LeakIX - Host 104.18.15.68

Host 104.18.15.68

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.18.15.68
Domain: sme-servicesprepro.ratp.net
Port: 443
URL: https://sme-servicesprepro.ratp.net

First seen 2025-11-26 21:07
Last seen 2026-01-24 23:41
Open for 59 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4be90f65057906063789b6d48fc3f080a489f2f232

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /v1/admin/data-redis/ecm/ids/{ids}
GET /accessDenied
GET /actuator
GET /actuator/health
GET /actuator/health/**
GET /actuator/info
GET /actuator/loggers
GET /actuator/loggers/{name}
GET /actuator/prometheus
GET /error
GET /healthf5
GET /pagedevie
GET /v1/admin/data-apix/aciv/{type}/{id}/apix
GET /v1/admin/data-apix/apix/{type}/{id}/aciv
GET /v1/admin/data-cache/ecm/calendar/msg/{msgId}
GET /v1/admin/data-cache/ecm/disruptions/ssp
GET /v1/admin/data-cache/ecm/disruptions/ssp/{sspId}
GET /v1/admin/data-cache/ecm/filter/{filterName}
GET /v1/admin/data-cache/ecm/id
GET /v1/admin/data-cache/ecm/id/{eventId}
GET /v1/admin/data-cache/hecc/vj/{id}
GET /v1/admin/data-cache/size/calcul
GET /v1/admin/data-cache/size/last-5
GET /v1/admin/data-cache/th/sp
GET /v1/admin/data-cache/th/sp/{spId}
GET /v1/admin/data-cache/th/ssp
GET /v1/admin/data-cache/th/ssp/{sspId}
GET /v1/admin/data-cache/th/vehicle-journey/{vjId}
GET /v1/admin/data-redis/backup/backup_ecm/event/{eventId}
GET /v1/admin/data-redis/backup/backup_ecm/incoherent-ecm
GET /v1/admin/data-redis/backup/{type}/fields
GET /v1/admin/data-redis/backup/{type}/fields/{date}
GET /v1/admin/data-redis/cache/reload/{cacheName}
GET /v1/admin/data-redis/hcpa/sp/{spId}
GET /v1/admin/data-redis/hcpa/ssp/{sspId}
GET /v1/admin/data-redis/hecc/keys
GET /v1/admin/data-redis/hecc/{key}/
GET /v1/admin/data-redis/import/re-launch/{importName}
GET /v1/admin/data-redis/info/ecm-eci
GET /v1/admin/data-redis/info/struct
GET /v1/admin/data-redis/info/th
GET /v1/admin/data-redis/structure/line-connections/{id}
GET /v1/admin/data-redis/structure/stoppoint-connections/{id}
GET /v1/admin/data-redis/structure/{type}/id
GET /v1/admin/data-redis/structure/{type}/id/{id}
GET /v1/admin/feature-tags
GET /v1/admin/force-status
GET /v1/admin/hcpa/count
GET /v1/admin/hcpa/keys
GET /v1/admin/hcpa/keys/{pattern}
GET /v1/admin/metrics
GET /v1/admin/structure/{pattern}
GET /v1/auth/generate-keys
GET /v1/auth/generate-password
GET /v1/auth/token-by-mail
GET /v1/div
GET /v1/eci/stoppoint/id/{id}
GET /v1/ecilines
GET /v1/firstlaststop/stopareas/ids/{ids}
GET /v1/ic/scheduledstoppoint/id/{id}
GET /v1/ic/stoppoints/ids/{ids}
GET /v1/ic/trafficsituation
GET /v1/ic/tram/stoppoint/id/{id}
GET /v1/multimedia-resource/download
GET /v1/multimedia-resource/id/{resourceId}
GET /v1/multimedia-resource/listfiles
GET /v1/reachablenextdeparture/stoppoint/id/{id}
GET /v1/realtimeequipment
GET /v1/reportingic
GET /v1/scheduledstoppoints/ids/{ids}
GET /v1/spacesituation
GET /v1/stopareas/ids/{ids}
GET /v1/stopplaces/ids/{ids}
GET /v1/stoppoints/ids/{ids}
GET /v1/vehiclejourney/id/{lineId}
GET /v1/vehiclejourney/ratp/id/{lineId}
GET /v1/wgs84/{x}/{y}
GET /version
POST /v1/admin/data-cache/th/operatingday
POST /v1/admin/qrcode/{width}
POST /v1/auth/token
POST /v1/tagsms/stoppoint
POST /v2/auth/token

Found on 2026-01-24 23:41

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4be90f65057906063789b6d48fc3f080a41d27a978

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /v1/admin/data-redis/ecm/ids/{ids}
GET /accessDenied
GET /actuator
GET /actuator/health
GET /actuator/health/**
GET /actuator/info
GET /actuator/loggers
GET /actuator/loggers/{name}
GET /actuator/prometheus
GET /error
GET /healthf5
GET /pagedevie
GET /v1/admin/data-apix/aciv/{type}/{id}/apix
GET /v1/admin/data-apix/apix/{type}/{id}/aciv
GET /v1/admin/data-cache/ecm/calendar/msg/{msgId}
GET /v1/admin/data-cache/ecm/disruptions/ssp
GET /v1/admin/data-cache/ecm/disruptions/ssp/{sspId}
GET /v1/admin/data-cache/ecm/filter/{filterName}
GET /v1/admin/data-cache/ecm/id
GET /v1/admin/data-cache/ecm/id/{eventId}
GET /v1/admin/data-cache/size/calcul
GET /v1/admin/data-cache/size/last-5
GET /v1/admin/data-cache/th/sp
GET /v1/admin/data-cache/th/sp/{spId}
GET /v1/admin/data-cache/th/ssp
GET /v1/admin/data-cache/th/ssp/{sspId}
GET /v1/admin/data-cache/th/vehicle-journey/{vjId}
GET /v1/admin/data-redis/backup/backup_ecm/event/{eventId}
GET /v1/admin/data-redis/backup/backup_ecm/incoherent-ecm
GET /v1/admin/data-redis/backup/{type}/fields
GET /v1/admin/data-redis/backup/{type}/fields/{date}
GET /v1/admin/data-redis/cache/reload/{cacheName}
GET /v1/admin/data-redis/hcpa/sp/{spId}
GET /v1/admin/data-redis/hcpa/ssp/{sspId}
GET /v1/admin/data-redis/hecc/keys
GET /v1/admin/data-redis/hecc/{key}/
GET /v1/admin/data-redis/import/re-launch/{importName}
GET /v1/admin/data-redis/info/ecm-eci
GET /v1/admin/data-redis/info/struct
GET /v1/admin/data-redis/info/th
GET /v1/admin/data-redis/structure/line-connections/{id}
GET /v1/admin/data-redis/structure/stoppoint-connections/{id}
GET /v1/admin/data-redis/structure/{type}/id
GET /v1/admin/data-redis/structure/{type}/id/{id}
GET /v1/admin/feature-tags
GET /v1/admin/force-status
GET /v1/admin/hcpa/count
GET /v1/admin/hcpa/keys
GET /v1/admin/hcpa/keys/{pattern}
GET /v1/admin/metrics
GET /v1/admin/structure/{pattern}
GET /v1/auth/generate-keys
GET /v1/auth/generate-password
GET /v1/auth/token-by-mail
GET /v1/div
GET /v1/ecilines
GET /v1/firstlaststop/stopareas/ids/{ids}
GET /v1/ic/scheduledstoppoint/id/{id}
GET /v1/ic/stoppoints/ids/{ids}
GET /v1/ic/trafficsituation
GET /v1/ic/tram/stoppoint/id/{id}
GET /v1/multimedia-resource/download
GET /v1/multimedia-resource/id/{resourceId}
GET /v1/multimedia-resource/listfiles
GET /v1/reachablenextdeparture/stoppoint/id/{id}
GET /v1/realtimeequipment
GET /v1/reportingic
GET /v1/scheduledstoppoints/ids/{ids}
GET /v1/spacesituation
GET /v1/stopareas/ids/{ids}
GET /v1/stopplaces/ids/{ids}
GET /v1/stoppoints/ids/{ids}
GET /v1/vehiclejourney/id/{lineId}
GET /v1/vehiclejourney/ratp/id/{lineId}
GET /v1/wgs84/{x}/{y}
GET /version
POST /v1/admin/data-cache/th/operatingday
POST /v1/admin/qrcode/{width}
POST /v1/auth/token
POST /v1/tagsms/stoppoint
POST /v2/auth/token

Found on 2025-12-01 15:44

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.18.15.68
Domain: pc.s9dj5vb.com
Port: 443
URL: https://pc.s9dj5vb.com

First seen 2024-05-27 09:15
Last seen 2024-10-14 04:22
Open for 139 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e98b84c9b5959ed17257cd5e1539b516ee
```
Found 5 files trough .DS_Store spidering:

/favicon.ico
/older
/older/favicon.ico
/older/js
/older/resource
```
  Found on 2024-10-14 04:22
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfcbb81a95c869e8857535ef6805c89b5bf
```
Found 4 files trough .DS_Store spidering:

/favicon.ico
/older
/older/favicon.ico
/older/manifest.v0.0.0.20240327100906.test.json
```
  Found on 2024-08-30 05:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.18.15.68
Domain: ep.s9dj5vb.com
Port: 443
URL: https://ep.s9dj5vb.com

First seen 2024-05-27 09:15
Last seen 2024-10-12 06:37
Open for 137 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab64a56ddb433e865743276a7f7951ec02
```
Found 7 files trough .DS_Store spidering:

/favicon.ico
/index.html
/js
/manifest.json
/older
/older/favicon.ico
/resource
```
  Found on 2024-10-12 06:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fad0fdea77f3c4568fc1eac3bfc1eac3b
```
Found 3 files trough .DS_Store spidering:

/favicon.ico
/older
/older/favicon.ico
```
  Found on 2024-09-30 14:13
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e98b84c9b5b71a0b6d34348afa54427e34
```
Found 5 files trough .DS_Store spidering:

/favicon.ico
/js
/older
/older/favicon.ico
/resource
```
  Found on 2024-08-02 09:00
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d1aa48da11aa48da11aa48da11aa48da1
```
Found 1 files trough .DS_Store spidering:

/favicon.ico
```
  Found on 2024-05-27 09:15
Create report

Open service 104.18.15.68:443 · 13.evlinkqa.net

2026-01-26 11:43

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 11:43:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 19
Connection: close
CF-RAY: 9c3fc058f8c9f78d-EWR
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
Set-Cookie: __cf_bm=7tsPiRLFmg6WzgCLx8x1FvUKwtyDt2fsRvzE_sEDS94-1769427793-1.0.1.1-xpTsr92KcIW8hfuxB21Lt16vRqEfBaHmNHYaO1NWmqVrCYCy2Gl.jz9YK7f5Trzm8KHR5smhkYtS_VvsKrIOrtC4tufkhFkNdWfY.qn4tIc; path=/; expires=Mon, 26-Jan-26 12:13:13 GMT; domain=.evlinkqa.net; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400


404 page not found

Found 2026-01-26 by HttpPlugin

Host 104.18.15.68

Software information

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

*.evlinkqa.net

fulfillment-stage.residenthome.com

stage-admin-api.residenthome.com

newearthunity.org*.newearthunity.org

evlinkqa.net

fletcher-creamer.org*.fletcher-creamer.org

66lottery7.vip*.66lottery7.vip

str-servicesprepro.ratp.net

sme-servicesprepro.ratp.net

str-services.ratp.net

staging.collegevine.com

bankfiliale.com*.bankfiliale.com

sme-servicesprepro.ratp.net

api-cf.residenthome.com

pickles.com.au*.pickles.com.au

aeef287b.sni.cloudflaressl.comimages-cdn.pickles.com.au

klier-hair-world.de*.klier-hair-world.de

seubanco.com.br*.seubanco.com.br

shop-test.accu-chek.co.kr

msc-aztms-cea-pr1.jdadelivers.com*.msc-aztms-cea-pr1.jdadelivers.com

static-content.pro

pickles.com.au*.pickles.com.au

fwrulesmigration.firewall.team*.fwrulesmigration.firewall.team

askcas26ssksd.co*.askcas26ssksd.co

Domain summary