LeakIX - Host 185.26.122.18

Host 185.26.122.18

Russia

Hostland LTD

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.26.122.18
Domain: plitka-artak.ru
Port: 443
URL: https://plitka-artak.ru

First seen 2023-11-17 01:19
Last seen 2024-12-21 21:33
Open for 400 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f4828ac3cca08ac3cca08ac3cca0
```
Found 2 files trough .DS_Store spidering:

/css
/js
```
  Found on 2024-12-21 21:33
Create report
VSCode SFTP configuration exposed

The following URL is publicly accessible and is leaking deployment credentials

IP: 185.26.122.18
Domain: www.owentmb.ru
Port: 443
URL: https://www.owentmb.ru/.vscode/sftp.json

First seen 2023-11-16 19:16
Last seen 2024-12-21 15:32
Open for 400 days
- Fingerprint: 13b3a7b14dfc2b704dfc2b7033f8612b6cd81a890fca3aab27f05d1788040a48
```
{
    "name": "MMaxocom-owen",
    "host": "vh314.timeweb.ru",
    "protocol": "ftp",
    "port": 21,
    "username": "cr24914",
    "password": "R8srn2XlpuSp",
    "remotePath": "/owen/public_html",
    "uploadOnSave": true,
    "useTempFile": false,
    "openSsh": false
}
```
  Found on 2024-12-21 15:32
  
  277 Bytes
Create report
VSCode SFTP configuration exposed

The following URL is publicly accessible and is leaking deployment credentials

IP: 185.26.122.18
Domain: owentmb.ru
Port: 443
URL: https://owentmb.ru/.vscode/sftp.json

First seen 2023-11-16 19:16
Last seen 2024-12-21 15:32
Open for 400 days
- Fingerprint: 13b3a7b14dfc2b704dfc2b7033f8612b6cd81a890fca3aab27f05d1788040a48
```
{
    "name": "MMaxocom-owen",
    "host": "vh314.timeweb.ru",
    "protocol": "ftp",
    "port": 21,
    "username": "cr24914",
    "password": "R8srn2XlpuSp",
    "remotePath": "/owen/public_html",
    "uploadOnSave": true,
    "useTempFile": false,
    "openSsh": false
}
```
  Found on 2024-12-21 15:32
  
  277 Bytes
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 185.26.122.18
Domain: www.vse-dlya-konditera.ru
Port: 443
URL: https://www.vse-dlya-konditera.ru

First seen 2023-10-21 01:30
Last seen 2024-12-17 22:01
Open for 423 days

Fingerprint: b18befd9dd6536aa30550de50a5f54fc5b311175a66b43172bf5b0fa71338257

{
	"module": "users",
	"method": "login",
	"domain": "vse-dlya-konditera.ru.host1606838.serv16.hostland.pro",
	"system-build": "57295",
	"lang": "ru",
	"pre-lang": "",
	"header": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"title": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"site-name": "umicms.demo site",
	"csrf": null,
	"meta": {
		"keywords": "",
		"description": ""
	},

	"request-uri": "\/config.json",
	"user": {
		"id": "2373",
		"type": "guest"
	}

}

Found on 2024-12-17 22:01

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 185.26.122.18
Domain: vse-dlya-konditera.ru
Port: 80
URL: http://vse-dlya-konditera.ru

First seen 2023-10-21 01:30
Last seen 2024-12-17 22:01
Open for 423 days

Fingerprint: b18befd9dd6536aa30550de50a5f54fc5b311175a66b43172bf5b0fa71338257

{
	"module": "users",
	"method": "login",
	"domain": "vse-dlya-konditera.ru.host1606838.serv16.hostland.pro",
	"system-build": "57295",
	"lang": "ru",
	"pre-lang": "",
	"header": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"title": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"site-name": "umicms.demo site",
	"csrf": null,
	"meta": {
		"keywords": "",
		"description": ""
	},

	"request-uri": "\/config.json",
	"user": {
		"id": "2373",
		"type": "guest"
	}

}

Found on 2024-12-17 22:01

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 185.26.122.18
Domain: vse-dlya-konditera.ru
Port: 443
URL: https://vse-dlya-konditera.ru

First seen 2023-10-21 01:30
Last seen 2024-12-17 22:01
Open for 423 days

Fingerprint: b18befd9dd6536aa30550de50a5f54fc5b311175a66b43172bf5b0fa71338257

{
	"module": "users",
	"method": "login",
	"domain": "vse-dlya-konditera.ru.host1606838.serv16.hostland.pro",
	"system-build": "57295",
	"lang": "ru",
	"pre-lang": "",
	"header": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"title": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"site-name": "umicms.demo site",
	"csrf": null,
	"meta": {
		"keywords": "",
		"description": ""
	},

	"request-uri": "\/config.json",
	"user": {
		"id": "2373",
		"type": "guest"
	}

}

Found on 2024-12-17 22:01

Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 185.26.122.18
Domain: www.vse-dlya-konditera.ru
Port: 80
URL: http://www.vse-dlya-konditera.ru

First seen 2023-10-21 01:30
Last seen 2024-12-17 22:01
Open for 423 days

Fingerprint: b18befd9dd6536aa30550de50a5f54fc5b311175a66b43172bf5b0fa71338257

{
	"module": "users",
	"method": "login",
	"domain": "vse-dlya-konditera.ru.host1606838.serv16.hostland.pro",
	"system-build": "57295",
	"lang": "ru",
	"pre-lang": "",
	"header": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"title": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"site-name": "umicms.demo site",
	"csrf": null,
	"meta": {
		"keywords": "",
		"description": ""
	},

	"request-uri": "\/config.json",
	"user": {
		"id": "2373",
		"type": "guest"
	}

}

Found on 2024-12-17 22:01

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: skupka-antiq.ru
Port: 443
URL: https://skupka-antiq.ru

First seen 2023-11-03 22:50
Last seen 2024-12-08 19:05
Open for 400 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652276a9e548
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:microooji/skupka-antiq.ru.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-12-08 19:05
  
  210 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: skupka-antiq.ru
Port: 80
URL: http://skupka-antiq.ru

First seen 2023-11-03 22:50
Last seen 2024-12-08 19:05
Open for 400 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652276a9e548
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:microooji/skupka-antiq.ru.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-12-08 19:05
  
  210 Bytes
Create report

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 185.26.122.18
Domain: proobogrev.com
Port: 443
URL: https://proobogrev.com

First seen 2023-11-25 12:20
Last seen 2024-10-24 13:54
Open for 334 days

Fingerprint: b18befd9dd6536aa30550de50a5f54fc5b3111753e7a3f46ae4137ce70ad6f7a

{
	"module": "users",
	"method": "login",
	"domain": "proobogrev.com",
	"domain-id": 1,
	"system-build": "87238",
	"lang": "ru",
	"lang-id": 1,
	"pre-lang": "",
	"header": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"title": "\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f",
	"site-name": "PROOBOGREV.com",
	"csrf": null,
	"meta": {
		"keywords": "\u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043e\u0431\u043e\u0433\u0440\u0435\u0432\u0430, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043e\u0433\u0440\u0435\u0432, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043e\u0431\u043e\u0433\u0440\u0435\u0432, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043e\u0433\u0440\u0435\u0432 \u0442\u0440\u0443\u0431, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043e\u0433\u0440\u0435\u0432 \u0440\u0435\u0437\u0435\u0440\u0432\u0443\u0430\u0440\u043e\u0432",
		"description": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043e\u0433\u0440\u0435\u0432 \u0442\u0440\u0443\u0431\u043e\u043f\u0440\u043e\u0432\u043e\u0434\u043e\u0432, \u0440\u0435\u0437\u0435\u0440\u0432\u0443\u0430\u0440\u043e\u0432, \u0431\u0443\u043d\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0430, \u043c\u043e\u043d\u0442\u0430\u0436. \u0422\u0435\u043b. (495) 120-2423"
	},

	"template-id": 1,
	"request-uri": "\/config.json",
	"user": {
		"id": 336,
		"type": "guest"
	}

}

Found on 2024-10-24 13:54

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: fastion.ru
Port: 443
URL: https://fastion.ru

First seen 2023-11-26 21:20
Last seen 2024-10-24 08:27
Open for 332 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb36fcd816
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/technext/treviso.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-10-24 08:27
  
  298 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.26.122.18
Domain: klpmotors.ru
Port: 80
URL: http://klpmotors.ru

First seen 2023-11-20 18:08
Last seen 2024-10-17 15:06
Open for 331 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbae72d4b78bb6aacd2900b71789
```
Found 11 files trough .DS_Store spidering:

/assets
/assets/snippets
/assets/snippets/payment
/assets/snippets/payment/config
/manager
/manager/includes
/tpl
/tpl/css
/tpl/fonts
/tpl/images
/tpl/js
```
  Found on 2024-10-17 15:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf157762499796a07b4796a07b4
```
Found 3 files trough .DS_Store spidering:

/assets
/manager
/tpl
```
  Found on 2024-07-26 15:49
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a06e009db01412c295eb6ce4eb5ae9fc91
```
Found 13 files trough .DS_Store spidering:

/assets
/assets/snippets
/assets/snippets/payment
/assets/snippets/payment/config
/manager
/manager/includes
/tpl
/tpl/css
/tpl/fonts
/tpl/images
/tpl/js
/tpl/js/source
/tpl/js/source/helpers
```
  Found on 2023-12-24 00:28
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.26.122.18
Domain: esteri.ru
Port: 443
URL: https://esteri.ru

First seen 2023-11-20 10:49
Last seen 2024-10-17 07:50
Open for 331 days

Severity: high
Fingerprint: 5f32cf5d6962f09ca29b58f1a29b58f11d3cc07146332449db33e876b4d50f22

Found 78 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/fonts/Apache License Version 2.txt
/fonts/GenBasR-webfont.eot
/fonts/GenBasR-webfont.svg
/fonts/GenBasR-webfont.ttf
/fonts/GenBasR-webfont.woff
/fonts/OpenSans-Regular-webfont.eot
/fonts/OpenSans-Regular-webfont.svg
/fonts/OpenSans-Regular-webfont.ttf
/fonts/OpenSans-Regular-webfont.woff
/fonts/OpenSans-Semibold-webfont.eot
/fonts/OpenSans-Semibold-webfont.svg
/fonts/OpenSans-Semibold-webfont.ttf
/fonts/OpenSans-Semibold-webfont.woff
/fonts/SIL License - Gentium - OFL.txt
/fonts/stylesheet.css
/images
/images/1.jpg
/images/1.jpg_1
/images/2.jpg
/images/2.jpg_1
/images/3.jpg
/images/3.jpg_1
/images/4.jpg
/images/4.jpg_1
/images/asfalt
/images/asfalt.png
/images/asfalt.zip
/images/background.jpg
/images/behance.png
/images/bg.jpg
/images/bg.png
/images/concrete_wall_2
/images/concrete_wall_2.png
/images/concrete_wall_2.zip
/images/deviantart.png
/images/dribbble.png
/images/email.png
/images/facebook.png
/images/flickr.png
/images/forrst.png
/images/github.png
/images/linkedin.png
/images/logo.png
/images/mail-bg.png
/images/myspace.png
/images/noise.png
/images/noisy_net
/images/noisy_net.png
/images/noisy_net.zip
/images/overlay.png
/images/pattern.png
/images/pinterest.png
/images/progress.gif
/images/rss.png
/images/skype.png
/images/stumbleupon.png
/images/submit.png
/images/texture.jpg
/images/texture1.jpg
/images/twitter.png
/images/vimeo.png
/images/wall4
/images/wall4.png
/images/wall4.zip
/images/youtube.png
/index.html
/js
/js/scripts.js
/send.php
/slides.html
/static.html

Found on 2024-10-17 07:50

Severity: high
Fingerprint: 5f32cf5d6962f09c3005b7223005b7222dbba0e2d9793ad6a17a26cdc9778177

Found 77 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/fonts/Apache License Version 2.txt
/fonts/GenBasR-webfont.eot
/fonts/GenBasR-webfont.svg
/fonts/GenBasR-webfont.ttf
/fonts/GenBasR-webfont.woff
/fonts/OpenSans-Regular-webfont.eot
/fonts/OpenSans-Regular-webfont.svg
/fonts/OpenSans-Regular-webfont.ttf
/fonts/OpenSans-Regular-webfont.woff
/fonts/OpenSans-Semibold-webfont.eot
/fonts/OpenSans-Semibold-webfont.svg
/fonts/OpenSans-Semibold-webfont.ttf
/fonts/OpenSans-Semibold-webfont.woff
/fonts/SIL License - Gentium - OFL.txt
/fonts/stylesheet.css
/images
/images/1.jpg
/images/1.jpg_1
/images/2.jpg
/images/2.jpg_1
/images/3.jpg
/images/3.jpg_1
/images/4.jpg
/images/4.jpg_1
/images/asfalt
/images/asfalt.png
/images/asfalt.zip
/images/background.jpg
/images/behance.png
/images/bg.jpg
/images/bg.png
/images/concrete_wall_2
/images/concrete_wall_2.png
/images/concrete_wall_2.zip
/images/deviantart.png
/images/dribbble.png
/images/email.png
/images/facebook.png
/images/flickr.png
/images/forrst.png
/images/github.png
/images/linkedin.png
/images/logo.png
/images/mail-bg.png
/images/myspace.png
/images/noise.png
/images/noisy_net
/images/noisy_net.png
/images/noisy_net.zip
/images/overlay.png
/images/pattern.png
/images/pinterest.png
/images/progress.gif
/images/rss.png
/images/skype.png
/images/stumbleupon.png
/images/submit.png
/images/texture.jpg
/images/texture1.jpg
/images/twitter.png
/images/vimeo.png
/images/wall4
/images/wall4.png
/images/wall4.zip
/images/youtube.png
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-09-10 11:52

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a02567c03848f0ece4880345cf32a87eb2

Found 13 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/images
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-05-04 09:20

Severity: high
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb58c638e0600301dffbf6fa4fec750ccca9

Found 57 files trough .DS_Store spidering:

/css
/fonts
/images
/images/1.jpg
/images/1.jpg_1
/images/2.jpg
/images/2.jpg_1
/images/3.jpg
/images/3.jpg_1
/images/4.jpg
/images/4.jpg_1
/images/asfalt
/images/asfalt.png
/images/asfalt.zip
/images/background.jpg
/images/behance.png
/images/bg.jpg
/images/bg.png
/images/concrete_wall_2
/images/concrete_wall_2.png
/images/concrete_wall_2.zip
/images/deviantart.png
/images/dribbble.png
/images/email.png
/images/facebook.png
/images/flickr.png
/images/forrst.png
/images/github.png
/images/linkedin.png
/images/logo.png
/images/mail-bg.png
/images/myspace.png
/images/noise.png
/images/noisy_net
/images/noisy_net.png
/images/noisy_net.zip
/images/overlay.png
/images/pattern.png
/images/pinterest.png
/images/progress.gif
/images/rss.png
/images/skype.png
/images/stumbleupon.png
/images/submit.png
/images/texture.jpg
/images/texture1.jpg
/images/twitter.png
/images/vimeo.png
/images/wall4
/images/wall4.png
/images/wall4.zip
/images/youtube.png
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-01-07 11:20

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: dobrynin-andrey.ru
Port: 443
URL: https://dobrynin-andrey.ru

First seen 2023-11-15 15:29
Last seen 2024-10-12 12:35
Open for 331 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220d6d2136
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:dobrynin-andrey/dobrynin-andrey.tk.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-10-12 12:35
  
  278 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: an-bn.ru
Port: 80
URL: http://an-bn.ru

First seen 2023-10-22 07:32
Last seen 2024-09-18 04:33
Open for 331 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f1f723d6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/anbn54/site
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-09-18 04:33
  
  251 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.26.122.18
Domain: an-bn.ru
Port: 443
URL: https://an-bn.ru

First seen 2023-10-22 07:32
Last seen 2024-09-12 03:25
Open for 325 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f1f723d6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/anbn54/site
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-09-12 03:25
  
  251 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.26.122.18
Domain: klpmotors.ru
Port: 443
URL: https://klpmotors.ru

First seen 2023-11-20 18:08
Last seen 2024-09-11 00:06
Open for 295 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbae72d4b78bb6aacd2900b71789
```
Found 11 files trough .DS_Store spidering:

/assets
/assets/snippets
/assets/snippets/payment
/assets/snippets/payment/config
/manager
/manager/includes
/tpl
/tpl/css
/tpl/fonts
/tpl/images
/tpl/js
```
  Found on 2024-09-11 00:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a06e009db01412c295eb6ce4eb5ae9fc91
```
Found 13 files trough .DS_Store spidering:

/assets
/assets/snippets
/assets/snippets/payment
/assets/snippets/payment/config
/manager
/manager/includes
/tpl
/tpl/css
/tpl/fonts
/tpl/images
/tpl/js
/tpl/js/source
/tpl/js/source/helpers
```
  Found on 2023-12-23 21:43
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.26.122.18
Domain: esteri.ru
Port: 80
URL: http://esteri.ru

First seen 2023-11-20 10:49
Last seen 2024-07-22 13:07
Open for 245 days

Severity: high
Fingerprint: 5f32cf5d6962f09c3005b7223005b7222dbba0e2d9793ad6a17a26cdc9778177

Found 77 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/fonts/Apache License Version 2.txt
/fonts/GenBasR-webfont.eot
/fonts/GenBasR-webfont.svg
/fonts/GenBasR-webfont.ttf
/fonts/GenBasR-webfont.woff
/fonts/OpenSans-Regular-webfont.eot
/fonts/OpenSans-Regular-webfont.svg
/fonts/OpenSans-Regular-webfont.ttf
/fonts/OpenSans-Regular-webfont.woff
/fonts/OpenSans-Semibold-webfont.eot
/fonts/OpenSans-Semibold-webfont.svg
/fonts/OpenSans-Semibold-webfont.ttf
/fonts/OpenSans-Semibold-webfont.woff
/fonts/SIL License - Gentium - OFL.txt
/fonts/stylesheet.css
/images
/images/1.jpg
/images/1.jpg_1
/images/2.jpg
/images/2.jpg_1
/images/3.jpg
/images/3.jpg_1
/images/4.jpg
/images/4.jpg_1
/images/asfalt
/images/asfalt.png
/images/asfalt.zip
/images/background.jpg
/images/behance.png
/images/bg.jpg
/images/bg.png
/images/concrete_wall_2
/images/concrete_wall_2.png
/images/concrete_wall_2.zip
/images/deviantart.png
/images/dribbble.png
/images/email.png
/images/facebook.png
/images/flickr.png
/images/forrst.png
/images/github.png
/images/linkedin.png
/images/logo.png
/images/mail-bg.png
/images/myspace.png
/images/noise.png
/images/noisy_net
/images/noisy_net.png
/images/noisy_net.zip
/images/overlay.png
/images/pattern.png
/images/pinterest.png
/images/progress.gif
/images/rss.png
/images/skype.png
/images/stumbleupon.png
/images/submit.png
/images/texture.jpg
/images/texture1.jpg
/images/twitter.png
/images/vimeo.png
/images/wall4
/images/wall4.png
/images/wall4.zip
/images/youtube.png
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-07-22 13:07

Severity: high
Fingerprint: 5f32cf5d6962f09ca29b58f1a29b58f11d3cc07146332449db33e876b4d50f22

Found 78 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/fonts/Apache License Version 2.txt
/fonts/GenBasR-webfont.eot
/fonts/GenBasR-webfont.svg
/fonts/GenBasR-webfont.ttf
/fonts/GenBasR-webfont.woff
/fonts/OpenSans-Regular-webfont.eot
/fonts/OpenSans-Regular-webfont.svg
/fonts/OpenSans-Regular-webfont.ttf
/fonts/OpenSans-Regular-webfont.woff
/fonts/OpenSans-Semibold-webfont.eot
/fonts/OpenSans-Semibold-webfont.svg
/fonts/OpenSans-Semibold-webfont.ttf
/fonts/OpenSans-Semibold-webfont.woff
/fonts/SIL License - Gentium - OFL.txt
/fonts/stylesheet.css
/images
/images/1.jpg
/images/1.jpg_1
/images/2.jpg
/images/2.jpg_1
/images/3.jpg
/images/3.jpg_1
/images/4.jpg
/images/4.jpg_1
/images/asfalt
/images/asfalt.png
/images/asfalt.zip
/images/background.jpg
/images/behance.png
/images/bg.jpg
/images/bg.png
/images/concrete_wall_2
/images/concrete_wall_2.png
/images/concrete_wall_2.zip
/images/deviantart.png
/images/dribbble.png
/images/email.png
/images/facebook.png
/images/flickr.png
/images/forrst.png
/images/github.png
/images/linkedin.png
/images/logo.png
/images/mail-bg.png
/images/myspace.png
/images/noise.png
/images/noisy_net
/images/noisy_net.png
/images/noisy_net.zip
/images/overlay.png
/images/pattern.png
/images/pinterest.png
/images/progress.gif
/images/rss.png
/images/skype.png
/images/stumbleupon.png
/images/submit.png
/images/texture.jpg
/images/texture1.jpg
/images/twitter.png
/images/vimeo.png
/images/wall4
/images/wall4.png
/images/wall4.zip
/images/youtube.png
/index.html
/js
/js/scripts.js
/send.php
/slides.html
/static.html

Found on 2024-06-28 11:41

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a02567c03848f0ece4880345cf32a87eb2

Found 13 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/images
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-05-04 09:20

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3c72701c303129d633296600c77f830fa

Found 29 files trough .DS_Store spidering:

/css
/css/img
/css/reset.css
/css/style.css
/css/style3IE.css
/css/styleIE.css
/fonts
/fonts/Apache License Version 2.txt
/fonts/GenBasR-webfont.eot
/fonts/GenBasR-webfont.svg
/fonts/GenBasR-webfont.ttf
/fonts/GenBasR-webfont.woff
/fonts/OpenSans-Regular-webfont.eot
/fonts/OpenSans-Regular-webfont.svg
/fonts/OpenSans-Regular-webfont.ttf
/fonts/OpenSans-Regular-webfont.woff
/fonts/OpenSans-Semibold-webfont.eot
/fonts/OpenSans-Semibold-webfont.svg
/fonts/OpenSans-Semibold-webfont.ttf
/fonts/OpenSans-Semibold-webfont.woff
/fonts/SIL License - Gentium - OFL.txt
/fonts/stylesheet.css
/images
/index.html
/js
/js/scripts.js
/send.php
/slides.html
/static.html

Found on 2024-01-07 11:20

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8143ab0e0dd712c7b8818516c70edf2a3

Found 8 files trough .DS_Store spidering:

/css
/fonts
/images
/index.html
/js
/send.php
/slides.html
/static.html

Found on 2024-01-06 03:58

Create report

Open service 185.26.122.18:443 · evolution39.ru

2024-12-22 07:22

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sun, 22 Dec 2024 07:22:23 GMT
Content-Type: text/html
Content-Length: 650
Connection: close

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 4 hours ago by HttpPlugin

Host 185.26.122.18

Russia

Software information

MacOS file listing through .DS_Store file

VSCode SFTP configuration exposed

VSCode SFTP configuration exposed

A JSON configuration file has been found

A JSON configuration file has been found

A JSON configuration file has been found

A JSON configuration file has been found

Git configuration and history exposed

Git configuration and history exposed

A JSON configuration file has been found

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file