LeakIX - Host 159.198.36.206

Host 159.198.36.206

United States

NAMECHEAP-NET

Ubuntu

Software information

Apache Apache 2.4.52

tcp/443

nginx nginx

tcp/443 tcp/80

sw-cp-server

tcp/8443

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 159.198.36.206
Port: 22

First seen 2025-10-23 00:07
Last seen 2026-02-01 17:07
Open for 101 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-01 17:07
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb563aa8aa9f94cd0d0f94cd0d0f94cd0d0f94cd0d0
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2025-11-12 00:37
Create report

Open service 159.198.36.206:80 · waiting.customclient.info

2026-02-05 17:17

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 05 Feb 2026 17:17:12 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 390
Connection: close

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
<hr>
<address>Apache Server at waiting.customclient.info Port 80</address>
</body></html>

Found 3 days ago by HttpPlugin

Create report

Open service 159.198.36.206:443 · customfees.ie-m.help

2026-01-23 11:39

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 11:39:02 GMT
Content-Type: text/html
Content-Length: 1653
Last-Modified: Fri, 23 Jan 2026 11:38:27 GMT
Connection: close
ETag: "69735db3-675"
X-Powered-By: PleskLin
Accept-Ranges: bytes

Page title: Domain Default page

<!doctype html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <title>Domain Default page</title>
    <meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
    <script src="https://assets.plesk.com/static/default-website-content/public/default-website-index.js"></script>
</head>
<body>
    <h2>What is Plesk</h2>
    <p>
        Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
    </p>
    <p>
        <a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
    </p>
    <ul>
        <li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
        <li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
        <li><a href="https://talk.plesk.com/">Forum</a></li>
        <li><a href="https://www.plesk.com/blog/">Blog</a></li>
        <li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
        <li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
    </ul>

    <p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 159.198.36.206:8443 · customfees.ie-m.help

2026-01-23 11:39

HTTP/1.1 303 See Other
Server: sw-cp-server
Date: Fri, 23 Jan 2026 11:39:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 23 Jan 2026 11:39:01 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: https://customfees.ie-m.help/login.php
X-Content-Type-Options: nosniff

Found 2026-01-23 by HttpPlugin

Create report

Open service 159.198.36.206:80 · customfees.ie-m.help

2026-01-23 11:39

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 23 Jan 2026 11:39:01 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://customfees.ie-m.help/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-23 by HttpPlugin