LeakIX - Host 111.170.165.41

Host 111.170.165.41

China

China Telecom

Software information

JSP3 2.0.14

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 111.170.165.41
Domain: img.mobileppp.com
Port: 443
URL: https://img.mobileppp.com

First seen 2025-12-19 14:32
Last seen 2025-12-27 07:13
Open for 7 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dbf17957fbf17957fbf17957fbf17957f
```
Found 1 files trough .DS_Store spidering:

/13810070612_image3_20190424164924.jpg.jpg
```
  Found on 2025-12-27 07:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 111.170.165.41
Domain: sd.cdn.myipp.cn
Port: 80
URL: http://sd.cdn.myipp.cn

First seen 2025-10-27 09:35
Last seen 2025-11-06 18:43
Open for 10 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-06 18:43
Create report

Open service 111.170.165.41:80 · img.nxjmb.cloud

2026-02-10 07:04

HTTP/1.1 403 Forbidden
Server: JSP3/2.0.14
Date: Tue, 10 Feb 2026 07:04:24 GMT
Content-Type: text/html
Content-Length: 152
Connection: close
X-Error-Info: invalidhost
X-Reason: InvalidHost

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>JSP3/2.0.14</center>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 111.170.165.41:80 · gperson.gantanhaokeji.top

2026-02-07 11:47

HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 07 Feb 2026 11:48:22 GMT
Content-Type: application/json
Content-Length: 30
Connection: close
Accept-Ranges: none
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
X-Log: X-Log
X-M-Log: QNM:yzh166;QNM3/404
X-M-Reqid: uV8AAM7nTtdy9JEY
X-Qnm-Cache: Hit
X-Reqid: lxwAAAB3U1ls9JEY
X-Svr: IO
Ohc-Cache-HIT: xiangy2ct62 [1], csix62 [1]
Ohc-File-Size: 30
X-Error-Info: Origin
X-Cache-Status: MISS


{"error":"Document not found"}

Found 2026-02-07 by HttpPlugin

Create report

Open service 111.170.165.41:80 · xjimg.xianjiu22.com

2026-02-06 16:53

HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 06 Feb 2026 16:53:32 GMT
Content-Type: application/json
Content-Length: 30
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
X-Log: X-Log
X-M-Log: QNM:cz21;QNM3/404
X-M-Reqid: DS4AAACVQk6FtpEY
X-Qnm-Cache: Hit
X-Reqid: aekAAAD29HKEtpEY
X-Svr: IO
Ohc-Cache-HIT: xiangy2ct72 [1], fsix143 [1]
Ohc-File-Size: 30
X-Error-Info: Origin
X-Cache-Status: MISS


{"error":"Document not found"}

Found 2026-02-06 by HttpPlugin

Create report

Open service 111.170.165.41:80 · file.jyshnsfzx.com

2026-02-02 01:10

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 02 Feb 2026 01:10:30 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: https://file.jyshnsfzx.com/
X-Cache-Status: MISS

Page title: 302 Found

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-02-02 by HttpPlugin

Create report

Open service 111.170.165.41:8443 · pic.67city.com

2026-01-28 02:11

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 28 Jan 2026 02:11:16 GMT
Content-Type: application/json
Content-Length: 30
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 6
X-Log: X-Log
X-M-Log: QNM:yzh166;QNM3/404
X-M-Reqid: uV8AACFNazEnw44Y
X-Qnm-Cache: Hit
X-Reqid: NeQAAAAQlbUlw44Y
X-Svr: IO
X-Cache-Status: HIT
X-Error-Info: Internal_SSLConnection


{"error":"Document not found"}

Found 2026-01-28 by HttpPlugin