LeakIX - Host 95.111.255.20

Host 95.111.255.20

France

Contabo GmbH

Software information

nginx nginx

tcp/443 tcp/80

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 95.111.255.20
Port: 22

First seen 2025-07-03 14:52
Last seen 2026-01-08 16:43
Open for 189 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb54bc890163f1caf2f3f1caf2f3f1caf2f3f1caf2f
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.6p1
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-01-08 16:43
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: www.testpaperlive.com
Port: 443
URL: https://www.testpaperlive.com

First seen 2022-06-20 02:02
Last seen 2024-09-02 06:29
Open for 805 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522737cf933
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "qa-it"]
	remote = origin
	merge = refs/heads/qa-it
```
  Found on 2024-09-02 06:29
  
  351 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: testpaperlive.com
Port: 443
URL: https://testpaperlive.com

First seen 2022-06-20 02:02
Last seen 2024-09-02 06:18
Open for 805 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522737cf933
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "qa-it"]
	remote = origin
	merge = refs/heads/qa-it
```
  Found on 2024-09-02 06:18
  
  351 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Port: 443
URL: https://95.111.255.20/.git/config

First seen 2021-12-03 09:09
Last seen 2024-09-02 01:38
Open for 1003 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229aefab9d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-09-02 01:38

229 Bytes

Severity: high
Fingerprint: 2580fa947e78dd08e645819d342d958cc1b1b55e5ae2c8f8a0840325c9f066a6

HTTP/1.1 200 OK
Date: Sat, 06 May 2023 06:44:29 GMT
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;
Last-Modified: Wed, 24 Jun 2020 12:13:52 GMT
Accept-Ranges: bytes
Content-Length: 191
Vary: Accept-Encoding,User-Agent
Connection: close
Content-Type: text/html

Page title: My title

<html>
   <head>
<meta name="google-site-verification" content="iqQ-y2xZcok4rlxoLqEZXQEI2ukcnM-V7Zt9hKJYKyc" />
      <title>My title</title>
   </head>
   <body>
 
   </body>
</html>[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2023-05-06 06:44

229 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: testpaperlive.in
Port: 443
URL: https://testpaperlive.in/.git/config

First seen 2022-01-30 12:51
Last seen 2024-09-01 17:29
Open for 945 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229aefab9d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-01 17:29
  
  229 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: store.testpaperlive.com
Port: 80
URL: http://store.testpaperlive.com

First seen 2024-09-01 16:16
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522392e96d9
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/tplstore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-09-01 16:16
  
  283 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: store.testpaperlive.com
Port: 443
URL: https://store.testpaperlive.com

First seen 2024-09-01 16:16
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522392e96d9
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/tplstore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-09-01 16:16
  
  283 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: mail.testpaperlive.in
Port: 443
URL: https://mail.testpaperlive.in/.git/config

First seen 2022-01-30 12:51
Last seen 2024-09-01 13:42
Open for 945 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229aefab9d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-01 13:42
  
  229 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: demodev.testpaperlive.in
Port: 443
URL: https://demodev.testpaperlive.in

First seen 2022-06-22 02:02
Last seen 2024-09-01 13:15
Open for 802 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522737cf933
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "qa-it"]
	remote = origin
	merge = refs/heads/qa-it
```
  Found on 2024-09-01 13:15
  
  351 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: www.testpaperlive.in
Port: 443
URL: https://www.testpaperlive.in/.git/config

First seen 2022-01-30 12:51
Last seen 2024-09-01 02:53
Open for 944 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229aefab9d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-01 02:53
  
  229 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 95.111.255.20
Domain: demodev.testpaperlive.in
Port: 80
URL: http://demodev.testpaperlive.in

First seen 2022-06-22 02:02
Last seen 2024-03-21 16:10
Open for 638 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522737cf933
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://krishan1992@bitbucket.org/krishan1992/testpaperliveweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "qa-it"]
	remote = origin
	merge = refs/heads/qa-it
```
  Found on 2024-03-21 16:10
  
  351 Bytes
Create report

Open service 95.111.255.20:443 · mail.qkll.gov.al

2026-01-11 06:42

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 06:42:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Sun, 11 Jan 2026 06:42:27 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=dkt79lbcl6n0bgjnvg08uqict5; path=/; secure; HttpOnly
Last-Modified: Sun, 11 Jan 2026 06:42:27 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
Strict-Transport-Security: max-age=31536000;

Page title: Roundcube Webmail :: Welcome to Roundcube Webmail

<!DOCTYPE html>

<html lang="en">

<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1748763912">
	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1748763916">
	
		<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1748763912">
		
	
	
		<script>
		try {
			if (document.cookie.indexOf('colorMode=dark') > -1
				|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
			) {
				document.documentElement.className += ' dark-mode';
			}
		} catch (e) { }
		</script>
	
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1748763912"><script src="program/js/jquery.min.js?s=1748763914"></script><script src="program/js/common.min.js?s=1748763912"></script><script src="program/js/app.min.js?s=1748763912"></script><script src="program/js/jstz.min.js?s=1748763914"></script><script>
/*
        @licstart  The following is the entire license notice for the 
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10611,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"OjuKYZikCUIWdHwnKqkLUOILdfMKiSke"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>

<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1748763912"></script>
</head>
<body class="task-login action-none">
	
		<div id="layout">
	


<h1 class="voice">Roundcube Webmail Login</h1>

<div id="layout-content" class="selected no-navbar" role="main">
	<img src="skins/elastic/images/logo.svg?s=1748763912" id="logo" alt="Logo">
	<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="OjuKYZikCUIWdHwnKqkLUOILdfMKiSke">
	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogin

Found one day ago by HttpPlugin

Create report

Open service 95.111.255.20:80 · mail.qkll.gov.al

2026-01-11 06:42

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 11 Jan 2026 06:42:27 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://mail.qkll.gov.al/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 95.111.255.20:80 · srvemailvp.apptirana.al

2026-01-11 06:41

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 11 Jan 2026 06:41:16 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://srvemailvp.apptirana.al/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 95.111.255.20:443 · srvemailvp.apptirana.al

2026-01-11 06:41

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 06:41:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2503
Connection: close
Vary: Accept-Encoding
Last-Modified: Mon, 17 Mar 2025 22:05:07 GMT
ETag: "9c7-63090fb29c84e"
Accept-Ranges: bytes
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;

Page title: Coming Soon

<!doctype html>
<html lang="en">
	<head>
		<meta charset="utf-8" />
		<meta name="viewport" content="width=device-width, initial-scale=1" />
		<title>Coming Soon</title>
		<style>
			body {
				background-color: #f5f5f5;
				margin-top: 8%;
				color: #5d5d5d;
				font-family:
					-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial,
					"Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol",
					"Noto Color Emoji";
				text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.75);
				text-align: center;
			}

			h1 {
				font-size: 2.45em;
				font-weight: 700;
				color: #5d5d5d;
				letter-spacing: -0.02em;
				margin-bottom: 30px;
				margin-top: 30px;
			}

			.container {
				width: 100%;
				margin-right: auto;
				margin-left: auto;
			}

			.animate__animated {
				animation-duration: 1s;
				animation-fill-mode: both;
			}

			.animate__fadeIn {
				animation-name: fadeIn;
			}

			.info {
				color: #5594cf;
				fill: #5594cf;
			}

			.error {
				color: #c92127;
				fill: #c92127;
			}

			.warning {
				color: #ffcc33;
				fill: #ffcc33;
			}

			.success {
				color: #5aba47;
				fill: #5aba47;
			}

			.icon-large {
				height: 132px;
				width: 132px;
			}

			.description-text {
				color: #707070;
				letter-spacing: -0.01em;
				font-size: 1.25em;
				line-height: 20px;
			}

			.footer {
				margin-top: 40px;
				font-size: 0.7em;
			}

			@keyframes fadeIn {
				from {
					opacity: 0;
				}
				to {
					opacity: 1;
				}
			}
		</style>
	</head>
	<body>
		<div class="container">
			<div class="row">
				<div class="col">
					<div class="animate__animated animate__fadeIn">
						<svg
							class="warning icon-large fa-hard-hat"
							xmlns="http://www.w3.org/2000/svg"
							viewBox="0 0 512 512"
						>
							<path
								d="M480 288c0-80.25-49.28-148.92-119.19-177.62L320 192V80a16 16 0 0 0-16-16h-96a16 16 0 0 0-16 16v112l-40.81-81.62C81.28 139.08 32 207.75 32 288v64h448zm16 96H16a16 16 0 0 0-16 16v32a16 16 0 0 0 16 16h480a16 16 0 0 0 16-16v-32a16 16 0 0 0-16-16z"
							></path>
						</svg>
					</div>
					<h1 class="animate__animated animate__fadeIn">We're working on it!</h1>
					<div class="description-text animate__animated animate__fadeIn">
						<p>This site is currently under construction.</p>
						<p>Please check back soon.</p>
						<section class="footer"><strong>Domain:</strong> srvemailvp.apptirana.al</section>
					</div>
				</div>
			</div>
		</div>
	</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 95.111.255.20:22

2026-01-08 16:43
Found 2026-01-08 by SSHOpenPlugin
Create report
Open service 95.111.255.20:22

2026-01-01 17:40
Found 2026-01-01 by SSHOpenPlugin
Create report
Open service 95.111.255.20:22

2025-12-30 02:41
Found 2025-12-30 by SSHOpenPlugin
Create report
Open service 95.111.255.20:22

2025-12-23 22:07
Found 2025-12-23 by SSHOpenPlugin
Create report
Open service 95.111.255.20:22

2025-12-21 21:55
Found 2025-12-21 by SSHOpenPlugin
Create report
Open service 95.111.255.20:22

2025-12-19 22:02
Found 2025-12-19 by SSHOpenPlugin
Create report

mail.qkll.gov.al

Fingerprint:

83d9824d8a6d1a4686252b7c3a0de2556da61008c892d77e193611bbb035b171

CN:

mail.qkll.gov.al

Key:

RSA-4096

Issuer:

R12

Not before:

2026-01-11 05:42

Not after:

2026-04-11 05:42

srvemailvp.apptirana.al

Fingerprint:

9f0e8221f8c5ed895dd9b7b8e138870e65557c58d01eb59bc904bf7d87d1b662

CN:

srvemailvp.apptirana.al

Key:

RSA-4096

Issuer:

R12

Not before:

2026-01-11 05:41

Not after:

2026-04-11 05:41

Domain summary

store.testpaperlive.com 2 demodev.testpaperlive.in 2 www.testpaperlive.com 1 testpaperlive.com 1 testpaperlive.in 1 mail.testpaperlive.in 1 www.testpaperlive.in 1 mail.qkll.gov.al 1 srvemailvp.apptirana.al 1

9 recorded

Host 95.111.255.20

France

Software information

SSH is potenitally vulnerable

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

mail.qkll.gov.al

srvemailvp.apptirana.al

Domain summary