LeakIX - Host 94.130.207.40

Host 94.130.207.40

Germany

Hetzner Online GmbH

Ubuntu

Software information

Apache Apache 2.4.29

tcp/443 tcp/80

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 94.130.207.40
Port: 80
URL: http://94.130.207.40/info.php

First seen 2021-07-12 15:52
Last seen 2022-11-13 23:32
Open for 489 days

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f87b4f372c4

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 41570
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1668382333.333
$_SERVER['REQUEST_TIME'] = 1668382333

Found on 2022-11-13 23:32

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f873f42c9db

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 52768
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1665049211.959
$_SERVER['REQUEST_TIME'] = 1665049211

Found on 2022-10-06 09:40

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f87a2a4915f

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.188.242
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 60846
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1664474859.55
$_SERVER['REQUEST_TIME'] = 1664474859

Found on 2022-09-29 18:07

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f8789cb5b99

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.188.242
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 58808
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1656127286.41
$_SERVER['REQUEST_TIME'] = 1656127286

Found on 2022-06-25 03:21

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f874fad4eb4

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.188.242
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 37782
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1655152557.992
$_SERVER['REQUEST_TIME'] = 1655152557

Found on 2022-06-13 20:35

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f5800d1f8756fb5f17

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 44188
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1653648627.228
$_SERVER['REQUEST_TIME'] = 1653648627

Found on 2022-05-27 10:50

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f50db1b2cc38d30492

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 55708
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1632366195.927
$_SERVER['REQUEST_TIME'] = 1632366195

Found on 2021-09-23 03:03

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f50db1b2cc4c1e992d

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 51794
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1629557501.257
$_SERVER['REQUEST_TIME'] = 1629557501

Found on 2021-08-21 14:51

Fingerprint: 2c44e2a6278fb0134173d6fa90ca814df8aea5bff5f6e0f50db1b2ccfb4bbeb2

Found PHP info page:
$_SERVER['SCRIPT_URL'] = /info.php
$_SERVER['SCRIPT_URI'] = http://94.130.207.40/info.php
$_SERVER['HTTP_HOST'] = 94.130.207.40
$_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.29 (Ubuntu)
$_SERVER['SERVER_NAME'] = 94.130.207.40
$_SERVER['SERVER_ADDR'] = 94.130.207.40
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = felauten@gmail.com
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 40372
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1626105145.809
$_SERVER['REQUEST_TIME'] = 1626105145

Found on 2021-07-12 15:52

Create report

Open service 94.130.207.40:21

2024-05-30 17:31
```
220 ProFTPD 1.3.5e Server (Debian) [94.130.207.40]
```
Found one day ago by FtpPlugin
Create report
Open service 94.130.207.40:21

2024-05-29 06:32
```
220 ProFTPD 1.3.5e Server (Debian) [94.130.207.40]
```
Found 3 days ago by FtpPlugin
Create report
Open service 94.130.207.40:22

2024-05-29 00:03
Found 3 days ago by SSHOpenPlugin
Create report

Open service 94.130.207.40:80

2024-05-28 00:00

HTTP/1.1 200 OK
Date: Tue, 28 May 2024 00:00:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Fri, 28 Jun 2019 11:56:04 GMT
ETag: "12-58c60f681bd00"
Accept-Ranges: bytes
Content-Length: 18
Connection: close
Content-Type: text/html


stop s1.golead7.eu

Found 2024-05-28 by HttpPlugin

Create report

Open service 94.130.207.40:443

2024-05-26 13:33

HTTP/1.1 200 OK
Date: Sun, 26 May 2024 13:33:03 GMT
Server: Apache/2.4.29 (Ubuntu)
Set-Cookie: PHPSESSID=3dm1p37ufkolp2mpnlit8cnlsq; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 88
Connection: close
Content-Type: text/html; charset=UTF-8



					<p>this site is currently not available</p>
					<p>please check again later</p>

Found 2024-05-26 by HttpPlugin

Create report

Open service 94.130.207.40:3306

2024-05-24 12:17
```
MySQL detected
```
Found 2024-05-24 by tcpid
Create report

ad.golead7.eucampaign.golead7.eucoyote.golead7.eugolead7.eupartner.golead7.euwww.golead7.eu

Fingerprint:

da854a1b80e8403893de55ed6dd8b61dc899dba84682685add4240aae080c38e

CN:

golead7.eu

Key:

RSA-2048

Issuer:

Not before:

2024-04-11 19:53

Not after:

2024-07-10 19:53

Domain summary

No record