I am currently adding a subsite to some websites that allows me to monitor performance data live as the server software perceives it. The data is mostly stuff like amount of memory used, memory allocated, memory freed during last garbage collection, parallelity, uptime, etc. Error messages, logs, software version etc are not part of the data.
A part of my visitors is a bit geeky, so I thought it might be interesting for them if I exposed the subsite instead of hiding it behind an admin account.
What I am unsure about are the security implications. I have come up with two risks: the data might help do ddos attacks (information about timing and results is right there) and it might expose very rough ideas about visitor behaviour to "competitors".
But I have a feeling I am not creative enough (and not smart enough to find good google words). How have attackers used such information in the past?