LeakIX - Host 172.104.138.134

Host 172.104.138.134

Germany

Akamai Connected Cloud

Ubuntu

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 172.104.138.134
Port: 22

First seen 2025-12-10 11:54
Last seen 2026-02-08 15:26
Open for 60 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb581e37d980ae5d88d0ae5d88d0ae5d88d0ae5d88d
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 15:26
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb5c979d6626891b6ab6891b6ab6891b6ab6891b6ab
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.7p1 Debian-7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2025-12-12 04:33
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Domain: iivvss.consultedsolutions.com
Port: 443
URL: https://iivvss.consultedsolutions.com

First seen 2024-02-07 09:55
Last seen 2025-12-10 09:14
Open for 671 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a4684b4f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[pull]
	rebase = false
[branch "myiomad-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2025-12-10 09:14

534 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522578aba72

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zakjanzi/consultED-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-10-10 05:25

274 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522bc1abec1

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE

Found on 2024-02-07 09:55

352 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Port: 443
URL: https://172.104.138.134

First seen 2024-01-25 14:50
Last seen 2025-12-10 01:15
Open for 684 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a4684b4f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[pull]
	rebase = false
[branch "myiomad-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2025-12-10 01:15

534 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522578aba72

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zakjanzi/consultED-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-10-09 21:45

274 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Port: 80
URL: http://172.104.138.134

First seen 2024-01-17 09:01
Last seen 2025-12-09 21:02
Open for 692 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a4684b4f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[pull]
	rebase = false
[branch "myiomad-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2025-12-09 21:02

534 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522578aba72

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zakjanzi/consultED-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-10-09 21:53

274 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Domain: iivvss.consultedsolutions.com
Port: 80
URL: http://iivvss.consultedsolutions.com

First seen 2024-02-07 09:55
Last seen 2025-12-01 01:15
Open for 662 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a4684b4f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[pull]
	rebase = false
[branch "myiomad-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2025-12-01 01:15

534 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522578aba72

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zakjanzi/consultED-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-10-10 12:40

274 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522bc1abec1

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE

Found on 2024-02-07 09:55

352 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Domain: cinemaximum.consultedsolutions.com
Port: 443
URL: https://cinemaximum.consultedsolutions.com

First seen 2024-12-20 08:08
Last seen 2025-11-30 23:08
Open for 345 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a4684b4f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_402_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "myiomad"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[pull]
	rebase = false
[branch "myiomad-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2025-11-30 23:08

534 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.104.138.134
Domain: demo.consultedsolutions.com
Port: 443
URL: https://demo.consultedsolutions.com

First seen 2024-10-29 10:40
Last seen 2024-12-10 08:50
Open for 41 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227080c28a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[branch "stagingiomad"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[branch "iomaddemo"]
	remote = origin
	merge = refs/heads/IOMAD_402_STABLE
[branch "iomaddemo-403"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2024-12-10 08:50

511 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652266278c5d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/iomad/iomad.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "IOMAD_403_STABLE"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE
[branch "stagingiomad"]
	remote = origin
	merge = refs/heads/IOMAD_403_STABLE

Found on 2024-11-04 08:12

357 Bytes

Create report

Open service 172.104.138.134:22

2026-01-22 15:36
Found 2026-01-22 by SSHOpenPlugin
Create report
Open service 172.104.138.134:22

2026-01-08 16:40
Found 2026-01-08 by SSHOpenPlugin
Create report
Open service 172.104.138.134:22

2026-01-01 17:33
Found 2026-01-01 by SSHOpenPlugin
Create report
Open service 172.104.138.134:22

2025-12-23 22:47
Found 2025-12-23 by SSHOpenPlugin
Create report

Open service 172.104.138.134:80 · juneniko.xyz

2025-12-22 20:29

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
X-Address: gin_throttle_mw_7200000000_165.227.84.14
X-Ratelimit-Limit: 500
X-Ratelimit-Remaining: 498
X-Ratelimit-Reset: 1766438971
Date: Mon, 22 Dec 2025 20:29:31 GMT
Connection: close
Transfer-Encoding: chunked

Page title: Coming Soon - juneniko.xyz














<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Coming Soon - juneniko.xyz</title>

    <link rel="stylesheet" href="/assets/styles.css">

</head>
<body>
<div class="container">
    <h1>Our Website is Coming Soon!</h1>
    <p>We are working hard to give you the best experience. Stay tuned!</p>
    <div class="countdown">
        <div class="countdown-item">
            <span id="days">00</span>
            <label>Days</label>
        </div>
        <div class="countdown-item">
            <span id="hours">00</span>
            <label>Hours</label>
        </div>
        <div class="countdown-item">
            <span id="minutes">00</span>
            <label>Minutes</label>
        </div>
        <div class="countdown-item">
            <span id="seconds">00</span>
            <label>Seconds</label>
        </div>
    </div>

    <form id="subscription-form" onsubmit="submitForm(event)">
        <input type="email" id="email" placeholder="Enter your email" required>
        <button type="submit">Subscribe</button>
        <p id="subscription-message"></p>
    </form>
    <a href="news">Fox News</a>
    <br>
    <a href="about">Learn more about our email marketing agency</a>
    <br>
    <a href="opt-out">Unsubscribe from our newsletter</a>
    <br>
    <a href="privacy">Privacy Policy</a>


</div>



<script >
    const launchDate = new Date('2023-05-01T00:00:00').getTime();
    const daysElement = document.getElementById('days');
    const hoursElement = document.getElementById('hours');
    const minutesElement = document.getElementById('minutes');
    const secondsElement = document.getElementById('seconds');

    function updateCountdown() {
        const currentTime = new Date().getTime();
        const timeRemaining = launchDate - currentTime;

        const days = Math.floor(timeRemaining / (1000 * 60 * 60 * 24));
        const hours = Math.floor((timeRemaining % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));
        const minutes = Math.floor((timeRemaining % (1000 * 60 * 60)) / (1000 * 60));
        const seconds = Math.floor((timeRemaining % (1000 *
            60)) / 1000);

        daysElement.textContent = days.toString().padStart(2, '0');
        hoursElement.textContent = hours.toString().padStart(2, '0');
        minutesElement.textContent = minutes.toString().padStart(2, '0');
        secondsElement.textContent = seconds.toString().padStart(2, '0');
    }

    function submitForm(event) {
        event.preventDefault();
        const email = document.getElementById('email').value;
        
        document.getElementById('subscription-message').textContent = `Thank you for subscribing, ${email}!`;
    }


    updateCountdown();
    setInterval(updateCountdown, 1000);
</script>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 172.104.138.134:443 · juneniko.xyz

2025-12-22 20:29

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
X-Address: gin_throttle_mw_7200000000_167.71.175.236
X-Ratelimit-Limit: 500
X-Ratelimit-Remaining: 498
X-Ratelimit-Reset: 1766438971
Date: Mon, 22 Dec 2025 20:29:31 GMT
Connection: close
Transfer-Encoding: chunked

Page title: Coming Soon - juneniko.xyz














<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Coming Soon - juneniko.xyz</title>

    <link rel="stylesheet" href="/assets/styles.css">

</head>
<body>
<div class="container">
    <h1>Our Website is Coming Soon!</h1>
    <p>We are working hard to give you the best experience. Stay tuned!</p>
    <div class="countdown">
        <div class="countdown-item">
            <span id="days">00</span>
            <label>Days</label>
        </div>
        <div class="countdown-item">
            <span id="hours">00</span>
            <label>Hours</label>
        </div>
        <div class="countdown-item">
            <span id="minutes">00</span>
            <label>Minutes</label>
        </div>
        <div class="countdown-item">
            <span id="seconds">00</span>
            <label>Seconds</label>
        </div>
    </div>

    <form id="subscription-form" onsubmit="submitForm(event)">
        <input type="email" id="email" placeholder="Enter your email" required>
        <button type="submit">Subscribe</button>
        <p id="subscription-message"></p>
    </form>
    <a href="news">Fox News</a>
    <br>
    <a href="about">Learn more about our email marketing agency</a>
    <br>
    <a href="opt-out">Unsubscribe from our newsletter</a>
    <br>
    <a href="privacy">Privacy Policy</a>


</div>



<script >
    const launchDate = new Date('2023-05-01T00:00:00').getTime();
    const daysElement = document.getElementById('days');
    const hoursElement = document.getElementById('hours');
    const minutesElement = document.getElementById('minutes');
    const secondsElement = document.getElementById('seconds');

    function updateCountdown() {
        const currentTime = new Date().getTime();
        const timeRemaining = launchDate - currentTime;

        const days = Math.floor(timeRemaining / (1000 * 60 * 60 * 24));
        const hours = Math.floor((timeRemaining % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));
        const minutes = Math.floor((timeRemaining % (1000 * 60 * 60)) / (1000 * 60));
        const seconds = Math.floor((timeRemaining % (1000 *
            60)) / 1000);

        daysElement.textContent = days.toString().padStart(2, '0');
        hoursElement.textContent = hours.toString().padStart(2, '0');
        minutesElement.textContent = minutes.toString().padStart(2, '0');
        secondsElement.textContent = seconds.toString().padStart(2, '0');
    }

    function submitForm(event) {
        event.preventDefault();
        const email = document.getElementById('email').value;
        
        document.getElementById('subscription-message').textContent = `Thank you for subscribing, ${email}!`;
    }


    updateCountdown();
    setInterval(updateCountdown, 1000);
</script>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 172.104.138.134:443 · iivvss.consultedsolutions.com

2025-12-22 18:19
```
HTTP/1.0 400 Bad Request


Client sent an HTTP request to an HTTPS server.
```
Found 2025-12-22 by HttpPlugin
Create report
Open service 172.104.138.134:443 · cinemaximum.consultedsolutions.com

2025-12-22 14:48
```
HTTP/1.0 400 Bad Request


Client sent an HTTP request to an HTTPS server.
```
Found 2025-12-22 by HttpPlugin
Create report

juneniko.xyz

Fingerprint:

9c1486eab9846a23d158782ff2eabe856e885f88b2e1288f425c5025c78aa11e

CN:

juneniko.xyz

Key:

ECDSA-256

Issuer:

Not before:

2025-12-22 19:29

Not after:

2026-03-22 19:29

Domain summary

iivvss.consultedsolutions.com 6 demo.consultedsolutions.com 2 cinemaximum.consultedsolutions.com 1 juneniko.xyz 1

4 recorded

Host 172.104.138.134

Germany

SSH is potenitally vulnerable

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

juneniko.xyz

Domain summary