LeakIX - Host 157.90.88.250

Host 157.90.88.250

Germany

Hetzner Online GmbH

Ubuntu

Software information

Apache Apache

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: bourg.olro.idp.lu
Port: 443
URL: https://bourg.olro.idp.lu/_profiler/empty/search/results

First seen 2023-07-03 07:41
Last seen 2026-01-10 09:39
Open for 922 days
- Fingerprint: 407cf4363b0e62fafca67e07dc1838b6dc1838b6dc1838b6dc1838b6dc1838b6
```
Symfony profiler enabled:
https://bourg.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 09:39
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: ris.sym.jumo.idp.lu
Port: 80
URL: http://ris.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-28 21:01
Last seen 2026-01-10 07:34
Open for 1199 days
- Fingerprint: 407cf4363b0e62fafca67e075e3778805e3778805e3778805e3778805e377880
```
Symfony profiler enabled:
http://ris.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 07:34
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: floor.jumo.idp.lu
Port: 443
URL: https://floor.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-17 00:08
Last seen 2026-01-10 02:01
Open for 1211 days
- Fingerprint: 407cf4363b0e62fafca67e0722cf264622cf264622cf264622cf264622cf2646
```
Symfony profiler enabled:
https://floor.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 02:01
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.jumo.idp.lu
Port: 443
URL: https://carfit.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-01 20:40
Last seen 2026-01-10 01:19
Open for 1226 days
- Fingerprint: 407cf4363b0e62fafca67e07f35a0141f35a0141f35a0141f35a0141f35a0141
```
Symfony profiler enabled:
https://carfit.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 01:19
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.tora.idp.lu
Port: 443
URL: https://carfit.tora.idp.lu/_profiler/empty/search/results

First seen 2023-07-19 19:51
Last seen 2026-01-10 01:17
Open for 905 days
- Fingerprint: 407cf4363b0e62fafca67e077708310277083102770831027708310277083102
```
Symfony profiler enabled:
https://carfit.tora.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 01:17
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: bourg.jumo.idp.lu
Port: 443
URL: https://bourg.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-11-01 01:35
Last seen 2026-01-10 01:04
Open for 800 days
- Fingerprint: 407cf4363b0e62fafca67e078748c4c98748c4c98748c4c98748c4c98748c4c9
```
Symfony profiler enabled:
https://bourg.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 01:04
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: cms-bolt.jumo.idp.lu
Port: 443
URL: https://cms-bolt.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-07-10 19:54
Last seen 2026-01-10 00:37
Open for 914 days
- Fingerprint: 407cf4363b0e62fafca67e07fd63060bfd63060bfd63060bfd63060bfd63060b
```
Symfony profiler enabled:
https://cms-bolt.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-10 00:37
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: hamilius.jumo.idp.lu
Port: 443
URL: https://hamilius.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-17 00:08
Last seen 2026-01-09 23:46
Open for 1210 days
- Fingerprint: 407cf4363b0e62fafca67e0704c663ba04c663ba04c663ba04c663ba04c663ba
```
Symfony profiler enabled:
https://hamilius.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 23:46
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: ris.sym.jumo.idp.lu
Port: 443
URL: https://ris.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-28 21:01
Last seen 2026-01-09 23:35
Open for 1199 days
- Fingerprint: 407cf4363b0e62fafca67e0711d5f72f11d5f72f11d5f72f11d5f72f11d5f72f
```
Symfony profiler enabled:
https://ris.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 23:35
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: kannerprais.jumo.idp.lu
Port: 443
URL: https://kannerprais.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-09-07 14:05
Last seen 2026-01-09 21:20
Open for 855 days
- Fingerprint: 407cf4363b0e62fafca67e076a9d8b286a9d8b286a9d8b286a9d8b286a9d8b28
```
Symfony profiler enabled:
https://kannerprais.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 21:20
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: kannerprais.olro.idp.lu
Port: 443
URL: https://kannerprais.olro.idp.lu/_profiler/empty/search/results

First seen 2023-08-29 10:00
Last seen 2026-01-09 21:06
Open for 864 days
- Fingerprint: 407cf4363b0e62fafca67e071cd33ea31cd33ea31cd33ea31cd33ea31cd33ea3
```
Symfony profiler enabled:
https://kannerprais.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 21:06
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: moble-alvisse.olro.idp.lu
Port: 443
URL: https://moble-alvisse.olro.idp.lu/_profiler/empty/search/results

First seen 2022-09-14 05:28
Last seen 2026-01-09 19:35
Open for 1213 days
- Fingerprint: 407cf4363b0e62fafca67e073bcf7cfa3bcf7cfa3bcf7cfa3bcf7cfa3bcf7cfa
```
Symfony profiler enabled:
https://moble-alvisse.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 19:35
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: sixseven.olro.idp.lu
Port: 443
URL: https://sixseven.olro.idp.lu/_profiler/empty/search/results

First seen 2022-09-09 06:08
Last seen 2026-01-09 19:30
Open for 1218 days
- Fingerprint: 407cf4363b0e62fafca67e07ac3191faac3191faac3191faac3191faac3191fa
```
Symfony profiler enabled:
https://sixseven.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 19:30
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.staging.idp.lu
Port: 443
URL: https://carfit.staging.idp.lu/_profiler/empty/search/results

First seen 2022-11-21 19:08
Last seen 2026-01-09 18:20
Open for 1144 days
- Fingerprint: 407cf4363b0e62fafca67e0726bed2e326bed2e326bed2e326bed2e326bed2e3
```
Symfony profiler enabled:
https://carfit.staging.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 18:20
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.develop.idp.lu
Port: 443
URL: https://carfit.develop.idp.lu/_profiler/empty/search/results

First seen 2022-10-19 05:13
Last seen 2026-01-09 18:06
Open for 1178 days
- Fingerprint: 407cf4363b0e62fafca67e07e9dd8277e9dd8277e9dd8277e9dd8277e9dd8277
```
Symfony profiler enabled:
https://carfit.develop.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 18:06
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: floor.olro.idp.lu
Port: 443
URL: https://floor.olro.idp.lu/_profiler/empty/search/results

First seen 2022-09-02 20:41
Last seen 2026-01-09 17:34
Open for 1224 days
- Fingerprint: 407cf4363b0e62fafca67e072abeb5f52abeb5f52abeb5f52abeb5f52abeb5f5
```
Symfony profiler enabled:
https://floor.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 17:34
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: cameleon.jumo.idp.lu
Port: 443
URL: https://cameleon.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-10-05 20:34
Last seen 2026-01-09 16:49
Open for 1191 days
- Fingerprint: 407cf4363b0e62fafca67e07e295b634e295b634e295b634e295b634e295b634
```
Symfony profiler enabled:
https://cameleon.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 16:49
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.olro.idp.lu
Port: 443
URL: https://carfit.olro.idp.lu/_profiler/empty/search/results

First seen 2022-10-22 20:32
Last seen 2026-01-09 16:46
Open for 1174 days
- Fingerprint: 407cf4363b0e62fafca67e07a87a8c4ea87a8c4ea87a8c4ea87a8c4ea87a8c4e
```
Symfony profiler enabled:
https://carfit.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 16:46
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: stugalux.sym.jumo.idp.lu
Port: 443
URL: https://stugalux.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-03-02 16:51
Last seen 2026-01-09 14:49
Open for 1043 days
- Fingerprint: 407cf4363b0e62fafca67e077b0cddca7b0cddca7b0cddca7b0cddca7b0cddca
```
Symfony profiler enabled:
https://stugalux.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 14:49
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: mauroservice.jumo.idp.lu
Port: 443
URL: https://mauroservice.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-06-05 14:03
Last seen 2026-01-09 13:57
Open for 948 days
- Fingerprint: 407cf4363b0e62fafca67e07224aa105224aa105224aa105224aa105224aa105
```
Symfony profiler enabled:
https://mauroservice.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 13:57
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: hamilius.olro.idp.lu
Port: 443
URL: https://hamilius.olro.idp.lu/_profiler/empty/search/results

First seen 2022-09-29 20:52
Last seen 2026-01-09 13:19
Open for 1197 days
- Fingerprint: 407cf4363b0e62fafca67e076633202966332029663320296633202966332029
```
Symfony profiler enabled:
https://hamilius.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 13:19
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: sixseven-def.jumo.idp.lu
Port: 443
URL: https://sixseven-def.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-08-13 20:52
Last seen 2026-01-09 12:28
Open for 1244 days
- Fingerprint: 407cf4363b0e62fafca67e071a8b413b1a8b413b1a8b413b1a8b413b1a8b413b
```
Symfony profiler enabled:
https://sixseven-def.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 12:28
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: tracol.juca-stage.idp.lu
Port: 443
URL: https://tracol.juca-stage.idp.lu/_profiler/empty/search/results

First seen 2023-07-24 08:02
Last seen 2026-01-09 12:13
Open for 900 days
- Fingerprint: 407cf4363b0e62fafca67e0741b30ff441b30ff441b30ff441b30ff441b30ff4
```
Symfony profiler enabled:
https://tracol.juca-stage.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 12:13
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: tamtam.olro.idp.lu
Port: 443
URL: https://tamtam.olro.idp.lu/_profiler/empty/search/results

First seen 2023-11-30 19:56
Last seen 2026-01-09 11:55
Open for 770 days
- Fingerprint: 407cf4363b0e62fafca67e07d6e4a587d6e4a587d6e4a587d6e4a587d6e4a587
```
Symfony profiler enabled:
https://tamtam.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 11:55
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: sixseven-def.olro.idp.lu
Port: 443
URL: https://sixseven-def.olro.idp.lu/_profiler/empty/search/results

First seen 2022-09-15 00:18
Last seen 2026-01-09 09:28
Open for 1212 days
- Fingerprint: 407cf4363b0e62fafca67e07077e2564077e2564077e2564077e2564077e2564
```
Symfony profiler enabled:
https://sixseven-def.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 09:28
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: tracol.jumo.idp.lu
Port: 443
URL: https://tracol.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-11-07 21:45
Last seen 2026-01-09 09:16
Open for 1158 days
- Fingerprint: 407cf4363b0e62fafca67e0785e0c84985e0c84985e0c84985e0c84985e0c849
```
Symfony profiler enabled:
https://tracol.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 09:16
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: cms-fork.jumo.idp.lu
Port: 443
URL: https://cms-fork.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-07-10 19:55
Last seen 2026-01-09 09:09
Open for 913 days
- Fingerprint: 407cf4363b0e62fafca67e07c5cc3018c5cc3018c5cc3018c5cc3018c5cc3018
```
Symfony profiler enabled:
https://cms-fork.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 09:09
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: tgl2.sym.jumo.idp.lu
Port: 443
URL: https://tgl2.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-09-10 06:08
Last seen 2026-01-09 08:31
Open for 1217 days
- Fingerprint: 407cf4363b0e62fafca67e0770c5b6b670c5b6b670c5b6b670c5b6b670c5b6b6
```
Symfony profiler enabled:
https://tgl2.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 08:31
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: capitalofjoy.olro.idp.lu
Port: 443
URL: https://capitalofjoy.olro.idp.lu/_profiler/empty/search/results

First seen 2022-08-09 22:30
Last seen 2026-01-09 08:00
Open for 1248 days
- Fingerprint: 407cf4363b0e62fafca67e075ac753925ac753925ac753925ac753925ac75392
```
Symfony profiler enabled:
https://capitalofjoy.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 08:00
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: pereira.sym.jumo.idp.lu
Port: 443
URL: https://pereira.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2024-02-20 10:44
Last seen 2026-01-09 07:44
Open for 688 days
- Fingerprint: 407cf4363b0e62fafca67e07316501f1316501f1316501f1316501f1316501f1
```
Symfony profiler enabled:
https://pereira.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 07:44
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: cameleon.olro.idp.lu
Port: 443
URL: https://cameleon.olro.idp.lu/_profiler/empty/search/results

First seen 2022-08-21 22:30
Last seen 2026-01-09 04:50
Open for 1236 days
- Fingerprint: 407cf4363b0e62fafca67e07042c68ff042c68ff042c68ff042c68ff042c68ff
```
Symfony profiler enabled:
https://cameleon.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 04:50
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: parc-hotel.jumo.idp.lu
Port: 443
URL: https://parc-hotel.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-08-24 22:35
Last seen 2026-01-09 03:15
Open for 1233 days
- Fingerprint: 407cf4363b0e62fafca67e07c009b31bc009b31bc009b31bc009b31bc009b31b
```
Symfony profiler enabled:
https://parc-hotel.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 03:15
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: floor.sym.tora.idp.lu
Port: 443
URL: https://floor.sym.tora.idp.lu/_profiler/empty/search/results

First seen 2023-03-01 08:38
Last seen 2026-01-09 02:25
Open for 1044 days
- Fingerprint: 407cf4363b0e62fafca67e077cea4f6c7cea4f6c7cea4f6c7cea4f6c7cea4f6c
```
Symfony profiler enabled:
https://floor.sym.tora.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-09 02:25
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: cms-sulu.jumo.idp.lu
Port: 443
URL: https://cms-sulu.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-07-10 19:54
Last seen 2026-01-08 22:41
Open for 913 days
- Fingerprint: 407cf4363b0e62fafca67e076a367d836a367d836a367d836a367d836a367d83
```
Symfony profiler enabled:
https://cms-sulu.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2026-01-08 22:41
Create report
Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 157.90.88.250
Port: 445

First seen 2022-06-13 19:58
Last seen 2026-01-08 17:36
Open for 1304 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df3723506cccc5eb4702316a2b659b12c2f9a148
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
jumo
yane
olro
IPC$
```
  Found on 2026-01-08 17:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.olro.idp.lu
Port: 443
URL: https://carfit.olro.idp.lu

First seen 2022-10-22 20:32
Last seen 2026-01-02 23:53
Open for 1168 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 23:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: cameleon.jumo.idp.lu
Port: 443
URL: https://cameleon.jumo.idp.lu

First seen 2022-10-05 20:34
Last seen 2026-01-02 23:51
Open for 1185 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 23:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: garage-binsfeld.jumo.idp.lu
Port: 443
URL: https://garage-binsfeld.jumo.idp.lu

First seen 2022-09-16 12:45
Last seen 2026-01-02 23:47
Open for 1204 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f5faee1a
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
    url = http://jumo@git.idp.lu:3000/idp/Garage-Binsfeld.git
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
```
  Found on 2026-01-02 23:47
  
  288 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: propper.jumo.idp.lu
Port: 443
URL: https://propper.jumo.idp.lu

First seen 2023-07-29 20:04
Last seen 2026-01-02 23:03
Open for 888 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522488cf1e0
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Propper.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 23:03
  
  264 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.staging.idp.lu
Port: 443
URL: https://carfit.staging.idp.lu

First seen 2022-09-22 07:11
Last seen 2026-01-02 22:09
Open for 1198 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 22:09
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: smartstone.jumo.idp.lu
Port: 443
URL: https://smartstone.jumo.idp.lu

First seen 2023-01-10 14:48
Last seen 2026-01-02 21:45
Open for 1088 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2acf29aa2acf29aaa80b4585e32b52d7ad437149f7e3a47c

Found 33 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/themes
/wp-content/themes/index.php
/wp-content/themes/quarter
/wp-content/themes/quarter/plugin
/wp-content/themes/quarter/plugin/quarter-addon
/wp-content/themes/twentytwentyone
/wp-content/themes/twentytwentythree
/wp-content/themes/twentytwentytwo
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2026-01-02 21:45

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf802e2d1ffbb498ac5f3272ef32c35d7ca

Found 31 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/themes
/wp-content/themes/index.php
/wp-content/themes/quarter
/wp-content/themes/twentytwentyone
/wp-content/themes/twentytwentythree
/wp-content/themes/twentytwentytwo
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-01-04 14:46

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b70081341576b65621dec87f26b847267d4

Found 26 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/themes
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2024-09-04 01:21

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e46303911e2c8bb738f82ed3dd91fcc41

Found 20 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2023-03-11 17:02

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: hamilius.jumo.idp.lu
Port: 443
URL: https://hamilius.jumo.idp.lu

First seen 2022-09-17 00:08
Last seen 2026-01-02 21:40
Open for 1203 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e11d6286802b5d00162d5a1128e35087f
```
Found 6 files trough .DS_Store spidering:

/back
/build
/fonts
/img
/index.php
/upload
```
  Found on 2026-01-02 21:40
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 157.90.88.250
Domain: cms-bolt.jumo.idp.lu
Port: 443
URL: https://cms-bolt.jumo.idp.lu

First seen 2025-10-17 06:44
Last seen 2026-01-02 20:03
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ddbca34c84c95810fd7e0d267b52af5a866a7131

GraphQL introspection enabled at /api/graphql
Types: 41 (by kind: ENUM: 2, INPUT_OBJECT: 6, INTERFACE: 1, OBJECT: 26, SCALAR: 6)
Operations:
- Query: Query | fields: content, contents, field, fields, node
- Mutation: Mutation | fields: createContent, createField, createRelation, deleteContent, deleteField
Directives: deprecated, include, skip (total: 3)

Readable stores: 3
contents (args: optional/default) : totalCount=69
fields (args: optional/default) : totalCount=464
relations (args: optional/default) : totalCount=30

Found on 2026-01-02 20:03

43.9 kBytes 3 rows

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: pharmacie-goedert.live.idp.lu
Port: 80
URL: http://pharmacie-goedert.live.idp.lu

First seen 2022-09-23 00:18
Last seen 2026-01-02 18:17
Open for 1197 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b6bd35f9
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
    url = http://idp@git.idp.lu:3000/idp/Temp-Yazid-Pharmacie-Goedert.git
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
```
  Found on 2026-01-02 18:17
  
  300 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.tora.idp.lu
Port: 443
URL: https://carfit.tora.idp.lu

First seen 2022-11-09 10:47
Last seen 2026-01-02 18:14
Open for 1150 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 18:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c87f05b7087f05b706e7a276020ed8c225c8d0fc5d62f76eb
```
Found 26 files trough .DS_Store spidering:

/assets
/bin
/composer.json
/composer.lock
/config
/Makefile
/migrations
/node_modules
/package.json
/public
/public/bo
/public/build
/public/css
/public/img
/public/index.php
/public/js
/public/uploads
/README.md
/src
/symfony.lock
/templates
/translations
/var
/vendor
/webpack.config.js
/yarn.lock
```
  Found on 2022-11-09 10:47
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: tango-tv.olro.idp.lu
Port: 443
URL: https://tango-tv.olro.idp.lu

First seen 2022-09-23 00:20
Last seen 2026-01-02 16:38
Open for 1197 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3d62d290b60ac7e3013c09c6449e9d643
```
Found 29 files trough .DS_Store spidering:

/app
/app/src
/app/templates
/app/templates/parts
/index.html
/lang
/public
/vendor
/vendor/bin
/vendor/campaignmonitor
/vendor/composer
/vendor/container-interop
/vendor/doctrine
/vendor/illuminate
/vendor/mobiledetect
/vendor/monolog
/vendor/myclabs
/vendor/nikic
/vendor/paragonie
/vendor/phpdocumentor
/vendor/phpspec
/vendor/phpunit
/vendor/pimple
/vendor/psr
/vendor/sebastian
/vendor/slim
/vendor/symfony
/vendor/twig
/vendor/webmozart
```
  Found on 2026-01-02 16:38
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8293654045a202433047f85cf5a255e48
```
Found 8 files trough .DS_Store spidering:

/app
/app/src
/app/templates
/app/templates/parts
/index.html
/lang
/public
/vendor
```
  Found on 2023-03-22 18:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d9ebca5a19ebca5a19ebca5a19ebca5a1
```
Found 1 files trough .DS_Store spidering:

/app
```
  Found on 2022-09-23 00:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: dylan-pereira.com
Port: 443
URL: https://dylan-pereira.com

First seen 2022-10-20 09:41
Last seen 2026-01-02 13:15
Open for 1170 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcbef89d5ce591d6084ab8de22400ae83e
```
Found 22 files trough .DS_Store spidering:

/css
/img
/img/aclsport.png
/img/arrow-bottom.svg
/img/background-header.jpg
/img/background-quote.jpg
/img/circuit.png
/img/dylan_pereira_logo.png
/img/icon-cross.svg
/img/icon-cup.svg
/img/icon-envelop.svg
/img/icon-eye.svg
/img/icon-facebook.svg
/img/icon-instagram.svg
/img/icon-twitter.svg
/img/img-gallery.jpg
/img/logo-sponsor.png
/img/quote-left.png
/img/quote-right.png
/img/team-letzebuerg.png
/index.php
/js
```
  Found on 2026-01-02 13:15
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c54e9f048db9c01af54b1ec47
```
Found 4 files trough .DS_Store spidering:

/css
/img
/index.php
/js
```
  Found on 2024-12-11 03:04
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: stugalux.sym.jumo.idp.lu
Port: 443
URL: https://stugalux.sym.jumo.idp.lu

First seen 2023-01-01 07:49
Last seen 2026-01-02 12:42
Open for 1097 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966952c4ee9088f0b59fdd2c75443eff19

Found 37 files trough .DS_Store spidering:

/css
/fonts
/img
/img/arrow-left.svg
/img/arrow-right.svg
/img/icon-appartment.svg
/img/icon-construction.svg
/img/icon-envelop-map.svg
/img/icon-envelop.svg
/img/icon-filter-appartment.svg
/img/icon-filter-garage.svg
/img/icon-filter-ground.svg
/img/icon-filter-house.svg
/img/icon-filter-parking.svg
/img/icon-filter-rent.svg
/img/icon-filter-sale.svg
/img/icon-house.svg
/img/icon-key.svg
/img/icon-management.svg
/img/icon-phone-map.svg
/img/icon-photos.svg
/img/icon-tools-area.svg
/img/icon-tools-bathroom.svg
/img/icon-tools-bedroom.svg
/img/icon-tools-document.svg
/img/icon-tools-garage.svg
/img/icon-tools-location.svg
/img/icon-users.svg
/img/marker-red.png
/img/real-estate-slide.jpg
/img/real-estate-slide2.jpg
/img/slider-home.jpg
/img/slider-home2.jpg
/img/slider-thumb.png
/img/stugalux-logo.svg
/index.php
/js

Found on 2026-01-02 12:42

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: cameleon.olro.idp.lu
Port: 443
URL: https://cameleon.olro.idp.lu

First seen 2022-10-21 09:40
Last seen 2026-01-02 12:24
Open for 1169 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 12:24
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: pharmacie-goedert.live.idp.lu
Port: 443
URL: https://pharmacie-goedert.live.idp.lu

First seen 2022-09-23 00:18
Last seen 2026-01-02 12:13
Open for 1197 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b6bd35f9
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
    url = http://idp@git.idp.lu:3000/idp/Temp-Yazid-Pharmacie-Goedert.git
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
```
  Found on 2026-01-02 12:13
  
  300 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: ris.sym.jumo.idp.lu
Port: 80
URL: http://ris.sym.jumo.idp.lu

First seen 2022-09-28 21:01
Last seen 2026-01-02 11:06
Open for 1191 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966952c4ee9088f0b59fdd2c75443eff19

Found 37 files trough .DS_Store spidering:

/css
/fonts
/img
/img/arrow-left.svg
/img/arrow-right.svg
/img/icon-appartment.svg
/img/icon-construction.svg
/img/icon-envelop-map.svg
/img/icon-envelop.svg
/img/icon-filter-appartment.svg
/img/icon-filter-garage.svg
/img/icon-filter-ground.svg
/img/icon-filter-house.svg
/img/icon-filter-parking.svg
/img/icon-filter-rent.svg
/img/icon-filter-sale.svg
/img/icon-house.svg
/img/icon-key.svg
/img/icon-management.svg
/img/icon-phone-map.svg
/img/icon-photos.svg
/img/icon-tools-area.svg
/img/icon-tools-bathroom.svg
/img/icon-tools-bedroom.svg
/img/icon-tools-document.svg
/img/icon-tools-garage.svg
/img/icon-tools-location.svg
/img/icon-users.svg
/img/marker-red.png
/img/real-estate-slide.jpg
/img/real-estate-slide2.jpg
/img/slider-home.jpg
/img/slider-home2.jpg
/img/slider-thumb.png
/img/stugalux-logo.svg
/index.php
/js

Found on 2026-01-02 11:06

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565abf4c23bef71b3de9
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/img
/index.php
/js
```
Found on 2025-11-20 13:42

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: parc-hotel.jumo.idp.lu
Port: 443
URL: https://parc-hotel.jumo.idp.lu

First seen 2022-10-24 09:50
Last seen 2026-01-02 10:37
Open for 1166 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2026-01-02 10:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: moble-alvisse.jumo.idp.lu
Port: 443
URL: https://moble-alvisse.jumo.idp.lu

First seen 2022-10-22 20:38
Last seen 2026-01-02 10:15
Open for 1167 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 10:15
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: luxconnect.olro.idp.lu
Port: 443
URL: https://luxconnect.olro.idp.lu

First seen 2023-08-07 19:57
Last seen 2026-01-02 08:58
Open for 878 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c941e828
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Luxconnect-v2.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 08:58
  
  270 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: geofor.jumo.idp.lu
Port: 443
URL: https://geofor.jumo.idp.lu

First seen 2023-08-18 19:55
Last seen 2026-01-02 08:27
Open for 867 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e5796756
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Geofor.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 08:27
  
  263 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: propper.tora.idp.lu
Port: 443
URL: https://propper.tora.idp.lu

First seen 2023-07-27 14:47
Last seen 2026-01-02 08:10
Open for 889 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522488cf1e0
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Propper.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 08:10
  
  264 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: sixseven-def.olro.idp.lu
Port: 443
URL: https://sixseven-def.olro.idp.lu

First seen 2022-09-15 00:18
Last seen 2026-01-02 08:00
Open for 1205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2026-01-02 08:00
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: bmw.olro.idp.lu
Port: 443
URL: https://bmw.olro.idp.lu

First seen 2023-08-22 19:51
Last seen 2026-01-02 07:20
Open for 863 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522821febca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/TTL_Tennis_Classics.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 07:20
  
  276 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.develop.idp.lu
Port: 443
URL: https://carfit.develop.idp.lu

First seen 2022-10-19 05:13
Last seen 2026-01-02 07:17
Open for 1171 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 07:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: quaring.sym.juca.idp.lu
Port: 443
URL: https://quaring.sym.juca.idp.lu

First seen 2022-10-06 20:49
Last seen 2026-01-02 07:09
Open for 1183 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc64097d2845820679f34501f48eaa108a
```
Found 4 files trough .DS_Store spidering:

/img
/img/_LOGOS_MARQUES
/img/general
/img/news
```
  Found on 2026-01-02 07:09
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: sne.jumo.idp.lu
Port: 443
URL: https://sne.jumo.idp.lu

First seen 2023-07-09 20:08
Last seen 2026-01-02 06:48
Open for 907 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225a2df93e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/idp-lu/sne-3plus3.lu.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2026-01-02 06:48

268 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f521d0de

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Syndicat_National_des_Enseignants_SNE.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-02-02 20:43

339 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: pereira.sym.jumo.idp.lu
Port: 443
URL: https://pereira.sym.jumo.idp.lu

First seen 2024-02-20 10:44
Last seen 2026-01-02 05:16
Open for 681 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcbef89d5ce591d6084ab8de22400ae83e
```
Found 22 files trough .DS_Store spidering:

/css
/img
/img/aclsport.png
/img/arrow-bottom.svg
/img/background-header.jpg
/img/background-quote.jpg
/img/circuit.png
/img/dylan_pereira_logo.png
/img/icon-cross.svg
/img/icon-cup.svg
/img/icon-envelop.svg
/img/icon-eye.svg
/img/icon-facebook.svg
/img/icon-instagram.svg
/img/icon-twitter.svg
/img/img-gallery.jpg
/img/logo-sponsor.png
/img/quote-left.png
/img/quote-right.png
/img/team-letzebuerg.png
/index.php
/js
```
  Found on 2026-01-02 05:16
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c54e9f048db9c01af54b1ec47
```
Found 4 files trough .DS_Store spidering:

/css
/img
/index.php
/js
```
  Found on 2025-05-12 08:23
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: totem.jumo.idp.lu
Port: 443
URL: https://totem.jumo.idp.lu

First seen 2023-06-16 08:26
Last seen 2026-01-02 04:23
Open for 930 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220fd324c5
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/idp-lu/totem.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 04:23
  
  260 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d765e9ad
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Totem.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-12 10:48
  
  262 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: sixseven-def.jumo.idp.lu
Port: 443
URL: https://sixseven-def.jumo.idp.lu

First seen 2022-10-12 20:41
Last seen 2026-01-02 02:22
Open for 1177 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2026-01-02 02:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.jumo.idp.lu
Port: 443
URL: https://carfit.jumo.idp.lu

First seen 2022-09-01 20:40
Last seen 2026-01-02 02:17
Open for 1218 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-02 02:17
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: grun.wp.tora.idp.lu
Port: 443
URL: https://grun.wp.tora.idp.lu

First seen 2022-09-19 13:23
Last seen 2026-01-02 02:14
Open for 1200 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65222eb8be0b
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/tora/grun.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-02 02:14
  
  261 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: ris.sym.jumo.idp.lu
Port: 443
URL: https://ris.sym.jumo.idp.lu

First seen 2022-09-28 21:01
Last seen 2026-01-02 02:10
Open for 1191 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966952c4ee9088f0b59fdd2c75443eff19

Found 37 files trough .DS_Store spidering:

/css
/fonts
/img
/img/arrow-left.svg
/img/arrow-right.svg
/img/icon-appartment.svg
/img/icon-construction.svg
/img/icon-envelop-map.svg
/img/icon-envelop.svg
/img/icon-filter-appartment.svg
/img/icon-filter-garage.svg
/img/icon-filter-ground.svg
/img/icon-filter-house.svg
/img/icon-filter-parking.svg
/img/icon-filter-rent.svg
/img/icon-filter-sale.svg
/img/icon-house.svg
/img/icon-key.svg
/img/icon-management.svg
/img/icon-phone-map.svg
/img/icon-photos.svg
/img/icon-tools-area.svg
/img/icon-tools-bathroom.svg
/img/icon-tools-bedroom.svg
/img/icon-tools-document.svg
/img/icon-tools-garage.svg
/img/icon-tools-location.svg
/img/icon-users.svg
/img/marker-red.png
/img/real-estate-slide.jpg
/img/real-estate-slide2.jpg
/img/slider-home.jpg
/img/slider-home2.jpg
/img/slider-thumb.png
/img/stugalux-logo.svg
/index.php
/js

Found on 2026-01-02 02:10

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565abf4c23bef71b3de9
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/img
/index.php
/js
```
Found on 2023-02-09 19:47

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: sixseven.olro.idp.lu
Port: 443
URL: https://sixseven.olro.idp.lu

First seen 2022-09-09 06:08
Last seen 2026-01-02 01:14
Open for 1210 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2026-01-02 01:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: hamilius.olro.idp.lu
Port: 443
URL: https://hamilius.olro.idp.lu

First seen 2022-09-29 20:52
Last seen 2026-01-02 01:13
Open for 1190 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e11d6286802b5d00162d5a1128e35087f
```
Found 6 files trough .DS_Store spidering:

/back
/build
/fonts
/img
/index.php
/upload
```
  Found on 2026-01-02 01:13
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: quaring.olro.idp.lu
Port: 443
URL: https://quaring.olro.idp.lu

First seen 2023-02-09 19:46
Last seen 2026-01-01 21:57
Open for 1057 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc64097d2845820679f34501f48eaa108a
```
Found 4 files trough .DS_Store spidering:

/img
/img/_LOGOS_MARQUES
/img/general
/img/news
```
  Found on 2026-01-01 21:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: moble-alvisse.olro.idp.lu
Port: 443
URL: https://moble-alvisse.olro.idp.lu

First seen 2022-09-14 05:28
Last seen 2026-01-01 19:40
Open for 1205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2026-01-01 19:40
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: sitc.jumo.idp.lu
Port: 443
URL: https://sitc.jumo.idp.lu

First seen 2023-07-21 20:04
Last seen 2025-12-27 07:40
Open for 889 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f551ab52f551ab56801b8341a0c37a498381a8f660665b5

Found 100 files trough .DS_Store spidering:

/ContactForm.php
/css
/dist
/dist/css
/dist/fonts
/dist/img
/dist/img/arrow-left.svg
/dist/img/arrow-right.svg
/dist/img/conflicts.svg
/dist/img/cross.svg
/dist/img/de.svg
/dist/img/develop-bg.svg
/dist/img/develop.png
/dist/img/develop.svg
/dist/img/drop1.svg
/dist/img/en.svg
/dist/img/fedil-sec.svg
/dist/img/fedil.svg
/dist/img/fire.svg
/dist/img/fr.svg
/dist/img/health.svg
/dist/img/home.svg
/dist/img/it.svg
/dist/img/logo.svg
/dist/img/main.png
/dist/img/menu.svg
/dist/img/mlqe.svg
/dist/img/mobile.png
/dist/img/other.svg
/dist/img/paper-stack.png
/dist/img/reglement.svg
/dist/img/sec1-ico.svg
/dist/img/sec1.png
/dist/img/sec1.svg
/dist/img/sec2-ico.svg
/dist/img/sec2.png
/dist/img/sec2.svg
/dist/img/sec3-ico.svg
/dist/img/sec3.png
/dist/img/sec3.svg
/dist/img/sec4-ico.svg
/dist/img/sec4.png
/dist/img/sec4.svg
/dist/img/sitc.ico
/dist/img/slide1.jpg
/dist/img/slide2.jpg
/dist/img/slide3.jpg
/dist/img/technology.svg
/dist/img/workships.png
/dist/img/workships.svg
/dist/img/xray.svg
/dist/js
/files
/font
/img
/img/animaux.jpeg
/img/arrow-left.svg
/img/arrow-right.svg
/img/conflicts.svg
/img/cross.svg
/img/de.svg
/img/develop-bg.svg
/img/develop.png
/img/develop.svg
/img/drop1.svg
/img/en.svg
/img/fedil-sec.svg
/img/fedil.svg
/img/fire.svg
/img/fr.svg
/img/health.svg
/img/home.svg
/img/it.svg
/img/logo.svg
/img/main.png
/img/menu.svg
/img/mlqe.svg
/img/mobile.png
/img/other.svg
/img/paper-stack.png
/img/reglement.svg
/img/sec1-ico.svg
/img/sec1.png
/img/sec1.svg
/img/sec2-ico.svg
/img/sec2.png
/img/sec2.svg
/img/sec3-ico.svg
/img/sec3.png
/img/sec3.svg
/img/sec4-ico.svg
/img/sec4.png
/img/sec4.svg
/img/sitc.ico
/img/technology.svg
/img/workships.png
/img/workships.svg
/img/xray.svg
/index.php
/js

Found on 2025-12-27 07:40

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8666545ade0718e75bd53dab073227b8b
```
Found 8 files trough .DS_Store spidering:

/ContactForm.php
/css
/dist
/files
/font
/img
/index.php
/js
```
Found on 2025-07-18 14:35

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d31096cbcb3ded65cb73b1d57ddc1617d

Found 12 files trough .DS_Store spidering:

/ContactForm.php
/css
/dist
/dist/css
/dist/fonts
/dist/img
/dist/js
/files
/font
/img
/index.php
/js

Found on 2025-06-16 16:47

Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb5826d45d2d089a9df5d4672930aaed9fe2

Found 57 files trough .DS_Store spidering:

/ContactForm.php
/css
/dist
/dist/css
/dist/fonts
/dist/img
/dist/img/arrow-left.svg
/dist/img/arrow-right.svg
/dist/img/conflicts.svg
/dist/img/cross.svg
/dist/img/de.svg
/dist/img/develop-bg.svg
/dist/img/develop.png
/dist/img/develop.svg
/dist/img/drop1.svg
/dist/img/en.svg
/dist/img/fedil-sec.svg
/dist/img/fedil.svg
/dist/img/fire.svg
/dist/img/fr.svg
/dist/img/health.svg
/dist/img/home.svg
/dist/img/it.svg
/dist/img/logo.svg
/dist/img/main.png
/dist/img/menu.svg
/dist/img/mlqe.svg
/dist/img/mobile.png
/dist/img/other.svg
/dist/img/paper-stack.png
/dist/img/reglement.svg
/dist/img/sec1-ico.svg
/dist/img/sec1.png
/dist/img/sec1.svg
/dist/img/sec2-ico.svg
/dist/img/sec2.png
/dist/img/sec2.svg
/dist/img/sec3-ico.svg
/dist/img/sec3.png
/dist/img/sec3.svg
/dist/img/sec4-ico.svg
/dist/img/sec4.png
/dist/img/sec4.svg
/dist/img/sitc.ico
/dist/img/slide1.jpg
/dist/img/slide2.jpg
/dist/img/slide3.jpg
/dist/img/technology.svg
/dist/img/workships.png
/dist/img/workships.svg
/dist/img/xray.svg
/dist/js
/files
/font
/img
/index.php
/js

Found on 2025-01-10 18:27

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: sitc.jumo.idp.lu
Port: 443
URL: https://sitc.jumo.idp.lu

First seen 2023-07-21 20:04
Last seen 2025-12-27 07:40
Open for 889 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a0f4c543

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/idp-lu/sitc.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-12-27 07:40

259 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e05c6a28

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = http://git.idp.lu:3000/idp/SITC.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "v-2"]
	remote = origin
	merge = refs/heads/v-2

Found on 2024-02-01 21:12

361 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: stugalux.sym.jumo.idp.lu
Port: 80
URL: http://stugalux.sym.jumo.idp.lu

First seen 2023-01-01 07:49
Last seen 2024-06-12 05:20
Open for 527 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008966952c4ee9088f0b59fdd2c75443eff19

Found 37 files trough .DS_Store spidering:

/css
/fonts
/img
/img/arrow-left.svg
/img/arrow-right.svg
/img/icon-appartment.svg
/img/icon-construction.svg
/img/icon-envelop-map.svg
/img/icon-envelop.svg
/img/icon-filter-appartment.svg
/img/icon-filter-garage.svg
/img/icon-filter-ground.svg
/img/icon-filter-house.svg
/img/icon-filter-parking.svg
/img/icon-filter-rent.svg
/img/icon-filter-sale.svg
/img/icon-house.svg
/img/icon-key.svg
/img/icon-management.svg
/img/icon-phone-map.svg
/img/icon-photos.svg
/img/icon-tools-area.svg
/img/icon-tools-bathroom.svg
/img/icon-tools-bedroom.svg
/img/icon-tools-document.svg
/img/icon-tools-garage.svg
/img/icon-tools-location.svg
/img/icon-users.svg
/img/marker-red.png
/img/real-estate-slide.jpg
/img/real-estate-slide2.jpg
/img/slider-home.jpg
/img/slider-home2.jpg
/img/slider-thumb.png
/img/stugalux-logo.svg
/index.php
/js

Found on 2024-06-12 05:20

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565abf4c23bef71b3de9
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/img
/index.php
/js
```
Found on 2023-05-01 17:14

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: stugalux.sym.jumo.idp.lu
Port: 80
URL: http://stugalux.sym.jumo.idp.lu/_profiler/empty/search/results

First seen 2023-01-01 07:49
Last seen 2024-06-12 05:20
Open for 527 days
- Fingerprint: 407cf4363b0e62fafca67e079bb09e7f9bb09e7f9bb09e7f9bb09e7f9bb09e7f
```
Symfony profiler enabled:
http://stugalux.sym.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2024-06-12 05:20
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: moble-alvisse.jumo.idp.lu
Port: 443
URL: https://moble-alvisse.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-08-23 12:18
Last seen 2024-03-08 10:04
Open for 562 days
- Fingerprint: 407cf4363b0e62fafca67e075623046d5623046d5623046d5623046d5623046d
```
Symfony profiler enabled:
https://moble-alvisse.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2024-03-08 10:04
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: mnlsrs.cms.jojo.idp.lu
Port: 443
URL: https://mnlsrs.cms.jojo.idp.lu

First seen 2024-02-21 12:34
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522749e564f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/idp-lu/mnlsrs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-21 12:34
  
  261 Bytes
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: capitalofjoy.jumo.idp.lu
Port: 443
URL: https://capitalofjoy.jumo.idp.lu/_profiler/empty/search/results

First seen 2022-08-13 22:30
Last seen 2024-02-07 12:38
Open for 542 days
- Fingerprint: 407cf4363b0e62fafca67e07ec53b985ec53b985ec53b985ec53b985ec53b985
```
Symfony profiler enabled:
https://capitalofjoy.jumo.idp.lu/_profiler/empty/search/results
```
  Found on 2024-02-07 12:38
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: www.tennisclassics.lu
Port: 80
URL: http://www.tennisclassics.lu

First seen 2023-05-05 11:59
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522821febca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/TTL_Tennis_Classics.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-05-05 11:59
  
  276 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: garage-binsfeld.juca.idp.lu
Port: 443
URL: https://garage-binsfeld.juca.idp.lu

First seen 2022-09-16 12:47
Last seen 2023-03-15 23:45
Open for 180 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a64295be
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
    url = http://juca@git.idp.lu:3000/idp/Garage-Binsfeld.git
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
```
  Found on 2022-09-16 12:47
  
  288 Bytes
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: carfit.sym.tora.idp.lu
Port: 80
URL: http://carfit.sym.tora.idp.lu/_profiler/empty/search/results

First seen 2023-01-08 11:18
- Fingerprint: 407cf4363b0e62fafca67e07bdc362febdc362febdc362febdc362febdc362fe
```
Symfony profiler enabled:
http://carfit.sym.tora.idp.lu/_profiler/empty/search/results
```
  Found on 2023-01-08 11:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.sym.tora.idp.lu
Port: 80
URL: http://carfit.sym.tora.idp.lu

First seen 2022-11-09 11:00
Last seen 2023-01-08 11:18
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abce2ca2e7dc0235c284a12c0298238456
```
Found 7 files trough .DS_Store spidering:

/bo
/build
/css
/img
/index.php
/js
/uploads
```
  Found on 2022-11-09 11:00
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: carfit.sym.tora.idp.lu
Port: 443
URL: https://carfit.sym.tora.idp.lu

First seen 2022-11-09 11:00
Last seen 2023-01-08 11:18
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57adf0e4e164213917c40e2c44b442b6a9a
```
Found 19 files trough .DS_Store spidering:

/assets
/bin
/composer.json
/composer.lock
/config
/Makefile
/migrations
/node_modules
/package.json
/public
/README.md
/src
/symfony.lock
/templates
/translations
/var
/vendor
/webpack.config.js
/yarn.lock
```
  Found on 2023-01-08 11:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c87f05b7087f05b706e7a276020ed8c225c8d0fc5d62f76eb
```
Found 26 files trough .DS_Store spidering:

/assets
/bin
/composer.json
/composer.lock
/config
/Makefile
/migrations
/node_modules
/package.json
/public
/public/bo
/public/build
/public/css
/public/img
/public/index.php
/public/js
/public/uploads
/README.md
/src
/symfony.lock
/templates
/translations
/var
/vendor
/webpack.config.js
/yarn.lock
```
  Found on 2022-11-09 11:00
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: carfit.sym.tora.idp.lu
Port: 443
URL: https://carfit.sym.tora.idp.lu

First seen 2022-11-09 11:00
Last seen 2023-01-08 11:18
Open for 60 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652263d75324
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Carfit.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "tora"]
	remote = origin
	merge = refs/heads/tora
```
  Found on 2022-11-09 11:00
  
  321 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: carfit.tora.idp.lu
Port: 443
URL: https://carfit.tora.idp.lu

First seen 2022-11-09 10:47
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652263d75324
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.idp.lu:3000/jumo/Carfit.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "tora"]
	remote = origin
	merge = refs/heads/tora
```
  Found on 2022-11-09 10:47
  
  321 Bytes
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: quaring.sym.olro.idp.lu
Port: 443
URL: https://quaring.sym.olro.idp.lu/_profiler/empty/search/results

First seen 2022-10-10 13:46
- Fingerprint: 407cf4363b0e62fafca67e07d670a11dd670a11dd670a11dd670a11dd670a11d
```
Symfony profiler enabled:
https://quaring.sym.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2022-10-10 13:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: quaring.sym.olro.idp.lu
Port: 443
URL: https://quaring.sym.olro.idp.lu

First seen 2022-10-10 13:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc64097d2845820679f34501f48eaa108a
```
Found 4 files trough .DS_Store spidering:

/img
/img/_LOGOS_MARQUES
/img/general
/img/news
```
  Found on 2022-10-10 13:46
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 157.90.88.250
Domain: quaring.sym.olro.idp.lu
Port: 80
URL: http://quaring.sym.olro.idp.lu/_profiler/empty/search/results

First seen 2022-10-10 13:46
- Fingerprint: 407cf4363b0e62fafca67e0706dd99a206dd99a206dd99a206dd99a206dd99a2
```
Symfony profiler enabled:
http://quaring.sym.olro.idp.lu/_profiler/empty/search/results
```
  Found on 2022-10-10 13:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 157.90.88.250
Domain: quaring.sym.olro.idp.lu
Port: 80
URL: http://quaring.sym.olro.idp.lu

First seen 2022-10-10 13:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc64097d2845820679f34501f48eaa108a
```
Found 4 files trough .DS_Store spidering:

/img
/img/_LOGOS_MARQUES
/img/general
/img/news
```
  Found on 2022-10-10 13:46
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 157.90.88.250
Domain: pharmacie-goedert.yane.preview.idp.lu
Port: 443
URL: https://pharmacie-goedert.yane.preview.idp.lu/.git/config

First seen 2021-08-11 22:25
Last seen 2021-11-09 00:58
Open for 89 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522339d3f69
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
    url = http://yane@git.idp.lu:3000/idp/Temp-Yazid-Pharmacie-Goedert.git
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
```
  Found on 2021-08-11 22:25
  
  301 Bytes
Create report

Open service 157.90.88.250:80 · sitc.jumo.idp.lu

2026-01-11 17:22

HTTP/1.1 301 Moved Permanently
Date: Sun, 11 Jan 2026 17:23:04 GMT
Server: Apache
Location: https://sitc.jumo.idp.lu/
Content-Length: 233
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://sitc.jumo.idp.lu/">here</a>.</p>
</body></html>

Found 2 hours ago by HttpPlugin

Host 157.90.88.250

Germany

Software information

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Open SMB file sharing detected

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

Git configuration and history exposed