LeakIX - Host 161.199.247.6

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 161.199.247.6
Port: 443
URL: https://161.199.247.6

First seen 2021-08-21 10:38
Last seen 2023-03-04 13:25
Open for 560 days

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a7b4405eacb31abd7ae64eeda25f67b45

Found 19 files trough .DS_Store spidering:

/checkin-batman.php
/create.php
/data
/donate.php
/edit-firewall.php
/edit-nds.php
/edit-node.php
/edit.php
/favicon.ico
/index.php
/init.php
/logout.php
/oobe.php
/overview.php
/readme.txt
/reset-password.php
/resources
/settings.php
/version.txt

Found on 2021-10-11 10:27

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45abc474275a4c20b4477de363a2ffc79f

Found 30 files trough .DS_Store spidering:

/checkin-batman.php
/create.php
/data
/data/cid
/data/errored
/data/mac2net
/data/pnc
/data/role
/data/stats
/data/test.csv
/data/test.txt
/data/test.xml
/data/test_nodes.xml
/data/uploads
/donate.php
/edit-firewall.php
/edit-nds.php
/edit-node.php
/edit.php
/favicon.ico
/index.php
/init.php
/logout.php
/oobe.php
/overview.php
/readme.txt
/reset-password.php
/resources
/settings.php
/version.txt

Found on 2021-08-21 10:38

Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 161.199.247.6
Port: 443
URL: https://161.199.247.6/info.php

First seen 2022-06-10 13:34

Fingerprint: 2c44e2a6278fb0134173d6fa06711c1ee33b2212dddede325a738f6c59fcc0d0

Found PHP info page:
$_SERVER['HTTP_HOST'] = 161.199.247.6
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = <address>Apache/2.4.41 (Ubuntu) Server at 161.199.247.6 Port 80</address>
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.41 (Ubuntu)
$_SERVER['SERVER_NAME'] = 161.199.247.6
$_SERVER['SERVER_ADDR'] = 192.168.1.63
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 192.168.1.12
$_SERVER['DOCUMENT_ROOT'] = /var/www/html
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /var/www/html
$_SERVER['SERVER_ADMIN'] = webmaster@localhost
$_SERVER['SCRIPT_FILENAME'] = /var/www/html/info.php
$_SERVER['REMOTE_PORT'] = 48528
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1654867914.55
$_SERVER['REQUEST_TIME'] = 1654867914

Found on 2022-06-10 13:34

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 161.199.247.6
Port: 80
URL: http://161.199.247.6

First seen 2021-08-04 03:33
Last seen 2021-12-12 00:19
Open for 129 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45abc474275a4c20b4477de363a2ffc79f

Found 30 files trough .DS_Store spidering:

/checkin-batman.php
/create.php
/data
/data/cid
/data/errored
/data/mac2net
/data/pnc
/data/role
/data/stats
/data/test.csv
/data/test.txt
/data/test.xml
/data/test_nodes.xml
/data/uploads
/donate.php
/edit-firewall.php
/edit-nds.php
/edit-node.php
/edit.php
/favicon.ico
/index.php
/init.php
/logout.php
/oobe.php
/overview.php
/readme.txt
/reset-password.php
/resources
/settings.php
/version.txt

Found on 2021-08-04 03:33

Create report

Host 161.199.247.6

United States

MacOS file listing through .DS_Store file

Found php information file

MacOS file listing through .DS_Store file

Domain summary