whois.handle: DIGITALOCEAN
whois.name: DigitalOcean, LLC
whois.cidrs: 178.128.192.0/20
whois.created: 2019-04-17T00:00:00.000000
whois.updated: 2019-04-17T00:00:00.000000
whois.handle: ORG-DOI2-RIPE
whois.name: DigitalOcean, LLC
whois.address: 101 Avenue of the Americas, 10th Floor\nNew York\n10013\nUNITED STATES
whois.handle: AD10778-RIPE
whois.name: Abuse Department
whois.email: abuse@digitalocean.com
services.protocol: SSH
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:02:18.351510
services.banner: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: OpenBSD
services.product: OpenSSH
services.version: 8.2
services.update: p1
services.cpe: cpe:2.3:a:openbsd:openssh:8.2:p1:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Ubuntu
services.product: Linux
services.version: 20.04
services.cpe: cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*
services.value: remote-access
services.raw: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
services.protocol_version: 2.0
services.software_version: OpenSSH_8.2p1
services.comment: Ubuntu-4ubuntu0.11
services.kex_algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group14-sha256 kex-strict-s-v00@openssh.com
services.host_key_algorithms: rsa-sha2-512 rsa-sha2-256 ssh-rsa ecdsa-sha2-nistp256 ssh-ed25519
services.client_to_server_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com
services.server_to_client_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com
services.client_to_server_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.server_to_client_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.client_to_server_compression: none zlib@openssh.com
services.server_to_client_compression: none zlib@openssh.com
services.kex_algorithm: curve25519-sha256@libssh.org
services.host_key_algorithm: ecdsa-sha2-nistp256
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.curve: P-256
services.hassh_fingerprint: 779664e66160bf75999f091fce5edb5a
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:49:43.256512
services.banner: HTTP/1.0 400 Bad Request
  
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T08:49:43.256512
services.uri: http://178.128.201.201:443/
services.protocol: HTTP/1.0
services.status_reason: Bad Request
services.body: Client sent an HTTP request to an HTTPS server.
  
services.body_hash_sha1: sha1:d56b41edced83968087065f2e8edf65e592ebadc
services.supported_versions: HTTP/1.0
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T17:58:52.083703
services.banner: HTTP/1.1 200 OK
  Date:  <REDACTED>
  Server: Apache/2.4.51 (Debian)
  X-Powered-By: PHP/8.0.14
  Expires: Thu, 19 Nov 1981 08:52:00 GMT
  Cache-Control: no-store, no-cache, must-revalidate
  Pragma: no-cache
  Vary: Accept-Encoding
  Content-Encoding: gzip
  Content-Length: 502
  Content-Type: text/html; charset=UTF-8
  Set-Cookie: PHPSESSID=13fc4e69f329438806558869de1f87d7; path=/
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_CHACHA20_POLY1305_SHA256
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_3
services.ja4s: t130200_1303_a56c5b993250
services.version: TLSv1_2
services.ja4s: t120200_cca8_344b4dce5a52
services.names: nextcloud.local
services.issuer_dn: C=DE, ST=BE, L=Local, O=Dev, CN=nextcloud.local
services.common_name: nextcloud.local
services.country: DE
services.locality: Local
services.province: BE
services.organization: Dev
services.subject_dn: C=DE, ST=BE, L=Local, O=Dev, CN=nextcloud.local
services.common_name: nextcloud.local
services.country: DE
services.locality: Local
services.province: BE
services.organization: Dev
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Apache
services.product: HTTPD
services.version: 2.4.51
services.cpe: cpe:2.3:a:apache:http_server:2.4.51:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: a
services.product: PHP
services.version: 8.0.14
services.cpe: cpe:2.3:a:*:php:8.0.14:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: PHP
services.product: PHP
services.cpe: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Debian
services.product: Linux
services.cpe: cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
services.value: login-page
services.path: /login
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T17:58:52.083703
services.uri: https://178.128.201.201:8080/login
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Vary
services.headers: Accept-Encoding
services.key: Server
services.headers: Apache/2.4.51 (Debian)
services.key: Expires
services.headers: Thu, 19 Nov 1981 08:52:00 GMT
services.key: Cache-Control
services.headers: no-store, no-cache, must-revalidate
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.key: Pragma
services.headers: no-cache
services.key: Date
services.headers: <REDACTED>
services.key: Set-Cookie
services.headers: PHPSESSID=13fc4e69f329438806558869de1f87d7; path=/
services.key: X-Powered-By
services.headers: PHP/8.0.14
services.key: Content-Encoding
services.headers: gzip
services.key: Content-Length
services.headers: 502
services.html_tags: <title>AIO</title>
services.body: <html>
      <head>
          <title>AIO</title>
          <link rel="stylesheet" href="/style.css" media="all" />
          <link rel="icon" href="/img/favicon.png">
          <script type="text/javascript" src="forms.js"></script>
      </head>
  
      <body>
                  <div class="login-wrapper">
          <div class="login">
              <img src="/img/logo-blue.svg" style="margin-left: auto;margin-right: auto;display: block;">
              <h1>Nextcloud AIO Login</h1>
              <p>Log in using your Nextcloud AIO password. If you don't have it, you can also use the automatic login from your Nextcloud.</p>
              <form method="POST" action="/api/auth/login">
                  <input type="text" name="password" placeholder="Password" />
                  <input type="hidden" name="csrf_name" value="csrf688668e3e34c6">
                  <input type="hidden" name="csrf_value" value="c615a092e7361e7bd9f3aff14c6d3941">
                  <input type="submit" class="button" value="Login" />
              </form>
          </div>
      </div>
      </body>
  </html>
  
services.body_hash_sha1: sha1:773ab7ba6c9b611f3cf4830bea0973266002248e
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T21:28:09.713044
services.banner: HTTP/1.0 400 Bad Request
  
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T21:28:09.713044
services.uri: http://178.128.201.201:8443/
services.protocol: HTTP/1.0
services.status_reason: Bad Request
services.body: Client sent an HTTP request to an HTTPS server.
  
services.body_hash_sha1: sha1:d56b41edced83968087065f2e8edf65e592ebadc
services.supported_versions: HTTP/1.0
[binary data, 20 values, 592 bytes]