Host 159.69.173.187
Germany
Hetzner Online GmbH
Software information

Microsoft-IIS Microsoft-IIS 7.5

tcp/9001

  • Found php information file
    First seen 2022-08-17 13:25
    Last seen 2022-11-14 01:38
    Open for 88 days
    • Fingerprint: 2c44e2a6278fb0134173d6fac1c102426d2b8cf04ae1884f61fa7ca7f3f920e6

      Found PHP info page:
      _SERVER["_FCGI_X_PIPE_"] = \\.\pipe\IISFCGI-25e13e45-b07a-424b-84be-353f67d27e31
      _SERVER["PHP_FCGI_MAX_REQUESTS"] = 10000
      _SERVER["PHPRC"] = C:\Program Files (x86)\PHP\v5.5
      _SERVER["ALLUSERSPROFILE"] = C:\ProgramData
      _SERVER["APPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Roaming
      _SERVER["APP_POOL_CONFIG"] = C:\inetpub\temp\apppools\DefaultAppPool.config
      _SERVER["APP_POOL_ID"] = DefaultAppPool
      _SERVER["CommonProgramFiles"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramFiles(x86)"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramW6432"] = C:\Program Files\Common Files
      _SERVER["COMPUTERNAME"] = WIN6
      _SERVER["ComSpec"] = C:\Windows\system32\cmd.exe
      _SERVER["FP_NO_HOST_CHECK"] = NO
      _SERVER["LOCALAPPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Local
      _SERVER["NUMBER_OF_PROCESSORS"] = 4
      _SERVER["OS"] = Windows_NT
      _SERVER["Path"] = C:\Perl\site\bin\OpenSSL\bin;C:\Perl\site\bin\ImageMagick;C:\Perl\site\bin;C:\Perl\bin;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\PHP\v5.5;C:\Windows\system32\inetsrv;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;c:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\MySQL\MySQL Server 5.5\bin;C:\Program Files (x86)\Java\jre7\bin;c:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft\Web Platform Installer\;
      _SERVER["PATHEXT"] = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
      _SERVER["PROCESSOR_ARCHITECTURE"] = x86
      _SERVER["PROCESSOR_ARCHITEW6432"] = AMD64
      _SERVER["PROCESSOR_IDENTIFIER"] = AMD64 Family 25 Model 33 Stepping 0, AuthenticAMD
      _SERVER["PROCESSOR_LEVEL"] = 25
      _SERVER["PROCESSOR_REVISION"] = 2100
      _SERVER["ProgramData"] = C:\ProgramData
      _SERVER["ProgramFiles"] = C:\Program Files (x86)
      _SERVER["ProgramFiles(x86)"] = C:\Program Files (x86)
      _SERVER["ProgramW6432"] = C:\Program Files
      _SERVER["PSModulePath"] = C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
      _SERVER["PUBLIC"] = C:\Users\Public
      _SERVER["SystemDrive"] = C:
      _SERVER["SystemRoot"] = C:\Windows
      _SERVER["TEMP"] = C:\Windows\TEMP
      _SERVER["TMP"] = C:\Windows\TEMP
      _SERVER["USERDOMAIN"] = WORKGROUP
      _SERVER["USERNAME"] = WIN6$
      _SERVER["USERPROFILE"] = C:\Windows\system32\config\systemprofile
      _SERVER["windir"] = C:\Windows
      _SERVER["ORIG_PATH_INFO"] = /info.php
      _SERVER["URL"] = /info.php
      _SERVER["SERVER_SOFTWARE"] = Microsoft-IIS/7.5
      _SERVER["SERVER_PROTOCOL"] = HTTP/1.1
      _SERVER["SERVER_PORT_SECURE"] = 0
      _SERVER["SERVER_PORT"] = 80
      _SERVER["SERVER_NAME"] = 159.69.173.187
      _SERVER["SCRIPT_NAME"] = /info.php
      _SERVER["SCRIPT_FILENAME"] = C:\inetpub\wwwroot\info.php
      _SERVER["REQUEST_URI"] = /info.php
      _SERVER["REQUEST_METHOD"] = GET
      _SERVER["REMOTE_USER"] = no value
      _SERVER["REMOTE_PORT"] = 42868
      _SERVER["REMOTE_HOST"] = 161.35.86.181
      _SERVER["REMOTE_ADDR"] = 161.35.86.181
      _SERVER["QUERY_STRING"] = no value
      _SERVER["PATH_TRANSLATED"] = C:\inetpub\wwwroot\info.php
      _SERVER["LOGON_USER"] = no value
      _SERVER["LOCAL_ADDR"] = 10.1.1.80
      _SERVER["INSTANCE_META_PATH"] = /LM/W3SVC/1
      _SERVER["INSTANCE_NAME"] = DEFAULT WEB SITE
      _SERVER["INSTANCE_ID"] = 1
      _SERVER["HTTPS_SERVER_SUBJECT"] = no value
      _SERVER["HTTPS_SERVER_ISSUER"] = no value
      _SERVER["HTTPS_SECRETKEYSIZE"] = no value
      _SERVER["HTTPS_KEYSIZE"] = no value
      _SERVER["HTTPS"] = off
      _SERVER["GATEWAY_INTERFACE"] = CGI/1.1
      _SERVER["DOCUMENT_ROOT"] = C:\inetpub\wwwroot
      _SERVER["CONTENT_TYPE"] = no value
      _SERVER["CONTENT_LENGTH"] = 0
      _SERVER["CERT_SUBJECT"] = no value
      _SERVER["CERT_SERIALNUMBER"] = no value
      _SERVER["CERT_ISSUER"] = no value
      _SERVER["CERT_FLAGS"] = no value
      _SERVER["CERT_COOKIE"] = no value
      _SERVER["AUTH_USER"] = no value
      _SERVER["AUTH_PASSWORD"] = no value
      _SERVER["AUTH_TYPE"] = no value
      _SERVER["APPL_PHYSICAL_PATH"] = C:\inetpub\wwwroot\
      _SERVER["APPL_MD_PATH"] = /LM/W3SVC/1/ROOT
      _SERVER["IIS_UrlRewriteModule"] = 7.1.0761.0
      _SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
      _SERVER["HTTP_HOST"] = 159.69.173.187
      _SERVER["HTTP_ACCEPT_ENCODING"] = gzip
      _SERVER["HTTP_CONNECTION"] = close
      _SERVER["FCGI_ROLE"] = RESPONDER
      _SERVER["PHP_SELF"] = /info.php
      _SERVER["REQUEST_TIME_FLOAT"] = 1668389668.7128
      _SERVER["REQUEST_TIME"] = 1668389668
      
      Found on 2022-11-14 01:38
    • Fingerprint: 2c44e2a6278fb0134173d6fa59d691e19afa8503570d4110f36f9aca1492ec0e

      Found PHP info page:
      _SERVER["_FCGI_X_PIPE_"] = \\.\pipe\IISFCGI-5486af3e-7c39-45f7-adfc-85e15c664025
      _SERVER["PHP_FCGI_MAX_REQUESTS"] = 10000
      _SERVER["PHPRC"] = C:\Program Files (x86)\PHP\v5.5
      _SERVER["ALLUSERSPROFILE"] = C:\ProgramData
      _SERVER["APPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Roaming
      _SERVER["APP_POOL_CONFIG"] = C:\inetpub\temp\apppools\DefaultAppPool.config
      _SERVER["APP_POOL_ID"] = DefaultAppPool
      _SERVER["CommonProgramFiles"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramFiles(x86)"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramW6432"] = C:\Program Files\Common Files
      _SERVER["COMPUTERNAME"] = WIN6
      _SERVER["ComSpec"] = C:\Windows\system32\cmd.exe
      _SERVER["FP_NO_HOST_CHECK"] = NO
      _SERVER["LOCALAPPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Local
      _SERVER["NUMBER_OF_PROCESSORS"] = 4
      _SERVER["OS"] = Windows_NT
      _SERVER["Path"] = C:\Perl\site\bin\OpenSSL\bin;C:\Perl\site\bin\ImageMagick;C:\Perl\site\bin;C:\Perl\bin;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\PHP\v5.5;C:\Windows\system32\inetsrv;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;c:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\MySQL\MySQL Server 5.5\bin;C:\Program Files (x86)\Java\jre7\bin;c:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft\Web Platform Installer\;
      _SERVER["PATHEXT"] = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
      _SERVER["PROCESSOR_ARCHITECTURE"] = x86
      _SERVER["PROCESSOR_ARCHITEW6432"] = AMD64
      _SERVER["PROCESSOR_IDENTIFIER"] = AMD64 Family 25 Model 33 Stepping 0, AuthenticAMD
      _SERVER["PROCESSOR_LEVEL"] = 25
      _SERVER["PROCESSOR_REVISION"] = 2100
      _SERVER["ProgramData"] = C:\ProgramData
      _SERVER["ProgramFiles"] = C:\Program Files (x86)
      _SERVER["ProgramFiles(x86)"] = C:\Program Files (x86)
      _SERVER["ProgramW6432"] = C:\Program Files
      _SERVER["PSModulePath"] = C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
      _SERVER["PUBLIC"] = C:\Users\Public
      _SERVER["SystemDrive"] = C:
      _SERVER["SystemRoot"] = C:\Windows
      _SERVER["TEMP"] = C:\Windows\TEMP
      _SERVER["TMP"] = C:\Windows\TEMP
      _SERVER["USERDOMAIN"] = WORKGROUP
      _SERVER["USERNAME"] = WIN6$
      _SERVER["USERPROFILE"] = C:\Windows\system32\config\systemprofile
      _SERVER["windir"] = C:\Windows
      _SERVER["ORIG_PATH_INFO"] = /info.php
      _SERVER["URL"] = /info.php
      _SERVER["SERVER_SOFTWARE"] = Microsoft-IIS/7.5
      _SERVER["SERVER_PROTOCOL"] = HTTP/1.1
      _SERVER["SERVER_PORT_SECURE"] = 0
      _SERVER["SERVER_PORT"] = 80
      _SERVER["SERVER_NAME"] = 159.69.173.187
      _SERVER["SCRIPT_NAME"] = /info.php
      _SERVER["SCRIPT_FILENAME"] = C:\inetpub\wwwroot\info.php
      _SERVER["REQUEST_URI"] = /info.php
      _SERVER["REQUEST_METHOD"] = GET
      _SERVER["REMOTE_USER"] = no value
      _SERVER["REMOTE_PORT"] = 50646
      _SERVER["REMOTE_HOST"] = 161.35.86.181
      _SERVER["REMOTE_ADDR"] = 161.35.86.181
      _SERVER["QUERY_STRING"] = no value
      _SERVER["PATH_TRANSLATED"] = C:\inetpub\wwwroot\info.php
      _SERVER["LOGON_USER"] = no value
      _SERVER["LOCAL_ADDR"] = 10.1.1.80
      _SERVER["INSTANCE_META_PATH"] = /LM/W3SVC/1
      _SERVER["INSTANCE_NAME"] = DEFAULT WEB SITE
      _SERVER["INSTANCE_ID"] = 1
      _SERVER["HTTPS_SERVER_SUBJECT"] = no value
      _SERVER["HTTPS_SERVER_ISSUER"] = no value
      _SERVER["HTTPS_SECRETKEYSIZE"] = no value
      _SERVER["HTTPS_KEYSIZE"] = no value
      _SERVER["HTTPS"] = off
      _SERVER["GATEWAY_INTERFACE"] = CGI/1.1
      _SERVER["DOCUMENT_ROOT"] = C:\inetpub\wwwroot
      _SERVER["CONTENT_TYPE"] = no value
      _SERVER["CONTENT_LENGTH"] = 0
      _SERVER["CERT_SUBJECT"] = no value
      _SERVER["CERT_SERIALNUMBER"] = no value
      _SERVER["CERT_ISSUER"] = no value
      _SERVER["CERT_FLAGS"] = no value
      _SERVER["CERT_COOKIE"] = no value
      _SERVER["AUTH_USER"] = no value
      _SERVER["AUTH_PASSWORD"] = no value
      _SERVER["AUTH_TYPE"] = no value
      _SERVER["APPL_PHYSICAL_PATH"] = C:\inetpub\wwwroot\
      _SERVER["APPL_MD_PATH"] = /LM/W3SVC/1/ROOT
      _SERVER["IIS_UrlRewriteModule"] = 7.1.0761.0
      _SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
      _SERVER["HTTP_HOST"] = 159.69.173.187
      _SERVER["HTTP_ACCEPT_ENCODING"] = gzip
      _SERVER["HTTP_CONNECTION"] = close
      _SERVER["FCGI_ROLE"] = RESPONDER
      _SERVER["PHP_SELF"] = /info.php
      _SERVER["REQUEST_TIME_FLOAT"] = 1664836213.8039
      _SERVER["REQUEST_TIME"] = 1664836213
      
      Found on 2022-10-03 22:33
    • Fingerprint: 2c44e2a6278fb0134173d6faaef6a0e369768eb90c05e482d0f56ea0fdbaec0f

      Found PHP info page:
      _SERVER["_FCGI_X_PIPE_"] = \\.\pipe\IISFCGI-ac1d4081-a1d2-4b11-b008-90b810af7109
      _SERVER["PHP_FCGI_MAX_REQUESTS"] = 10000
      _SERVER["PHPRC"] = C:\Program Files (x86)\PHP\v5.5
      _SERVER["ALLUSERSPROFILE"] = C:\ProgramData
      _SERVER["APPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Roaming
      _SERVER["APP_POOL_CONFIG"] = C:\inetpub\temp\apppools\DefaultAppPool.config
      _SERVER["APP_POOL_ID"] = DefaultAppPool
      _SERVER["CommonProgramFiles"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramFiles(x86)"] = C:\Program Files (x86)\Common Files
      _SERVER["CommonProgramW6432"] = C:\Program Files\Common Files
      _SERVER["COMPUTERNAME"] = WIN6
      _SERVER["ComSpec"] = C:\Windows\system32\cmd.exe
      _SERVER["FP_NO_HOST_CHECK"] = NO
      _SERVER["LOCALAPPDATA"] = C:\Windows\system32\config\systemprofile\AppData\Local
      _SERVER["NUMBER_OF_PROCESSORS"] = 4
      _SERVER["OS"] = Windows_NT
      _SERVER["Path"] = C:\Perl\site\bin\OpenSSL\bin;C:\Perl\site\bin\ImageMagick;C:\Perl\site\bin;C:\Perl\bin;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\PHP\v5.5;C:\Windows\system32\inetsrv;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;c:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;c:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\MySQL\MySQL Server 5.5\bin;C:\Program Files (x86)\Java\jre7\bin;c:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft\Web Platform Installer\;
      _SERVER["PATHEXT"] = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
      _SERVER["PROCESSOR_ARCHITECTURE"] = x86
      _SERVER["PROCESSOR_ARCHITEW6432"] = AMD64
      _SERVER["PROCESSOR_IDENTIFIER"] = AMD64 Family 25 Model 33 Stepping 0, AuthenticAMD
      _SERVER["PROCESSOR_LEVEL"] = 25
      _SERVER["PROCESSOR_REVISION"] = 2100
      _SERVER["ProgramData"] = C:\ProgramData
      _SERVER["ProgramFiles"] = C:\Program Files (x86)
      _SERVER["ProgramFiles(x86)"] = C:\Program Files (x86)
      _SERVER["ProgramW6432"] = C:\Program Files
      _SERVER["PSModulePath"] = C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
      _SERVER["PUBLIC"] = C:\Users\Public
      _SERVER["SystemDrive"] = C:
      _SERVER["SystemRoot"] = C:\Windows
      _SERVER["TEMP"] = C:\Windows\TEMP
      _SERVER["TMP"] = C:\Windows\TEMP
      _SERVER["USERDOMAIN"] = WORKGROUP
      _SERVER["USERNAME"] = WIN6$
      _SERVER["USERPROFILE"] = C:\Windows\system32\config\systemprofile
      _SERVER["windir"] = C:\Windows
      _SERVER["ORIG_PATH_INFO"] = /info.php
      _SERVER["URL"] = /info.php
      _SERVER["SERVER_SOFTWARE"] = Microsoft-IIS/7.5
      _SERVER["SERVER_PROTOCOL"] = HTTP/1.1
      _SERVER["SERVER_PORT_SECURE"] = 0
      _SERVER["SERVER_PORT"] = 80
      _SERVER["SERVER_NAME"] = 159.69.173.187
      _SERVER["SCRIPT_NAME"] = /info.php
      _SERVER["SCRIPT_FILENAME"] = C:\inetpub\wwwroot\info.php
      _SERVER["REQUEST_URI"] = /info.php
      _SERVER["REQUEST_METHOD"] = GET
      _SERVER["REMOTE_USER"] = no value
      _SERVER["REMOTE_PORT"] = 44422
      _SERVER["REMOTE_HOST"] = 161.35.188.242
      _SERVER["REMOTE_ADDR"] = 161.35.188.242
      _SERVER["QUERY_STRING"] = no value
      _SERVER["PATH_TRANSLATED"] = C:\inetpub\wwwroot\info.php
      _SERVER["LOGON_USER"] = no value
      _SERVER["LOCAL_ADDR"] = 10.1.1.80
      _SERVER["INSTANCE_META_PATH"] = /LM/W3SVC/1
      _SERVER["INSTANCE_NAME"] = DEFAULT WEB SITE
      _SERVER["INSTANCE_ID"] = 1
      _SERVER["HTTPS_SERVER_SUBJECT"] = no value
      _SERVER["HTTPS_SERVER_ISSUER"] = no value
      _SERVER["HTTPS_SECRETKEYSIZE"] = no value
      _SERVER["HTTPS_KEYSIZE"] = no value
      _SERVER["HTTPS"] = off
      _SERVER["GATEWAY_INTERFACE"] = CGI/1.1
      _SERVER["DOCUMENT_ROOT"] = C:\inetpub\wwwroot
      _SERVER["CONTENT_TYPE"] = no value
      _SERVER["CONTENT_LENGTH"] = 0
      _SERVER["CERT_SUBJECT"] = no value
      _SERVER["CERT_SERIALNUMBER"] = no value
      _SERVER["CERT_ISSUER"] = no value
      _SERVER["CERT_FLAGS"] = no value
      _SERVER["CERT_COOKIE"] = no value
      _SERVER["AUTH_USER"] = no value
      _SERVER["AUTH_PASSWORD"] = no value
      _SERVER["AUTH_TYPE"] = no value
      _SERVER["APPL_PHYSICAL_PATH"] = C:\inetpub\wwwroot\
      _SERVER["APPL_MD_PATH"] = /LM/W3SVC/1/ROOT
      _SERVER["IIS_UrlRewriteModule"] = 7.1.0761.0
      _SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
      _SERVER["HTTP_HOST"] = 159.69.173.187
      _SERVER["HTTP_ACCEPT_ENCODING"] = gzip
      _SERVER["HTTP_CONNECTION"] = close
      _SERVER["FCGI_ROLE"] = RESPONDER
      _SERVER["PHP_SELF"] = /info.php
      _SERVER["REQUEST_TIME_FLOAT"] = 1660742567.589
      _SERVER["REQUEST_TIME"] = 1660742567
      
      Found on 2022-08-17 13:25
  • Open service 159.69.173.187:9001

    2024-10-29 05:21

    HTTP/1.1 302 Found
    Cache-Control: private
    Content-Type: text/html; charset=utf-8
    Location: /Default.aspx?pid=Login&ReturnUrl=%2f
    Server: Microsoft-IIS/7.5
    X-Powered-By: ASP.NET
    Date: Tue, 29 Oct 2024 05:04:19 GMT
    Connection: close
    Content-Length: 158
    
    Page title: Object moved
    
    <html><head><title>Object moved</title></head><body>
    <h2>Object moved to <a href="/Default.aspx?pid=Login&amp;ReturnUrl=%2f">here</a>.</h2>
    </body></html>
    
    Found 3 days ago by HttpPlugin
    Create report
Domain summary
No record