LeakIX - Host 85.9.214.214

Host 85.9.214.214

Finland

UpCloud Ltd

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 85.9.214.214
Domain: kp-dev.wphost.nl
Port: 443
URL: https://kp-dev.wphost.nl

First seen 2025-12-05 13:25
Last seen 2026-02-09 16:00
Open for 66 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f9cf9902f9cf99058c2dde059b6f5b22ca548e3ab676ca0

Found 75 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2026-02-09 16:00

Severity: high
Fingerprint: 5f32cf5d6962f09c5d6424645d642464c72e6becced8a56e78836f6ffc8bd4cc

Found 79 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/addons/moneybird_billing
/modules/addons/moneybird_billing/callback
/modules/addons/moneybird_billing/lib
/modules/addons/moneybird_billing/templates
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2026-01-16 10:31

Severity: medium
Fingerprint: 5f32cf5d6962f09c3005b7223005b7226bb01fce1e2408b0d303d219774f817e

Found 77 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/addons/moneybird
/modules/addons/moneybird/lib
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2025-12-16 04:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a08154955de301fbbf79ce9984d30921e747ab2

Found 70 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/addons/moneybird
/modules/addons/moneybird/lib
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2025-12-12 12:49

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 85.9.214.214
Domain: kp-dev.wphost.nl
Port: 80
URL: http://kp-dev.wphost.nl

First seen 2025-12-05 13:25
Last seen 2026-02-08 22:08
Open for 65 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f9cf9902f9cf99058c2dde059b6f5b22ca548e3ab676ca0

Found 75 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2026-02-08 22:08

Severity: high
Fingerprint: 5f32cf5d6962f09c5d6424645d642464c72e6becced8a56e78836f6ffc8bd4cc

Found 79 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/addons/moneybird_billing
/modules/addons/moneybird_billing/callback
/modules/addons/moneybird_billing/lib
/modules/addons/moneybird_billing/templates
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2026-01-23 05:12

Severity: medium
Fingerprint: 5f32cf5d6962f09c3005b7223005b7226bb01fce1e2408b0d303d219774f817e

Found 77 files trough .DS_Store spidering:

/AdminxV1.0.7-Whmcs8.10.X-Php7.4-Php8.2-IonCube-10-13
/aff.php
/affiliates.php
/announcements.php
/announcementsrss.php
/assets
/attachments
/banned.php
/cart.php
/clientarea.php
/configuration.php
/configuration.sample.php
/configuressl.php
/contact.php
/creditcard.php
/dist.loghandler.php
/dl.php
/dologin.php
/domainchecker.php
/downloads
/downloads.php
/feeds
/includes
/index.php
/init.php
/knowledgebase.php
/lang
/link.php
/login.php
/logout.php
/modules
/modules/addons
/modules/addons/moneybird
/modules/addons/moneybird/lib
/modules/autoload.php
/modules/fraud
/modules/gateways
/modules/index.php
/modules/mail
/modules/notifications
/modules/registrars
/modules/registrars/realtimeregister
/modules/registrars/realtimeregister/templates
/modules/reports
/modules/security
/modules/servers
/modules/support
/modules/widgets
/networkissues.php
/networkissuesrss.php
/oauth
/php.ini
/pwreset.php
/redbox
/register.php
/resources
/serverstatus.php
/status
/submitticket.php
/supporttickets.php
/templates
/templates/lagom2
/templates/lagom2/core
/templates/lagom2/core/extensions
/templates/lagom2/core/extensions/EmailStyle
/templates/lagom2/core/extensions/EmailStyle/styles
/templates/lagom2/core/extensions/EmailStyle/styles/template-3-modern
/templates/lagom2/core/hooks
/templates_c
/unsubscribe.php
/upgrade.php
/vendor
/viewemail.php
/viewinvoice.php
/viewquote.php
/viewticket.php
/whois.php

Found on 2025-12-16 13:21

Create report

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 85.9.214.214
Port: 22

First seen 2025-12-10 08:01
Last seen 2026-02-08 17:56
Open for 60 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb50006c01bfe916ff6fe916ff6fe916ff6fe916ff6
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 17:56
Create report

Open service 85.9.214.214:22

2026-01-22 14:45
Found 2026-01-22 by SSHOpenPlugin
Create report

Domain summary

kp-dev.wphost.nl 7

1 recorded

Host 85.9.214.214

Finland

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

SSH is potenitally vulnerable

Create report

Domain summary