.8016359260.00.183.40
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity?past=true HTTP/1.0

0-221550/19/432_
0.801351120.00.223.15
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-221550/20/434_
0.81010.00.107.24
127.0.0.1http/1.1localhost:8080GET /.git/config HTTP/1.0

0-221550/20/431_
0.81010.00.082.83
127.0.0.1http/1.1localhost:8080GET /telescope/requests HTTP/1.0

0-221550/19/433W
0.77000.00.103.38
127.0.0.1http/1.1localhost:8080GET /server-status HTTP/1.0

0-221550/19/432_
0.80146430.00.182.73
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/badge/f471dd5d7c06498e9968cd9db460cbfe HT

0-221550/20/432_
0.81010.00.213.60
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

0-221550/19/432_
0.771651460.00.202.16
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/car HTTP/1.0

0-221550/19/429_
0.80010.00.153.55
127.0.0.1http/1.1localhost:8080GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-di

0-221550/19/431_
0.80121280.00.062.14
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user HTTP/1.0

0-221550/19/431_
0.8014810.00.222.72
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user/validate-name HTTP/1.0

0-221550/19/431_
0.77165210.00.055.64
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/reward/available HTTP/1.0

0-221550/19/432_
0.80113270.00.096.80
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user HTTP/1.0

0-221550/19/433_
0.80119280.00.072.60
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user HTTP/1.0

0-221550/19/433_
0.80010.00.051.73
127.0.0.1http/1.1localhost:8080GET /.json HTTP/1.0

0-221550/19/432_
0.80010.00.222.38
127.0.0.1http/1.1localhost:8080GET /v2/_catalog HTTP/1.0

0-221550/19/433_
0.80000.00.062.72
127.0.0.1http/1.1localhost:8080GET /server-status HTTP/1.0

0-221550/19/432_
0.80010.00.061.98
127.0.0.1http/1.1localhost:8080GET /.env HTTP/1.0

0-221550/19/431_
0.80020.00.052.92
127.0.0.1http/1.1localhost:8080GET /idx_config/ HTTP/1.0

0-221550/19/431_
0.80010.00.073.24
127.0.0.1http/1.1localhost:8080GET /.env HTTP/1.0

0-221550/19/432_
0.80010.00.062.59
127.0.0.1http/1.1localhost:8080GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-221550/19/432_
0.80010.00.051.71
127.0.0.1http/1.1localhost:8080GET /.git/config HTTP/1.0

0-221550/19/430_
0.80010.00.163.19
127.0.0.1http/1.1localhost:8080GET /api/search?folderIds=0 HTTP/1.0

0-221550/18/431_
0.7716560.00.172.51
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/reward/previous?limit=10&page=0 HTTP/1.0

1-221560/16/357_
0.66210.00.172.42
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

1-221560/16/356_
0.66110310.00.062.05
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user HTTP/1.0

1-221560/16/356_
0.66135290.00.061.26
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user HTTP/1.0

1-221560/16/358_
0.66010.00.062.16
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

1-221560/16/356_
0.66010.00.052.93
127.0.0.1http/1.1localhost:8080GET /.DS_Store HTTP/1.0

1-221560/16/358_
0.66010.00.031.62
127.0.0.1http/1.1localhost:8080GET /.DS_Store HTTP/1.0

1-221560/16/360_
0.66010.00.061.50
127.0.0.1http/1.1localhost:8080GET /telescope/requests HTTP/1.0

1-221560/16/358_
0.67010.00.062.49
127.0.0.1http/1.1localhost:8080GET /frontend_dev.php/$ HTTP/1.0

1-221560/16/358_
0.66010.00.182.18
127.0.0.1http/1.1localhost:8080GET /frontend_dev.php/$ HTTP/1.0

1-221560/16/359_
0.67010.00.062.35
127.0.0.1http/1.1localhost:8080GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-di

1-221560/15/357_
0.661387560.00.152.03
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/user/address/lookup HTTP/1.0

1-221560/16/359_
0.66010.00.041.90
127.0.0.1http/1.1localhost:8080GET /config.json HTTP/1.0

1-221560/15/356_
0.661651640.00.081.86
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/badge HTTP/1.0

1-221560/16/358_
0.67010.00.041.88
127.0.0.1http/1.1localhost:8080GET /.json HTTP/1.0

1-221560/16/358_
0.67010.00.041.94
127.0.0.1http/1.1localhost:8080GET /debug/default/view?panel=config HTTP/1.0

1-221560/16/358_
0.66010.00.131.65
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

1-221560/15/356_
0.661651660.00.382.64
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

1-221560/16/358_
0.68010.00.081.74
127.0.0.1http/1.1localhost:8080GET /idx_config/ HTTP/1.0

1-221560/15/357_
0.661691720.00.121.76
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/feed?limit=5&page=0 HTTP/1.0

1-221560/16/357_
0.66010.00.171.52
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

1-221560/16/357_
0.67010.00.051.86
127.0.0.1http/1.1localhost:8080GET /v2/_catalog HTTP/1.0

1-221560/16/357_
0.66310.00.162.07
127.0.0.1http/1.1localhost:8080GET / HTTP/1.0

1-221560/15/356_
0.66169160.00.052.54
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/category HTTP/1.0

1-221560/16/357_
0.67010.00.072.04
127.0.0.1http/1.1localhost:8080GET /login.action HTTP/1.0

1-221560/16/357_
0.67010.00.035.66
127.0.0.1http/1.1localhost:8080GET /debug/default/view?panel=config HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss

Found by ApacheStatusHttpPlugin 2021-10-31

IP:

3.125.128.139

Port:

443

Detected protocol:

https

Vulnerable URL:

https://porsche24-api.porsche.nl/server-status


Apache Status

Apache Server Status for porsche24-api.porsche.nl (via 127.0.0.1)

Server Version: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.1 mod_wsgi/4.5.17 Python/3.6
Server MPM: event
Server Built: 2021-09-28T11:01:16

Current Time: Wednesday, 10-Nov-2021 15:44:31 CET
Restart Time: Friday, 29-Oct-2021 13:30:01 CEST
Parent Server Config. Generation: 13
Parent Server MPM Generation: 12
Server uptime:  12 days 3 hours 14 minutes 29 seconds
Server load: 0.06 0.06 0.01
Total accesses: 119743 - Total Traffic: 831.1 MB
CPU Usage: u13.61 s4.16 cu0 cs0 - .00169% CPU load
.114 requests/sec - 831 B/second - 7.1 kB/request
1 requests currently being processed, 49 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
025968no0yes025000
125969no0yes124000
Sum200 149000

_________________________________________W________..............
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientProtocolVHostRequest

0-12259680/268/2473_
9.8314110.01.6214.56
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/271/2471_
9.8314110.01.4418.24
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/271/2474_
9.83291770.01.7215.04
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-12259680/269/2472_
9.82581070.00.9129.27
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/management/user/37e2a681106441a4b2294fae7

0-12259680/271/2472_
9.8314110.01.2715.81
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/271/2475_
9.831700.01.3715.64
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v2/notifications?page=0&limit=1&read=false H

0-12259680/269/2470_
9.8411220.01.4220.19
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-12259680/270/2468_
9.8248100.01.6316.70
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-12259680/270/2469_
9.8254140.01.4715.53
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/270/2466_
9.8314110.01.6220.29
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/266/2467_
9.8314110.01.6313.63
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/270/2467_
9.81661560.01.3116.08
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-12259680/268/2468_
9.83481480.01.9318.77
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-12259680/269/2468_
9.82501550.01.1821.18
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-12259680/272/2473_
9.841940.01.3218.75
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/feed?page=0&limit=5 HTTP/1.0

0-12259680/269/2468_
9.833720.01.3015.20
127.0.0.1http/1.1localhost:8080OPTIONS /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3

0-12259680/270/2474_
9.83361630.01.7418.20
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3be95

0-12259680/269/2469_
9.8332030.01.2015.07
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/route/category HTTP/1.0

0-12259680/271/2475_
9.8314140.01.1315.51
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/271/2469_
9.8324040.00.7914.98
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity HTTP/1.0

0-12259680/270/2466_
9.8342220.01.1315.17
127.0.0.1http/1.1localhost:8080POST /porsche24/api/v1/booking HTTP/1.0

0-12259680/270/2465_
9.81671460.01.6118.62
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

0-12259680/271/2471_
9.8314180.01.2914.46
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/270/2467_
9.8314150.01.3228.10
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-12259680/271/2469_
9.82531190.01.3123.22
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/221/2318_
7.9311210.01.0317.34
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

1-12259690/220/2319_
7.925820.01.6514.45
127.0.0.1http/1.1localhost:8080OPTIONS /porsche24/api/v1/management/user/37e2a681106441a4b2294

1-12259690/220/2318_
7.9314110.01.3015.37
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/219/2321_
7.92501190.01.2917.19
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v2/notifications?page=0&limit=1&read=false H

1-12259690/220/2318_
7.92291370.01.1915.99
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v2/notifications?page=0&limit=1&read=false H

1-12259690/222/2322_
7.9314110.01.1215.89
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/220/2328_
7.92712220.00.8413.34
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/f5cd5e5784164e8d821b450ea4cd2de6

1-12259690/221/2322_
7.933280.00.9513.02
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/status HTTP/1.0

1-12259690/221/2323_
7.923720.01.2317.23
127.0.0.1http/1.1localhost:8080OPTIONS /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3

1-12259690/221/2323_
7.9314120.00.9513.79
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/216/2320_
7.93241130.01.0813.26
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3be95

1-12259690/221/2321_
7.9224130.01.0513.68
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3be95

1-12259690/221/2318_
7.91772280.00.8814.46
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/booking HTTP/1.0

1-12259690/221/2319_
7.92421480.01.5814.39
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-12259690/219/2317_
7.9314130.01.2314.91
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/221/2319_
7.91781610.01.2117.82
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/user HTTP/1.0

1-12259690/221/2318W
7.91000.00.8113.84
127.0.0.1http/1.1localhost:8080GET /server-status HTTP/1.0

1-12259690/221/2322_
7.9314130.00.8612.81
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/220/2321_
7.91784560.01.1712.67
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity HTTP/1.0

1-12259690/221/2321_
7.92701820.01.6413.33
127.0.0.1http/1.1localhost:8080PUT /porsche24/api/v1/car/fa21c1514935454f8b5c1b313cb1892b/mile

1-12259690/221/2323_
7.932690.01.2914.67
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/booking HTTP/1.0

1-12259690/220/2316_
7.9313110.01.0216.70
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/221/2316_
7.9314120.00.9414.78
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

1-12259690/219/2318_
7.9236220.01.0415.79
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d15b54432915f3bb07ea3be95

1-12259690/220/2316_
7.933230.03.8026.15
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/status HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss

Found by ApacheStatusHttpPlugin 2021-11-10

IP:

3.125.128.139

Port:

443

Detected protocol:

https

Vulnerable URL:

https://porsche24-api.porsche.nl/server-status


Apache Status

Apache Server Status for porsche24-api.porsche.nl (via 127.0.0.1)

Server Version: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.1 mod_wsgi/4.5.17 Python/3.6
Server MPM: event
Server Built: 2021-09-28T11:01:16

Current Time: Thursday, 11-Nov-2021 18:18:40 CET
Restart Time: Friday, 29-Oct-2021 13:30:01 CEST
Parent Server Config. Generation: 14
Parent Server MPM Generation: 13
Server uptime:  13 days 5 hours 48 minutes 38 seconds
Server load: 0.04 0.05 0.01
Total accesses: 134425 - Total Traffic: 930.9 MB
CPU Usage: u8.14 s2.05 cu0 cs0 - .000891% CPU load
.117 requests/sec - 853 B/second - 7.1 kB/request
1 requests currently being processed, 49 idle workers



SlotPIDStoppingConnections
ThreadsAsync connections
totalacceptingbusyidlewritingkeep-aliveclosing
031023no0yes025000
131024no0yes124000
Sum200 149000

_________________________________________W________..............
................................................................
......................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientProtocolVHostRequest

0-13310230/96/2771_
3.81176110.00.6916.47
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2769_
3.8112320.01.0020.04
127.0.0.1http/1.1localhost:8080HEAD /porsche24/health HTTP/1.0

0-13310230/96/2772_
3.79176100.00.5416.67
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2771_
3.79176100.00.3930.37
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2771_
3.79177110.00.3116.90
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2770_
3.811631130.00.5917.58
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-13310230/96/2767_
3.79176100.00.6721.90
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2767_
3.7917690.00.8418.73
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2767_
3.79176100.02.7619.39
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2764_
3.79176100.00.5725.10
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2765_
3.81176100.00.5215.31
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2765_
3.7917690.00.4121.25
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/95/2764_
3.79176110.00.4520.94
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2767_
3.79176110.00.4622.42
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2772_
3.81108180.00.3820.51
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/35cd1c4cdeaf445ea1f56d61e9f08ba9

0-13310230/95/2765_
3.79176110.00.3916.74
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/95/2771_
3.81163110.00.9819.89
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/68dd0a25814248f68c68f1adccab9514

0-13310230/96/2765_
3.7917690.00.2516.31
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2773_
3.81176120.00.5417.12
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2768_
3.8118130.00.5616.61
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d-15b5-4432-915f-3bb07ea3

0-13310230/96/2765_
3.8170530.00.4916.69
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/652eea17b6df48b69410e474b5459618

0-13310230/95/2762_
3.79177110.00.6720.88
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2769_
3.8170270.00.3816.01
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/7168c475b05b40b9afb2d4f1282e650d

0-13310230/95/2764_
3.79176100.00.9130.84
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

0-13310230/96/2768_
3.8170800.00.6424.98
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/7168c475b05b40b9afb2d4f1282e650d

1-13310240/129/2607_
6.37176100.00.8519.20
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2608_
6.37176100.00.9116.07
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2607_
6.37176100.00.8616.64
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/130/2611_
6.37176120.00.9219.20
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2607_
6.37176120.00.7217.95
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2611_
6.3717310.01.2017.87
127.0.0.1http/1.1localhost:8080GET /.git/config HTTP/1.0

1-13310240/130/2619_
6.38125760.00.6815.50
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/22ab6290cbc043218baf628e9625e246

1-13310240/129/2611_
6.37176110.01.2614.95
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/128/2611_
6.36176110.01.4319.15
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/130/2613_
6.3822150.01.3718.91
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d-15b5-4432-915f-3bb07ea3

1-13310240/128/2608_
6.36177100.00.8514.75
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/130/2612_
6.37176100.00.6614.93
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/130/2610_
6.38125150.00.6316.00
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/22ab6290cbc043218baf628e9625e246

1-13310240/130/2609_
6.38222660.01.0116.19
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d-15b5-4432-915f-3bb07ea3

1-13310240/130/2607_
6.37176100.00.7716.56
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/127/2607_
6.37176120.01.7920.21
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2608W
6.36000.00.8215.36
127.0.0.1http/1.1localhost:8080GET /server-status HTTP/1.0

1-13310240/130/2612_
6.3870170.00.7714.26
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/652eea17b6df48b69410e474b5459618

1-13310240/129/2611_
6.37176100.00.6914.81
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/130/2612_
6.38182540.00.5614.67
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/bc9f592d-15b5-4432-915f-3bb07ea3

1-13310240/129/2612_
6.37176140.01.4216.99
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2605_
6.37176110.00.7518.37
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/127/2603_
6.37176110.01.4917.20
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517

1-13310240/129/2608_
6.38108940.01.2717.49
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/35cd1c4cdeaf445ea1f56d61e9f08ba9

1-13310240/128/2604_
6.37176100.00.5828.04
127.0.0.1http/1.1localhost:8080GET /porsche24/api/v1/activity/865747ab84ee4325ba35df7af622d517


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot
 



SSL/TLS Session Cache Status:


cache type: SHMCB, shared memory: 512000 bytes, current entries: 0subcaches: 32, indexes per subcache: 88index usage: 0%, cache usage: 0%total entries stored since starting: 0total entries replaced since starting: 0total entries expired since starting: 0total (pre-expiry) entries scrolled out of the cache: 0total retrieves since starting: 0 hit, 0 misstotal removes since starting: 0 hit, 0 miss

Found by ApacheStatusHttpPlugin 2021-11-11

Report created by

iampritam 2021-11-01

Report approved by

iampritam 2021-11-02

New PDF report generated by system 2021-11-02

Report dispatched to ...@... by system 2021-11-02

system commented 2021-11-12: approved shows in report

bip! I'm a LeakIX probe.

This issue looks like it has been resolved!

New PDF report generated by system 2021-11-12

Report comment dispatched to iampritam by system 2021-11-12

Report comment dispatched to vulnerability@porsche.de by system 2021-11-12

Report marked as fixed by

BloodyShell 2021-11-12

Report closed by

BloodyShell 2021-11-12

New PDF report generated by system 2021-11-12

Information

Owner Porsche

Created 2021-11-01 17:24

Updated 2021-11-12 20:27

Fixed true

Contacts

v...@porsche.de

Status

Status closed

Hosting contacted false

CERT contacted false

Download report