LeakIX - Host 51.161.84.6

Host 51.161.84.6

Canada

OVH SAS

Software information

Apache Apache 2

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.161.84.6
Domain: www1.cnd-m.org
Port: 443
URL: https://www1.cnd-m.org

First seen 2023-04-04 05:12
Last seen 2026-02-09 18:22
Open for 1042 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc46f5c780a788b2662ef0b011bfe21198
```
Found 4 files trough .DS_Store spidering:

/app
/app/mu-plugins
/app/mu-plugins/advanced-custom-fields-pro
/app/plugins
```
  Found on 2026-02-09 18:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.161.84.6
Domain: staging.jan-pro.ca
Port: 443
URL: https://staging.jan-pro.ca

First seen 2023-09-30 05:12
Last seen 2026-02-09 13:55
Open for 863 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fbf31c92f39e4491b5258862452588624
```
Found 3 files trough .DS_Store spidering:

/app
/app/mu-plugins
/app/mu-plugins/advanced-custom-fields-pro
```
  Found on 2026-02-09 13:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.161.84.6
Domain: staging.jan-pro.ca
Port: 80
URL: http://staging.jan-pro.ca

First seen 2023-09-30 05:12
Last seen 2026-02-09 05:37
Open for 863 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fbf31c92f39e4491b5258862452588624
```
Found 3 files trough .DS_Store spidering:

/app
/app/mu-plugins
/app/mu-plugins/advanced-custom-fields-pro
```
  Found on 2026-02-09 05:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423468803a3d4d5ee83d4d5ee83d4d5ee8
```
Found 2 files trough .DS_Store spidering:

/app
/app/mu-plugins
```
  Found on 2025-11-02 09:06
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 51.161.84.6
Port: 22

First seen 2025-06-24 09:50
Last seen 2026-02-08 19:01
Open for 229 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 19:01
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.161.84.6
Domain: atmosphare.focuslabs.com
Port: 80
URL: http://atmosphare.focuslabs.com

First seen 2023-07-03 18:25
Last seen 2025-06-10 16:26
Open for 707 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab7a4b3253ef88b396d316bf970637d933
```
Found 7 files trough .DS_Store spidering:

/app
/app/plugins
/app/plugins/advanced-database-cleaner
/app/plugins/capability-manager-enhanced
/app/plugins/query-monitor
/app/plugins/user-role-editor
/app/plugins/woocommerce
```
  Found on 2025-06-10 16:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d9ebca5a19ebca5a19ebca5a19ebca5a1
```
Found 1 files trough .DS_Store spidering:

/app
```
  Found on 2023-07-03 18:25
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 51.161.84.6
Domain: atmosphare.focuslabs.com
Port: 443
URL: https://atmosphare.focuslabs.com

First seen 2023-07-03 18:25
Last seen 2025-06-09 03:50
Open for 706 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab7a4b3253ef88b396d316bf970637d933
```
Found 7 files trough .DS_Store spidering:

/app
/app/plugins
/app/plugins/advanced-database-cleaner
/app/plugins/capability-manager-enhanced
/app/plugins/query-monitor
/app/plugins/user-role-editor
/app/plugins/woocommerce
```
  Found on 2025-06-09 03:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d9ebca5a19ebca5a19ebca5a19ebca5a1
```
Found 1 files trough .DS_Store spidering:

/app
```
  Found on 2023-07-03 18:25
Create report

Open service 51.161.84.6:443 · www.ebbp.ca

2026-02-09 19:36

HTTP/1.1 301 Moved Permanently
Date: Mon, 09 Feb 2026 19:36:45 GMT
Server: Apache/2
X-W3TC-CDN: ftp
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, close
Location: https://ebbp.ca/
Access-Control-Allow-Origin: *
Referrer-Policy: no-referrer-when-downgrade
Vary: User-Agent
Content-Length: 0
Content-Type: text/html; charset=UTF-8

Found 2026-02-09 by HttpPlugin

Create report

Open service 51.161.84.6:443 · amourapocalypse.ca

2026-02-01 18:44

HTTP/1.1 301 Moved Permanently
Date: Sun, 01 Feb 2026 18:44:43 GMT
Server: Apache/2
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, close
Location: https://imminafilms.com/fr/films/amour-apocalypse/
Vary: Accept-Encoding,User-Agent
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2026-02-01 by HttpPlugin

Create report

Open service 51.161.84.6:443 · nuxt.obox.group

2026-01-30 18:01

HTTP/1.1 200 OK
Date: Fri, 30 Jan 2026 18:01:33 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, close
Last-Modified: Mon, 16 Dec 2024 17:12:14 GMT
ETag: "3f-629664829ef55"
Accept-Ranges: bytes
Content-Length: 63
Vary: User-Agent
Content-Type: text/html


<script>
location.href="https://nuxt.obox.group/fr";
</script>

Found 2026-01-30 by HttpPlugin

Create report

Open service 51.161.84.6:443 · zapmailapp.com

2026-01-24 17:58

HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 17:58:02 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, close
Last-Modified: Fri, 09 Feb 2024 04:08:27 GMT
ETag: "3fc-610eb147db05c"
Accept-Ranges: bytes
Content-Length: 1020
Vary: Accept-Encoding,User-Agent
Content-Type: text/html

Page title: ZapMail

<!doctype html>
<html>
<head>
	<meta charset="utf8" >
	<title>ZapMail</title>
<style>
* {
	  padding: 0;
	    margin: 0;
}

html,
body {
	  height: 100%;
}


div {
	  height: 100%;
}

pre {
	  display: flex;
	  justify-content: center;
	  align-items: center;
	  height: 100%;
}
</style>
</head>
<body>
	<div>
	<pre>

8888888888P                   888b     d888          d8b 888
      d88P                    8888b   d8888          Y8P 888
     d88P                     88888b.d88888              888
    d88P     8888b.  88888b.  888Y88888P888  8888b.  888 888
   d88P         "88b 888 "88b 888 Y888P 888     "88b 888 888
  d88P      .d888888 888  888 888  Y8P  888 .d888888 888 888
 d88P       888  888 888 d88P 888   "   888 888  888 888 888
d8888888888 "Y888888 88888P"  888       888 "Y888888 888 888
                     888                                    
                     888                                    
                     888                                    
</pre>
	</div>
</body>
</html>

Found 2026-01-24 by HttpPlugin

Create report

Open service 51.161.84.6:80 · zapmailapp.com

2026-01-24 17:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 17:58:21 GMT
Server: Apache/2
Location: https://zapmailapp.com/
Content-Length: 231
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://zapmailapp.com/">here</a>.</p>
</body></html>

Found 2026-01-24 by HttpPlugin