The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e39e1d99850
[fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://gitlab-ci-token:jxF1Cdoci6Q7DRD7pYzA@192.168.1.55/wikifx/front-end/osshead.git fetch = +refs/heads/*:refs/remotes/origin/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e39e1d99850
[fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://gitlab-ci-token:jxF1Cdoci6Q7DRD7pYzA@192.168.1.55/wikifx/front-end/osshead.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 2a02:26f0:3500:12::1730:178f:80 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 6964784B9BED14353318C960 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:55 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=14 Server-Timing: origin; dur=161 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192075045_389027471_1301943955_17216_1630_149_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>6964784B9BED14353318C960</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2a02:26f0:3500:12::1730:178f:443 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 69647822EE88453230418AB0 x-oss-server-time: 1 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:14 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=7 Server-Timing: origin; dur=166 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192033909_389027471_1301932379_17291_1636_175_190_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>69647822EE88453230418AB0</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2.16.183.220:80 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 6964784A9BED143533DCC260 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:54 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=13 Server-Timing: origin; dur=152 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192074446_399897884_188630282_16493_1380_97_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>6964784A9BED143533DCC260</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2.16.183.220:443 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 69647821EE88453230A785B0 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:13 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=14 Server-Timing: origin; dur=167 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192033541_399897877_824976165_18084_1630_83_92_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>69647821EE88453230A785B0</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2a02:26f0:3500:12::1730:17c3:80 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 6964784BB6769336385950E6 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:55 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=8 Server-Timing: origin; dur=158 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192075052_389027523_1399563899_16606_1702_154_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>6964784BB6769336385950E6</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2a02:26f0:3500:12::1730:17c3:443 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 69647821058B0F3030C2BAC3 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:13 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=9 Server-Timing: origin; dur=159 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192033166_389027523_1399536969_16799_1532_12_20_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>69647821058B0F3030C2BAC3</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2.16.183.213:443 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 69647821EE884532301C81B0 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:13 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=31 Server-Timing: origin; dur=167 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192033163_399897884_188621780_19708_1525_15_32_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>69647821EE884532301C81B0</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 2.16.183.213:80 · osshead.interface003.com
2026-01-12 04:27
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 696478499BED14353330BB60 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Mon, 12 Jan 2026 04:27:53 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=13 Server-Timing: origin; dur=153 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1768192073690_399897877_825002173_16585_1504_37_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>696478499BED14353330BB60</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:443 · osshead.interface003.com
2025-12-23 09:44
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 694A6476EE884530302D2104 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Tue, 23 Dec 2025 09:44:22 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=153 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766483062029_1551561733_15818512_15713_1363_89_100_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>694A6476EE884530302D2104</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:80 · osshead.interface003.com
2025-12-23 08:59
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 694A59DD2FE6AF3137DBC484 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Tue, 23 Dec 2025 08:59:09 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=154 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766480349052_1551561756_3985629_15832_1210_160_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>694A59DD2FE6AF3137DBC484</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:80 · osshead.interface003.com
2025-12-21 06:12
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 69478FED93460A31357DB48D x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Sun, 21 Dec 2025 06:13:01 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=3 Server-Timing: origin; dur=155 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766297581581_1551561756_2593836_15870_1112_0_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>69478FED93460A31357DB48D</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:443 · osshead.interface003.com
2025-12-21 04:30
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 694777D9EE88453431AA506C x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Sun, 21 Dec 2025 04:30:17 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=3 Server-Timing: origin; dur=159 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766291417521_1551561733_11044906_16236_1398_0_12_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>694777D9EE88453431AA506C</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:80 · osshead.interface003.com
2025-12-19 07:07
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 6944F9A049824C3533A6B9A0 x-oss-server-time: 1 x-oss-ec: 0003-00000905 Date: Fri, 19 Dec 2025 07:07:12 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=155 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766128031955_1551561756_1326354_15910_1216_133_0_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>6944F9A049824C3533A6B9A0</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>
Open service 92.122.244.27:443 · osshead.interface003.com
2025-12-19 04:12
HTTP/1.1 403 Forbidden Content-Type: application/xml Content-Length: 362 x-oss-request-id: 6944D0A8B6769336374F5446 x-oss-server-time: 0 x-oss-ec: 0003-00000905 Date: Fri, 19 Dec 2025 04:12:24 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=154 Cache-Control: public, immutable, max-age=2592000 Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC Access-Control-Allow-Headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Server-Timing: ak_p; desc="1766117544307_1551561733_6522566_15829_1378_0_12_-";dur=1 <?xml version="1.0" encoding="UTF-8"?> <Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>6944D0A8B6769336374F5446</RequestId> <HostId>osshead-sg.interface003.com</HostId> <EC>0003-00000905</EC> <RecommendDoc>https://api.alibabacloud.com/troubleshoot?q=0003-00000905</RecommendDoc> </Error>