LeakIX - Host 91.216.248.22

Host 91.216.248.22

Germany

Hetzner Online GmbH

centos

Software information

openresty

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.216.248.22
Domain: www.whitelabel.webspace.rocks
Port: 443
URL: https://www.whitelabel.webspace.rocks/_profiler/empty/search/results

First seen 2022-09-17 11:44
Last seen 2025-12-06 08:19
Open for 1175 days
- Fingerprint: 407cf4363b0e62fafca67e078d0b1c3b8d0b1c3b8d0b1c3b8d0b1c3b8d0b1c3b
```
Symfony profiler enabled:
https://www.whitelabel.webspace.rocks/_profiler/empty/search/results
```
  Found on 2025-12-06 08:19
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 91.216.248.22
Domain: www.companeros.lima.zone
Port: 443
URL: https://www.companeros.lima.zone/_profiler/empty/search/results

First seen 2023-01-29 04:34
Last seen 2025-10-19 09:51
Open for 994 days
- Fingerprint: 407cf4363b0e62fafca67e07b95b8f50b95b8f50b95b8f50b95b8f50b95b8f50
```
Symfony profiler enabled:
https://www.companeros.lima.zone/_profiler/empty/search/results
```
  Found on 2025-10-19 09:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 77.109.174.119
Domain: airfieldmanager-game.de
Port: 443
URL: https://airfieldmanager-game.de

First seen 2022-09-19 12:23
Last seen 2024-07-30 14:27
Open for 680 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb75baf710
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = git@gitlab.com:airfield-manager/airfield-manager.git
	fetch = +refs/heads/*:refs/heads/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-07-30 14:27
  
  306 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522aa2067a0
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.com:airfield-manager/airfield-manager.git
	fetch = +refs/heads/*:refs/heads/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-09-19 12:23
  
  268 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.lerchenau.wachbuch.info
Port: 443
URL: https://www.lerchenau.wachbuch.info

First seen 2024-03-19 12:35
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fc37141d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.lrz.de:di29baf/Wachplan_Design.git
	fetch = +refs/heads/erweiterung-lohhof:refs/remotes/origin/erweiterung-lohhof
[branch "erweiterung-lohhof"]
	remote = origin
	merge = refs/heads/erweiterung-lohhof
```
  Found on 2024-03-19 12:35
  
  328 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: emmerweider.com
Port: 443
URL: https://emmerweider.com

First seen 2022-09-19 12:28
Last seen 2024-03-15 23:55
Open for 543 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a2bf5947
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://DillSpider@bitbucket.org/stuhlgang/ew2020.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-03-15 23:55
  
  323 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.emmerweider.lima-city.de
Port: 443
URL: https://www.emmerweider.lima-city.de

First seen 2022-09-16 12:31
Last seen 2024-03-12 20:02
Open for 543 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a2bf5947
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://DillSpider@bitbucket.org/stuhlgang/ew2020.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-03-12 20:02
  
  323 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: sachverstaendiger-jobst.de
Port: 443
URL: https://sachverstaendiger-jobst.de

First seen 2022-12-17 14:53
Last seen 2024-03-12 16:55
Open for 451 days

Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec547fc352b51440d53057dbae74dfbe68

Found 17 files trough .DS_Store spidering:

/wp-content
/wp-content/themes
/wp-content/themes/lupuspictures_2
/wp-content/themes/lupuspictures_2/cookieAlert
/wp-content/themes/lupuspictures_2/cookieAlert/dist
/wp-content/themes/lupuspictures_2/cookieAlert/img
/wp-content/themes/lupuspictures_2/css
/wp-content/themes/lupuspictures_2/css/fontawesome
/wp-content/themes/lupuspictures_2/css/fontawesome/css
/wp-content/themes/lupuspictures_2/css/fontawesome/Neuer Ordner
/wp-content/themes/lupuspictures_2/css/fontawesome/webfonts
/wp-content/themes/lupuspictures_2/images
/wp-content/themes/lupuspictures_2/js
/wp-content/themes/lupuspictures_2/mobileMenu
/wp-content/themes/lupuspictures_2/PHPMailer
/wp-content/themes/lupuspictures_2/PHPMailer/PHPMailer-master
/wp-content/themes/twentynineteen

Found on 2024-03-12 16:55

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719e710ed61a091ad7af1dc75d98ce933f1

Found 16 files trough .DS_Store spidering:

/wp-content
/wp-content/themes
/wp-content/themes/lupuspictures_2
/wp-content/themes/lupuspictures_2/cookieAlert
/wp-content/themes/lupuspictures_2/cookieAlert/dist
/wp-content/themes/lupuspictures_2/cookieAlert/img
/wp-content/themes/lupuspictures_2/css
/wp-content/themes/lupuspictures_2/css/fontawesome
/wp-content/themes/lupuspictures_2/css/fontawesome/css
/wp-content/themes/lupuspictures_2/css/fontawesome/Neuer Ordner
/wp-content/themes/lupuspictures_2/css/fontawesome/webfonts
/wp-content/themes/lupuspictures_2/images
/wp-content/themes/lupuspictures_2/js
/wp-content/themes/lupuspictures_2/mobileMenu
/wp-content/themes/lupuspictures_2/PHPMailer
/wp-content/themes/twentynineteen

Found on 2022-12-17 14:53

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: medienspatzen.de
Port: 443
URL: https://medienspatzen.de

First seen 2022-07-19 09:58
Last seen 2024-03-12 10:03
Open for 602 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d3d10826
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git://git.moodle.org/moodle.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "MOODLE_35_STABLE"]
	remote = origin
	merge = refs/heads/MOODLE_35_STABLE
```
  Found on 2024-03-12 10:03
  
  338 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: sincerelycontent.com
Port: 443
URL: https://sincerelycontent.com

First seen 2023-04-10 09:24
Last seen 2023-06-09 09:55
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf1764209a7e9e51ddf24e51ddf24e51ddf24e5
```
Found 2 files trough .DS_Store spidering:

/customcss
/img
```
  Found on 2023-04-10 09:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: deutschlandticket-schueler.de
Port: 443
URL: https://deutschlandticket-schueler.de

First seen 2023-06-08 12:14
Last seen 2023-06-08 12:14
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f4828ac3cca08ac3cca08ac3cca0
```
Found 2 files trough .DS_Store spidering:

/css
/js
```
  Found on 2023-06-08 12:14
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.transport.airfieldmanager-game.de
Port: 443
URL: https://www.transport.airfieldmanager-game.de

First seen 2022-08-09 09:36
Last seen 2023-06-06 09:50
Open for 301 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652268cc121d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.com:airfield-manager/transport-things.git
	fetch = +refs/heads/*:refs/heads/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-08-09 09:36
  
  267 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: stb-hornauer.de
Port: 443
URL: https://stb-hornauer.de

First seen 2022-10-02 09:13
Last seen 2023-06-04 09:13
Open for 245 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8ef0d5608ef0d5608ef0d5608ef0d560
```
Found 1 files trough .DS_Store spidering:

/favicon
```
  Found on 2022-10-02 09:13
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.socialgrapher.alexpichler.com
Port: 443
URL: https://www.socialgrapher.alexpichler.com

First seen 2022-11-30 13:47
Last seen 2023-05-30 09:16
Open for 180 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652281290481
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://github.com/pichlalex2001/business-listing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-11-30 13:47
  
  323 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: wacholderbert.de
Port: 443
URL: https://wacholderbert.de

First seen 2022-09-19 12:13
Last seen 2023-05-19 21:51
Open for 242 days

Severity: medium
Fingerprint: 2580fa947e78dd084a208bff06453dcf61091abc760cc732da4904d4ba09edf6

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Fri, 19 May 2023 21:51:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
X-Lima-Id: gaT6ri0cF3SFWt55Mp
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
X-Powered-By: PHP/7.3.33
Vary: X-Forwarded-Protocol
Cache-Control: no-cache, no-store, must-revalidate
Location: https://www.wacholderbert.de/
Cache-Control: max-age=0
Expires: Fri, 19 May 2023 21:51:36 GMT
Content-Security-Policy: upgrade-insecure-requests


[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:alexander_friederich/utesch-handelsgesellschaft.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-19 21:51

294 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c3c4eb71

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:alexander_friederich/utesch-handelsgesellschaft.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-09-19 12:13

294 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.sandra.philipp-bischoff.de
Port: 443
URL: https://www.sandra.philipp-bischoff.de

First seen 2022-09-19 03:43
Last seen 2023-05-19 15:27
Open for 242 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642a63ae5df8dc02c978dc02c978dc02c97
```
Found 2 files trough .DS_Store spidering:

/favicon
/img
```
  Found on 2022-09-19 03:43
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.cannadesign.lima-city.de
Port: 443
URL: https://www.cannadesign.lima-city.de

First seen 2022-10-29 08:47
Last seen 2023-04-28 10:25
Open for 181 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81df4fa8b0c3b58ccc304fccbb847cec01

Found 41 files trough .DS_Store spidering:

/.nova
/app
/app/icons
/app/splash
/fonts
/fonts/css
/fonts/sprites
/fonts/webfonts
/images
/images/avatars
/images/careers
/images/flags
/images/framework
/images/icons
/images/pictures
/images/pictures_vertical
/images/products
/images/splash
/images/undraw
/php
/plugins
/plugins/charts
/plugins/countdown
/plugins/embedly
/plugins/filterizr
/plugins/galleryViews
/plugins/glightbox
/scripts
/scss
/scss/azures
/scss/bootstrap
/scss/bootstrap/forms
/scss/bootstrap/helpers
/scss/bootstrap/mixins
/scss/bootstrap/utilities
/scss/bootstrap/vendor
/scss/components
/scss/highlights
/scss/pages
/scss/plugins
/styles

Found on 2023-01-27 19:46

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02b6c075776e6c7ac71cfcaef859d18fed

Found 24 files trough .DS_Store spidering:

/.nova
/app
/app/icons
/app/splash
/fonts
/fonts/css
/fonts/sprites
/fonts/webfonts
/images
/images/avatars
/images/careers
/images/flags
/images/framework
/images/icons
/images/pictures
/images/pictures_vertical
/images/products
/images/splash
/images/undraw
/php
/plugins
/scripts
/scss
/styles

Found on 2022-10-29 08:47

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 91.216.248.22
Domain: www.ducklings.leoregner.eu
Port: 443
URL: https://www.ducklings.leoregner.eu

First seen 2022-07-01 04:50
Last seen 2023-04-27 21:21
Open for 300 days
- Severity: critical
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226699e5a0
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab+deploy-token-3:QA8a7368uS5D44RzheRX@gitlab.leoregner.eu/leoregner/entendatenbank.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-01 04:50
  
  324 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: u-kraken.com
Port: 443
URL: https://u-kraken.com

First seen 2022-08-29 09:30
Last seen 2023-04-26 09:18
Open for 239 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c3c4eb71
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:alexander_friederich/utesch-handelsgesellschaft.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-08-29 09:30
  
  294 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: angela-weiss-photography.de
Port: 443
URL: https://angela-weiss-photography.de

First seen 2022-07-28 12:01
Last seen 2023-04-24 09:41
Open for 269 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221d2bf028
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/timogwl/angela-weiss-photography.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-28 12:01
  
  280 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: apple-bootstrap.patrickreinbold.com
Port: 443
URL: https://apple-bootstrap.patrickreinbold.com

First seen 2023-04-23 05:14
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbbdf147bc
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/pure-bold/apple-bootstrap.git
	fetch = +refs/heads/*:refs/remotes/origin/*
	pushurl = https://github.com/pure-bold/apple-bootstrap.git
```
  Found on 2023-04-23 05:14
  
  309 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.sale.cheercity-shop.de
Port: 443
URL: https://www.sale.cheercity-shop.de

First seen 2022-10-21 09:17
Last seen 2023-04-19 12:21
Open for 180 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c0400545c55fa2ea0feb19d76f8cb58900

Found 62 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-04-19 12:21

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df380713261e24aecc06315cf21ab73e74

Found 61 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/Adventskalender
/de/Aktionen
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c09f5afde09f5afde6c1620077bd5a21de61d8b15f8a0d5cb

Found 64 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549621df04c3b56e856fe5e852c9be253da

Found 70 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2023-02-18 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8051bd0c8051bd0ca76720897ff46613717db753c83e1dad

Found 66 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c3005b7223005b72236c02b8339c2bcf98710b791350d383c

Found 77 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/service/DE
/de/service/DE/_notes
/de/service/EN
/de/service/EN/_notes
/de/stream
/de/stream/player7
/de/stream/player7/skins
/de/styleboards
/de/Teamwear
/de/Teamwear/_notes
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193ec59b7f2699b8a88de05475b4a5062bb

Found 36 files trough .DS_Store spidering:

/api
/aws
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-20 10:17

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650a48fc0f5f3b9ad7ff00c29dfed43df62

Found 39 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-10-21 09:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81d53800843ef12ffe6fe56c94fd9bc659

Found 41 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-10-21 09:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b775fdf39eca8ce2940e11adfa10886ad7

Found 128 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/Aktionen/Bilder_Adventskalender
/de/Aktionen/Bilder_Adventskalender/_notes
/de/cart
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/kundenbefragung/_notes
/de/login
/de/navigation
/de/navigation/_notes
/de/rating
/de/rating/retoure
/de/retoure
/de/Sale
/de/Sale/_notes
/de/service
/de/service/DE
/de/service/DE/_notes
/de/service/EN
/de/service/EN/_notes
/de/stream
/de/stream/player7
/de/stream/player7/skins
/de/styleboards
/de/Teamwear
/de/Teamwear/_notes
/de/Uniformen
/de/Uniformen/_notes
/DHL
/DHL/includes
/DHL/lib
/downloads
/downloads/invoices
/easyrec
/ebay
/ebay/OrderFullFillment_Files
/ecc2019
/error
/FileMaker
/FileMaker/Command
/FileMaker/conf
/FileMaker/Error
/FileMaker/Implementation
/fonts
/func
/igooMap.igoomap
/images
/images/2e_1162737.jpg
/images/2eDS_Store
/images/add-to-review.png
/images/arrow-menu1.gif
/images/arrow-menu1.png
/images/arrow-menu1.psd
/images/arrow-menu2.png
/images/baerchen.jpg
/images/Banner
/images/Banner/02_2019_BannerSweater737px
/images/Banner/02_2019_BannerSweater737px.jpg
/images/Banner/02_2019_SweaterBlingBling737px.jpg
/images/Banner/13165828_10153909224594230_9160998580744194372_n.jpg
/images/Banner/13466174_10154009808344230_6795038909705939793_n.jpg
/images/Banner/2018_final_Sale.jpg
/images/Banner/2019
/images/Banner/2019/03_2019
/images/Banner/2019/06_2019
/images/Banner/2019/07_2019
/images/Banner/2019/08_2019
/images/Banner/2019/10_2019
/images/Banner/2019/11_2019
/images/Banner/2019/12_2019
/images/Banner/2020
/images/Banner/2020/01_2020
/images/Banner/2020/02_2020
/images/Banner/2020/03_2020
/images/Banner/2020/05_2020
/images/Banner/2020/06_2020
/images/Banner/6560_kaepa_starlyte_right.jpg
/images/Banner/Adventsbanner.jpg
/images/Banner/AIO_Eventshirt2018.jpg
/images/Banner/Aktion_CH0035-Zenith.jpg
/images/Banner/aktion_kaffeetasse.jpg
/images/Banner/Aktion_Teamrucksäcke.jpg
/images/Banner/anklmagz_banner.jpg
/images/Banner/back_to_school_rucksack.jpg
/images/Banner/backtoschool660px.jpg
/images/Banner/backtoschool_2015.jpg
/images/Banner/bags_banner.jpg
/images/Banner/Banner-Bagpacks.jpg
/images/Banner/banner-BCM2018.jpg
/images/Banner/banner-SCM737.jpg
/images/Banner/Banner_275x125px_Sale.png
/images/Banner/Banner_275x125px_Tickets.png
/images/Banner/banner_737_individualline.jpg
/images/Banner/Banner_BeaStar_275px.jpg
/images/Banner/banner_bottle.jpg
/images/Banner/banner_camps.jpg
/images/Banner/banner_campwear.jpg
/images/Banner/banner_cheerbows.jpg
/images/Banner/banner_cheerfashion_campwear.jpg
/images/Banner/banner_cheerfashion_performance.jpg
/images/Banner/banner_cheerschuhe.jpg
/images/Banner/Banner_CoachesConference2017_737px.jpg
/images/Banner/Banner_CoffeeMug_737px.jpg
/images/Banner/banner_college_jacke.jpg
/images/Banner/banner_CustomDesign.jpg

Found on 2022-10-21 09:17

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.20
Domain: www.koska.de
Port: 443
URL: https://www.koska.de

First seen 2023-02-15 10:37
Last seen 2023-04-16 09:39
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfca4b6d8d6f6f5dab0d4e3165af2949f0d
```
Found 4 files trough .DS_Store spidering:

/blogs
/wp-content
/wp-content/languages
/wp-content/plugins
```
  Found on 2023-02-15 10:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9024083934d8117d7181e25cb5cd14a0c
```
Found 5 files trough .DS_Store spidering:

/blogs
/wp-content
/wp-content/languages
/wp-content/plugins
/wp-content/plugins/revslider
```
  Found on 2023-02-15 10:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.20
Domain: koska.de
Port: 443
URL: https://koska.de

First seen 2023-02-15 10:37
Last seen 2023-04-16 09:39
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9024083934d8117d7181e25cb5cd14a0c
```
Found 5 files trough .DS_Store spidering:

/blogs
/wp-content
/wp-content/languages
/wp-content/plugins
/wp-content/plugins/revslider
```
  Found on 2023-02-15 10:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf1764243f5b088e562d3bee562d3bee562d3be
```
Found 2 files trough .DS_Store spidering:

/blogs
/wp-content
```
  Found on 2023-02-15 10:37
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.guitarcake.sincerelycontent.com
Port: 443
URL: https://www.guitarcake.sincerelycontent.com

First seen 2023-04-11 09:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf1764209a7e9e51ddf24e51ddf24e51ddf24e5
```
Found 2 files trough .DS_Store spidering:

/customcss
/img
```
  Found on 2023-04-11 09:29
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: ai.mdisch.ch
Port: 443
URL: https://ai.mdisch.ch

First seen 2023-04-10 08:46
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb4ad77e65
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[submodule]
	active = .
[remote "origin"]
	url = https://github.com/Ezharjan/ChatAIWebpage.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[lfs]
	repositoryformatversion = 0
```
  Found on 2023-04-10 08:46
  
  367 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: skindeep.postofficerecords.com
Port: 443
URL: https://skindeep.postofficerecords.com

First seen 2023-04-07 11:56
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d80ea5fc780ea5fc780ea5fc780ea5fc7
```
Found 1 files trough .DS_Store spidering:

/image
```
  Found on 2023-04-07 11:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: unix-labs.com
Port: 443
URL: https://unix-labs.com

First seen 2023-02-03 21:55
Last seen 2023-04-04 09:37
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb3f5918ab01ce418f3b69db1f3b69db1
```
Found 3 files trough .DS_Store spidering:

/_vti_cnf
/_vti_pvt
/Bilder
```
  Found on 2023-02-03 21:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: cockos.de
Port: 443
URL: https://cockos.de

First seen 2022-09-27 18:57
Last seen 2023-04-01 12:14
Open for 185 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb3f5918ab01ce418f3b69db1f3b69db1
```
Found 3 files trough .DS_Store spidering:

/_vti_cnf
/_vti_pvt
/Bilder
```
  Found on 2022-09-27 18:57
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: christophgundacker.at
Port: 443
URL: https://christophgundacker.at

First seen 2022-06-20 09:22
Last seen 2023-03-31 15:24
Open for 284 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652218860f3b
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:chrisgun/christophgundacker.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-06-20 09:22
  
  274 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.teublitz.wachbuch.info
Port: 443
URL: https://www.teublitz.wachbuch.info

First seen 2022-09-26 12:05
Last seen 2023-03-29 09:15
Open for 183 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fc37141d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.lrz.de:di29baf/Wachplan_Design.git
	fetch = +refs/heads/erweiterung-lohhof:refs/remotes/origin/erweiterung-lohhof
[branch "erweiterung-lohhof"]
	remote = origin
	merge = refs/heads/erweiterung-lohhof
```
  Found on 2022-09-26 12:05
  
  328 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: die-hans-alm.de
Port: 443
URL: https://die-hans-alm.de

First seen 2023-01-26 06:27
Last seen 2023-03-27 09:04
Open for 60 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb3f5918ab01ce418f3b69db1f3b69db1
```
Found 3 files trough .DS_Store spidering:

/_vti_cnf
/_vti_pvt
/Bilder
```
  Found on 2023-01-26 06:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: kiss-apps.digital
Port: 443
URL: https://kiss-apps.digital

First seen 2022-11-19 20:47
Last seen 2023-03-19 13:20
Open for 119 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642ca98ee370cc27b3e0cc27b3e0cc27b3e
```
Found 2 files trough .DS_Store spidering:

/style.css
/wartung.php
```
  Found on 2022-11-19 20:47
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: pyropixel.de
Port: 443
URL: https://pyropixel.de

First seen 2023-03-18 13:23
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ca1d570d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:reneaye/wordpress-pyropixel.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2023-03-18 13:23
  
  209 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: review.spielwiese.skybox-entertainment.de
Port: 443
URL: https://review.spielwiese.skybox-entertainment.de

First seen 2023-03-09 18:32
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e5e23318
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.com:skyboxentertainment/spielwiese.git
```
  Found on 2023-03-09 18:32
  
  167 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: stba-design.de
Port: 443
URL: https://stba-design.de

First seen 2023-03-01 02:24
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247255468757ece33ff80e7c40c98e784ce06
```
Found 9 files trough .DS_Store spidering:

/.git
/.idea
/css
/images
/js
/plugins
/screenshots
/src
/vendor
```
  Found on 2023-03-01 02:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.player.de.cool
Port: 443
URL: https://www.player.de.cool

First seen 2023-02-09 17:10
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f9cc2845d4614d9e24a44c1d54a44c1d5
```
Found 3 files trough .DS_Store spidering:

/PHP v5.6
/PHP v7.1
/readme.txt
```
  Found on 2023-02-09 17:10
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.testwp.tuteco.de
Port: 443
URL: https://www.testwp.tuteco.de

First seen 2022-11-06 10:04
Last seen 2023-02-04 16:20
Open for 90 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642ca98ee370cc27b3e0cc27b3e0cc27b3e
```
Found 2 files trough .DS_Store spidering:

/style.css
/wartung.php
```
  Found on 2022-11-06 10:04
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: onb-visuals.com
Port: 443
URL: https://onb-visuals.com

First seen 2022-09-26 21:03
Last seen 2023-01-30 13:09
Open for 125 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8bc298658bc298658bc298658bc29865
```
Found 1 files trough .DS_Store spidering:

/css
```
  Found on 2022-09-26 21:03
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.test-rene.4lima.de
Port: 443
URL: https://www.test-rene.4lima.de

First seen 2023-01-06 14:40

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733ff18d3a5dbd02a62213bb24b927e83a6d

Found 10 files trough .DS_Store spidering:

/fileadmin
/fileadmin/.htaccess
/fileadmin/_processed_
/fileadmin/_temp_
/fileadmin/form_definitions
/fileadmin/user_upload
/index.php
/typo3
/typo3conf
/typo3temp

Found on 2023-01-06 14:40

Severity: high
Fingerprint: 5f32cf5d6962f09c910c508a910c508a9b5e2584fd892e5bf347eb909401cec0

Found 55 files trough .DS_Store spidering:

/fileadmin
/fileadmin/.htaccess
/fileadmin/_processed_
/fileadmin/_temp_
/fileadmin/form_definitions
/fileadmin/user_upload
/index.php
/typo3
/typo3conf
/typo3conf/.gitignore
/typo3conf/AdditionalConfiguration.php
/typo3conf/ext
/typo3conf/ext/blog
/typo3conf/ext/blog/CHANGELOG.md
/typo3conf/ext/blog/Classes
/typo3conf/ext/blog/composer.json
/typo3conf/ext/blog/Configuration
/typo3conf/ext/blog/crowdin.yml
/typo3conf/ext/blog/Documentation
/typo3conf/ext/blog/ext_conf_template.txt
/typo3conf/ext/blog/ext_emconf.php
/typo3conf/ext/blog/ext_localconf.php
/typo3conf/ext/blog/ext_tables.php
/typo3conf/ext/blog/ext_tables.sql
/typo3conf/ext/blog/ext_typoscript_setup.txt
/typo3conf/ext/blog/LICENSE
/typo3conf/ext/blog/postcss.config.js
/typo3conf/ext/blog/README.md
/typo3conf/ext/blog/Resources
/typo3conf/ext/blog/Resources/Private
/typo3conf/ext/blog/Resources/Private/JavaScript
/typo3conf/ext/blog/Resources/Private/Language
/typo3conf/ext/blog/Resources/Private/Layouts
/typo3conf/ext/blog/Resources/Private/Mails
/typo3conf/ext/blog/Resources/Private/Partials
/typo3conf/ext/blog/Resources/Private/Scss
/typo3conf/ext/blog/Resources/Private/Templates
/typo3conf/ext/blog/Resources/Private/Templates/Backend
/typo3conf/ext/blog/Resources/Private/Templates/Comment
/typo3conf/ext/blog/Resources/Private/Templates/Page
/typo3conf/ext/blog/Resources/Private/Templates/PageLayout
/typo3conf/ext/blog/Resources/Private/Templates/Post
/typo3conf/ext/blog/Resources/Private/Templates/Widget
/typo3conf/ext/blog/Resources/Public
/typo3conf/ext/ff_sitepackage
/typo3conf/ext/fontawesome_provider
/typo3conf/ext/fs_media_gallery
/typo3conf/ext/gridgallery
/typo3conf/ext/image_autoresize
/typo3conf/ext/mask
/typo3conf/ext/news
/typo3conf/ext/ns_gallery
/typo3conf/image_autoresize.config.php
/typo3conf/LocalConfiguration.php
/typo3temp

Found on 2023-01-06 14:40

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.cheercity-shop.de
Port: 443
URL: https://www.cheercity-shop.de

First seen 2021-08-21 20:37
Last seen 2023-01-02 02:07
Open for 498 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81d538008442f5b374eda1531a4cb697d3

Found 41 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/lp
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2023-01-02 02:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d332085291ebeda090563552551f95e670a5c7

Found 44 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/email_Texte/DE
/de/email_Texte/EN
/de/error
/de/func
/de/func/u
/de/google
/de/individual_print
/de/login
/de/lp
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2023-01-02 02:07

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650a48fc0f5ffbe3d6d5b045bfd2f1dedf1

Found 39 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/export
/func
/images
/instagram
/newsletter
/phpmailer
/Service
/sitemap

Found on 2021-10-24 04:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c91500896915008965258b0ff3c95b237b83cdca3b21de730

Found 37 files trough .DS_Store spidering:

/api
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/bewertung
/de/cart
/de/cmd
/de/customer
/de/email_Texte
/de/error
/de/func
/de/google
/de/individual_print
/de/login
/de/navigation
/de/Neuer Ordner
/de/poms
/de/rating
/de/retoure
/de/Sale
/de/service
/de/sonderposten
/de/styleboards
/de/teamshop
/de/Teamwear
/de/Uniformen
/DHL
/export
/func
/images
/phpmailer
/Service
/sitemap

Found on 2021-08-21 20:37

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: sale.cheercity-shop.de
Port: 443
URL: https://sale.cheercity-shop.de

First seen 2022-12-28 12:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c0400545c55fa2ea0feb19d76f8cb58900

Found 62 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/de/account
/de/account/_notes
/de/Adventskalender
/de/Aktionen
/de/cart
/de/customer
/de/email_Texte
/de/fanshop
/de/func
/de/individual_print
/de/kundenbefragung
/de/login
/de/navigation
/de/rating
/de/retoure
/de/Sale
/de/service
/de/stream
/de/styleboards
/de/Teamwear
/de/Uniformen
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-28 12:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81d53800843ef12ffe6fe56c94fd9bc659

Found 41 files trough .DS_Store spidering:

/api
/aws
/aws/FBAInventoryServiceMWS
/aws/MarketplaceWebService
/aws/MarketplaceWebService/Samples
/blog
/burgel
/captcha
/CC_Katalog_2015
/css
/css/menu
/css/mobil
/csv
/de
/DHL
/downloads
/easyrec
/ebay
/ecc2019
/error
/FileMaker
/fonts
/func
/igooMap.igoomap
/images
/img
/instagram
/js
/libs
/locale
/menu
/phpmailer
/phpMyAdmin
/player
/rechnungen
/scripts
/Service
/sitemap
/spirit_online
/StreamClassControl
/videos

Found on 2022-12-28 12:48

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.fyrblord.4lima.de
Port: 443
URL: https://www.fyrblord.4lima.de

First seen 2022-09-11 22:59
Last seen 2022-12-18 15:52
Open for 97 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbcfc551ad
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/webSPELL/webSPELL.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-09-11 22:59
  
  303 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.neu.jugendfussballturniere.eu
Port: 443
URL: https://www.neu.jugendfussballturniere.eu

First seen 2022-10-14 14:19
Last seen 2022-12-13 10:21
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733fea528ec40088f7f58f6932a5c78b22c2
```
Found 10 files trough .DS_Store spidering:

/Bilder
/Bilder/Bildergalerie
/Bilder/Bildergalerie/sander-supercup-2019
/Bilder/Sponsoring
/Bilder/Sponsors
/fonts
/Hallenturnier
/Kontakt
/Script
/Style
```
  Found on 2022-10-14 14:19
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: staging.onb-visuals.com
Port: 443
URL: https://staging.onb-visuals.com

First seen 2022-12-06 13:25
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d8bc298658bc298658bc298658bc29865
```
Found 1 files trough .DS_Store spidering:

/css
```
  Found on 2022-12-06 13:25
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: testing.daa-1000gesichter.de
Port: 443
URL: https://testing.daa-1000gesichter.de

First seen 2022-11-28 14:59
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b56f8f5e
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:JeremiasThun/1000-gesichter.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-11-28 14:59
  
  267 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: testing.zeitgeschehen.net
Port: 443
URL: https://testing.zeitgeschehen.net

First seen 2022-11-15 08:57
Last seen 2022-11-15 08:57
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b56f8f5e
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:JeremiasThun/1000-gesichter.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-11-15 08:57
  
  267 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: www.lothar-weiss.lima-city.de
Port: 443
URL: https://www.lothar-weiss.lima-city.de

First seen 2022-10-23 13:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe251a1ae79d87fdea16056e9c90316be2
```
Found 15 files trough .DS_Store spidering:

/Bilder
/Bilder/Fewo
/Bilder/Fewo/allgemein
/Bilder/Fewo/bad
/Bilder/Fewo/schlafzimmer
/Bilder/Fewo/wohnzimmer
/Bilder/Tagesausfluege
/FeWo
/fonts
/Gastgeber
/Kontakt
/Oberharmersbach
/Script
/Style
/Style/images
```
  Found on 2022-10-23 13:31
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.oilix.clan.rip
Port: 443
URL: https://www.oilix.clan.rip

First seen 2022-10-21 06:04
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb5fdab8f0
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
	hideDotFiles = dotGitOnly
[remote "origin"]
	url = https://github.com/Maretz/Erweiterung-Ilch-BBCode-2.0.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-10-21 06:04
  
  347 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.utesch-handelsgesellschaft.de
Port: 443
URL: https://www.utesch-handelsgesellschaft.de

First seen 2022-10-17 08:27
Last seen 2022-10-17 08:27
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c3c4eb71
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:alexander_friederich/utesch-handelsgesellschaft.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-10-17 08:27
  
  294 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: transinstuttgart.de
Port: 443
URL: https://transinstuttgart.de

First seen 2022-09-16 19:06
Last seen 2022-10-16 11:45
Open for 29 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fe627c8138d443b2478a3f9c378a3f9c3
```
Found 3 files trough .DS_Store spidering:

/wp-content
/wp-content/themes
/wp-content/themes/ventcamp_bak
```
  Found on 2022-09-16 19:06
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: staging.pfaelzer-esports.de
Port: 443
URL: https://staging.pfaelzer-esports.de

First seen 2022-10-15 22:48
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226f23db80
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:pfaelzer-esports/Website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
```
  Found on 2022-10-15 22:48
  
  270 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 91.216.248.22
Domain: harley-mueller.com
Port: 443
URL: https://harley-mueller.com

First seen 2022-10-06 06:21
Last seen 2022-10-06 06:21
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb3f5918ab01ce418f3b69db1f3b69db1
```
Found 3 files trough .DS_Store spidering:

/_vti_cnf
/_vti_pvt
/Bilder
```
  Found on 2022-10-06 06:21
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: transport.airfieldmanager-game.de
Port: 443
URL: https://transport.airfieldmanager-game.de

First seen 2022-06-21 09:15
Last seen 2022-08-20 09:08
Open for 59 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652268cc121d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.com:airfield-manager/transport-things.git
	fetch = +refs/heads/*:refs/heads/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-06-21 09:15
  
  267 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: www.fdpmoers.com-on-webdesign.de
Port: 443
URL: https://www.fdpmoers.com-on-webdesign.de

First seen 2022-06-19 09:56
Last seen 2022-08-19 00:36
Open for 60 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522210dd817
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab.com/com-on/fdp-moers.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-06-19 09:56
  
  264 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: test.etisite.de
Port: 443
URL: https://test.etisite.de

First seen 2022-08-15 18:56
Last seen 2022-08-15 18:56
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220b56c015
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/transitive-bullshit/nextjs-notion-starter-kit.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-08-15 18:56
  
  289 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: search.informationsseite.com
Port: 443
URL: https://search.informationsseite.com

First seen 2022-08-11 10:34
Last seen 2022-08-11 10:34
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f606f599
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/searx/searx
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-08-11 10:34
  
  255 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: shopware.individual-web.dev
Port: 443
URL: https://shopware.individual-web.dev

First seen 2022-07-14 13:01
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226d9acd5a
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/shopware/production.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "6.4"]
	remote = origin
	merge = refs/heads/6.4
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-14 13:01
  
  323 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: demo-kempten.wachbuch.info
Port: 443
URL: https://demo-kempten.wachbuch.info

First seen 2022-06-29 11:34
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fc37141d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitlab.lrz.de:di29baf/Wachplan_Design.git
	fetch = +refs/heads/erweiterung-lohhof:refs/remotes/origin/erweiterung-lohhof
[branch "erweiterung-lohhof"]
	remote = origin
	merge = refs/heads/erweiterung-lohhof
```
  Found on 2022-06-29 11:34
  
  328 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 91.216.248.22
Domain: gc.informationsseite.com
Port: 443
URL: https://gc.informationsseite.com

First seen 2022-06-26 11:00
Last seen 2022-06-26 11:01
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522837e3dcb
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/arp242/goatcounter.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "release-2.2"]
	remote = origin
	merge = refs/heads/release-2.2
```
  Found on 2022-06-26 11:00
  
  276 Bytes
Create report

Leak detected by NucleiPlugin

No description available

IP: 91.216.248.22
Domain: ipb-bildnug.de
Port: 443
URL: https://ipb-bildnug.de

First seen 2021-09-14 22:38

Fingerprint: 33fc8a384ee3c2e738e1ea3738e1ea37258c7e63be225910be225910e44dcaa3

Nuclei scan report for tags wordpress, php:

wordpress-directory-listing : Wordpress directory listing by Manas_Harsh
-------------


wordpress-xmlrpc-listmethods : Wordpress XML-RPC List System Methods by 0ut0fb4nd
-------------


wp-license-file : WordPress license file disclosure by yashgoti
-------------


wordpress-xmlrpc-file : WordPress xmlrpc by udit_thakkur
-------------

Found on 2021-09-14 22:38

Fingerprint: 33fc8a384ee3c2e738e1ea3738e1ea37258c7e63be225910be225910be225910

Nuclei scan report for tags wordpress, php:

wordpress-directory-listing : Wordpress directory listing by Manas_Harsh
-------------

Found on 2021-09-14 22:38

Create report

Leak detected by NucleiPlugin

No description available

IP: 91.216.248.22
Domain: www.xn--grtz-feldenkrais-mwb.de
Port: 443
URL: https://www.xn--grtz-feldenkrais-mwb.de

First seen 2021-07-29 14:06
Last seen 2021-07-29 14:06
- Fingerprint: 33fc8a384ee3c2e738e1ea3738e1ea37258c7e63be225910be225910be225910
```
Nuclei scan report for tags wordpress, php:

wordpress-directory-listing : Wordpress directory listing by Manas_Harsh
-------------
```
  Found on 2021-07-29 14:06
Create report

Open service 91.216.248.22:443 · www.serv-support.lima-city.de

2025-12-13 23:54

HTTP/1.1 403 Forbidden
Server: openresty
Date: Sat, 13 Dec 2025 23:54:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gaD9n2PEghF4s6AzX1
Cache-Control: no-cache, no-store, must-revalidate

Page title: www.serv-support.lima-city.de - Zugriff / Access: #403

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <title>www.serv-support.lima-city.de - Zugriff / Access: #403</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <meta http-equiv="content-language" content="de" />
        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
<style type="text/css">
    body { background: #f5f5f5; margin: 0; padding: 0 }
    .header { box-shadow: #ccc 0px 1px 21px; margin: 0 0 30px 0; padding: 40px; background: #fff; border-bottom: 1px solid #bebebe; }
    .container { max-width: 800px; margin: 0 auto; text-align: left; }
    .header .logo-link { float: right }
    .header h1 { color: #5a5a5a; display: inline-block }
    h1, h2, p, div { text-align: left; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; }
    a { color: #8B2323; }
    h1, h2 { color: #747474; }
    p { color: #778899; }
    hr { border: 0; border-top: 1px solid #eee; border-bottom: 1px solid #fff; }
    .request-id { font-size: 80%; margin-top: 60px; text-align: center; }
    div p { color: #000000; }
    span { color: #000000; background: #ffff00; }
    .content { padding: 0 20px; }
    @media (max-width:767px) {
        .header { padding: 20px; }
        .header img { width: 146px; height: 38px; padding-top: 20px; }
    }
</style>

    </head>
    <body>
<div class="header"><div class="container"><h1>Fehler 403</h1><a href="https://www.lima-city.de" target="_blank" class="logo-link"><img src="//storage.googleapis.com/lima-city/cdn-like/community_logo4.png" height="65" width="251" alt="Hosted by lima-city" border="0"></a></div></div>
<div class="container content">
        <h1>Zugriff verweigert</h1>
        <p>Der Zugriff auf diese Webseite wurde aus Sicherheitsgr&uuml;nden deaktiviert.</p>
        <h1>Access denied</h1>
        <p>The access to this webpage has been disabled for security reasons.</p>
</div>
        <p class="request-id">Request ID: gaD9n2PEghF4s6AzX1</p>
    </body>
</html>

Found 2 minutes ago by HttpPlugin

Host 91.216.248.22

Germany

Software information

Symfony developement panel enabled

Symfony developement panel enabled

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Leak detected by NucleiPlugin

Leak detected by NucleiPlugin