LeakIX - Host 13.89.172.4

Host 13.89.172.4

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Apache Apache 2.4.65

tcp/443

Apache Apache

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

TornadoServer 6.2

tcp/443

gunicorn

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.29.4

tcp/443

nginx nginx 1.28.0

tcp/443

nginx nginx 1.21.6

tcp/443

nginx nginx 1.23.2

tcp/443

nginx nginx 1.29.3

tcp/443

nginx nginx 1.27.0

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: myportal.business.comcast.com
Port: 443
URL: https://myportal.business.comcast.com

First seen 2025-12-09 15:49
Last seen 2026-02-02 10:56
Open for 54 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff4375928c7b75928c7b75928c7b75928c7b75928c7b
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
POST /public/apilogin
```
  Found on 2026-02-02 10:56
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: myportal.business.comcast.com
Port: 443
URL: https://myportal.business.comcast.com

First seen 2025-12-09 15:49
Last seen 2026-02-02 10:56
Open for 54 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226a1f7e4d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://nitelusa@dev.azure.com/nitelusa/MyNitel.NitelUsa.com/_git/MyNitel.NitelUsa.com-API
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http]
	version = HTTP/1.1
```
  Found on 2026-02-02 10:56
  
  295 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: api.projects.dev.strongtie.io
Port: 443
URL: https://api.projects.dev.strongtie.io

First seen 2025-12-19 03:55
Last seen 2026-02-02 10:37
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549116ade956e8fc50539fb425239fb425239fb4252
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/Projects
GET /api/v1/Projects/{id}
POST /api/v1/Projects/{id}/archive
```
  Found on 2026-02-02 10:37
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 20:20
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: dataservice.prodt.opcommservice.com
Port: 443
URL: https://dataservice.prodt.opcommservice.com

First seen 2026-01-05 08:23
Last seen 2026-02-01 23:34
Open for 27 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354933bee0afd6e6ccbab75f351ee78a9a24f9dbcfa0

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/communications/channels/all
GET /api/v1/communications/channels/getCaseChannelsData/caseId/{caseId}
GET /api/v1/communications/channels/getChannel/channelId/{channelId}
GET /api/v1/communications/channels/getHospitalChannelData/hospitalId/{hospitalId}
GET /api/v1/communications/channels/getHospitalChannelsData/hospitalId/{hospitalId}
GET /api/v1/communications/channels/getHospitalUserChannelsData/hospitalId/{hospitalId}/personId/{personId}
GET /api/v1/communications/channels/getRoomChannelData/roomId/{roomId}
GET /api/v1/communications/channels/getUnitChannelData/unitId/{unitId}
GET /api/v1/communications/channels/messages/ClearChatOutboxMessage/uidMessage/{uidMessage}
GET /api/v1/communications/channels/messages/getChannelMessages/channel/{channelId}/from/{fromId}/to/{toId}/maxPull/{maxPull}
GET /api/v1/communications/channels/messages/getDeviceChannelMessages/channel/{channelId}/from/{fromId}/to/{toId}/maxPriorCount/{maxPriorCount}/maxPull/{maxPull}
GET /api/v1/communications/channels/messages/getMessage/messageId/{messageId}
GET /api/v1/communications/channels/messages/media/download/{chatMediaId}
GET /api/v1/communications/channels/messages/media/download/{chatMediaId}/preview
GET /api/v1/hospitals/getHospital/hospitalId/{hospitalId}
GET /api/v1/hospitals/getHospitalFeatureFlags/hospitalId/{hospitalId}
GET /api/v1/hospitals/getHospitalsWithChannels
GET /api/v1/hospitals/getSyncGatewayParameters
GET /api/v1/hospitals/staff/all
GET /api/v1/hospitals/staff/getPerson/personId/{personId}
GET /api/v1/hospitals/staff/getPersonData/personId/{personId}
GET /api/v1/hospitals/staff/getPersonDataWithPortrait/personId/{personId}
GET /api/v1/hospitals/staff/getPersonHoldOptions/personId/{personId}
GET /api/v1/hospitals/staff/getPersonInformationData/personId/{personId}
GET /api/v1/hospitals/staff/getPersonInformationData/uidPerson/{uidPerson}
GET /api/v1/hospitals/staff/getUserNotifications/personId/{personId}
GET /api/v1/hospitals/subscriptions/all
GET /api/v1/hospitals/subscriptions/getCaseSubscriptions/caseId/{caseId}
GET /api/v1/hospitals/units/all
GET /api/v1/hospitals/units/getUnit/hospitalId/{hospitalId}/unitId/{unitId}
GET /api/v1/hospitals/units/rooms/all
GET /api/v1/hospitals/units/rooms/cases/all
GET /api/v1/hospitals/units/rooms/cases/events/getCaseEventStatuses/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/events/getEventSubscribers/eventId/{eventId}
GET /api/v1/hospitals/units/rooms/cases/events/getEventSubscribers/eventId/{eventId}/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/events/getPendingEventActions/maxToPull/{maxToPull}
GET /api/v1/hospitals/units/rooms/cases/getCase/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/getCaseAndSubscribers/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/getCaseWithEventRelatedInformation/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/getNextCase/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/notifications/getAllPersonNotifications
GET /api/v1/hospitals/units/rooms/cases/notifications/getPushNotificationConfiguration
GET /api/v1/hospitals/units/rooms/cases/notifications/getServerNotifications
GET /api/v1/hospitals/units/rooms/cases/notifications/getUserNotifications/personId/{personId}
GET /api/v1/hospitals/units/rooms/cases/workflows/getAllCaseTasks
GET /api/v1/hospitals/units/rooms/cases/workflows/getCaseTaskValues/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/workflows/getCaseTasksData/caseId/{caseId}
GET /api/v1/hospitals/units/rooms/cases/workflows/getTask/taskId/{taskId}
GET /api/v1/hospitals/units/rooms/cases/workflows/getTaskPhase/phaseId/{phaseId}
GET /api/v1/hospitals/units/rooms/cases/workflows/getTaskPhaseImages
GET /api/v1/hospitals/units/rooms/getRoom/roomId/{roomId}
GET /api/v1/public/hospitals/staff/devices/all
GET /api/v1/public/ping
POST /api/v1/communications/channels/family/CloseFamilyChat
POST /api/v1/communications/channels/family/RegisterFamilyPhone
POST /api/v1/communications/channels/family/RevokeFamilyInvitation
POST /api/v1/communications/channels/getChannelContactEntry
POST /api/v1/communications/channels/getChannelContactsEntries
POST /api/v1/communications/channels/getChannelMessages
POST /api/v1/communications/channels/getChannelTypingUsers
POST /api/v1/communications/channels/getChannelUpdates
POST /api/v1/communications/channels/getContactsEntries
POST /api/v1/communications/channels/getTypingUsers
POST /api/v1/communications/channels/messages/AddToOutbox
POST /api/v1/communications/channels/messages/SendInOutboxMessage
POST /api/v1/communications/channels/messages/getOutstandingOutboxMessages
POST /api/v1/communications/channels/messages/media/upload/{isSensitive}
POST /api/v1/communications/channels/setChannelContactEntry
POST /api/v1/communications/channels/setContactTypingStatus
POST /api/v1/communications/channels/setContactsEntries
POST /api/v1/diagnostics/logging/LogPortalInfo
POST /api/v1/hospitals/setHospitalFeatureFlag
POST /api/v1/hospitals/staff/UpdatePersonHoldStatusOptions
POST /api/v1/hospitals/staff/changeCaseJoin
POST /api/v1/hospitals/staff/setHoldStatus
POST /api/v1/hospitals/staff/setUserEventFilterParameter
POST /api/v1/hospitals/staff/setUserNotificationMode
POST /api/v1/hospitals/units/rooms/cases/events/SaveCaseEventStatus
POST /api/v1/hospitals/units/rooms/cases/events/SaveEventAction
POST /api/v1/hospitals/units/rooms/cases/events/SaveEventHistory
POST /api/v1/hospitals/units/rooms/cases/events/getCaseEventTaskPersonStatuses
POST /api/v1/hospitals/units/rooms/cases/notifications/AcknowledgePersonNotification
POST /api/v1/hospitals/units/rooms/cases/notifications/ClearNotification
POST /api/v1/hospitals/units/rooms/cases/notifications/SavePersonNotificationInstance
POST /api/v1/hospitals/units/rooms/cases/workflows/getCasesTaskValues
POST /api/v1/hospitals/units/rooms/cases/workflows/setTaskValue
POST /api/v1/public/hospitals/staff/devices/ConfirmDevice
POST /api/v1/public/hospitals/staff/devices/ConfirmDeviceV2
POST /api/v1/public/hospitals/staff/devices/ExchangeEpicToken
POST /api/v1/public/hospitals/staff/devices/RegisterDevice
POST /api/v1/public/hospitals/staff/devices/VerifyEpicToken
POST /api/v1/public/hospitals/staff/devices/getUserPushAddresses

Found on 2026-02-01 23:34

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-22 22:58

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: invewincloud.com
Port: 443
URL: https://invewincloud.com

First seen 2025-10-20 04:31
Last seen 2026-01-23 12:55
Open for 95 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 12:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: cloud-management-d-pwapi.serverless-solutions.com
Port: 443
URL: https://cloud-management-d-pwapi.serverless-solutions.com

First seen 2025-12-13 19:58
Last seen 2026-01-23 12:14
Open for 40 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035497ea9b762bf9bc39cbb2a396d6746c33904ad92ad
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/customers
GET /api/customers/customer-orders/{id}
GET /api/customers/customer-service-cost-summary/{id}
GET /api/invoices/open-billing-line-items/chart/{id}
GET /api/invoices/open-billing-line-items/{id}
GET /api/invoices/open-usage-line-items/{id}
```
  Found on 2026-01-23 12:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: api.champion.aitlsma.com
Port: 443
URL: https://api.champion.aitlsma.com

First seen 2025-12-23 07:09
Last seen 2026-01-16 12:03
Open for 24 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d609970664acac84c7e79fc28754c57f7d5187b0fd0
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /v1/A615ATargetConfig/{guid}
GET /v1/Manifest
GET /v1/Manifest/{machineId}
GET /v1/Registration
GET /v1/Registration/{appId}
GET /v1/SelfTest
GET /v1/SoftwarePart/{guid}
GET /v1/Version
POST /v1/PdlReport
```
  Found on 2026-01-16 12:03
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: myportal.sandbox.nitelusa.com
Port: 443
URL: https://myportal.sandbox.nitelusa.com

First seen 2025-10-15 10:56
Last seen 2026-01-16 06:17
Open for 92 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff4375928c7b75928c7b75928c7b75928c7b75928c7b
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
POST /public/apilogin
```
  Found on 2026-01-16 06:17
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: myportal.sandbox.nitelusa.com
Port: 443
URL: https://myportal.sandbox.nitelusa.com

First seen 2025-10-02 15:40
Last seen 2026-01-16 06:17
Open for 105 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226a1f7e4d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://nitelusa@dev.azure.com/nitelusa/MyNitel.NitelUsa.com/_git/MyNitel.NitelUsa.com-API
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http]
	version = HTTP/1.1
```
  Found on 2026-01-16 06:17
  
  295 Bytes
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: smp-bff.authenticaseed.com
Port: 443
URL: https://smp-bff.authenticaseed.com

First seen 2025-11-11 04:05
Last seen 2026-01-16 02:34
Open for 65 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350a325ae8fe4ff115a94d1adb07fe76fcf

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/v1/agencies
GET /api/v1/agencies/{id}
GET /api/v1/azure/dns/check
GET /api/v1/azure/domains/status
GET /api/v1/azure/domains/verification-info
GET /api/v1/onboarding/usageiq/invitation
GET /api/v1/onboarding/usageiq/tos/{orgId}
GET /api/v1/organizations
GET /api/v1/organizations/managed/{orgId}
GET /api/v1/organizations/redeem
GET /api/v1/organizations/{orgId}
GET /api/v1/organizations/{orgId}/managed
GET /api/v1/organizations/{orgId}/onboardings
GET /api/v1/organizations/{orgId}/settings
GET /api/v1/organizations/{orgId}/users
GET /api/v1/organizations/{orgId}/users/{email}
GET /api/v1/provisioner
GET /api/v1/provisioner/{pipelineId}
GET /api/v1/sdp/{customerSlug}/config
GET /api/v1/sdp/{customerSlug}/health
GET /auth/me
GET /auth/roles
GET /diagnostics
GET /health
GET /startup
GET /test
POST /api/v1/azure/dns/cname
POST /api/v1/azure/domains
POST /api/v1/azure/domains/complete-setup
POST /api/v1/azure/domains/verify-txt
POST /api/v1/onboarding/usageiq/invitation/accept-tos
POST /api/v1/organizations/{orgId}/domains
POST /api/v1/organizations/{orgId}/managed/sdp
POST /api/v1/organizations/{orgId}/onboardings/{id}
POST /auth/logout
PUT /api/v1/organizations/{orgId}/managed/users/{email}
PUT /api/v1/organizations/{orgId}/users/{userId}
PUT /api/v1/provisioner/provision

Found on 2026-01-16 02:34

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350a325ae8fe4ff115a94d1adb076818dd8

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/v1/agencies
GET /api/v1/agencies/{id}
GET /api/v1/azure/dns/check
GET /api/v1/azure/domains/status
GET /api/v1/azure/domains/verification-info
GET /api/v1/organizations
GET /api/v1/organizations/redeem
GET /api/v1/organizations/{orgId}
GET /api/v1/organizations/{orgId}/managed
GET /api/v1/organizations/{orgId}/onboardings
GET /api/v1/organizations/{orgId}/settings
GET /api/v1/organizations/{orgId}/users
GET /api/v1/organizations/{orgId}/users/{email}
GET /api/v1/provisioner
GET /api/v1/provisioner/{pipelineId}
GET /api/v1/sdp/{customerSlug}/config
GET /api/v1/sdp/{customerSlug}/health
GET /auth/me
GET /auth/roles
GET /diagnostics
GET /health
GET /startup
GET /test
POST /api/v1/azure/dns/cname
POST /api/v1/azure/domains
POST /api/v1/azure/domains/complete-setup
POST /api/v1/azure/domains/verify-txt
POST /api/v1/organizations/{orgId}/domains
POST /api/v1/organizations/{orgId}/managed/sdp
POST /auth/logout
PUT /api/v1/organizations/{orgId}/managed/users/{email}
PUT /api/v1/organizations/{orgId}/onboardings/{id}
PUT /api/v1/organizations/{orgId}/users/{userId}
PUT /api/v1/provisioner/provision

Found on 2026-01-09 03:02

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350a325ae8fe4ff115a94d1adb0ebfab178

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/v1/agencies
GET /api/v1/agencies/{id}
GET /api/v1/azure/dns/check
GET /api/v1/azure/domains/status
GET /api/v1/azure/domains/verification-info
GET /api/v1/organizations
GET /api/v1/organizations/redeem
GET /api/v1/organizations/{orgId}
GET /api/v1/organizations/{orgId}/managed
GET /api/v1/organizations/{orgId}/onboardings
GET /api/v1/organizations/{orgId}/settings
GET /api/v1/organizations/{orgId}/users
GET /api/v1/organizations/{orgId}/users/{email}
GET /api/v1/provisioner
GET /api/v1/provisioner/{pipelineId}
GET /api/v1/sdp/{customerSlug}/config
GET /api/v1/sdp/{customerSlug}/health
GET /auth/me
GET /auth/roles
GET /diagnostics
GET /health
GET /startup
GET /test
POST /api/v1/azure/dns/cname
POST /api/v1/azure/domains
POST /api/v1/azure/domains/complete-setup
POST /api/v1/azure/domains/verify-txt
POST /api/v1/organizations/{orgId}/domains
POST /auth/logout
PUT /api/v1/organizations/{orgId}/managed/users/{email}
PUT /api/v1/organizations/{orgId}/onboardings/{id}
PUT /api/v1/organizations/{orgId}/users/{userId}
PUT /api/v1/provisioner/provision

Found on 2025-11-23 04:11

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350a325ae8fe4ff115a94d1adb036589ff2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/v1/agencies
GET /api/v1/agencies/{id}
GET /api/v1/azure/dns/check
GET /api/v1/azure/domains/status
GET /api/v1/azure/domains/verification-info
GET /api/v1/organizations
GET /api/v1/organizations/redeem
GET /api/v1/organizations/{orgId}
GET /api/v1/organizations/{orgId}/managed
GET /api/v1/organizations/{orgId}/onboardings
GET /api/v1/organizations/{orgId}/settings
GET /api/v1/organizations/{orgId}/users
GET /api/v1/organizations/{orgId}/users/{email}
GET /api/v1/provisioner
GET /api/v1/provisioner/{pipelineId}
GET /api/v1/sdp/{customerSlug}/health
GET /auth/me
GET /auth/roles
GET /diagnostics
GET /health
GET /startup
GET /test
POST /api/v1/azure/dns/cname
POST /api/v1/azure/domains
POST /api/v1/azure/domains/complete-setup
POST /api/v1/azure/domains/verify-txt
POST /api/v1/organizations/{orgId}/domains
POST /auth/logout
PUT /api/v1/organizations/{orgId}/managed/users/{email}
PUT /api/v1/organizations/{orgId}/onboardings/{id}
PUT /api/v1/organizations/{orgId}/users/{userId}
PUT /api/v1/provisioner/provision

Found on 2025-11-12 02:28

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.89.172.4
Domain: wwwdev.infiniteelectronics.com
Port: 443
URL: https://wwwdev.infiniteelectronics.com

First seen 2025-08-28 16:55
Last seen 2026-01-02 02:55
Open for 126 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549f9cf57e3471603022bd7bcf623fbaa49

Found 70 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-content/backups-dup-lite
/wp-content/cache
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/plugins/akismet
/wp-content/plugins/astra-sites
/wp-content/plugins/better-search-replace
/wp-content/plugins/classic-editor
/wp-content/plugins/cool-timeline-pro
/wp-content/plugins/custom-css-js
/wp-content/plugins/custom-post-type-ui
/wp-content/plugins/disable-comments
/wp-content/plugins/disable-xml-rpc
/wp-content/plugins/draw-attention
/wp-content/plugins/duplicate-page
/wp-content/plugins/duplicator
/wp-content/plugins/duracelltomi-google-tag-manager
/wp-content/plugins/elementor
/wp-content/plugins/elementor-pro
/wp-content/plugins/elementskit-lite
/wp-content/plugins/envato-elements
/wp-content/plugins/equal-height-columns
/wp-content/plugins/essential-addons-elementor
/wp-content/plugins/essential-addons-for-elementor-lite
/wp-content/plugins/featured-image-admin-thumb-fiat
/wp-content/plugins/force-regenerate-thumbnails
/wp-content/plugins/gc-sso
/wp-content/plugins/google-sitemap-generator
/wp-content/plugins/grid-builder-x
/wp-content/plugins/header-footer-elementor
/wp-content/plugins/image-hover-effects-addon-for-elementor
/wp-content/plugins/insert-headers-and-footers
/wp-content/plugins/ninja-forms
/wp-content/plugins/page-list
/wp-content/plugins/popup-trigger-url-for-elementor-pro
/wp-content/plugins/post-carousel-slider-for-elementor
/wp-content/plugins/revslider
/wp-content/plugins/run-sql-query
/wp-content/plugins/sitemap
/wp-content/plugins/skyboot-custom-icons-for-elementor
/wp-content/plugins/timeline-widget-addon-for-elementor
/wp-content/plugins/updraftplus
/wp-content/plugins/wordfence
/wp-content/plugins/wordpress-importer
/wp-content/plugins/wp-accessibility-helper
/wp-content/plugins/wp-fastest-cache
/wp-content/plugins/wp-file-manager
/wp-content/plugins/wp-job-manager
/wp-content/plugins/wp-maximum-upload-file-size
/wp-content/plugins/wp-migrate-db
/wp-content/plugins/wp-rocket
/wp-content/plugins/wp-security-audit-log
/wp-content/plugins/wps-hide-login
/wp-content/themes
/wp-content/updraft
/wp-content/uploads
/wp-content/wflogs
/wp-content/wmufs-temp
/wp-includes

Found on 2026-01-02 02:55

Severity: medium
Fingerprint: 5f32cf5d6962f09c47a1e7ef47a1e7ef1e0973992dae90a03be5195c5dae4cd4

Found 120 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-content/backups-dup-lite
/wp-content/cache
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/plugins/akismet
/wp-content/plugins/astra-sites
/wp-content/plugins/better-search-replace
/wp-content/plugins/classic-editor
/wp-content/plugins/cool-timeline-pro
/wp-content/plugins/custom-css-js
/wp-content/plugins/custom-post-type-ui
/wp-content/plugins/disable-comments
/wp-content/plugins/disable-xml-rpc
/wp-content/plugins/draw-attention
/wp-content/plugins/duplicate-page
/wp-content/plugins/duplicator
/wp-content/plugins/duracelltomi-google-tag-manager
/wp-content/plugins/elementor
/wp-content/plugins/elementor-pro
/wp-content/plugins/elementskit-lite
/wp-content/plugins/envato-elements
/wp-content/plugins/equal-height-columns
/wp-content/plugins/essential-addons-elementor
/wp-content/plugins/essential-addons-for-elementor-lite
/wp-content/plugins/featured-image-admin-thumb-fiat
/wp-content/plugins/force-regenerate-thumbnails
/wp-content/plugins/gc-sso
/wp-content/plugins/google-sitemap-generator
/wp-content/plugins/grid-builder-x
/wp-content/plugins/header-footer-elementor
/wp-content/plugins/image-hover-effects-addon-for-elementor
/wp-content/plugins/insert-headers-and-footers
/wp-content/plugins/ninja-forms
/wp-content/plugins/page-list
/wp-content/plugins/popup-trigger-url-for-elementor-pro
/wp-content/plugins/post-carousel-slider-for-elementor
/wp-content/plugins/revslider
/wp-content/plugins/run-sql-query
/wp-content/plugins/sitemap
/wp-content/plugins/skyboot-custom-icons-for-elementor
/wp-content/plugins/timeline-widget-addon-for-elementor
/wp-content/plugins/updraftplus
/wp-content/plugins/wordfence
/wp-content/plugins/wordpress-importer
/wp-content/plugins/wp-accessibility-helper
/wp-content/plugins/wp-fastest-cache
/wp-content/plugins/wp-file-manager
/wp-content/plugins/wp-job-manager
/wp-content/plugins/wp-maximum-upload-file-size
/wp-content/plugins/wp-migrate-db
/wp-content/plugins/wp-rocket
/wp-content/plugins/wp-security-audit-log
/wp-content/plugins/wps-hide-login
/wp-content/themes
/wp-content/updraft
/wp-content/uploads
/wp-content/uploads/2015
/wp-content/uploads/2019
/wp-content/uploads/2020
/wp-content/uploads/2021
/wp-content/uploads/2022
/wp-content/uploads/2023
/wp-content/uploads/2024
/wp-content/uploads/astra-sites
/wp-content/uploads/custom-css-js
/wp-content/uploads/elementor
/wp-content/uploads/essential-addons-elementor
/wp-content/uploads/pum
/wp-content/uploads/revslider
/wp-content/uploads/sim-wp-uploads
/wp-content/uploads/template-kits
/wp-content/uploads/visualcomposer-assets
/wp-content/uploads/wc-logs
/wp-content/uploads/woocommerce_uploads
/wp-content/uploads/wp-activity-log
/wp-content/uploads/wp-file-manager-pro
/wp-content/uploads/wp-migrate-db
/wp-content/uploads/wpcode
/wp-content/wflogs
/wp-content/wmufs-temp
/wp-includes
/wp-includes/assets
/wp-includes/block-bindings
/wp-includes/block-patterns
/wp-includes/block-supports
/wp-includes/blocks
/wp-includes/certificates
/wp-includes/css
/wp-includes/customize
/wp-includes/fonts
/wp-includes/html-api
/wp-includes/ID3
/wp-includes/images
/wp-includes/interactivity-api
/wp-includes/IXR
/wp-includes/js
/wp-includes/l10n
/wp-includes/php-compat
/wp-includes/PHPMailer
/wp-includes/pomo
/wp-includes/Requests
/wp-includes/rest-api
/wp-includes/SimplePie
/wp-includes/sitemaps
/wp-includes/sodium_compat
/wp-includes/style-engine
/wp-includes/Text
/wp-includes/theme-compat
/wp-includes/widgets

Found on 2025-12-26 12:12

Severity: medium
Fingerprint: 5f32cf5d6962f09c673129856731298565b04567ce5e3436197ff172a163b470

Found 92 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-content/backups-dup-lite
/wp-content/cache
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/plugins/akismet
/wp-content/plugins/astra-sites
/wp-content/plugins/better-search-replace
/wp-content/plugins/classic-editor
/wp-content/plugins/cool-timeline-pro
/wp-content/plugins/custom-css-js
/wp-content/plugins/custom-post-type-ui
/wp-content/plugins/disable-comments
/wp-content/plugins/disable-xml-rpc
/wp-content/plugins/draw-attention
/wp-content/plugins/duplicate-page
/wp-content/plugins/duplicator
/wp-content/plugins/duracelltomi-google-tag-manager
/wp-content/plugins/elementor
/wp-content/plugins/elementor-pro
/wp-content/plugins/elementskit-lite
/wp-content/plugins/envato-elements
/wp-content/plugins/equal-height-columns
/wp-content/plugins/essential-addons-elementor
/wp-content/plugins/essential-addons-for-elementor-lite
/wp-content/plugins/featured-image-admin-thumb-fiat
/wp-content/plugins/force-regenerate-thumbnails
/wp-content/plugins/gc-sso
/wp-content/plugins/google-sitemap-generator
/wp-content/plugins/grid-builder-x
/wp-content/plugins/header-footer-elementor
/wp-content/plugins/image-hover-effects-addon-for-elementor
/wp-content/plugins/insert-headers-and-footers
/wp-content/plugins/ninja-forms
/wp-content/plugins/page-list
/wp-content/plugins/popup-trigger-url-for-elementor-pro
/wp-content/plugins/post-carousel-slider-for-elementor
/wp-content/plugins/revslider
/wp-content/plugins/run-sql-query
/wp-content/plugins/sitemap
/wp-content/plugins/skyboot-custom-icons-for-elementor
/wp-content/plugins/timeline-widget-addon-for-elementor
/wp-content/plugins/updraftplus
/wp-content/plugins/wordfence
/wp-content/plugins/wordpress-importer
/wp-content/plugins/wp-accessibility-helper
/wp-content/plugins/wp-fastest-cache
/wp-content/plugins/wp-file-manager
/wp-content/plugins/wp-job-manager
/wp-content/plugins/wp-maximum-upload-file-size
/wp-content/plugins/wp-migrate-db
/wp-content/plugins/wp-rocket
/wp-content/plugins/wp-security-audit-log
/wp-content/plugins/wps-hide-login
/wp-content/themes
/wp-content/updraft
/wp-content/uploads
/wp-content/uploads/2015
/wp-content/uploads/2019
/wp-content/uploads/2020
/wp-content/uploads/2021
/wp-content/uploads/2022
/wp-content/uploads/2023
/wp-content/uploads/2024
/wp-content/uploads/astra-sites
/wp-content/uploads/custom-css-js
/wp-content/uploads/elementor
/wp-content/uploads/essential-addons-elementor
/wp-content/uploads/pum
/wp-content/uploads/revslider
/wp-content/uploads/sim-wp-uploads
/wp-content/uploads/template-kits
/wp-content/uploads/visualcomposer-assets
/wp-content/uploads/wc-logs
/wp-content/uploads/woocommerce_uploads
/wp-content/uploads/wp-activity-log
/wp-content/uploads/wp-file-manager-pro
/wp-content/uploads/wp-migrate-db
/wp-content/uploads/wpcode
/wp-content/wflogs
/wp-content/wmufs-temp
/wp-includes

Found on 2025-12-11 00:38

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744db50c270ff6bb3bbeff10235a0bd8ae46

Found 12 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-includes

Found on 2025-12-01 12:08

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b6c94748d535e2eb48bc7d9b8959ac8a9

Found 21 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-content/backups-dup-lite
/wp-content/cache
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/themes
/wp-content/updraft
/wp-content/uploads
/wp-content/wflogs
/wp-content/wmufs-temp
/wp-includes

Found on 2025-11-22 11:26

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: api.whiteboarenergyservices.com
Port: 443
URL: https://api.whiteboarenergyservices.com

First seen 2025-10-16 00:21
Last seen 2025-12-27 01:10
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-27 01:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.4
Domain: portal.whiteboarenergyservices.com
Port: 443
URL: https://portal.whiteboarenergyservices.com

First seen 2025-10-15 19:10
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-10-15 19:10
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.89.172.4
Domain: iedev.rapega.com
Port: 443
URL: https://iedev.rapega.com

First seen 2025-08-27 11:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549f9cf57e3471603022bd7bcf623fbaa49

Found 70 files trough .DS_Store spidering:

/.tmb
/html5test
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-content
/wp-content/backups-dup-lite
/wp-content/cache
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/plugins/akismet
/wp-content/plugins/astra-sites
/wp-content/plugins/better-search-replace
/wp-content/plugins/classic-editor
/wp-content/plugins/cool-timeline-pro
/wp-content/plugins/custom-css-js
/wp-content/plugins/custom-post-type-ui
/wp-content/plugins/disable-comments
/wp-content/plugins/disable-xml-rpc
/wp-content/plugins/draw-attention
/wp-content/plugins/duplicate-page
/wp-content/plugins/duplicator
/wp-content/plugins/duracelltomi-google-tag-manager
/wp-content/plugins/elementor
/wp-content/plugins/elementor-pro
/wp-content/plugins/elementskit-lite
/wp-content/plugins/envato-elements
/wp-content/plugins/equal-height-columns
/wp-content/plugins/essential-addons-elementor
/wp-content/plugins/essential-addons-for-elementor-lite
/wp-content/plugins/featured-image-admin-thumb-fiat
/wp-content/plugins/force-regenerate-thumbnails
/wp-content/plugins/gc-sso
/wp-content/plugins/google-sitemap-generator
/wp-content/plugins/grid-builder-x
/wp-content/plugins/header-footer-elementor
/wp-content/plugins/image-hover-effects-addon-for-elementor
/wp-content/plugins/insert-headers-and-footers
/wp-content/plugins/ninja-forms
/wp-content/plugins/page-list
/wp-content/plugins/popup-trigger-url-for-elementor-pro
/wp-content/plugins/post-carousel-slider-for-elementor
/wp-content/plugins/revslider
/wp-content/plugins/run-sql-query
/wp-content/plugins/sitemap
/wp-content/plugins/skyboot-custom-icons-for-elementor
/wp-content/plugins/timeline-widget-addon-for-elementor
/wp-content/plugins/updraftplus
/wp-content/plugins/wordfence
/wp-content/plugins/wordpress-importer
/wp-content/plugins/wp-accessibility-helper
/wp-content/plugins/wp-fastest-cache
/wp-content/plugins/wp-file-manager
/wp-content/plugins/wp-job-manager
/wp-content/plugins/wp-maximum-upload-file-size
/wp-content/plugins/wp-migrate-db
/wp-content/plugins/wp-rocket
/wp-content/plugins/wp-security-audit-log
/wp-content/plugins/wps-hide-login
/wp-content/themes
/wp-content/updraft
/wp-content/uploads
/wp-content/wflogs
/wp-content/wmufs-temp
/wp-includes

Found on 2025-08-27 11:48

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: integradose.org
Port: 443
URL: https://integradose.org

First seen 2023-06-06 02:32
Last seen 2025-07-23 01:39
Open for 777 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-07-23 01:39
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.integradose.org
Port: 443
URL: https://www.integradose.org

First seen 2023-03-08 22:04
Last seen 2025-07-22 19:52
Open for 866 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-07-22 19:52
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.lifeguruglobal.com
Port: 80
URL: http://www.lifeguruglobal.com

First seen 2024-08-17 08:27
Last seen 2025-02-01 05:12
Open for 167 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 05:12
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.premieradvantagecard.com
Port: 80
URL: http://www.premieradvantagecard.com

First seen 2024-08-15 07:37
Last seen 2025-02-01 01:57
Open for 169 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 01:57
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.olico.li
Port: 443
URL: https://www.olico.li

First seen 2024-11-28 11:16
Last seen 2025-02-01 01:54
Open for 64 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 01:54
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.lifeguruglobal.com
Port: 443
URL: https://www.lifeguruglobal.com

First seen 2024-08-17 08:27
Last seen 2025-02-01 01:52
Open for 167 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 01:52
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.olico.li
Port: 80
URL: http://www.olico.li

First seen 2024-11-28 11:16
Last seen 2025-02-01 01:10
Open for 64 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 01:10
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.planettechglobal.com
Port: 443
URL: https://www.planettechglobal.com

First seen 2024-08-16 17:24
Last seen 2025-02-01 00:55
Open for 168 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 00:55
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.premieradvantagecard.com
Port: 443
URL: https://www.premieradvantagecard.com

First seen 2024-08-15 07:37
Last seen 2025-02-01 00:55
Open for 169 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-02-01 00:55
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.planettechglobal.com
Port: 80
URL: http://www.planettechglobal.com

First seen 2024-08-16 17:24
Last seen 2024-12-24 08:12
Open for 129 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-12-24 08:12
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: adeste.com.br
Port: 443
URL: https://adeste.com.br/.git/config

First seen 2022-02-06 04:29
Last seen 2024-10-08 06:13
Open for 975 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-10-08 06:13
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.adeste.com.br
Port: 443
URL: https://www.adeste.com.br

First seen 2022-09-02 12:29
Last seen 2024-10-06 20:28
Open for 765 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-10-06 20:28
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: vantagem.plus
Port: 443
URL: https://vantagem.plus

First seen 2022-06-20 10:39
Last seen 2024-09-18 19:51
Open for 821 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-09-18 19:51
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.vantagem.plus
Port: 443
URL: https://www.vantagem.plus

First seen 2022-09-19 15:42
Last seen 2024-09-18 17:05
Open for 730 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-09-18 17:05
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.alphen-dc.nl
Port: 443
URL: https://www.alphen-dc.nl

First seen 2023-03-05 10:08
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2023-03-05 10:08
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: www.wellbeingadvisor.org
Port: 443
URL: https://www.wellbeingadvisor.org

First seen 2023-02-07 15:49
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2023-02-07 15:49
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.4
Domain: clinicavirtual.medlinktecnologia.com.br
Port: 443
URL: https://clinicavirtual.medlinktecnologia.com.br

First seen 2022-06-24 20:14
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2022-06-24 20:14
  
  380 Bytes
Create report

Open service 13.89.172.4:80 · vibenetworks.ai

2026-01-26 05:18

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Mon, 26 Jan 2026 05:18:46 GMT
Location: https://vibenetworks.ai/

Found 2026-01-26 by HttpPlugin

Host 13.89.172.4

United States

Software information

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed