LeakIX - Host 20.111.1.3

Host 20.111.1.3

France

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Apache Apache 2.4.65

tcp/443

Apache Apache

tcp/443

Apache Apache 2.4.62

tcp/443

CPython 3.11.14

tcp/443

Jetty(11.0.14)

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

Python 3.12.12

tcp/443 tcp/80

Rocket

tcp/443

WSGIServer 0.2

tcp/443

Werkzeug 3.1.3

tcp/443 tcp/80

gunicorn

tcp/443

nginx nginx 1.29.2

tcp/443

nginx nginx 1.25.0

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.25.5

tcp/443

nginx nginx 1.25.3

tcp/443

nginx nginx 1.28.0

tcp/443 tcp/80

nginx nginx 1.27.4

tcp/443 tcp/80

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.111.1.3
Domain: chronos-api.finzzle-groupe.com
Port: 80
URL: http://chronos-api.finzzle-groupe.com

First seen 2025-12-09 06:07
Last seen 2026-01-10 00:57
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035494fdbd8a042817bb8a5a94719e6d5da1df003490e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/investisseur
GET /v1/investisseur/download
GET /v1/investisseur/{id}
GET /v1/investisseur/{id}/fichier
GET /v1/isAlive
GET /v1/referentiels/typeDocument
GET /v1/referentiels/typeRelationFamille
GET /v1/traitementCommande
GET /v1/traitementCommande/getTypeDocuments
GET /v1/traitementCommande/{id}
POST /v1/investisseur/envoyerDocument
```
  Found on 2026-01-10 00:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.111.1.3
Domain: ucep-recette.sygep.fr
Port: 443
URL: https://ucep-recette.sygep.fr

First seen 2025-11-10 01:07
Last seen 2026-01-09 12:15
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 12:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.111.1.3
Domain: tandeta.naffa.fr
Port: 443
URL: https://tandeta.naffa.fr

First seen 2025-12-06 05:34
Last seen 2026-01-09 07:43
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-09 07:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.111.1.3
Domain: chronos-api.finzzle-groupe.com
Port: 443
URL: https://chronos-api.finzzle-groupe.com

First seen 2025-12-09 06:07
Last seen 2026-01-09 04:31
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035494fdbd8a042817bb8a5a94719e6d5da1df003490e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/investisseur
GET /v1/investisseur/download
GET /v1/investisseur/{id}
GET /v1/investisseur/{id}/fichier
GET /v1/isAlive
GET /v1/referentiels/typeDocument
GET /v1/referentiels/typeRelationFamille
GET /v1/traitementCommande
GET /v1/traitementCommande/getTypeDocuments
GET /v1/traitementCommande/{id}
POST /v1/investisseur/envoyerDocument
```
  Found on 2026-01-09 04:31
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-21 10:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.111.1.3
Domain: rfpai.parmaco.fi
Port: 443
URL: https://rfpai.parmaco.fi

First seen 2024-06-26 04:27
Last seen 2026-01-03 05:28
Open for 556 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226caf0993
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/dainstudios/2024-FI-PRM-565-RFP-AI
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1F5TDBCMHVQVVpJWDEwT0NsbHMwTnVLUHA1QTVZTDA5ZDNwTA==
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-03 05:28
  
  431 Bytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.111.1.3
Domain: wiki-preprod.extia.fr
Port: 443
URL: https://wiki-preprod.extia.fr

First seen 2025-12-12 06:30
Last seen 2026-01-02 09:33
Open for 21 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dec863f59258a9f72eacd4d9eb5bbc5a957af4f2

GraphQL introspection enabled at /graphql
Types: 134 (by kind: ENUM: 10, INPUT_OBJECT: 12, OBJECT: 107, SCALAR: 5)
Operations:
- Query: Query | fields: analytics, assets, authentication, comments, contribute
- Mutation: Mutation | fields: analytics, assets, authentication, comments, groups
- Subscription: Subscription | fields: loggingLiveTrail
Directives: auth, cacheControl, deprecated, include, rateLimit, skip, specifiedBy (total: 7)

Found on 2026-01-02 09:33

190.9 kBytes

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 20.111.1.3
Domain: erp-dev.ajroudsoftwares.tn
Port: 443
URL: https://erp-dev.ajroudsoftwares.tn/_profiler/empty/search/results

First seen 2025-12-04 22:48
Last seen 2025-12-17 00:19
Open for 12 days
- Fingerprint: 407cf4363b0e62fafca67e07daa28ad3daa28ad3daa28ad3daa28ad3daa28ad3
```
Symfony profiler enabled:
https://erp-dev.ajroudsoftwares.tn/_profiler/empty/search/results
```
  Found on 2025-12-17 00:19
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 20.111.1.3
Domain: api-dev.aloen.ai
Port: 443
URL: https://api-dev.aloen.ai/_profiler/empty/search/results

First seen 2024-04-10 18:52
Last seen 2025-05-24 19:43
Open for 409 days
- Fingerprint: 407cf4363b0e62fafca67e07999f639c999f639c999f639c999f639c999f639c
```
Symfony profiler enabled:
https://api-dev.aloen.ai/_profiler/empty/search/results
```
  Found on 2025-05-24 19:43
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.111.1.3
Domain: marketb.africa
Port: 443
URL: https://marketb.africa

First seen 2024-10-29 01:44
Last seen 2024-10-29 14:22
- Severity: medium
  Fingerprint: 5f32cf5d6962f09c2acf29aa2acf29aa23b728efb42c28615528d6d528287323
```
Found 33 files trough .DS_Store spidering:

/.git
/.private
/default.php
/index.php
/indexfaux.php
/license.txt
/readme.html
/README.md
/wp-activate.php
/wp-admin
/wp-admin/css
/wp-admin/images
/wp-admin/includes
/wp-admin/js
/wp-admin/maint
/wp-admin/network
/wp-admin/user
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/wp-tunnel-bsi
/xmlrpc.php
```
  Found on 2024-10-29 14:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.111.1.3
Domain: icloud.songchen.science
Port: 443
URL: https://icloud.songchen.science

First seen 2023-11-29 17:39
Last seen 2023-12-11 20:48
Open for 12 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d28a25ad628a25ad628a25ad628a25ad6
```
Found 1 files trough .DS_Store spidering:

/.git
```
  Found on 2023-12-11 20:48
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.111.1.3
Domain: aquatic-old.atlantic-pros.fr
Port: 443
URL: https://aquatic-old.atlantic-pros.fr

First seen 2023-03-28 07:45

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f6ba4dc2f6ba4dc2ad6a15ee2f29619dab389ee6811cd50

Found 127 files trough .DS_Store spidering:

/_test
/_test/API
/_test/API/img
/_test/API/logs
/_test/API/modules
/_test/API/modules/etude
/_test/API/modules/security
/_test/API/modules/synthese
/_test/API/templates
/_test/API/vendor
/_test/font
/_test/images
/_test/img
/_test/img/.DS_Store
/_test/img/angleD.jpg
/_test/img/angleG.jpg
/_test/img/bande.jpg
/_test/img/bandeD.jpg
/_test/img/bandeG.jpg
/_test/img/btn_etude.png
/_test/img/btn_liens.png
/_test/img/btn_liens_bis.png
/_test/img/btn_valider.png
/_test/img/btn_valider_bis.png
/_test/img/favicon
/_test/img/fleche_select.jpg
/_test/img/head_logo.jpg
/_test/img/head_nom.jpg
/_test/img/image_devis.jpg
/_test/img/image_ecs.jpg
/_test/img/image_ecsso.jpg
/_test/img/img_z1.png
/_test/img/img_z2.png
/_test/img/img_z3.png
/_test/img/img_z4.png
/_test/img/logo_atlantic_guillot_old.png
/_test/img/materiels
/_test/img/ombre.png
/_test/img/ombre_bis.png
/_test/img/picto_poubelle.png
/_test/img/picto_poubelle_bis.png
/_test/img/sprite_capsules.png
/_test/img/sprite_capsulesDEVIS.png
/_test/img/sprite_menu.png
/_test/img/sprite_vignettes.jpg
/_test/img/vignettes
/_test/img/vignettes/.DS_Store
/_test/img/vignettes/bureaux.jpg
/_test/img/vignettes/camping.jpg
/_test/img/vignettes/coiffeur.jpg
/_test/img/vignettes/equipement.jpg
/_test/img/vignettes/foyer.jpg
/_test/img/vignettes/hotel.jpg
/_test/img/vignettes/internat.jpg
/_test/img/vignettes/logement.jpg
/_test/img/vignettes/piscine.jpg
/_test/img/vignettes/residence.jpg
/_test/img/vignettes/restaurant.jpg
/_test/img/vignettes/retraite.jpg
/_test/img/vignettes/sportif.jpg
/_test/modules
/_test/scripts
/_test/styles
/_test/template
/API
/API/img
/API/logs
/API/modules
/API/modules/etude
/API/modules/security
/API/modules/synthese
/API/templates
/API/vendor
/font
/images
/img
/img/.DS_Store
/img/angleD.jpg
/img/angleG.jpg
/img/bande.jpg
/img/bandeD.jpg
/img/bandeG.jpg
/img/btn_etude.png
/img/btn_liens.png
/img/btn_liens_bis.png
/img/btn_valider.png
/img/btn_valider_bis.png
/img/favicon
/img/fleche_select.jpg
/img/head_logo.jpg
/img/head_nom.jpg
/img/image_devis.jpg
/img/image_ecs.jpg
/img/image_ecsso.jpg
/img/img_z1.png
/img/img_z2.png
/img/img_z3.png
/img/img_z4.png
/img/logo_atlantic_guillot_old.png
/img/materiels
/img/ombre.png
/img/ombre_bis.png
/img/picto_poubelle.png
/img/picto_poubelle_bis.png
/img/sprite_capsules.png
/img/sprite_capsulesDEVIS.png
/img/sprite_menu.png
/img/sprite_vignettes.jpg
/img/vignettes
/img/vignettes/.DS_Store
/img/vignettes/bureaux.jpg
/img/vignettes/camping.jpg
/img/vignettes/coiffeur.jpg
/img/vignettes/equipement.jpg
/img/vignettes/foyer.jpg
/img/vignettes/hotel.jpg
/img/vignettes/internat.jpg
/img/vignettes/logement.jpg
/img/vignettes/piscine.jpg
/img/vignettes/residence.jpg
/img/vignettes/restaurant.jpg
/img/vignettes/retraite.jpg
/img/vignettes/sportif.jpg
/modules
/scripts
/styles
/template

Found on 2023-03-28 07:45

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.111.1.3
Domain: aquatic.atlantic-guillot.fr
Port: 443
URL: https://aquatic.atlantic-guillot.fr

First seen 2023-01-27 13:29

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f6ba4dc2f6ba4dc2ad6a15ee2f29619dab389ee6811cd50

Found 127 files trough .DS_Store spidering:

/_test
/_test/API
/_test/API/img
/_test/API/logs
/_test/API/modules
/_test/API/modules/etude
/_test/API/modules/security
/_test/API/modules/synthese
/_test/API/templates
/_test/API/vendor
/_test/font
/_test/images
/_test/img
/_test/img/.DS_Store
/_test/img/angleD.jpg
/_test/img/angleG.jpg
/_test/img/bande.jpg
/_test/img/bandeD.jpg
/_test/img/bandeG.jpg
/_test/img/btn_etude.png
/_test/img/btn_liens.png
/_test/img/btn_liens_bis.png
/_test/img/btn_valider.png
/_test/img/btn_valider_bis.png
/_test/img/favicon
/_test/img/fleche_select.jpg
/_test/img/head_logo.jpg
/_test/img/head_nom.jpg
/_test/img/image_devis.jpg
/_test/img/image_ecs.jpg
/_test/img/image_ecsso.jpg
/_test/img/img_z1.png
/_test/img/img_z2.png
/_test/img/img_z3.png
/_test/img/img_z4.png
/_test/img/logo_atlantic_guillot_old.png
/_test/img/materiels
/_test/img/ombre.png
/_test/img/ombre_bis.png
/_test/img/picto_poubelle.png
/_test/img/picto_poubelle_bis.png
/_test/img/sprite_capsules.png
/_test/img/sprite_capsulesDEVIS.png
/_test/img/sprite_menu.png
/_test/img/sprite_vignettes.jpg
/_test/img/vignettes
/_test/img/vignettes/.DS_Store
/_test/img/vignettes/bureaux.jpg
/_test/img/vignettes/camping.jpg
/_test/img/vignettes/coiffeur.jpg
/_test/img/vignettes/equipement.jpg
/_test/img/vignettes/foyer.jpg
/_test/img/vignettes/hotel.jpg
/_test/img/vignettes/internat.jpg
/_test/img/vignettes/logement.jpg
/_test/img/vignettes/piscine.jpg
/_test/img/vignettes/residence.jpg
/_test/img/vignettes/restaurant.jpg
/_test/img/vignettes/retraite.jpg
/_test/img/vignettes/sportif.jpg
/_test/modules
/_test/scripts
/_test/styles
/_test/template
/API
/API/img
/API/logs
/API/modules
/API/modules/etude
/API/modules/security
/API/modules/synthese
/API/templates
/API/vendor
/font
/images
/img
/img/.DS_Store
/img/angleD.jpg
/img/angleG.jpg
/img/bande.jpg
/img/bandeD.jpg
/img/bandeG.jpg
/img/btn_etude.png
/img/btn_liens.png
/img/btn_liens_bis.png
/img/btn_valider.png
/img/btn_valider_bis.png
/img/favicon
/img/fleche_select.jpg
/img/head_logo.jpg
/img/head_nom.jpg
/img/image_devis.jpg
/img/image_ecs.jpg
/img/image_ecsso.jpg
/img/img_z1.png
/img/img_z2.png
/img/img_z3.png
/img/img_z4.png
/img/logo_atlantic_guillot_old.png
/img/materiels
/img/ombre.png
/img/ombre_bis.png
/img/picto_poubelle.png
/img/picto_poubelle_bis.png
/img/sprite_capsules.png
/img/sprite_capsulesDEVIS.png
/img/sprite_menu.png
/img/sprite_vignettes.jpg
/img/vignettes
/img/vignettes/.DS_Store
/img/vignettes/bureaux.jpg
/img/vignettes/camping.jpg
/img/vignettes/coiffeur.jpg
/img/vignettes/equipement.jpg
/img/vignettes/foyer.jpg
/img/vignettes/hotel.jpg
/img/vignettes/internat.jpg
/img/vignettes/logement.jpg
/img/vignettes/piscine.jpg
/img/vignettes/residence.jpg
/img/vignettes/restaurant.jpg
/img/vignettes/retraite.jpg
/img/vignettes/sportif.jpg
/modules
/scripts
/styles
/template

Found on 2023-01-27 13:29

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.111.1.3
Domain: aquatic.atlantic-pros.fr
Port: 443
URL: https://aquatic.atlantic-pros.fr

First seen 2023-01-27 13:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcf5488efe7fe654b93d93890e3224f73a
```
Found 22 files trough .DS_Store spidering:

/_test
/_test/API
/_test/API/img
/_test/API/logs
/_test/API/modules
/_test/API/templates
/_test/API/vendor
/_test/font
/_test/images
/_test/img
/_test/modules
/_test/scripts
/_test/styles
/_test/template
/API
/font
/images
/img
/modules
/scripts
/styles
/template
```
  Found on 2023-01-27 13:18
Create report

Open service 20.111.1.3:443 · etl-prod.apollo.plus

2026-01-12 10:59

HTTP/1.1 200 OK
Content-Length: 0
Connection: close
Content-Type: text/plain; charset=utf-8
Date: Mon, 12 Jan 2026 11:00:29 GMT
Server: uvicorn
Set-Cookie: ARRAffinity=d54094dfe3a52a142751afe0268d7970efc0126289252d22d80fa036c7503f04;Path=/;HttpOnly;Secure;Domain=etl-prod.apollo.plus
Set-Cookie: ARRAffinitySameSite=d54094dfe3a52a142751afe0268d7970efc0126289252d22d80fa036c7503f04;Path=/;HttpOnly;SameSite=None;Secure;Domain=etl-prod.apollo.plus

Found 6 hours ago by HttpPlugin

Host 20.111.1.3

France

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

GraphQL introspection is enabled.

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file