LeakIX - Host 103.106.22.2

Host 103.106.22.2

India

Amitkumar Chandrakantbhai Modh

Ubuntu

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 103.106.22.2
Port: 22

First seen 2025-10-22 14:08
Last seen 2026-01-29 18:09
Open for 99 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-01-29 18:09
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.106.22.2
Domain: jordan.treeshainfotech.com
Port: 443
URL: https://jordan.treeshainfotech.com

First seen 2023-04-17 03:44
Last seen 2025-09-04 14:31
Open for 871 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ae0f4522

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:Ntiva-Dev/theHub.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "beta"]
	remote = origin
	merge = refs/heads/beta
[branch "main"]
	remote = origin
	merge = refs/heads/main
[branch "crn-2910-vulnerable-JS-library"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library
[branch "beta-calendly"]
	remote = origin
	merge = refs/heads/beta-calendly
[branch "crn-2910-vulnerable-JS-library-registration"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-registration
[branch "crn-2910-vulnerable-JS-library-design"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-design
[branch "crn-2910-vulnerable-JS-library-live"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live
[branch "crn-2910-vulnerable-JS-library-live-calendly"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live-calendly
[branch "crn-2910-vulnerable-JS-library-live-calendly-paricipant-import"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live-calendly-paricipant-import

Found on 2025-09-04 14:31

1.3 kBytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652289e7e1c4

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:jake-bunting/QMS-Msupply.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-08-28 17:27

264 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ec1a7cf5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:jake-bunting/QMS.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-08-12 14:57

256 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.106.22.2
Domain: awscrn2.treeshainfotech.com
Port: 443
URL: https://awscrn2.treeshainfotech.com

First seen 2023-01-31 06:34
Last seen 2025-09-04 10:03
Open for 947 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ae0f4522

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:Ntiva-Dev/theHub.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "beta"]
	remote = origin
	merge = refs/heads/beta
[branch "main"]
	remote = origin
	merge = refs/heads/main
[branch "crn-2910-vulnerable-JS-library"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library
[branch "beta-calendly"]
	remote = origin
	merge = refs/heads/beta-calendly
[branch "crn-2910-vulnerable-JS-library-registration"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-registration
[branch "crn-2910-vulnerable-JS-library-design"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-design
[branch "crn-2910-vulnerable-JS-library-live"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live
[branch "crn-2910-vulnerable-JS-library-live-calendly"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live-calendly
[branch "crn-2910-vulnerable-JS-library-live-calendly-paricipant-import"]
	remote = origin
	merge = refs/heads/crn-2910-vulnerable-JS-library-live-calendly-paricipant-import

Found on 2025-09-04 10:03

1.3 kBytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.106.22.2
Domain: afterschoolpathfinder.treeshainfotech.com
Port: 443
URL: https://afterschoolpathfinder.treeshainfotech.com/.git/config

First seen 2021-10-08 17:25
Last seen 2022-10-01 17:22
Open for 357 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652271ce18f7
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.com:treesha.kalpesh/pathfinder.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
[branch "master_dev"]
	remote = origin
	merge = refs/heads/master_dev
```
  Found on 2021-10-08 17:25
  
  336 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.106.22.2
Domain: idp.treeshainfotech.com
Port: 443
URL: https://idp.treeshainfotech.com

First seen 2022-07-18 06:04
Last seen 2022-09-16 22:20
Open for 60 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522058544b1
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:simplesamlphp/simplesamlphp.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-18 06:04
  
  271 Bytes
Create report

Open service 103.106.22.2:22

2026-01-22 14:39
Found 2026-01-22 by SSHOpenPlugin
Create report
Open service 103.106.22.2:22

2026-01-08 14:32
Found 2026-01-08 by SSHOpenPlugin
Create report
Open service 103.106.22.2:22

2026-01-01 17:35
Found 2026-01-01 by SSHOpenPlugin
Create report

Domain summary

jordan.treeshainfotech.com 3 awscrn2.treeshainfotech.com 1 afterschoolpathfinder.treeshainfotech.com 1 idp.treeshainfotech.com 1

4 recorded

Host 103.106.22.2

India

SSH is potenitally vulnerable

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

Create report

Domain summary