LeakIX - Host 3.89.18.196

Host 3.89.18.196

United States

AMAZON-AES

Software information

nginx nginx 1.21.6

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 3.89.18.196
Port: 443
URL: https://3.89.18.196

First seen 2023-05-26 04:50
Last seen 2024-06-21 02:08
Open for 391 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc2789246f7320fd877710c0a0ac3d4d6d
```
Found 4 files trough .DS_Store spidering:

/components
/lib
/lib/providers
/sql
```
  Found on 2024-06-21 02:08
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.89.18.196
Port: 443
URL: https://3.89.18.196

First seen 2023-05-26 04:50
Last seen 2024-06-21 02:08
Open for 391 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3d6df1d5
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = git@github.com:Back-At-You-Inc/billing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
```
  Found on 2024-06-21 02:08
  
  369 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 3.89.18.196
Port: 80
URL: http://3.89.18.196

First seen 2023-05-18 23:00
Last seen 2024-06-20 12:04
Open for 398 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc2789246f7320fd877710c0a0ac3d4d6d
```
Found 4 files trough .DS_Store spidering:

/components
/lib
/lib/providers
/sql
```
  Found on 2024-06-20 12:04
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.89.18.196
Port: 80
URL: http://3.89.18.196

First seen 2023-05-18 23:00
Last seen 2024-06-20 12:04
Open for 398 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3d6df1d5
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = git@github.com:Back-At-You-Inc/billing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
```
  Found on 2024-06-20 12:04
  
  369 Bytes
Create report

Open service 3.89.18.196:443

2024-06-21 02:08

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Fri, 21 Jun 2024 02:08:52 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 18 hours ago by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-20 12:04

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 12:04:23 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found one day ago by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-19 22:53

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Wed, 19 Jun 2024 22:53:12 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2 days ago by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-19 22:53

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Wed, 19 Jun 2024 22:53:13 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2 days ago by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-19 22:32

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Wed, 19 Jun 2024 22:33:00 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2 days ago by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-19 21:32

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Wed, 19 Jun 2024 21:32:03 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2 days ago by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-17 22:40

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 17 Jun 2024 22:40:17 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-17 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-17 22:40

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 17 Jun 2024 22:40:17 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-17 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-17 21:31

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 17 Jun 2024 21:31:49 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-17 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-17 21:21

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 17 Jun 2024 21:21:55 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-17 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-15 22:16

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sat, 15 Jun 2024 22:16:20 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-15 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-15 20:16

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sat, 15 Jun 2024 20:16:33 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-15 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-13 21:53

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Thu, 13 Jun 2024 21:54:03 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-13 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-11 22:29

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Tue, 11 Jun 2024 22:29:38 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-11 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-11 22:29

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Tue, 11 Jun 2024 22:29:37 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-11 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-11 22:22

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Tue, 11 Jun 2024 22:22:11 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-11 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-11 21:16

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Tue, 11 Jun 2024 21:16:12 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-11 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-09 22:12

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sun, 09 Jun 2024 22:12:52 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-09 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-09 20:30

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sun, 09 Jun 2024 20:30:08 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-09 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-09 20:30

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sun, 09 Jun 2024 20:30:08 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-09 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-09 20:24

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Sun, 09 Jun 2024 20:24:16 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-09 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-07 20:17

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Fri, 07 Jun 2024 20:17:59 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-07 by HttpPlugin

Create report

Open service 3.89.18.196:80

2024-06-07 20:16

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Fri, 07 Jun 2024 20:16:34 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-07 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-03 21:34

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 03 Jun 2024 21:34:53 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-03 by HttpPlugin

Create report

Open service 3.89.18.196:443

2024-06-03 21:34

HTTP/1.1 404 
Server: nginx/1.21.6
Date: Mon, 03 Jun 2024 21:34:52 GMT
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, PATCH, DELETE, HEAD, OPTIONS
Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Max-Age: 1000
Access-Control-Allow-Credentials: true

Found 2024-06-03 by HttpPlugin

Create report

*.backatyou.combackatyou.com

Fingerprint:

7dba04bf294418bf020d43e2b1cca6fcfd3ce35c94786ed986ebeb3dae56c6cf

CN:

*.backatyou.com

Key:

RSA-4096

Issuer:

Go Daddy Secure Certificate Authority - G2

Not before:

2023-07-30 13:02

Not after:

2024-08-30 13:02

Domain summary

No record

Host 3.89.18.196

United States

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

*.backatyou.combackatyou.com

Domain summary