LeakIX - Host 178.18.241.41

Host 178.18.241.41

France

Contabo GmbH

Unix

Software information

nginx nginx

tcp/443 tcp/80

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 178.18.241.41
Port: 22

First seen 2024-07-03 18:56
Last seen 2026-01-08 12:04
Open for 553 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb50006c01bfe916ff6fe916ff6fe916ff6fe916ff6
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-01-08 12:04
Create report
Detected HTTP traversal vulnerability

An attacker can make use of this vulnerability to step out of the root directory and access other parts of the file system.

This might give the attacker the ability to view restricted files, which could provide the attacker with more information required to further compromise the system.

https://www.acunetix.com/websitesecurity/directory-traversal/

IP: 178.18.241.41
Domain: srv1.zstechpk.com
Port: 443
URL: https://srv1.zstechpk.com/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts

First seen 2021-10-05 19:18
- Severity: critical
  Fingerprint: ac4d53c4832b2491bf8f6062aa22f2e96a55f5f0e17cc7e2e17cc7e2e17cc7e2
```
Found host file through Apache traversal:
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
127.0.0.1   autoreply.srv1.zstechpk.com
178.18.241.41   srv1.zstechpk.com
```
  Found on 2021-10-05 19:18
Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2026-01-09 18:01

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 18:01:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Strict-Transport-Security: max-age=31536000

Found 2026-01-09 by HttpPlugin

Create report

Open service 178.18.241.41:443 · www-itombs.opzoom.com

2026-01-09 14:27

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 14:27:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://www-itombs.opzoom.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www-itombs.opzoom.com/wp-json/wp/v2/pages/873>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www-itombs.opzoom.com/>; rel=shortlink
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Cache: MISS From www-itombs.opzoom.com
Cache-Control: max-age=0
Nginx-Cache: MISS
Last-Modified: Friday, 09-Jan-2026 14:27:28 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Found 2026-01-09 by HttpPlugin

Create report

Open service 178.18.241.41:22

2026-01-08 12:04
Found 2026-01-08 by SSHOpenPlugin
Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2026-01-02 22:35

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 22:35:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Strict-Transport-Security: max-age=31536000

Found 2026-01-02 by HttpPlugin

Create report

Open service 178.18.241.41:443 · www-itombs.opzoom.com

2026-01-02 19:00

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 19:00:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://www-itombs.opzoom.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www-itombs.opzoom.com/wp-json/wp/v2/pages/873>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www-itombs.opzoom.com/>; rel=shortlink
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Cache: MISS From www-itombs.opzoom.com
Cache-Control: max-age=0
Nginx-Cache: MISS
Last-Modified: Friday, 02-Jan-2026 19:00:41 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Found 2026-01-02 by HttpPlugin

Create report

Open service 178.18.241.41:22

2026-01-01 15:06
Found 2026-01-01 by SSHOpenPlugin
Create report
Open service 178.18.241.41:22

2025-12-29 23:26
Found 2025-12-29 by SSHOpenPlugin
Create report
Open service 178.18.241.41:22

2025-12-25 23:49
Found 2025-12-25 by SSHOpenPlugin
Create report
Open service 178.18.241.41:22

2025-12-23 23:13
Found 2025-12-23 by SSHOpenPlugin
Create report

Open service 178.18.241.41:443 · www-itombs.opzoom.com

2025-12-23 08:13

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Dec 2025 08:13:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://www-itombs.opzoom.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www-itombs.opzoom.com/wp-json/wp/v2/pages/873>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www-itombs.opzoom.com/>; rel=shortlink
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Cache: MISS From www-itombs.opzoom.com
Cache-Control: max-age=0
Nginx-Cache: MISS
Last-Modified: Tuesday, 23-Dec-2025 08:13:16 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Found 2025-12-23 by HttpPlugin

Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2025-12-22 22:48

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Dec 2025 22:48:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Set-Cookie: SITE_TOTAL_ID=23941cd7426fadf5ae2624cb18328de9; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Found 2025-12-22 by HttpPlugin

Create report

Open service 178.18.241.41:22

2025-12-21 23:14
Found 2025-12-21 by SSHOpenPlugin
Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2025-12-21 02:53

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Dec 2025 02:53:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Set-Cookie: SITE_TOTAL_ID=0a93c3930ffc2bb2ee633e3a7bf0b44b; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Found 2025-12-21 by HttpPlugin

Create report

Open service 178.18.241.41:443 · www-itombs.opzoom.com

2025-12-21 00:56

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Dec 2025 00:56:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://www-itombs.opzoom.com/wp-json/>; rel="https://api.w.org/"
Link: <https://www-itombs.opzoom.com/wp-json/wp/v2/pages/873>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://www-itombs.opzoom.com/>; rel=shortlink
Set-Cookie: SITE_TOTAL_ID=cc703df8d055d8c951ecc192b596b0c4; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Found 2025-12-21 by HttpPlugin

Create report

Open service 178.18.241.41:443 · www.sunnysheikh.dev

2025-12-20 16:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 20 Dec 2025 16:02:49 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://sunnysheikh.dev/
Set-Cookie: SITE_TOTAL_ID=58ace95ecf78daf774768e31125ceca0; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 178.18.241.41:80 · www.sunnysheikh.dev

2025-12-20 16:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 20 Dec 2025 16:02:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.sunnysheikh.dev/
Set-Cookie: SITE_TOTAL_ID=a7092efc95e52ad2b5c6d6e36ded54bc; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2025-12-20 16:02

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Dec 2025 16:02:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Set-Cookie: SITE_TOTAL_ID=29b1b29a93f419b158fcb639ad8b7cfe; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Found 2025-12-20 by HttpPlugin

Create report

Open service 178.18.241.41:80 · sunnysheikh.dev

2025-12-20 16:02

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 20 Dec 2025 16:02:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://sunnysheikh.dev/
Set-Cookie: SITE_TOTAL_ID=f320a91e3c9851b57f9d6eb36a523985; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 178.18.241.41:22

2025-12-20 03:41
Found 2025-12-20 by SSHOpenPlugin
Create report

Open service 178.18.241.41:443 · sunnysheikh.dev

2025-12-19 03:24

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Dec 2025 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://sunnysheikh.dev/wp-json/>; rel="https://api.w.org/"
Link: <https://sunnysheikh.dev/wp-json/wp/v2/pages/17>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://sunnysheikh.dev/>; rel=shortlink
Set-Cookie: SITE_TOTAL_ID=c9893893f1c464bedf13278c9783dba3; Path=/; Max-Age=259200000; HttpOnly
Strict-Transport-Security: max-age=31536000

Found 2025-12-19 by HttpPlugin

Create report

sunnysheikh.devwww.sunnysheikh.dev

Fingerprint:

6b95022a02f0dba70a26adf11033dc0fb104278ad611194b75edb9ec538763ba

CN:

sunnysheikh.dev

Key:

RSA-2048

Issuer:

R12

Not before:

2025-10-30 18:13

Not after:

2026-01-28 18:13

www-itombs.opzoom.com

Fingerprint:

e67f27cc6885a312022966a8c741b0c4e4cdcc35ead56e91a46bd4bc47673e02

CN:

www-itombs.opzoom.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-02 17:41

Not after:

2026-03-02 17:41

Domain summary

srv1.zstechpk.com 1 sunnysheikh.dev 6 www-itombs.opzoom.com 3 www.sunnysheikh.dev 1

4 recorded

Host 178.18.241.41

France

Software information

SSH is potenitally vulnerable

Detected HTTP traversal vulnerability

sunnysheikh.devwww.sunnysheikh.dev

www-itombs.opzoom.com

Domain summary