See brute force attacks and hacking coming from this IP and reported: https://www.abuseipdb.com/check/103.85.14.176
Netcraft Risk level is 8 red out of 10 here: https://toolbar.netcraft.com/site_report?url=103.85.14.176
Default server page showing: http://103.85.14.176/
Not open to queries here: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=MTAzLjg1LjE0LjE3NmBge3ReYHxwfF5oezJg~enc
But again what to think of this: error
(jsvar) -httpd.apache.org/docs/2.4/mod/userdir.html
status: (referer=103.85.14.176/)saved 12383 bytes b4783d88dd7497e8076613d1ca48c3e3b4b7ad73
info: [javascript variable] URL=-httpd.apache.org/docs/2.4/mod/userdir.html
info: [script] -httpd.apache.org/docs/2.4/mod/…/style/scripts/prettify.min.js
info: [img] -httpd.apache.org/docs/2.4/mod/…/images/feather.png
info: [img] -httpd.apache.org/docs/2.4/mod/…/images/left.gif
info: [img] -www.apache.org/images/SupportApache-small.png
info: [img] -httpd.apache.org/docs/2.4/mod/…/images/down.gif
info: [img] -httpd.apache.org/docs/2.4/mod/…/images/up.gif
info: [decodingLevel=0] found JavaScript
error: line:4: SyntaxError: missing ; before statement:
error: line:4:
error: line:4: …^
file: b4783d88dd7497e8076613d1ca48c3e3b4b7ad73: 12383 bytes
This is open to scanning eventually: http://httpd.apache.org/docs/2.4/mod/userdir.html
→ DOMAIN##httpd.apache.org Apache/2.4.18 (Ubuntu) 80 at 40.79.78.1
with deadlinks for/docs/2.4/mod/userdir.html ; /docs/2.4/mod/env.html ; /docs/2.4/mod/setenv.html
probably because foo.bin was being set to an empty string.
Class= section link should be hidden, too much excessive info proliferation going on here.
polonus (volunteer website security analyst and website error-hunter)