LeakIX - Host 190.90.160.186

Host 190.90.160.186

Colombia

GTD COLOMBIA S.A.S

Win32

Software information

Apache Apache 2.4.29

tcp/443 tcp/80

OpenSSL OpenSSL 1.0.2n

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 190.90.160.186
Port: 443
URL: https://190.90.160.186

First seen 2022-06-09 07:37
Last seen 2024-06-19 22:27
Open for 741 days

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb1a905625

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://icntic01@bitbucket.org/icontec/intranet.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-06-19 22:27

314 Bytes

Severity: high
Fingerprint: 2580fa947e78dd084a208bff29e55d0c42092c72333b0f6194ec08a25fdded0f

HTTP/1.1 301 Moved Permanently
Date: Sat, 06 May 2023 10:11:37 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8


[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://icntic01@bitbucket.org/icontec/intranet.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-06 10:11

314 Bytes

Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 190.90.160.186
Port: 443
URL: https://190.90.160.186/info.php

First seen 2021-07-16 16:34

Fingerprint: 2c44e2a6278fb0134173d6fa664058a6312dd4703e8ea15904bce6836545ee94

Found PHP info page:
_SERVER["MIBDIRS"] = C:/xampp/php/extras/mibs
_SERVER["MYSQL_HOME"] = \xampp\mysql\bin
_SERVER["OPENSSL_CONF"] = C:/xampp/apache/bin/openssl.cnf
_SERVER["PHP_PEAR_SYSCONF_DIR"] = \xampp\php
_SERVER["PHPRC"] = \xampp\php
_SERVER["TMP"] = \xampp\tmp
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 190.90.160.186
_SERVER["HTTP_USER_AGENT"] = Go-http-client/1.1
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = C:\Program Files\Microsoft MPI\Bin\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\DTS\Binn\;C:\Program Files\Microsoft SQL Server\140\DTS\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\ManagementStudio\;C:\Program Files\BackupClient\CommandLineTool\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files\BackupClient\PyShell\bin\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\;
_SERVER["SystemRoot"] = C:\Windows
_SERVER["COMSPEC"] = C:\Windows\system32\cmd.exe
_SERVER["PATHEXT"] = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
_SERVER["WINDIR"] = C:\Windows
_SERVER["SERVER_SIGNATURE"] = <address>Apache/2.4.29 (Win32) OpenSSL/1.0.2n PHP/5.6.34 Server at 190.90.160.186 Port 443</address>
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.29 (Win32) OpenSSL/1.0.2n PHP/5.6.34
_SERVER["SERVER_NAME"] = 190.90.160.186
_SERVER["SERVER_ADDR"] = 172.16.100.150
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 134.122.112.12
_SERVER["DOCUMENT_ROOT"] = E:/HTML/htdocs/intranet
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = E:/HTML/htdocs/intranet
_SERVER["SERVER_ADMIN"] = postmaster@localhost
_SERVER["SCRIPT_FILENAME"] = E:/HTML/htdocs/intranet/info.php
_SERVER["REMOTE_PORT"] = 59802
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1626453294.899
_SERVER["REQUEST_TIME"] = 1626453294

Found on 2021-07-16 16:34

Create report

Open service 190.90.160.186:443

2024-06-19 22:27

HTTP/1.1 301 Moved Permanently
Date: Wed, 19 Jun 2024 22:28:53 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 13 hours ago by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-17 22:25

HTTP/1.1 301 Moved Permanently
Date: Mon, 17 Jun 2024 22:25:52 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 3 days ago by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-15 22:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 15 Jun 2024 22:59:12 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-15 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-15 14:25

HTTP/1.1 301 Moved Permanently
Date: Sat, 15 Jun 2024 14:25:38 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-15 by HttpPlugin

Create report

Open service 190.90.160.186:80

2024-06-14 10:40

HTTP/1.1 302 Found
Date: Fri, 14 Jun 2024 10:40:48 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
Location: https://intranet.icontec.org/
Content-Length: 213
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://intranet.icontec.org/">here</a>.</p>
</body></html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-11 21:39

HTTP/1.1 301 Moved Permanently
Date: Tue, 11 Jun 2024 21:39:19 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-11 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-09 22:17

HTTP/1.1 301 Moved Permanently
Date: Sun, 09 Jun 2024 22:18:02 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-09 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-07 21:55

HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Jun 2024 21:55:20 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-07 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-05 21:25

HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Jun 2024 21:26:50 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-05 by HttpPlugin

Create report

Open service 190.90.160.186:443

2024-06-03 22:22

HTTP/1.1 301 Moved Permanently
Date: Mon, 03 Jun 2024 22:23:20 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
X-Frame-Options: sameorigin
X-Pingback: https://intranet.icontec.org/xmlrpc.php
Location: https://intranet.icontec.org/
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-03 by HttpPlugin

Create report

Open service 190.90.160.186:80

2024-06-02 20:16

HTTP/1.1 302 Found
Date: Sun, 02 Jun 2024 20:17:42 GMT
Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n
Location: https://intranet.icontec.org/
Content-Length: 213
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://intranet.icontec.org/">here</a>.</p>
</body></html>

Found 2024-06-02 by HttpPlugin

Create report

*.icontec.orgicontec.org

Fingerprint:

c5fa6a6eec8b597ff2a22843fa54c95647c0e6de0bc81210d888f09d17bce7a5

CN:

*.icontec.org

Key:

RSA-2048

Issuer:

Go Daddy Secure Certificate Authority - G2

Not before:

2024-01-03 14:16

Not after:

2024-12-11 00:53

Domain summary

No record