LeakIX - Host 45.12.74.50

Host 45.12.74.50

Russia

Beget LLC

Ubuntu

Software information

Apache Apache 2.4.58

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.12.74.50
Domain: calc.tajsoft.tj
Port: 443
URL: https://calc.tajsoft.tj

First seen 2025-06-12 18:04
Last seen 2026-02-13 02:24
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744dc8d160d2742fd40e4ee0eb338f313902
```
Found 12 files trough .DS_Store spidering:

/application
/assets
/chart
/dashboard
/demo
/elements
/forms
/layouts
/other
/pages
/table
/widget
```
  Found on 2026-02-13 02:24
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 45.12.74.50
Domain: master.tajsoft.tj
Port: 443
URL: https://master.tajsoft.tj/_profiler/empty/search/results

First seen 2025-08-10 00:07
Last seen 2026-02-10 00:25
Open for 184 days
- Fingerprint: 407cf4363b0e62fafca67e0798eff1f298eff1f298eff1f298eff1f298eff1f2
```
Symfony profiler enabled:
https://master.tajsoft.tj/_profiler/empty/search/results
```
  Found on 2026-02-10 00:25
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 45.12.74.50
Domain: master.doodle.tj
Port: 80
URL: http://master.doodle.tj

First seen 2025-09-20 13:45
Last seen 2026-02-09 21:45
Open for 142 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220bb78c52
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:TajSoft-Group/artuch-layout-front.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-02-09 21:45
  
  277 Bytes
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 45.12.74.50
Port: 22

First seen 2025-06-24 15:50
Last seen 2026-02-08 12:57
Open for 228 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb581e37d9a6fcdf7e36fcdf7e36fcdf7e36fcdf7e3
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.11
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 12:57
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 45.12.74.50
Domain: api.mubingym.com
Port: 443
URL: https://api.mubingym.com/_profiler/empty/search/results

First seen 2025-03-17 20:13
Last seen 2026-01-16 14:35
Open for 304 days
- Fingerprint: 407cf4363b0e62fafca67e0723f0767823f0767823f0767823f0767823f07678
```
Symfony profiler enabled:
https://api.mubingym.com/_profiler/empty/search/results
```
  Found on 2026-01-16 14:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.12.74.50
Domain: master.doodle.tj
Port: 443
URL: https://master.doodle.tj

First seen 2025-05-22 19:45
Last seen 2025-06-01 13:17
Open for 9 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744dc8d160d2742fd40e4ee0eb338f313902
```
Found 12 files trough .DS_Store spidering:

/application
/assets
/chart
/dashboard
/demo
/elements
/forms
/layouts
/other
/pages
/table
/widget
```
  Found on 2025-06-01 13:17
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.12.74.50
Port: 80
URL: http://45.12.74.50

First seen 2023-12-16 03:33

Severity: medium
Fingerprint: 5f32cf5d6962f09c70ba7b5770ba7b5769aa845f3e2b33176e7feccf1ec58988

Found 54 files trough .DS_Store spidering:

/favicon.ico
/img
/img/header-img
/img/header-img/red-icon
/img/header-img/white-icon
/img/main-img
/img/main-img/alibra_clients.svg
/img/main-img/appleIcon.svg
/img/main-img/audit.mp4
/img/main-img/audit.svg
/img/main-img/decor-arrows.svg
/img/main-img/design.mp4
/img/main-img/design.svg
/img/main-img/dt-logo.svg
/img/main-img/GooglePlay.svg
/img/main-img/input-pin-icon.svg
/img/main-img/line.svg
/img/main-img/machine.svg
/img/main-img/mail.svg
/img/main-img/medal-2023-red-140.png
/img/main-img/ml.mp4
/img/main-img/mmm.svg
/img/main-img/mobile-unscreen.gif
/img/main-img/mobile.svg
/img/main-img/play.svg
/img/main-img/praktika.webp
/img/main-img/service-design-1.webp
/img/main-img/service-design-2.webp
/img/main-img/service-ml-1.webp
/img/main-img/service-ml-2.webp
/img/main-img/service-ml-3.webp
/img/main-img/service-mobile-1.webp
/img/main-img/service-mobile-2.webp
/img/main-img/service-qa-1.webp
/img/main-img/service-qa-2.webp
/img/main-img/service-qa-3.webp
/img/main-img/service-web-1.webp
/img/main-img/service-web-2.webp
/img/main-img/siteIcon.svg
/img/main-img/Sphere-small.webp
/img/main-img/Sphere.webp
/img/main-img/umn.webp
/img/main-img/vozz-desktop.webp
/img/main-img/vozz-mobile.webp
/img/main-img/vozz.webp
/img/main-img/web.mp4
/img/main-img/web.svg
/img/main-img/yandex-travel.webp
/img/main-img/Без названия.svg
/index.html
/logo192.png
/logo512.png
/manifest.json
/robots.txt

Found on 2023-12-16 03:33

Create report

Open service 45.12.74.50:80 · rsn.doodle.tj

2026-01-26 00:01

HTTP/1.1 201 Created
Date: Mon, 26 Jan 2026 00:01:58 GMT
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, private
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json


{"message":"Not found!"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 45.12.74.50:443 · rsn.doodle.tj

2026-01-26 00:01

HTTP/1.1 201 Created
Date: Mon, 26 Jan 2026 00:01:37 GMT
Server: Apache/2.4.58 (Ubuntu)
Cache-Control: no-cache, private
X-Robots-Tag: noindex
Connection: close
Transfer-Encoding: chunked
Content-Type: application/json


{"message":"Not found!"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 45.12.74.50:443 · elonho.tajsoft.tj

2026-01-25 00:03

HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 00:03:09 GMT
Server: Apache/2.4.58 (Ubuntu)
Last-Modified: Fri, 29 Aug 2025 06:41:03 GMT
ETag: "417-63d7b4e402a5a"
Accept-Ranges: bytes
Content-Length: 1047
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Elonho

<!DOCTYPE html>
<html lang="" class="scrollbar-hidden">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/logo/ico.svg" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link
      href="https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap"
      rel="stylesheet"
    />
    <title>Elonho</title>
    <style>
      html,
      body {
        height: 100%;
        overflow-y: scroll; /* Оставляет прокрутку, но без скроллбара */
      }

      .scrollbar-hidden::-webkit-scrollbar {
        display: none;
      }

      .scrollbar-hidden {
        scrollbar-width: none; /* Firefox */
        -ms-overflow-style: none; /* IE и Edge */
      }
    </style>
    <script type="module" crossorigin src="/assets/index-BAiCzMMA.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-CJh-M1Cp.css">
  </head>
  <body class="font-montserrat scrollbar-hidden bg-main-bg">
    <div id="app"></div>
  </body>
</html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 45.12.74.50:80 · elonho.tajsoft.tj

2026-01-25 00:03

HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Jan 2026 00:03:28 GMT
Server: Apache/2.4.58 (Ubuntu)
Location: https://elonho.tajsoft.tj/
Content-Length: 317
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://elonho.tajsoft.tj/">here</a>.</p>
<hr>
<address>Apache/2.4.58 (Ubuntu) Server at elonho.tajsoft.tj Port 80</address>
</body></html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 45.12.74.50:443 · doodle.tj

2026-01-24 00:04

HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 00:05:00 GMT
Server: Apache/2.4.58 (Ubuntu)
Link: <https://doodle.tj/wp-json/>; rel="https://api.w.org/"
Link: <https://doodle.tj/wp-json/wp/v2/pages/2501>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://doodle.tj/>; rel=shortlink
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2026-01-24 by HttpPlugin

Create report

Open service 45.12.74.50:80 · doodle.tj

2026-01-24 00:04

HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 00:05:17 GMT
Server: Apache/2.4.58 (Ubuntu)
Location: https://doodle.tj/
Content-Length: 301
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://doodle.tj/">here</a>.</p>
<hr>
<address>Apache/2.4.58 (Ubuntu) Server at doodle.tj Port 80</address>
</body></html>

Found 2026-01-24 by HttpPlugin

Create report

Open service 45.12.74.50:443 · www.doodle.tj

2026-01-24 00:04

HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 00:04:46 GMT
Server: Apache/2.4.58 (Ubuntu)
X-Redirect-By: WordPress
Location: https://doodle.tj/
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2026-01-24 by HttpPlugin