LeakIX - Host 172.64.145.158

Host 172.64.145.158

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.64.145.158
Domain: tab.guocj.cn
Port: 8443
URL: https://tab.guocj.cn:8443

First seen 2025-12-13 21:21
Last seen 2026-02-10 22:56
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfca832ed7f67c49e606c3f70f131602865
```
Found 4 files trough .DS_Store spidering:

/fonts
/icons
/images
/install
```
  Found on 2026-02-10 22:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.64.145.158
Domain: tab.guocj.cn
Port: 443
URL: https://tab.guocj.cn

First seen 2025-12-13 21:21
Last seen 2026-02-10 22:56
Open for 59 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfca832ed7f67c49e606c3f70f131602865
```
Found 4 files trough .DS_Store spidering:

/fonts
/icons
/images
/install
```
  Found on 2026-02-10 22:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.145.158
Domain: www.704072456.xyz
Port: 443
URL: https://www.704072456.xyz

First seen 2025-12-10 23:28
Last seen 2026-01-16 14:46
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-16 14:46
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.18.42.98
Domain: affine.qiantangx.top
Port: 443
URL: https://affine.qiantangx.top

First seen 2025-11-20 02:51
Last seen 2026-01-03 15:58
Open for 44 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-03 15:58
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa35ea32acccc555a9012c225f164d29b113e1a5d2d
```
GraphQL introspection enabled at /graphql
Types: 261 (by kind: ENUM: 29, INPUT_OBJECT: 50, OBJECT: 168, SCALAR: 10, UNION: 4)
Operations:
- Query: Query | fields: accessTokens, appConfig, applyDocUpdates, collectAllBlobSizes, currentUser
- Mutation: Mutation | fields: acceptInviteById, activateLicense, addContextBlob, addContextCategory, addContextDoc
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-09 13:13
  
  295.1 kBytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.145.158
Domain: blog.131151.xyz
Port: 443
URL: https://blog.131151.xyz

First seen 2025-12-30 10:27
Last seen 2026-01-02 06:45
Open for 2 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-02 06:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.145.158
Domain: demo-api-auth.ichiyo.in
Port: 80
URL: http://demo-api-auth.ichiyo.in

First seen 2025-10-28 08:51
Last seen 2025-12-26 11:19
Open for 59 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2025-12-26 11:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.145.158
Domain: demo-api-auth.ichiyo.in
Port: 443
URL: https://demo-api-auth.ichiyo.in

First seen 2025-10-28 08:51
Last seen 2025-12-26 11:19
Open for 59 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2025-12-26 11:19
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.145.158
Domain: notify.haic.fun
Port: 8443
URL: https://notify.haic.fun:8443

First seen 2025-12-13 19:19
Last seen 2025-12-20 06:56
Open for 6 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43340c51c6930c093d70a6a2f31178bebce9c34621

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels/{label_id}
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags/{tag_name}
GET /audit-logs
GET /auditlog-exts
GET /auditlog-exts/events
GET /configurations
GET /export/cve/download/{execution_id}
GET /export/cve/execution/{execution_id}
GET /export/cve/executions
GET /health
GET /icons/{digest}
GET /internalconfig
GET /jobservice/jobs/{job_id}/log
GET /jobservice/pools
GET /jobservice/pools/{pool_id}/workers
GET /jobservice/queues
GET /labels
GET /labels/{label_id}
GET /ldap/groups/search
GET /ldap/users/search
GET /p2p/preheat/instances
GET /p2p/preheat/instances/{preheat_instance_name}
GET /p2p/preheat/providers
GET /permissions
GET /ping
GET /projects
GET /projects/{project_name_or_id}
GET /projects/{project_name_or_id}/_deletable
GET /projects/{project_name_or_id}/artifacts
GET /projects/{project_name_or_id}/immutabletagrules
GET /projects/{project_name_or_id}/members
GET /projects/{project_name_or_id}/members/{mid}
GET /projects/{project_name_or_id}/metadatas/
GET /projects/{project_name_or_id}/metadatas/{meta_name}
GET /projects/{project_name_or_id}/scanner
GET /projects/{project_name_or_id}/scanner/candidates
GET /projects/{project_name_or_id}/summary
GET /projects/{project_name_or_id}/webhook/events
GET /projects/{project_name_or_id}/webhook/jobs
GET /projects/{project_name_or_id}/webhook/lasttrigger
GET /projects/{project_name_or_id}/webhook/policies
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks/{task_id}/log
GET /projects/{project_name}/auditlog-exts
GET /projects/{project_name}/logs
GET /projects/{project_name}/preheat/policies
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks/{task_id}/logs
GET /projects/{project_name}/preheat/providers
GET /projects/{project_name}/repositories
GET /projects/{project_name}/repositories/{repository_name}
GET /projects/{project_name}/repositories/{repository_name}/artifacts
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/accessories
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/vulnerabilities
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/{addition}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/{report_id}/log
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags
GET /quotas
GET /quotas/{id}
GET /registries
GET /registries/{id}
GET /registries/{id}/info
GET /replication/adapterinfos
GET /replication/adapters
GET /replication/executions
GET /replication/executions/{id}
GET /replication/executions/{id}/tasks
GET /replication/executions/{id}/tasks/{task_id}/log
GET /replication/policies
GET /replication/policies/{id}
GET /repositories
GET /retentions/metadatas
GET /retentions/{id}
GET /retentions/{id}/executions
GET /retentions/{id}/executions/{eid}/tasks
GET /retentions/{id}/executions/{eid}/tasks/{tid}
GET /robots
GET /robots/{robot_id}
GET /scanners
GET /scanners/{registration_id}
GET /scanners/{registration_id}/metadata
GET /scans/all/metrics
GET /scans/schedule/metrics
GET /schedules
GET /schedules/{job_type}/paused
GET /search
GET /security/summary
GET /security/vul
GET /statistics
GET /system/CVEAllowlist
GET /system/gc
GET /system/gc/schedule
GET /system/gc/{gc_id}
GET /system/gc/{gc_id}/log
GET /system/purgeaudit
GET /system/purgeaudit/schedule
GET /system/purgeaudit/{purge_id}
GET /system/purgeaudit/{purge_id}/log
GET /system/scanAll/schedule
GET /systeminfo
GET /systeminfo/getcert
GET /systeminfo/volumes
GET /usergroups
GET /usergroups/search
GET /usergroups/{group_id}
GET /users
GET /users/current
GET /users/current/permissions
GET /users/search
GET /users/{user_id}
PATCH /retentions/{id}/executions/{eid}
POST /export/cve
POST /ldap/ping
POST /ldap/users/import
POST /p2p/preheat/instances/ping
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/stop
POST /registries/ping
POST /retentions
POST /scanners/ping
POST /system/oidc/ping
POST /system/scanAll/stop
PUT /jobservice/jobs/{job_id}
PUT /jobservice/queues/{job_type}
PUT /projects/{project_name_or_id}/immutabletagrules/{immutable_rule_id}
PUT /users/{user_id}/cli_secret
PUT /users/{user_id}/password
PUT /users/{user_id}/sysadmin

Found on 2025-12-20 06:56

Create report

Open service 172.64.145.158:8443 · help.npe-xus.maxsight.com

2026-01-26 15:48

HTTP/1.1 200 OK
Date: Mon, 26 Jan 2026 15:48:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c4127845d74727b-EWR
CF-Cache-Status: HIT
Cache-Control: public, max-age=0, must-revalidate
Set-Cookie: __cf_bm=c029MLdCY042jk3XzhV969giA2G3xApjWqpPTyUAIn8-1769442504-1.0.1.1-HgfQP.g7ooarpf.Z6MG8PvHb9cy9Pc0qHAlWdED7VSiKECRjmdWczsd92Hnw.sEu6EwVD9jKiVi0JOjG4cqaQTbLanTeaSEocOSopsnuWO4; path=/; expires=Mon, 26-Jan-26 16:18:24 GMT; domain=.npe-xus.maxsight.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow
Server: cloudflare

Page title:  Maxsight help center

<?xml version="1.0"?>
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></meta>
<meta charset="utf-8"></meta><meta http-equiv="X-UA-Compatible" content="IE=edge"></meta><meta name="viewport" content="width=device-width, initial-scale=1"></meta><meta name="generator" content="Paligo"></meta><title> Maxsight help center</title><link rel="canonical" href="https://help.maxsight.com/"></link><link href="css/font-awesome.min.css" rel="stylesheet"></link><link href="css/roboto.font.min.css" rel="stylesheet"></link><link href="css/sm-core-css.min.css" rel="stylesheet" type="text/css"></link><link href="css/sm-simple.min.css" rel="stylesheet" type="text/css"></link><link href="css/theme2.min.css" rel="stylesheet"></link><link href="css/theme2-colors.min.css" rel="stylesheet"></link><link href="css/content-theme2.min.css" rel="stylesheet"></link><link href="css/layout-custom-style.css" rel="stylesheet"></link><style>.portal-header::after{background: url(css/image/portal-bg.png) no-repeat center center;background-size: cover;}</style><link rel="icon" href="/favicon.ico" type="image/x-icon"></link><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent/3.1.1/cookieconsent.min.css" crossorigin="anonymous" referrerpolicy="no-referrer"></link><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/styles/googlecode.min.css" crossorigin="anonymous" referrerpolicy="no-referrer"></link><script src="js/jquery-3/jquery-3.4.1.min.js"></script><script src="js/jquery-migrate-3.4.1.min.js"></script><script src="js/bootstrap.min.js"></script><script src="js/jquery.smartmenus.min.js" type="text/javascript"></script><script src="js/html5-2-mp-common.min.js"></script><script src="js/html5-2.min.js"></script><script type="text/javascript" class="before-bundle">/*<![CDATA[*/
            //TODO: Used to modify path for portal search. Change to get dynamically
            var portalLanguage = 'en';
            var languageTitleMap = {"en":"Maxsight help center"};
            var categoriesShown = 1000;
            var shown = 4;
            
            var versionsfile = '';

            var indexDict = new Array();
            var store = {
            };
            var enterKey = 'select';
						var fuse_threshold = 0.5;
					var instantsearch_minlength = 1;
						var enter_advanced_search = false;
					/*]]>*/</script><script src="js/lunr.min.js" type="text/javascript"></script><script class="search-script" src="en/js/data.min.js" type="text/javascript"></script><script src="js/search.min.js" type="text/javascript"></script><script src="js/highlight-mergehtml-plugin.min.js"></script><script src="js/html5-2-portal.min.js"></script><script src="js/jquery.mark.min.js" type="text/javascript"></script><script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent/3.1.1/cookieconsent.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script><script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/js-cookie/3.0.1/js.cookie.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script><script type="text/javascript">var privacypolicy = 'https://www.moodys.com/cookiesnotice.aspx';
var consenttype = 'info';
</script><script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.9.0/highlight.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></script><script type="text/javascript">
			$(document).on('ready ajaxComplete', function() {
				
				hljs.addPlugin(mergeHTMLPlugin);
				hljs.configure({'ignoreUnescapedHTML': true});
				
				$('pre:not(.embedcode)').each(function() {
					/**
					 * @type {string}
					 */
					var language = $(this).data('language');

					if (language === 'plaintext' || language === 'text') {
						$(this).addClass(language).addClass('hljs');
						return true;
					}
					else {
						var clone = this.cloneNode(true);
						hljs.highlightElement(clone);
						$(this).empty().append

Found 2026-01-26 by HttpPlugin

Host 172.64.145.158

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Swagger API description is publicly available

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available