LeakIX - Host 45.60.23.114

Host 45.60.23.114

United States

INCAPSULA

Software information

Apache Apache

tcp/443

nginx nginx 1.23.4

tcp/443

nginx nginx

tcp/443

nginx nginx 1.25.5

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.60.23.114
Domain: www.startreefarm.com
Port: 443
URL: https://www.startreefarm.com

First seen 2022-08-30 21:46
Last seen 2023-04-28 23:48
Open for 241 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcd4b2e02b0b9199b13a9ccd230330a715
```
Found 22 files trough .DS_Store spidering:

/index.php
/license.txt
/loader.php
/mojo-package.sh
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php
```
  Found on 2022-08-30 21:46
Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 45.60.23.114
Domain: www.nexttires.com
Port: 2222
URL: https://www.nexttires.com:2222/info.php

First seen 2021-09-18 01:36
Last seen 2022-02-09 20:25
Open for 144 days

Fingerprint: 2c44e2a6278fb0134173d6fa4ac13eb550a0286637ffb9a5faebe5e897254e24

Found PHP info page:
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['HTTPS'] = on
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_AUTHORIZATION'] = no value
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['HTTP_HOST'] = www.nexttires.com
$_SERVER['HTTP_INCAP_CLIENT_IP'] = 167.71.13.196
$_SERVER['HTTP_INCAP_PROXY_449'] = OK
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_X_FORWARDED_FOR'] = 167.71.13.196
$_SERVER['PATH'] = /bin:/usr/bin
$_SERVER['PHP_INI_SCAN_DIR'] = /opt/cpanel/ea-php74/root/etc:/opt/cpanel/ea-php74/root/etc/php.d:.
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REDIRECT_STATUS'] = 200
$_SERVER['REMOTE_ADDR'] = 149.126.75.5
$_SERVER['REMOTE_PORT'] = 45106
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['REQUEST_SCHEME'] = https
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_FILENAME'] = /home/diebezmy/public_html/info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['SERVER_ADDR'] = 162.214.148.119
$_SERVER['SERVER_ADMIN'] = webmaster@die.bez.mybluehost.me
$_SERVER['SERVER_NAME'] = www.nexttires.com
$_SERVER['SERVER_PORT'] = 443
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache
$_SERVER['SSL_TLS_SNI'] = www.nexttires.com
$_SERVER['TZ'] = America/Denver
$_SERVER['UNIQUE_ID'] = YgQjI29vk-ZD-pdCQkZvDAAAAVE
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1644438307.2905
$_SERVER['REQUEST_TIME'] = 1644438307
$_SERVER['argv'] = Array
(
)
$_SERVER['argc'] = 0

Found on 2022-02-09 20:25

Fingerprint: 2c44e2a6278fb0134173d6fa76ce8ce5226f5c253eb3aa1279b3c086750649b6

Found PHP info page:
$_SERVER['USER'] = diebezmy
$_SERVER['HOME'] = /home/diebezmy
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['REMOTE_PORT'] = 58680
$_SERVER['SCRIPT_FILENAME'] = /home/diebezmy/public_html/info.php
$_SERVER['SERVER_ADMIN'] = webmaster@die.bez.mybluehost.me
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['REQUEST_SCHEME'] = https
$_SERVER['DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['REMOTE_ADDR'] = 149.126.75.14
$_SERVER['SERVER_PORT'] = 443
$_SERVER['SERVER_ADDR'] = 162.214.148.119
$_SERVER['SERVER_NAME'] = www.nexttires.com
$_SERVER['SERVER_SOFTWARE'] = Apache
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['PATH'] = /usr/local/jdk/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/usr/local/bin:/usr/X11R6/bin:/root/bin:/opt/bin
$_SERVER['HTTP_INCAP_CLIENT_IP'] = 167.71.13.196
$_SERVER['HTTP_X_FORWARDED_FOR'] = 167.71.13.196
$_SERVER['HTTP_INCAP_PROXY_769'] = OK
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1
$_SERVER['HTTP_HOST'] = www.nexttires.com
$_SERVER['proxy-nokeepalive'] = 1
$_SERVER['SSL_TLS_SNI'] = www.nexttires.com
$_SERVER['HTTPS'] = on
$_SERVER['HTTP_AUTHORIZATION'] = no value
$_SERVER['UNIQUE_ID'] = YUVCqSFwesL1GxRU763txgAAAFU
$_SERVER['FCGI_ROLE'] = RESPONDER
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1631929001.7966
$_SERVER['REQUEST_TIME'] = 1631929001
$_SERVER['argv'] = Array
(
)
$_SERVER['argc'] = 0

Found on 2021-09-18 01:36

Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 45.60.23.114
Domain: www.nexttires.com
Port: 7000
URL: https://www.nexttires.com:7000/info.php

First seen 2021-09-28 12:25

Fingerprint: 2c44e2a6278fb0134173d6fa76ce8ce5226f5c253eb3aa1279b3c0865b5eb3b0

Found PHP info page:
$_SERVER['USER'] = diebezmy
$_SERVER['HOME'] = /home/diebezmy
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['REMOTE_PORT'] = 16558
$_SERVER['SCRIPT_FILENAME'] = /home/diebezmy/public_html/info.php
$_SERVER['SERVER_ADMIN'] = webmaster@die.bez.mybluehost.me
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['REQUEST_SCHEME'] = https
$_SERVER['DOCUMENT_ROOT'] = /home/diebezmy/public_html
$_SERVER['REMOTE_ADDR'] = 149.126.75.14
$_SERVER['SERVER_PORT'] = 443
$_SERVER['SERVER_ADDR'] = 162.214.148.119
$_SERVER['SERVER_NAME'] = www.nexttires.com
$_SERVER['SERVER_SOFTWARE'] = Apache
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['PATH'] = /usr/local/jdk/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/usr/local/bin:/usr/X11R6/bin:/root/bin:/opt/bin
$_SERVER['HTTP_INCAP_CLIENT_IP'] = 167.71.13.196
$_SERVER['HTTP_X_FORWARDED_FOR'] = 167.71.13.196
$_SERVER['HTTP_INCAP_PROXY_769'] = OK
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_HOST'] = www.nexttires.com
$_SERVER['proxy-nokeepalive'] = 1
$_SERVER['SSL_TLS_SNI'] = www.nexttires.com
$_SERVER['HTTPS'] = on
$_SERVER['HTTP_AUTHORIZATION'] = no value
$_SERVER['UNIQUE_ID'] = YVMJu2oaPqaZd-qcROPvAwAAAQk
$_SERVER['FCGI_ROLE'] = RESPONDER
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1632831931.9688
$_SERVER['REQUEST_TIME'] = 1632831931
$_SERVER['argv'] = Array
(
)
$_SERVER['argc'] = 0

Found on 2021-09-28 12:25

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.60.23.114
Domain: www.speakenglishwithtiffani.com
Port: 8443
URL: https://www.speakenglishwithtiffani.com:8443

First seen 2021-07-31 13:09
Last seen 2021-08-09 23:01
Open for 9 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d28a25ad628a25ad628a25ad628a25ad6
```
Found 1 files trough .DS_Store spidering:

/.git
```
  Found on 2021-07-31 13:09
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.60.23.114
Domain: www.speakenglishwithtiffani.com
Port: 3000
URL: https://www.speakenglishwithtiffani.com:3000

First seen 2021-08-03 01:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d28a25ad628a25ad628a25ad628a25ad6
```
Found 1 files trough .DS_Store spidering:

/.git
```
  Found on 2021-08-03 01:35
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.60.23.114
Domain: www.speakenglishwithtiffani.com
Port: 443
URL: https://www.speakenglishwithtiffani.com

First seen 2021-07-29 06:42
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d28a25ad628a25ad628a25ad628a25ad6
```
Found 1 files trough .DS_Store spidering:

/.git
```
  Found on 2021-07-29 06:42
Create report

Open service 45.60.23.114:443 · www.cyndeebaldwin.com

2024-11-02 15:35

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 212
X-Iinfo: 1-15322244-0 0NNN RT(1730561728555 8) q(0 -1 -1 0) r(0 -1) B10(4,312,0) U18
Set-Cookie: visid_incap_2136594=yQz5Zl/PRcKbHsl++MLf7sBGJmcAAAAAQUIPAAAAAAD34elXk43pDHUytbPty30E; expires=Sat, 01 Nov 2025 22:45:15 GMT; HttpOnly; path=/; Domain=.cyndeebaldwin.com
Set-Cookie: incap_ses_878_2136594=zbgOUsb+nHlPhnocbkgvDMBGJmcAAAAAghybgRt+R+woVXVBUrkcEQ==; path=/; Domain=.cyndeebaldwin.com


<html>
<head>
<META NAME="robots" CONTENT="noindex,nofollow">
<script src="/_Incapsula_Resource?SWJIYLWA=5074a744e2e3d891814e9a2dace20bd4,719d34d31c8e3a6e6fffd425f7e032f3">
</script>
<body>
</body></html>

Found 2024-11-02 by HttpPlugin

Host 45.60.23.114

United States

Software information

MacOS file listing through .DS_Store file

Found php information file

Found php information file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file