Host 194.164.203.188
Germany
IONOS SE
Software information

Rocket

tcp/443 tcp/80

nginx nginx 1.22.1

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80

  • Open SMB file sharing detected
    IP: 194.164.203.188
    Port: 445
    First seen 2024-09-12 02:35
    Last seen 2024-12-22 01:00
    Open for 100 days
    Create report

  • Open service 194.164.203.188:445

    2024-12-22 01:00 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 10 hours ago by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-20 00:32 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2 days ago by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-18 01:38 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-12-18 by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-15 23:16 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-12-15 by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-13 23:03 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-12-13 by SmbPlugin
    Create report

  • Open service 194.164.203.188:80 · erpnext.passiv-energie.gmbh

    2024-12-13 07:52 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 13 Dec 2024 07:52:19 GMT
Link: </assets/frappe/dist/css/website.bundle.OODPVF4B.css>; rel=preload; as=style,</assets/erpnext/dist/css/erpnext-web.bundle.H7XFM4NO.css>; rel=preload; as=style,</assets/frappe/dist/css/login.bundle.CUGKIYDI.css>; rel=preload; as=style,</assets/frappe/dist/js/frappe-web.bundle.FWWFRIJG.js>; rel=preload; as=script,</website_script.js>; rel=preload; as=script,</assets/erpnext/dist/js/erpnext-web.bundle.J4A2DQB4.js>; rel=preload; as=script
Referrer-Policy: same-origin, strict-origin-when-cross-origin
Server: nginx/1.22.1
Set-Cookie: sid=Guest; Expires=Fri, 20 Dec 2024 09:52:19 GMT; Max-Age=612000; HttpOnly; Path=/; SameSite=Lax
Set-Cookie: system_user=no; Path=/; SameSite=Lax
Set-Cookie: full_name=Guest; Path=/; SameSite=Lax
Set-Cookie: user_id=Guest; Path=/; SameSite=Lax
Set-Cookie: user_image=; Path=/; SameSite=Lax
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-From-Cache: False
X-Page-Name: login
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
    Found 2024-12-13 by HttpPlugin
    Create report

  • Open service 194.164.203.188:443 · erpnext.passiv-energie.gmbh

    2024-12-13 07:52 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 13 Dec 2024 07:52:16 GMT
Link: </assets/frappe/dist/css/website.bundle.OODPVF4B.css>; rel=preload; as=style,</assets/erpnext/dist/css/erpnext-web.bundle.H7XFM4NO.css>; rel=preload; as=style,</assets/frappe/dist/css/login.bundle.CUGKIYDI.css>; rel=preload; as=style,</assets/frappe/dist/js/frappe-web.bundle.FWWFRIJG.js>; rel=preload; as=script,</website_script.js>; rel=preload; as=script,</assets/erpnext/dist/js/erpnext-web.bundle.J4A2DQB4.js>; rel=preload; as=script
Referrer-Policy: same-origin, strict-origin-when-cross-origin
Server: nginx/1.22.1
Set-Cookie: sid=Guest; Expires=Fri, 20 Dec 2024 09:52:16 GMT; Max-Age=612000; HttpOnly; Path=/; SameSite=Lax
Set-Cookie: system_user=no; Path=/; SameSite=Lax
Set-Cookie: full_name=Guest; Path=/; SameSite=Lax
Set-Cookie: user_id=Guest; Path=/; SameSite=Lax
Set-Cookie: user_image=; Path=/; SameSite=Lax
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-From-Cache: False
X-Page-Name: login
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
    Found 2024-12-13 by HttpPlugin
    Create report

  • Open service 194.164.203.188:80 · vault.passiv-energie.com

    2024-12-13 07:52 

    HTTP/1.1 200 OK
Cache-Control: public, max-age=600
Content-Length: 1236
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'self' blob:; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ; img-src 'self' data: https://haveibeenpwned.com ; connect-src 'self' https://api.pwnedpasswords.com https://api.2fa.directory https://app.simplelogin.io/api/ https://app.addy.io/api/ https://api.fastmail.com/ https://api.forwardemail.net ;
Content-Type: text/html; charset=utf-8
Date: Fri, 13 Dec 2024 07:52:14 GMT
Expires: Fri, 13 Dec 2024 08:02:14 GMT
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Referrer-Policy: same-origin
Server: Rocket
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
Connection: close

Page title: Vaultwarden Web

<!doctype html><html class="theme_light"><head><meta charset="utf-8"/><meta name="viewport" content="width=1010"/><meta name="theme-color" content="#175DDC"/><title page-title>Vaultwarden Web</title><link rel="apple-touch-icon" sizes="180x180" href="images/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="images/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="images/favicon-16x16.png"/><link rel="mask-icon" href="images/safari-pinned-tab.svg" color="#175DDC"/><link rel="manifest" href="cca56971e438d22818d6.json"/><script defer="defer" src="theme_head.4cb181fc19f2a308ba73.js"></script><link href="app/main.62a346fdfb5b10f77c32.css" rel="stylesheet"></head><body class="layout_frontend"><app-root><div class="mt-5 d-flex justify-content-center"><div><img class="mb-4 logo logo-themed" alt="Vaultwarden"/><p class="text-center"><i class="bwi bwi-spinner bwi-spin bwi-2x text-muted" title="Loading" aria-hidden="true"></i></p></div></div></app-root><script defer="defer" src="app/polyfills.575bcaf3121104d1c55d.js"></script><script defer="defer" src="app/vendor.0d3c724de0f2ab138712.js"></script><script defer="defer" src="app/main.7c1287a291f3bb48f2e0.js"></script></body></html>
    Found 2024-12-13 by HttpPlugin
    Create report

  • Open service 194.164.203.188:443 · vault.passiv-energie.com

    2024-12-13 07:52 

    HTTP/1.1 200 OK
Cache-Control: public, max-age=600
Content-Length: 1236
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'self' blob:; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ; img-src 'self' data: https://haveibeenpwned.com ; connect-src 'self' https://api.pwnedpasswords.com https://api.2fa.directory https://app.simplelogin.io/api/ https://app.addy.io/api/ https://api.fastmail.com/ https://api.forwardemail.net ;
Content-Type: text/html; charset=utf-8
Date: Fri, 13 Dec 2024 07:52:14 GMT
Expires: Fri, 13 Dec 2024 08:02:14 GMT
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
Referrer-Policy: same-origin
Server: Rocket
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
Connection: close

Page title: Vaultwarden Web

<!doctype html><html class="theme_light"><head><meta charset="utf-8"/><meta name="viewport" content="width=1010"/><meta name="theme-color" content="#175DDC"/><title page-title>Vaultwarden Web</title><link rel="apple-touch-icon" sizes="180x180" href="images/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="images/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="images/favicon-16x16.png"/><link rel="mask-icon" href="images/safari-pinned-tab.svg" color="#175DDC"/><link rel="manifest" href="cca56971e438d22818d6.json"/><script defer="defer" src="theme_head.4cb181fc19f2a308ba73.js"></script><link href="app/main.62a346fdfb5b10f77c32.css" rel="stylesheet"></head><body class="layout_frontend"><app-root><div class="mt-5 d-flex justify-content-center"><div><img class="mb-4 logo logo-themed" alt="Vaultwarden"/><p class="text-center"><i class="bwi bwi-spinner bwi-spin bwi-2x text-muted" title="Loading" aria-hidden="true"></i></p></div></div></app-root><script defer="defer" src="app/polyfills.575bcaf3121104d1c55d.js"></script><script defer="defer" src="app/vendor.0d3c724de0f2ab138712.js"></script><script defer="defer" src="app/main.7c1287a291f3bb48f2e0.js"></script></body></html>
    Found 2024-12-13 by HttpPlugin
    Create report

  • Open service 194.164.203.188:80 · traefik.passiv-energie.gmbh

    2024-12-12 07:52 

    HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Thu, 12 Dec 2024 07:52:08 GMT
Content-Length: 19
Connection: close


404 page not found
    Found 2024-12-12 by HttpPlugin
    Create report

  • Open service 194.164.203.188:443 · traefik.passiv-energie.gmbh

    2024-12-12 07:52 

    HTTP/1.1 401 Unauthorized
Content-Type: text/plain
Www-Authenticate: Basic realm="traefik"
Date: Thu, 12 Dec 2024 07:52:08 GMT
Content-Length: 17
Connection: close


401 Unauthorized
    Found 2024-12-12 by HttpPlugin
    Create report

  • Open service 194.164.203.188:443 · nextcloud.passiv-energie.gmbh

    2024-12-12 07:51 

    HTTP/1.1 302 Found
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-u/nnOlpRiigDpOvcVbvv/hCsyhZjizJkojA6vYQVcXE='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Content-Type: text/html; charset=UTF-8
Date: Thu, 12 Dec 2024 07:51:06 GMT
Location: https://nextcloud.passiv-energie.gmbh/login
Referrer-Policy: no-referrer
Server: nginx
Set-Cookie: oc_sessionPassphrase=Lp3Z4Bh8Bg60FTMQ1iHZwmjFUTMgOvENCXpT7YG8fCZ6vCJKS8EmZi4R3Ehr3B2IJozruL7H7aC5xOXw9MaRXgRQqHL6cQVVIj3ypwc2%2F4efFCQDSHzgbN8IXYsxNf2z; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Set-Cookie: ociy4c40xms3=7f1afa66fd286840dd98a7af6c37e692; path=/; secure; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-Xss-Protection: 1; mode=block
Content-Length: 0
Connection: close
    Found 2024-12-12 by HttpPlugin
    Create report

  • Open service 194.164.203.188:80 · nextcloud.passiv-energie.gmbh

    2024-12-12 07:51 

    HTTP/1.1 302 Found
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-Y30rfZXVW44qVJKjiUU1DR/NQMWEKww6bIjthojtGX4='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
Content-Type: text/html; charset=UTF-8
Date: Thu, 12 Dec 2024 07:51:06 GMT
Location: https://nextcloud.passiv-energie.gmbh/login
Referrer-Policy: no-referrer
Server: nginx
Set-Cookie: oc_sessionPassphrase=yYKE0tXMJWTTdm%2FNWeJpTT5l8SizfopAISarznMp644ufGK7z9mQemvzZg1gqfZEWk5NjmEqUecrwV39ALMwFHEQWiynANx4pniEXsejW2%2FRMmU%2BL2OEB6%2B4L%2Bl4VUqv; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Set-Cookie: ociy4c40xms3=df31e3b3fb578ea945a0439018ee1a18; path=/; secure; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
X-Xss-Protection: 1; mode=block
Content-Length: 0
Connection: close
    Found 2024-12-12 by HttpPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-11 23:11 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-12-11 by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-12-02 01:26 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-12-02 by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-11-30 00:38 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-11-30 by SmbPlugin
    Create report

  • Open service 194.164.203.188:445

    2024-11-28 00:19 

    SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
    Found 2024-11-28 by SmbPlugin
    Create report
erpnext.passiv-energie.gmbh
Fingerprint:
dda6dc86ffe2d3772901a18ad89a6165a06db9f25d0ea4062382f9de755a5f74
CN:
erpnext.passiv-energie.gmbh
Key:
RSA-4096
Issuer:
R11
Not before:
2024-12-13 06:52
Not after:
2025-03-13 06:52
vault.passiv-energie.com
Fingerprint:
00b56ae0ad6de0a38d93aeb75986bec6f6d205836076aab0a2c47831d241d003
CN:
vault.passiv-energie.com
Key:
RSA-4096
Issuer:
R11
Not before:
2024-12-13 06:52
Not after:
2025-03-13 06:52
traefik.passiv-energie.gmbh
Fingerprint:
035fd26e4f2e6185b824f6599eba5023c2b4a1741cdbf21dfb27885d377ce719
CN:
traefik.passiv-energie.gmbh
Key:
RSA-4096
Issuer:
R11
Not before:
2024-12-12 06:52
Not after:
2025-03-12 06:52
nextcloud.passiv-energie.gmbh
Fingerprint:
e3fefa9cfe87279a8ef65da4f4636ecf11847c534827e387eb040886134f1dd5
CN:
nextcloud.passiv-energie.gmbh
Key:
RSA-4096
Issuer:
R10
Not before:
2024-12-12 06:52
Not after:
2025-03-12 06:52
Domain summary

erpnext.passiv-energie.gmbh 1 vault.passiv-energie.com 1 traefik.passiv-energie.gmbh 1 nextcloud.passiv-energie.gmbh 1

4 recorded

© 2024 LeakIX
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice