So apart from the fact this should be there; how did someone find this in the first place?

From my quick looking around - it seems that Apache has "/server-status" as a module - so you could hit all domains via a bit and see if any have it turned on?