Apache’s server-status allows administrators to easily find how well their servers are performing. This feature can also have security implications if you leave it wide open to the world. Some times even find hidden (obscure) admin panels or files that should not be visible to the outside. The feature can help attackers easily find more information about these environments and use them for more complex attacks. For server admins, please disable server status or restrict it to only a set of IP addresses that really need to use it.”]
Source: https://blog.sucuri.net/2012/10/popular-sites-with-apache-server-status-enabled.html