LeakIX - Host 20.50.2.34

Host 20.50.2.34

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Apache Apache

tcp/443

Jetty(9.4.49.v20220914)

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

NNHU-BFF

tcp/443

gunicorn

tcp/443

gunicorn 19.9.0

tcp/443

nginx nginx 1.25.3

tcp/443

nginx nginx

tcp/443

nginx nginx 1.14.2

tcp/443

nginx nginx 1.26.2

tcp/443 tcp/80

nginx nginx 1.29.1

tcp/443

nginx nginx 1.29.4

tcp/443

nginx nginx 1.17.4

tcp/443

nginx nginx 1.24.0

tcp/443

nginx nginx 1.28.0

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.34
Domain: api.gipo730.it
Port: 443
URL: https://api.gipo730.it

First seen 2025-12-11 20:52
Last seen 2026-01-10 05:45
Open for 29 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354990574eaa0642b755d7b9f56c23cdfcfb45bb9817

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /auth
GET /auth/tenants
GET /tenants/{tenantId}/configuration
GET /tenants/{tenantId}/configuration/notification-emails
GET /tenants/{tenantId}/import/jobs
GET /tenants/{tenantId}/import/jobs/{jobId}
GET /tenants/{tenantId}/import/jobs/{jobId}/file/download
GET /tenants/{tenantId}/import/jobs/{jobId}/result/download
GET /tenants/{tenantId}/sendingbatches
GET /tenants/{tenantId}/sendingbatches/{batchId}/error/download
GET /tenants/{tenantId}/sendingbatches/{batchId}/receipt
GET /tenants/{tenantId}/sendingbatches/{sendingBatchId}
GET /tenants/{tenantId}/spesesanitarie
GET /tenants/{tenantId}/spesesanitarie/export/xml
GET /tenants/{tenantId}/spesesanitarie/{spesaSanitariaId}
GET /tenants/{tenantId}/stats/documentispesa
GET /tenants/{tenantId}/stats/tosend
GET /tenants/{tenantId}/subscriptions/active
GET /tenants/{tenantId}/users
GET /tenants/{tenantId}/users/owner
POST /tenants/{tenantId}/spesesanitarie/changes/undo
PUT /tenants/{tenantId}/configuration/name

Found on 2026-01-10 05:45

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.34
Domain: api.dev.idas-cloudservices.net
Port: 443
URL: https://api.dev.idas-cloudservices.net

First seen 2025-11-27 07:34
Last seen 2026-01-10 02:14
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 02:14
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.34
Domain: monzadataapi.ibss.test.iconics.cloud
Port: 443
URL: https://monzadataapi.ibss.test.iconics.cloud

First seen 2025-12-09 10:12
Last seen 2026-01-09 20:23
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035499540416ee972aca53939f07e929f840ee5de5a17

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/data/v1/OfficeExport/{nodeid}/{eventid}
GET /api/data/v1/OfficeExport/{nodeid}/{eventid}/{templatename}
GET /api/data/v1/{eventtype}
GET /api/data/v1/{eventtype}/Event/findbypk
GET /api/data/v1/{eventtype}/Event/{guid}
GET /api/data/v1/{eventtype}/Event/{guid}/associated
GET /api/data/v1/{eventtype}/Event/{guid}/history
GET /api/data/v1/{eventtype}/Events
GET /api/data/v1/{eventtype}/Events/{nodeid}
GET /api/data/v1/{eventtype}/Events/{nodeid}/history
GET /api/data/v1/{eventtype}/Events/{nodeid}/{filter}
GET /api/data/v1/{eventtype}/Events/{nodeid}/{filter}/history
GET /api/data/v1/{eventtype}/File/{eventid}
GET /api/data/v1/{eventtype}/File/{eventid}/{filename}
GET /api/data/v1/{eventtype}/Variable/{nodeid}
GET /api/data/v1/{eventtype}/Variable/{nodeid}/getnames
GET /api/data/v1/{eventtype}/Variable/{nodeid}/{name}
GET /api/data/v1/{eventtype}/metadata
GET /v1/Service/heartbeat
GET /v1/Service/version
POST /api/data/v1/{eventtype}/Event
POST /api/data/v1/{eventtype}/Event/changeowner

Found on 2026-01-09 20:23

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.34
Domain: monzaplatformapi.ibss.test.iconics.cloud
Port: 443
URL: https://monzaplatformapi.ibss.test.iconics.cloud

First seen 2025-12-09 10:11
Last seen 2026-01-09 20:23
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035491f82fe4cf64b570de49a7fba49e1ddfb97474110
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/{nodeid}/Notifications/{notificationid}
GET /v1/Auth
GET /v1/Auth/rights
GET /v1/Auth/rights2
GET /v1/NotificationHubRegister
GET /v1/Service/CachedData
GET /v1/Service/LogTrace
GET /v1/Service/RefreshCache
GET /v1/Service/heartbeat
GET /v1/Service/privacy-policy
GET /v1/Service/supported-version
GET /v1/Service/version
GET /v1/{nodeid}/Notifications
GET /v1/{nodeid}/Notifications/active
GET /v1/{nodeid}/Notifications/{notificationId}
GET /v1/{nodeid}/UserNotifications
GET /v1/{nodeid}/UserNotifications/{usernotificationId}
PUT /v1/NotificationHubRegister/{id}
```
  Found on 2026-01-09 20:23
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 17:31
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.34
Domain: api.agrocares.com
Port: 443
URL: https://api.agrocares.com

First seen 2025-12-08 06:52
Last seen 2026-01-09 04:51
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d604c8ddebdbf4e5856978b936bec03937f6559d981

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/v2/clients/{clientId}
DELETE /api/v2/fields/{fieldId}
DELETE /api/v2/webhook/unsubscribe-event/{subscriptionId}
GET /api/v2/carbon
GET /api/v2/carbon/farms
GET /api/v2/carbon/{projectId}/detail
GET /api/v2/carbon/{projectId}/fields
GET /api/v2/carbon/{projectId}/image
GET /api/v2/carbon/{projectId}/points
GET /api/v2/carbon/{projectId}/results
GET /api/v2/carbon/{userUniqueId}/getLicensedUsers
GET /api/v2/clients
GET /api/v2/clients/v3
GET /api/v2/fields
GET /api/v2/fields/v3
GET /api/v2/liab/clients
GET /api/v2/liab/employees
GET /api/v2/liab/labs
GET /api/v2/liab/labs/{labCode}
GET /api/v2/liab/orders
GET /api/v2/liab/orders/{orderUniqueId}/result
GET /api/v2/liab/settings/sensors
GET /api/v2/liab/settings/usedSensors
GET /api/v2/orders
GET /api/v2/orders/results
GET /api/v2/orders/{orderUniqueId}/result
GET /api/v2/users
GET /api/v2/webhook/subscriptions
POST /api/v2/auth/login
POST /api/v2/carbon/assignLicense
POST /api/v2/carbon/assignUser
POST /api/v2/carbon/changeUserStatus
POST /api/v2/carbon/project/save
POST /api/v2/carbon/saveScannerUser
POST /api/v2/liab/labs/{labId}/assignEmployee
POST /api/v2/liab/labs/{labId}/unAssignEmployee
POST /api/v2/liab/settings/addSensor
POST /api/v2/webhook/subscribe-event
POST /api/v2/webhook/test/add-event

Found on 2026-01-09 04:51

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.50.2.34
Domain: argenta.triple-app.be
Port: 443
URL: https://argenta.triple-app.be

First seen 2023-03-31 19:53
Last seen 2025-05-04 04:31
Open for 764 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-05-04 04:31
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 20.50.2.34
Domain: lampfinder.ledvance.com
Port: 443
URL: https://lampfinder.ledvance.com/_profiler/empty/search/results

First seen 2023-02-07 15:54
- Fingerprint: 407cf4363b0e62fafca67e0790d4113690d4113690d4113690d4113690d41136
```
Symfony profiler enabled:
https://lampfinder.ledvance.com/_profiler/empty/search/results
```
  Found on 2023-02-07 15:54
Create report

Open service 20.50.2.34:443 · api.test.ilmiomedico.info

2026-01-13 00:24

HTTP/1.1 200 OK
Content-Length: 149794
Connection: close
Content-Type: text/html
Date: Tue, 13 Jan 2026 00:25:17 GMT
Server: Kestrel
Request-Context: appId=cid-v1:7052a440-5782-4c76-ba68-19f10bc6edc2

Page title: Your Azure Function App is up and running.

<!DOCTYPE html>
<html>
<head>
    <title>Your Azure Function App is up and running.</title>
    <style type="text/css">
        @font-face {
            font-family: 'SegoeLight';
            src: url(//:) format('no404'), url(data:font/woff;charset=utf-8;base64,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

Found 2 days ago by HttpPlugin

Host 20.50.2.34

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Symfony developement panel enabled