LeakIX - Host 138.201.205.123

Host 138.201.205.123

Germany

Hetzner Online GmbH

centos

Software information

Apache Apache 2.4.37

tcp/443 tcp/80 tcp/8081

OpenSSL OpenSSL 1.1.1k

tcp/443 tcp/80 tcp/8081

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Domain: pbx2.vezeti.net
Port: 443
URL: https://pbx2.vezeti.net

First seen 2023-05-04 18:55
Last seen 2024-06-20 03:59
Open for 412 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b813107f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://george@git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-20 03:59
  
  269 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Port: 443
URL: https://138.201.205.123

First seen 2022-09-19 13:12
Last seen 2024-06-19 22:59
Open for 639 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b813107f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://george@git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-06-19 22:59

269 Bytes

Severity: high
Fingerprint: 2580fa947e78dd08ea27f8972e59e7b36388f24837bd403f1c6645e524c01670

HTTP/1.1 302 Moved Temporarily
Date: Sun, 07 May 2023 12:55:12 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=ati3hvvjp94ordc2p5ltfpkfr7; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Customer Care | Callcenter[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://george@git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-05-07 12:55

269 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d9489f56

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2022-09-19 13:12

262 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Port: 80
URL: http://138.201.205.123

First seen 2022-08-09 04:50
Last seen 2024-06-19 21:56
Open for 680 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b813107f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://george@git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-19 21:56
  
  269 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d9489f56
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-08-09 04:50
  
  262 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Port: 8081
URL: https://138.201.205.123:8081

First seen 2022-12-18 17:02
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522729cc1d7
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git.a4business.com/george/mpbx.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-12-18 17:02
  
  263 Bytes
Create report
Leak detected by FirebaseHttpPlugin

No description available

IP: 138.201.205.123
Port: 443
URL: https://138.201.205.123/.json

First seen 2022-08-29 04:07
Last seen 2022-11-12 16:10
Open for 75 days
- Fingerprint: b17be75321b5afb425ec9fef25ec9fef25ec9fef25ec9fef25ec9fef25ec9fef
```
{"error":true,"message":"[site.php]:  Caught exception: Could not find route \/.json from \/.json"}
```
  Found on 2022-08-29 04:07
  
  99 Bytes
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 138.201.205.123
Port: 443
URL: https://138.201.205.123/config.json

First seen 2022-09-19 13:12
Last seen 2022-11-12 16:10
Open for 54 days
- Severity: low
  Fingerprint: b18befd9dd6536aa30550de596404c292b75b69c064e77e9064e77e9064e77e9
```
{
  "error": true,
  "message": "[site.php]:  Caught exception: Could not find route /config.json from /config.json"
}
```
  Found on 2022-09-19 13:12
  
  111 Bytes
Create report
A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 138.201.205.123
Port: 8443
URL: https://138.201.205.123:8443/config.json

First seen 2022-08-20 09:09
Last seen 2022-10-13 13:40
Open for 54 days
- Severity: low
  Fingerprint: b18befd9dd6536aa30550de596404c292b75b69c064e77e9064e77e9064e77e9
```
{
  "error": true,
  "message": "[site.php]:  Caught exception: Could not find route /config.json from /config.json"
}
```
  Found on 2022-08-20 09:09
  
  111 Bytes
Create report
Leak detected by FirebaseHttpPlugin

No description available

IP: 138.201.205.123
Port: 8443
URL: https://138.201.205.123:8443/.json

First seen 2022-10-13 13:40
- Fingerprint: b17be75321b5afb425ec9fef25ec9fef25ec9fef25ec9fef25ec9fef25ec9fef
```
{"error":true,"message":"[site.php]:  Caught exception: Could not find route \/.json from \/.json"}
```
  Found on 2022-10-13 13:40
  
  99 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Port: 8443
URL: https://138.201.205.123:8443/.git/config

First seen 2022-10-13 13:40
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d9489f56
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-10-13 13:40
  
  262 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.205.123
Domain: fs.a4business.com
Port: 443
URL: https://fs.a4business.com

First seen 2022-07-31 09:55
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d9489f56
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git.a4business.com/george/crm.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-07-31 09:55
  
  262 Bytes
Create report

Open service 138.201.205.123:22

2024-06-20 04:31
Found 7 hours ago by SSHOpenPlugin
Create report

Open service 138.201.205.123:443 · pbx2.vezeti.net

2024-06-20 03:59

HTTP/1.1 302 Moved Temporarily
Date: Thu, 20 Jun 2024 03:59:04 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=8i1okimg4ahkq86u0qp27aaoa3; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 8 hours ago by HttpPlugin

Create report

Open service 138.201.205.123:443

2024-06-19 22:59

HTTP/1.1 302 Moved Temporarily
Date: Wed, 19 Jun 2024 22:59:27 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=jp2qgb79ui8uiuq3kan33ou3n6; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 13 hours ago by HttpPlugin

Create report

Open service 138.201.205.123:80

2024-06-19 21:56

HTTP/1.1 403 Forbidden
Date: Wed, 19 Jun 2024 21:56:22 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Last-Modified: Sun, 27 Jun 2021 23:47:13 GMT
ETag: "30c0b-5c5c7fdeec240"
Accept-Ranges: bytes
Content-Length: 199691
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: HTTP Server Test Page powered by CentOS

<!DOCTYPE html>
<html lang="en">
<head>
  <meta name="generator" content="HTML Tidy for HTML5 for Linux version 5.7.28">
  <title>HTTP Server Test Page powered by CentOS</title>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <link rel="shortcut icon" href="http://www.centos.org/favicon.ico">
  <style type="text/css">
      /*<![CDATA[*/
      /*!
       * Bootstrap v4.3.1 (https://getbootstrap.com/)
       * Copyright 2011-2019 The Bootstrap Authors
       * Copyright 2011-2019 Twitter, Inc.
       * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
       */:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h3,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::

Found 14 hours ago by HttpPlugin

Create report

Open service 138.201.205.123:443 · pbx2.vezeti.net

2024-06-18 01:07

HTTP/1.1 302 Moved Temporarily
Date: Tue, 18 Jun 2024 01:07:50 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=t5pgcvp34f8qghv48t8ueoqec5; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2 days ago by HttpPlugin

Create report

Open service 138.201.205.123:443

2024-06-17 22:50

HTTP/1.1 302 Moved Temporarily
Date: Mon, 17 Jun 2024 22:50:18 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=kgspttrs5c3kncofc692opgor3; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 3 days ago by HttpPlugin

Create report

Open service 138.201.205.123:80

2024-06-17 22:30

HTTP/1.1 403 Forbidden
Date: Mon, 17 Jun 2024 22:30:17 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Last-Modified: Sun, 27 Jun 2021 23:47:13 GMT
ETag: "30c0b-5c5c7fdeec240"
Accept-Ranges: bytes
Content-Length: 199691
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: HTTP Server Test Page powered by CentOS

<!DOCTYPE html>
<html lang="en">
<head>
  <meta name="generator" content="HTML Tidy for HTML5 for Linux version 5.7.28">
  <title>HTTP Server Test Page powered by CentOS</title>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <link rel="shortcut icon" href="http://www.centos.org/favicon.ico">
  <style type="text/css">
      /*<![CDATA[*/
      /*!
       * Bootstrap v4.3.1 (https://getbootstrap.com/)
       * Copyright 2011-2019 The Bootstrap Authors
       * Copyright 2011-2019 Twitter, Inc.
       * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
       */:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}[tabindex="-1"]:focus{outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h3,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:#007bff;text-decoration:none;background-color:transparent}a:hover{color:#0056b3;text-decoration:underline}a:not([href]):not([tabindex]){color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:1em}pre{margin-top:0;margin-bottom:1rem;overflow:auto}figure{margin:0 0 1rem}img{vertical-align:middle;border-style:none}svg{overflow:hidden;vertical-align:middle}table{border-collapse:collapse}caption{padding-top:.75rem;padding-bottom:.75rem;color:#6c757d;text-align:left;caption-side:bottom}th{text-align:inherit}label{display:inline-block;margin-bottom:.5rem}button{border-radius:0}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=reset]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}[type=button]::-moz-focus-inner,[type=reset]::

Found 3 days ago by HttpPlugin

Create report

Open service 138.201.205.123:443 · pbx2.vezeti.net

2024-06-16 02:00

HTTP/1.1 302 Moved Temporarily
Date: Sun, 16 Jun 2024 02:00:08 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/5.6.40
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=fuipfh69oumrt2qbfaepfafv21; path=/
Location: welcome
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-06-16 by HttpPlugin