LeakIX - Host 58.218.215.140

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 180.163.146.113
Domain: hekr.me
Port: 443
URL: https://hekr.me

First seen 2021-08-17 17:45
Last seen 2026-01-27 21:24
Open for 1624 days

Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e398563f91e

[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab-ci-token:bvUVssxYyhrqhfq2PNVs@gitlab.hekr.me/front-end/hekr-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2026-01-27 21:24

345 Bytes

Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e39e7465280

[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab-ci-token:7Vjeqkfyk_AVMd8LSxrX@gitlab.hekr.me/front-end/hekr-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-06-20 19:23

345 Bytes

Severity: critical
Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e394b4166af

[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab-ci-token:Cb1xuuCLajujTAC-qNWW@gitlab.hekr.me/front-end/hekr-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-04-02 03:38

345 Bytes

Fingerprint: 2580fa947178c883cda65107b6f0882eb5010f354c5d91ec33bd1e39b3b58109

[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab-ci-token:7AV6apRxwNj15JfWe3Hv@gitlab.hekr.me/industry-solutions/hekr-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2021-08-17 17:45

354 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 81.69.54.135
Domain: www.jinjulp.com
Port: 443
URL: https://www.jinjulp.com

First seen 2022-10-28 01:44
Last seen 2025-11-28 05:09
Open for 1127 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247251e0762cd12422413917f369bf2ef6b3d

Found 9 files trough .DS_Store spidering:

/admin
/cashier
/install
/pages
/statics
/store
/supplier
/upgrade
/uploads

Found on 2025-11-28 05:09

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87721389a08ed061f9548a0c9bc47fe1715d

Found 11 files trough .DS_Store spidering:

/admin
/cashier
/install
/pages
/statics
/statics/images
/statics/mp_view
/store
/supplier
/upgrade
/uploads

Found on 2022-10-28 01:44

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: static.yijiepack.com
Port: 443
URL: https://static.yijiepack.com

First seen 2022-09-05 00:20
Last seen 2025-08-18 01:41
Open for 1078 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228ab9e27

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitee.com:songdragon/yijiepack.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-08-18 01:41

263 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: static.yijiepack.com
Port: 80
URL: http://static.yijiepack.com

First seen 2022-09-05 00:20
Last seen 2025-08-18 01:41
Open for 1078 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228ab9e27

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitee.com:songdragon/yijiepack.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-08-18 01:41

263 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: skpmenu.koikreative.com
Port: 80
URL: http://skpmenu.koikreative.com

First seen 2022-08-17 03:51
Last seen 2024-12-30 16:19
Open for 866 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522dd5ebde8

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	url = git@git.coding.net:koikreative/skpmenu.koikreative.com.git
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-12-30 16:19

283 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 81.69.54.135
Domain: www.jinjulp.com
Port: 80
URL: http://www.jinjulp.com

First seen 2022-10-28 01:44
Last seen 2024-10-25 16:10
Open for 728 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247251e0762cd12422413917f369bf2ef6b3d

Found 9 files trough .DS_Store spidering:

/admin
/cashier
/install
/pages
/statics
/store
/supplier
/upgrade
/uploads

Found on 2024-10-25 16:10

Severity: medium
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bc3a41d638d13a7912d62b2053293e738

Found 72 files trough .DS_Store spidering:

/admin
/cashier
/install
/pages
/statics
/statics/images
/statics/mp_view
/store
/supplier
/upgrade
/uploads
/uploads/system
/uploads/system/00353202104251712149132.jpg
/uploads/system/00a8f202104291705362017.jpg
/uploads/system/0c4b29a624e97cb26ff7e4ca473b4c5f.jpg
/uploads/system/0e1afe894c946c459e2f892cc0894afa.png
/uploads/system/15ed21e8b1a3eacbac52c30bf8a82bc4.png
/uploads/system/1682e202104291658295445.jpg
/uploads/system/1773b3563b5bf6e8980231adf786d6b1.png
/uploads/system/1b244797f8b86b4cc0665d75d160aa30.png
/uploads/system/1c0fb1ff89e1f6f347fb131544056910.png
/uploads/system/1dfb2b9c571e71c044c5ec60f551b535.png
/uploads/system/1f05bd27a6af2da438dc2bb689995fc5.png
/uploads/system/28579c3fa0be9980bd2ac1d4bc802db7.png
/uploads/system/2c1bbd9fa1c769dde1f7dc9d12b690c2.png
/uploads/system/3241806839078a441d4e50d14af4ad33.png
/uploads/system/3258440ff097fb3675bb2cd72645585a.jpg
/uploads/system/3b0a1202104291705369422.jpg
/uploads/system/422aabba499263112231b8efecc042be.jpg
/uploads/system/47c6046274318574a4840ad4f4c566f1.png
/uploads/system/537f9aea67cc6df860ba874044ab6611.png
/uploads/system/55f5518b80f35386bc7224cfb1ee3700.png
/uploads/system/5843fc72656c1cfee8cec3e6e8d3107f.png
/uploads/system/58908a8c245f422da6e0924dec27c95d.png
/uploads/system/5c9ccca12638a.gif
/uploads/system/5c9ccca178a67.gif
/uploads/system/5c9ccca1a01b6.gif
/uploads/system/5c9ccca1c78cd.gif
/uploads/system/5f3423bdca83b3c988afd15000d3b1ce.png
/uploads/system/723adbdd4e49a0f9394dfc700ab5dba3.png
/uploads/system/756bc202104251709155325.jpg
/uploads/system/75d9cd78e50fb23f73c4d24747ec8444.png
/uploads/system/7adae9b31744480adf98a5c28a4ea095.png
/uploads/system/7ba5e7e9bcd1ed480fdd432b49a3161a.gif
/uploads/system/85f97bbf62557aea738faaf8c578aed0.png
/uploads/system/88898202104251734516138.png
/uploads/system/8ed48a73f3184f62d76efd2e7a753f58.png
/uploads/system/915bc202104291705369876.jpg
/uploads/system/94289202104251713378235.png
/uploads/system/9726fa46fa5060f6fe4618aab121d619.png
/uploads/system/9a54e7723ab661ff4545984ee0e82dd4.png
/uploads/system/a1d1cce9c4760f313318a964745537c3.png
/uploads/system/a377176f6808c45ee34270377c32ffb3.png
/uploads/system/a4e42131851b34f6177caf633cdb18dd.png
/uploads/system/ad124b0ffb80f45cca002be5f6bdd9aa.png
/uploads/system/af39220228af28e2fa389d2b141ac378.png
/uploads/system/b56f2bc3e92ddf7e306bdd228fae1993.png
/uploads/system/c560902bec05d70443886e8b0f46d4b7.png
/uploads/system/cee7e202104251734196138.png
/uploads/system/d4398c5d36757c1b1ed1f21202bea1c0.png
/uploads/system/d522b58032088f82443f3f94591b0fc0.png
/uploads/system/d9cea202104251713283778.png
/uploads/system/e3d227d703e847a02655132f223436f8.png
/uploads/system/e4822202104251713242598.png
/uploads/system/ed835202104251709094472.jpg
/uploads/system/f01d5202104291705368486.jpg
/uploads/system/f7c1177d4304372134c6c97f70f225ce.jpg
/uploads/system/f817d3954ffc65e14991ccb1ff2f9107.png
/uploads/system/f834709c81367d94f5fb67d82a7d34bd.png
/uploads/system/fbacd351e606f494431a9c777ce7522c.png
/uploads/system/fcc758713087632dc785fff3d37db928.png
/uploads/system/store_spread.png

Found on 2022-10-28 01:44

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 58.218.215.140
Domain: dhapp-z266.zanzanapp.com
Port: 80
URL: http://dhapp-z266.zanzanapp.com

First seen 2022-09-22 00:20

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe3d5e20dd48e0873ebfd3aa0dec27f4e1

Found 15 files trough .DS_Store spidering:

/Application
/Application/Common
/Application/Common/Alidayu
/Application/Common/Aliopen
/Application/Common/Alipay
/Application/Common/Ipip
/Application/Common/Jhpay
/Application/Common/OSS
/Application/Conf
/Application/Lib
/Application/PHPExcel
/Application/Runtime
/Application/Tpl
/goods_pic
/static

Found on 2022-09-22 00:20

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 58.218.215.140
Domain: dhapp-z266.zanzanapp.com
Port: 443
URL: https://dhapp-z266.zanzanapp.com

First seen 2022-09-22 00:20

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe3d5e20dd48e0873ebfd3aa0dec27f4e1

Found 15 files trough .DS_Store spidering:

/Application
/Application/Common
/Application/Common/Alidayu
/Application/Common/Aliopen
/Application/Common/Alipay
/Application/Common/Ipip
/Application/Common/Jhpay
/Application/Common/OSS
/Application/Conf
/Application/Lib
/Application/PHPExcel
/Application/Runtime
/Application/Tpl
/goods_pic
/static

Found on 2022-09-22 00:20

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 58.218.215.140
Domain: oppo29.qiminzi.com
Port: 443
URL: https://oppo29.qiminzi.com

First seen 2022-09-21 16:12

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642c827a725d3ed75f6d3ed75f6d3ed75f6
```
Found 2 files trough .DS_Store spidering:

/payment
/payment/Wxpay
```
Found on 2022-09-21 16:12

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 58.218.215.140
Domain: oppo29.qiminzi.com
Port: 80
URL: http://oppo29.qiminzi.com

First seen 2022-09-21 16:12

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642c827a725d3ed75f6d3ed75f6d3ed75f6
```
Found 2 files trough .DS_Store spidering:

/payment
/payment/Wxpay
```
Found on 2022-09-21 16:12

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: grace.55app.top
Port: 443
URL: https://grace.55app.top

First seen 2022-09-07 01:54

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a2f0c099

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://e.coding.net/ranshu/toupiao-weixin-h5/weixin-h5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-09-07 01:54

284 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: system.996app.top
Port: 443
URL: https://system.996app.top

First seen 2022-09-07 01:34

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a2f0c099

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://e.coding.net/ranshu/toupiao-weixin-h5/weixin-h5.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-09-07 01:34

284 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: cdn029.sdertz21.cn
Port: 80
URL: http://cdn029.sdertz21.cn

First seen 2022-08-22 22:26

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522399869d6

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitee.com/eongoo/wp.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
     	helper = store

Found on 2022-08-22 22:26

290 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 58.218.215.140
Domain: cdn029.sdertz21.cn
Port: 443
URL: https://cdn029.sdertz21.cn

First seen 2022-08-22 22:26

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522399869d6

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitee.com/eongoo/wp.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
     	helper = store

Found on 2022-08-22 22:26

290 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 58.218.215.140
Domain: ke.jiuyuexiaoyuan.cn
Port: 443
URL: https://ke.jiuyuexiaoyuan.cn

First seen 2021-07-29 05:33
Last seen 2021-11-01 13:03
Open for 95 days

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fd55df5f794525efc0950713c03bfb2d1

Found 10 files trough .DS_Store spidering:

/favicon.ico
/index.php
/install
/nginx.htaccess
/pc
/public
/static
/system
/template.xlsx
/wap

Found on 2021-11-01 13:03

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a3fae486eece34d71a1d314e53e1ee5a0

Found 19 files trough .DS_Store spidering:

/favicon.ico
/index.php
/install
/install/auto.php
/install/config.php
/install/css
/install/images
/install/index.php
/install/index_sae.php
/install/js
/install/swoole-compiler-loader.php
/install/templates
/nginx.htaccess
/pc
/public
/static
/system
/template.xlsx
/wap

Found on 2021-07-29 05:33

Create report

Host 58.218.215.140

China

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Domain summary