LeakIX - Host cryptomining-ltd.com

Domain cryptomining-ltd.com

Lithuania

WIBO Baltic UAB

CentOS

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 91.240.20.50
Domain: cryptomining-ltd.com
Port: 443
URL: https://cryptomining-ltd.com/info.php

First seen 2021-11-05 09:07
Last seen 2021-11-11 15:29
Open for 6 days

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be692a8e14a

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 36020
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YY0235vWkH0m34pSnBTiBAAAABA
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636644575.5045
_SERVER["REQUEST_TIME"] = 1636644575

Found on 2021-11-11 15:29

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be68d476158

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 36214
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YY0236a3NVJ4RtDm9zHOsgAAAAo
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636644575.8414
_SERVER["REQUEST_TIME"] = 1636644575

Found on 2021-11-11 15:29

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be619c34980

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 45444
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YYztrfHwoVwAn6x2-r7cyQAAABU
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636625837.0231
_SERVER["REQUEST_TIME"] = 1636625837

Found on 2021-11-11 10:17

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be6c3fa8447

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 15488
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YYkAB6BlkwD-s-fHvRtbwgAAAAo
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636368391.3602
_SERVER["REQUEST_TIME"] = 1636368391

Found on 2021-11-08 10:46

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be68e719695

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 43534
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YYT0O5m2q8PD1oSLKhfvlwAAAAk
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636103227.367
_SERVER["REQUEST_TIME"] = 1636103227

Found on 2021-11-05 09:07

Fingerprint: 2c44e2a6278fb0134173d6fa21f87b8ca4ebcae5dc617a15f3943be650c834cb

Found PHP info page:
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["REQUEST_URI"] = /info.php
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_METHOD"] = GET
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["REMOTE_PORT"] = 41424
_SERVER["SCRIPT_FILENAME"] = /var/www/admin/data/www/cryptomining-ltd.com/info.php
_SERVER["SERVER_ADMIN"] = webmaster@cryptomining-ltd.com
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["REQUEST_SCHEME"] = https
_SERVER["DOCUMENT_ROOT"] = /var/www/admin/data/www/cryptomining-ltd.com
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["SERVER_PORT"] = 443
_SERVER["SERVER_ADDR"] = 91.240.20.50
_SERVER["SERVER_NAME"] = cryptomining-ltd.com
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["HTTP_CONNECTION"] = close
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_HOST"] = cryptomining-ltd.com
_SERVER["HTTPS"] = on
_SERVER["PERL5LIB"] = /usr/share/awstats/lib:/usr/share/awstats/plugins
_SERVER["UNIQUE_ID"] = YYT0ORJ3zupmEFif3eDsfgAAABU
_SERVER["FCGI_ROLE"] = RESPONDER
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1636103225.9607
_SERVER["REQUEST_TIME"] = 1636103225

Found on 2021-11-05 09:07

Create report

Domain summary

cryptomining-ltd.com 6

1 recorded

IP summary

91.240.20.50 1

1 recorded