LeakIX - Host 114.80.179.166

Host 114.80.179.166

China

China Telecom Group

Software information

Tengine

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 114.80.179.166
Domain: api.s-s-home.com
Port: 80
URL: http://api.s-s-home.com

First seen 2025-12-04 09:49
Last seen 2026-02-10 11:13
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-10 11:13
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 114.80.179.166
Domain: www.baisyi.net
Port: 443
URL: https://www.baisyi.net

First seen 2025-12-22 10:54
Last seen 2026-02-09 19:37
Open for 49 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652286fdaf2f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	url = git@codehub-cn-south-1.devcloud.huaweicloud.com:bsy00001/erp-01.git
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "pre-release"]
	remote = origin
	merge = refs/heads/pre-release
```
  Found on 2026-02-09 19:37
  
  364 Bytes
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 114.80.179.166
Domain: dify-pro.everimaging.cn
Port: 80
URL: http://dify-pro.everimaging.cn

First seen 2025-11-28 00:46

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4dad927ce3d59acb08b66f18998697494e8fdf136

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /conversations/{c_id}
DELETE /saved-messages/{message_id}
GET /conversations
GET /messages
GET /messages/{message_id}/more-like-this
GET /messages/{message_id}/suggested-questions
GET /meta
GET /parameters
GET /passport
GET /remote-files/{url}
GET /saved-messages
GET /site
GET /system-features
GET /webapp/access-mode
GET /webapp/permission
PATCH /conversations/{c_id}/pin
PATCH /conversations/{c_id}/unpin
POST /audio-to-text
POST /chat-messages
POST /chat-messages/{task_id}/stop
POST /completion-messages
POST /completion-messages/{task_id}/stop
POST /conversations/{c_id}/name
POST /email-code-login
POST /email-code-login/validity
POST /files/upload
POST /forgot-password
POST /forgot-password/resets
POST /forgot-password/validity
POST /login
POST /messages/{message_id}/feedbacks
POST /remote-files/upload
POST /text-to-audio
POST /workflows/run
POST /workflows/tasks/{task_id}/stop

Found on 2025-11-28 00:46

Create report

Open service 114.80.179.166:443 · zxgj5656.com

2026-02-11 01:11

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=utf-8
Content-Length: 152203
Connection: close
Date: Wed, 11 Feb 2026 01:11:43 GMT
Vary: Accept-Encoding
Cache-Control: private
ETag: 99B21DA448C2F9EC4498403E86A19376
Set-Cookie: ASP.NET_SessionId=hubslzpwvhy3jdancqoa4fin; path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Set-Cookie: __RequestVerificationToken=Pxo_DAgy_QqcqE54GjHNGuiEROCHBToZ-A37ra4ES699kgjXZJqvVIym_uUffJykWGP3Cqp1nbDCMPnVfi7-XAYIcvdRMmVbMKCAerfW1to1; expires=Thu, 12-Feb-2026 01:11:43 GMT; path=/; HttpOnly
Set-Cookie: SERVERID=0303f9bebbb7643dff44b0f58e19ad74|1770772303|1770772303;Path=/
Via: cache3.l2cn8428[99,98,200-0,M], cache12.l2cn8428[101,0], cache1.cn3259[132,132,200-0,M], cache11.cn3259[133,0]
Ali-Swift-Global-Savetime: 1770772303
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 11 Feb 2026 01:11:43 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 7250b39f17707723036513073e

Page title: 中兴国际物流（大连）有限公司-首页



<!DOCTYPE html>

<html class="smart-design-mode">
<head>


        <meta name="viewport" content="width=device-width" />

    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <meta name="description" content="中兴国际物流（大连）有限公司" />
    <meta name="keywords" content="中兴国际物流（大连）有限公司" />
    <meta name="renderer" content="webkit" />
    <meta name="applicable-device" content="pc" />
    <meta http-equiv="Cache-Control" content="no-transform" />
    <title>中兴国际物流（大连）有限公司-首页</title>
    <link rel="icon" href="//nwzimg.wezhan.cn/sitefiles10322/10322708/45143222.png"/><link rel="shortcut icon" href="//nwzimg.wezhan.cn/sitefiles10322/10322708/45143222.png"/><link rel="bookmark" href="//nwzimg.wezhan.cn/sitefiles10322/10322708/45143222.png"/>
    <link href="https://nwzimg.wezhan.cn/Designer/Content/bottom/pcstyle.css?_version=20250314160850" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/Content/public/css/reset.css?_version=20250424171848" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/static/iconfont/1.0.0/iconfont.css?_version=20250314160853" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/static/iconfont/2.0.0/iconfont.css?_version=20250423163359" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/static/iconfont/designer/iconfont.css?_version=20250515165214" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/static/iconfont/companyinfo/iconfont.css?_version=20250314160853" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/Designer/Content/base/css/pager.css?_version=20250314160850" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/Designer/Content/base/css/hover-effects.css?_version=20250314160850" rel="stylesheet" type="text/css"/>
    <link href="https://nwzimg.wezhan.cn/Designer/Content/base/css/antChain.css?_version=20250314160850" rel="stylesheet" type="text/css"/>


    
    <link href="//nwzimg.wezhan.cn/pubsf/10322/10322708/css/31482_Pc_zh-CN.css?preventCdnCacheSeed=0de85825338d464bbfeec0100df41c72" rel="stylesheet" />
    <script src="https://nwzimg.wezhan.cn/Scripts/JQuery/jquery-3.6.3.min.js?_version=20250314165221" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Designer/Scripts/jquery.lazyload.min.js?_version=20250314160851" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Designer/Scripts/smart.animation.min.js?_version=20250314160851" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Designer/Content/Designer-panel/js/kino.razor.min.js?_version=20250314160850" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Scripts/common.min.js?v=20200318&_version=20250811104045" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Administration/Scripts/admin.validator.min.js?_version=20250314160844" type="text/javascript"></script>
    <script src="https://nwzimg.wezhan.cn/Administration/Content/plugins/cookie/jquery.cookie.js?_version=20250314160844" type="text/javascript"></script>

    <script type='text/javascript' id='jssor-all' src='https://nwzimg.wezhan.cn/Designer/Scripts/jssor.slider-22.2.16-all.min.js?_version=20250314160851' ></script><script type='text/javascript' id='slideshown' src='https://nwzimg.wezhan.cn/Designer/Scripts/slideshow.js?_version=20250314160851' ></script><script type='text/javascript' id='jplaceholder' src='https://nwzimg.wezhan.cn/Content/public/plugins/placeholder/jplaceholder.js' ></script><script type='text/javascript' id='jqueryzoom' src='https://nwzimg.wezhan.cn/Designer/Scripts/jquery.jqueryzoom.js?_version=20250314160851' ></script><script type='text/javascript' id='slideshow' src='https://nwzimg.wezhan.cn/Designer/Scripts/slideshow.js?_version=20250314160851' ></script>
    
<script type="text/javascript">
           window.

Found 2 days ago by HttpPlugin

Host 114.80.179.166

China

Software information

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available