LeakIX - Host 83.169.39.158

Host 83.169.39.158

Germany

Host Europe GmbH

Ubuntu

Software information

nginx nginx 1.10.3

tcp/443 tcp/80

sw-cp-server

tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 83.169.39.158
Domain: www.asigest-group.com
Port: 443
URL: https://www.asigest-group.com

First seen 2021-08-01 18:48
Last seen 2024-04-13 02:27
Open for 985 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcad0419ccefa2e6dc70a03bd5f79169d2
```
Found 22 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
/public/images
/public/images/companylogo.png
/public/images/email_subscribe.png
/public/images/Fevicon.png
/public/images/Spin.gif
/public/images/videos
/public/js
/public/styles
/public/views
```
  Found on 2024-04-13 02:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a06e009db0f5d368b8aa9ca7397b27f913
```
Found 13 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
```
  Found on 2021-10-06 02:51
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 83.169.39.158
Domain: asigest-group.com
Port: 443
URL: https://asigest-group.com

First seen 2021-08-01 18:48
Last seen 2024-04-13 02:27
Open for 985 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcad0419ccefa2e6dc70a03bd5f79169d2
```
Found 22 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
/public/images
/public/images/companylogo.png
/public/images/email_subscribe.png
/public/images/Fevicon.png
/public/images/Spin.gif
/public/images/videos
/public/js
/public/styles
/public/views
```
  Found on 2024-04-13 02:27
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a06e009db0f5d368b8aa9ca7397b27f913
```
Found 13 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
```
  Found on 2022-12-16 21:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 83.169.39.158
Port: 443
URL: https://83.169.39.158

First seen 2021-07-15 14:37
Last seen 2024-04-10 14:13
Open for 999 days
- Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcad0419ccefa2e6dc70a03bd5f79169d2
```
Found 22 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
/public/images
/public/images/companylogo.png
/public/images/email_subscribe.png
/public/images/Fevicon.png
/public/images/Spin.gif
/public/images/videos
/public/js
/public/styles
/public/views
```
  Found on 2024-04-10 14:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecac82a5dc8b4b430ca2149d2544e20754
```
Found 17 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
/public/images
/public/js
/public/styles
/public/views
```
  Found on 2022-11-19 16:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a06e009db0f5d368b8aa9ca7397b27f913
```
Found 13 files trough .DS_Store spidering:

/assets
/assets/css
/assets/images
/assets/js
/assets/partials
/assets/scss
/dist
/gulpfile.js
/index.html
/node_modules
/package-lock.json
/package.json
/public
```
  Found on 2021-09-19 17:38
Create report
Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 83.169.39.158
Port: 9092

First seen 2022-08-06 17:21
Last seen 2024-04-10 14:07
Open for 612 days
- Fingerprint: 43224224eeda9da960defeaa0efe442af471ecaff471ecaff471ecaff471ecaf
```
NoAuth
Found topic __consumer_offsets
Found topic boot.t
```
  Found on 2024-04-10 14:07
- Fingerprint: 43224224eeda9da960defeaaac9c0b2fc0f65757c0f65757c0f65757c0f65757
```
NoAuth
Found topic boot.t
Found topic __consumer_offsets
```
  Found on 2023-11-09 10:45
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 83.169.39.158
Domain: www.asigest-group.com
Port: 443
URL: https://www.asigest-group.com/.git/config

First seen 2021-08-01 18:48
Last seen 2021-10-06 02:51
Open for 65 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652298946e14
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thrymrsoftware/asigest.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "newdesign"]
	remote = origin
	merge = refs/heads/newdesign
[branch "metaKeywords"]
	remote = origin
	merge = refs/heads/metaKeywords
```
  Found on 2021-08-01 18:48
  
  412 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 83.169.39.158
Domain: asigest-group.com
Port: 443
URL: https://asigest-group.com/.git/config

First seen 2021-08-01 18:48
Last seen 2021-10-06 02:51
Open for 65 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652298946e14
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thrymrsoftware/asigest.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "newdesign"]
	remote = origin
	merge = refs/heads/newdesign
[branch "metaKeywords"]
	remote = origin
	merge = refs/heads/metaKeywords
```
  Found on 2021-08-01 18:48
  
  412 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 83.169.39.158
Port: 8443
URL: https://83.169.39.158:8443/.git/config

First seen 2021-06-28 10:47
Last seen 2021-09-25 01:19
Open for 88 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652298946e14
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thrymrsoftware/asigest.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "newdesign"]
	remote = origin
	merge = refs/heads/newdesign
[branch "metaKeywords"]
	remote = origin
	merge = refs/heads/metaKeywords
```
  Found on 2021-06-28 10:47
  
  412 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 83.169.39.158
Port: 443
URL: https://83.169.39.158/.git/config

First seen 2021-05-30 22:19
Last seen 2021-08-16 13:00
Open for 77 days

Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652298946e14

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thrymrsoftware/asigest.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "newdesign"]
	remote = origin
	merge = refs/heads/newdesign
[branch "metaKeywords"]
	remote = origin
	merge = refs/heads/metaKeywords

Found on 2021-05-30 22:19

412 Bytes

Create report

Open service 83.169.39.158:443 · cms.asigest-group.com

2024-04-13 02:27

HTTP/1.1 200 
Server: nginx/1.10.3 (Ubuntu)
Date: Sat, 13 Apr 2024 02:27:51 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Language: en-US
Access-Control-Allow-Origin:: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Headers: Origin, Authorization, Accept
Access-Control-Allow-Credentials: true
x-frame-options: SAMEORIGIN

Page title: Signin

<!DOCTYPE html>

<html lang="en">
<head>
  <meta charset="UTF-8" />
  <title>Signin</title>
  <link href="/css/style-sheet.css" rel="stylesheet" />
  <link href="/css/header-footer.css" rel="stylesheet" />
  <link href="/bootstrap-3.3.7-dist/css/bootstrap.min.css" rel="stylesheet" />
  <link href="/css/notify.css" rel="stylesheet" />
  <script src="/js/jquery-3.2.1.min.js"></script>
  <script src="/bootstrap-3.3.7-dist/js/bootstrap.min.js"></script>
  <script src="/js/notify.min.js"></script>
</head>
<body>
<header class="navbar navbar-default header-color header-margin-0 border-radius-0">
  <div class="container">
    <div class="row header-height">
      <div class="col-md-6 padding-l-r-0 commn-padding">
        <div class="navbar-header burger-btn">
          <button aria-expanded="false" class="navbar-toggle pull-left out-line-none
                header-color border-0 burger-btn" data-target="#bs-example-navbar-collapse-1" data-toggle="collapse" type="button">
            <span class="sr-only">Toggle navigation</span>
            <span class="icon-bar bg-white"></span>
            <span class="icon-bar bg-white"></span>
            <span class="icon-bar bg-white"></span>
          </button>
          <h3><a class="header-logo-txt" style="text-decoration: none !important;" href="/sites"><b>Northern Lights</b><br />
            &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<i style="font-size: 15px;">- The Thrymr CMS/BAAS</i></a></h3>
        </div>
      </div>
      
    </div>
  </div>
</header>
<div class="container padding-l-r-0 padding-forms">
  <div class="col-lg-12">
    <div class="col-lg-3"></div>
    <div class="col-lg-6">
      
      <div class="box signin-box">
        <div class="box-header">
          <h3 class="box-title">SignIn</h3>
        </div>
        <div class="box-body">
          <form method="post" action="/login/authenticate">
            <div class="form-group">
              <input class="form-control" data-validation="email" data-validation-error-msg="Please Enter Email" id="username" name="username" placeholder="Email" type="email" />
            </div>
            <div class="form-group">
              <input class="form-control" data-validation="required" data-validation-error-msg="Please Enter Password" id="password" name="password" placeholder="Password" type="password" />
            </div>
            <div class="txt-center">
              <button class="btn btn-default" type="submit">Submit</button>
            </div>
          </form>
        </div>
        <div class="box-footer">
          <div class="table-tp-dv txt-center">
            New User? <a href="/signup">SignUp</a>
          </div>
        </div>
      </div>
    </div>
    <div class="col-lg-3"></div>
  </div>
</div>
<footer class="navbar navbar-default text-center footer-style footer-color navbar-fixed-bottom">
  <p class="text-muted small logo-footer">© Northern Lights</p>
</footer>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-form-validator/2.2.43/jquery.form-validator.min.js"></script>
<script type="application/javascript">
  $.validate({
    modules: 'location, date, security, file',
    onModulesLoaded: function () {
      $('#country').suggestCountry();
    }
  });

  function showMessage(message, status, position) {
    $.notify({
      message: message,
      status: status,
      timeout: 5000,
      pos: position,
      zIndex: 10400
    });
  }

  var response = null;
  if (response)
    showMessage(response.message, response.status, "top-center")
</script>

</body></html>