LeakIX - Host 20.50.2.52

Host 20.50.2.52

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Apache Apache

tcp/443

Apache Apache 2.4.59

tcp/443

Apache Apache 2.4.65

tcp/443

Apache Apache 2.4.38

tcp/443

Kestrel Kestrel

tcp/443 tcp/80

gunicorn

tcp/443

nginx nginx 1.29.1

tcp/443

nginx nginx 1.14.2

tcp/443

nginx nginx 1.17.1

tcp/443

nginx nginx 1.29.3

tcp/443

nginx nginx

tcp/443

nginx nginx 1.27.5

tcp/443

nginx nginx 1.27.0

tcp/443

nginx nginx 1.27.4

tcp/443

nginx nginx 1.28.0

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: invoicingapidev.proteria.com
Port: 443
URL: https://invoicingapidev.proteria.com

First seen 2025-10-30 15:02
Last seen 2026-01-09 20:29
Open for 71 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac3567ad891fc

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetAllDiscountsForDateIntervalPaged
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2026-01-09 20:29

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac35684a1ac1d

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2025-11-30 22:02

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb408ba9aff9bb5747f208c56c1b9bb6606f1dcfa5d

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount/{*id}
DELETE /v1/DeleteDiscountEvent/{*id}
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetDiscountById/{*id}
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2025-11-03 14:12

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb408ba9aff9bb5747f208c56c1b9bb6606d24afd3d

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount/{*id}
DELETE /v1/DeleteDiscountEvent/{*id}
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPagedViewModel/{proteriaCustomerId}
GET /v1/GetDiscountById/{*id}
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2025-10-30 15:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: partner-gtw-test.portaltalk.net
Port: 443
URL: https://partner-gtw-test.portaltalk.net

First seen 2025-10-16 08:34
Last seen 2026-01-09 17:40
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354947e3fd0b87b84a4b7ca316b77ca316b77ca316b7
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /partner-service/api/v{version}/users/{referenceId}/photo
GET /partner-service/api/v{version}/workspaces
GET /partner-service/api/v{version}/workspaces/{referenceId}/channels
```
  Found on 2026-01-09 17:40
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: connectfleetapi.inhouse.scanreach.com
Port: 443
URL: https://connectfleetapi.inhouse.scanreach.com

First seen 2025-12-09 10:11
Last seen 2026-01-09 15:03
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d48037bfb5205f9efa335cf9c60dbd4f8e0da6fc

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Claims
GET /Version
GET /api/access/member
GET /api/access/member/{azureAdB2CId}
GET /api/answer-invitation/{token}
GET /api/me
GET /api/organizations
GET /api/organizations/{organizationId}
GET /api/organizations/{organizationId}/api-tokens
GET /api/organizations/{organizationId}/api-tokens/{apiTokenId}
GET /api/organizations/{organizationId}/invitations
GET /api/organizations/{organizationId}/members
GET /api/organizations/{organizationId}/sites
GET /api/organizations/{organizationId}/sites/{siteId}
GET /api/organizations/{organizationId}/sites/{siteId}/embarkedPersonnel
GET /api/organizations/{organizationId}/sites/{siteId}/nodes
GET /api/organizations/{organizationId}/sites/{siteId}/snapshots
GET /api/organizations/{organizationId}/sites/{siteId}/view
POST /api/organizations/{organizationId}/invitations/{invitationId}/resend
PUT /api/organizations/{organizationId}/invitations/{invitationId}
PUT /api/organizations/{organizationId}/members/{memberId}

Found on 2026-01-09 15:03

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-19 11:27

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: invoicingapi.proteria.com
Port: 443
URL: https://invoicingapi.proteria.com

First seen 2025-11-23 00:45
Last seen 2026-01-09 14:40
Open for 47 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac3567ad891fc

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetAllDiscountsForDateIntervalPaged
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2026-01-09 14:40

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac35684a1ac1d

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2025-12-01 04:38

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: api-test.u-prevent.com
Port: 443
URL: https://api-test.u-prevent.com

First seen 2025-12-09 02:34
Last seen 2026-01-09 05:09
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549a2ce380c786a9f7bfc63e36a9b65ab0431befae6
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/User/DeleteUser
GET /api/Connections
GET /api/Connections/{id}
GET /api/DataSources
GET /api/DataSources/{id}
GET /api/PatientData/GetData
GET /api/PatientData/GetDataByOrigin
GET /api/PatientData/GetSession
GET /api/Plugins
GET /api/RiskCalculation/ApplicationVersion
GET /api/RiskCalculation/SmartConfig
GET /api/RiskCalculation/config
GET /api/User/DataAuthorization
GET /api/User/GetUser
GET /application/AppInsightsConn
POST /Auth/Logout
POST /Token
POST /api/Connections/{id}/secret
POST /api/PatientData/Format
POST /api/PatientData/FormatAndSave
POST /api/PatientData/LogExport
POST /api/RiskCalculation/calculate
POST /api/RiskCalculation/contact
PUT /api/User/UpdateUser
```
  Found on 2026-01-09 05:09
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: invoicingapistaging.proteria.com
Port: 443
URL: https://invoicingapistaging.proteria.com

First seen 2025-11-23 11:30
Last seen 2026-01-09 01:39
Open for 46 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac3567ad891fc

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetAllDiscountsForDateIntervalPaged
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2026-01-09 01:39

Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4c9d61f07d294150f3d49efe47b0ac35684a1ac1d

Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /v1/DeactivateDiscount
DELETE /v1/DeleteDiscountEvent
GET /v1/Discounts
GET /v1/GetActiveDiscountForProduct/{proteriaCustomerId}/{proteriaArticleCode}
GET /v1/GetAllActiveDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomer/{proteriaCustomerId}
GET /v1/GetAllDiscountsForCustomerPaged/{proteriaCustomerId}
GET /v1/GetInvoicingPreferenceById/{id}
GET /v1/GetInvoicingPreferenceByProteriaId/{proteriaCustomerId}
GET /v1/GetOrderById/{id}
GET /v1/GetOrdersForCustomer/{proteriaCustomerId}
GET /v1/discounts/all
POST /v1/Discount
POST /v1/InvoicingPreference
PUT /v1/UpdateInvoicingPreference

Found on 2025-12-01 13:15

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.52
Domain: admin.zheo.ua
Port: 443
URL: https://admin.zheo.ua

First seen 2025-12-08 07:06
Last seen 2025-12-20 13:48
Open for 12 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354924d73014dbc281576851d3655ae9fddda09f737c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Notification/Template/{id}
DELETE /api/Order/Delete
DELETE /api/Order/DeleteAll
DELETE /api/Order/{id}/DeleteAll
DELETE /api/User
DELETE /api/User/Address/{addressId}/Delete
DELETE /api/User/Profile
GET /Test/RegiterInitUsers
GET /Test/TestSignalR
GET /api/Account
GET /api/Account/Category
GET /api/Account/Photo
GET /api/Address
GET /api/Address/Buildings
GET /api/Address/Cities
GET /api/Address/DeleteNotActive
GET /api/Address/Streets
GET /api/Address/{id}
GET /api/Administration/Analytic
GET /api/Administration/Temp
GET /api/Administration/Temp/EmployeeRes
GET /api/Category
GET /api/Category/CategoryType
GET /api/Category/CategoryType/Details
GET /api/Category/Questions
GET /api/Category/SubQuestions
GET /api/Category/{id}
GET /api/Characteristic
GET /api/Characteristic/Order/{oderId}
GET /api/Characteristic/{id}
GET /api/City
GET /api/City/{id}
GET /api/Currencies/List
GET /api/Currencies/{id}
GET /api/Customer/Order
GET /api/Customer/Order/{orderId}
GET /api/Customer/Order/{orderId}/Potential/Employees
GET /api/Customer/{customerId}
GET /api/Employee/List
GET /api/Employee/Order
GET /api/Employee/Order/Potential
GET /api/Employee/Order/{orderId}
GET /api/Employee/{employeeId}/Order
GET /api/Event/Schedule
GET /api/Event/{id}
GET /api/FileStore/{id}
GET /api/Health
GET /api/Health/Logs
GET /api/Message/Admin
GET /api/Message/User
GET /api/Message/{id}
GET /api/Notification/History
GET /api/Notification/Templates
GET /api/Order
GET /api/Order/All
GET /api/Order/{id}
GET /api/Order/{id}/Details
GET /api/OrderEvaluation
GET /api/OrderEvaluation/{id}
GET /api/Payment
GET /api/Payment/{id}
GET /api/Portfolio
GET /api/Portfolio/Employee/{employeeId}
GET /api/Products/List
GET /api/Products/{id}
GET /api/Promotion
GET /api/Promotion/{id}
GET /api/Role/ClaimsList
GET /api/Role/List
GET /api/Role/{id}
GET /api/Service
GET /api/Service/Category/{categoryId}
GET /api/Service/CertificateType
GET /api/Service/{id}
GET /api/Survey
GET /api/Survey/{id}
GET /api/Units/List
GET /api/Units/{id}
GET /api/User/Coordinate/Configuration
GET /api/User/List
GET /api/User/List/V2
GET /api/User/PersonalAccount
GET /api/User/Phone/{phone}
GET /api/User/{id}
GET /api/UserGroup
GET /api/UserGroup/User
GET /api/UserGroup/{id}
POST /Test/Email
POST /Test/Migrate
POST /Test/Push
POST /Test/RedirectGet
POST /Test/Sms
POST /Test/TestSignalR/MessageRequest
POST /Test/TestSignalR/Order/{orderId}
POST /Test/WebPush
POST /Test/testConvertPdf
POST /api/Account/ChangePassword
POST /api/Account/Check/Registration/Type/{registrationType}
POST /api/Account/RecoveryPassword
POST /api/Account/RecoveryPassword/Confirm
POST /api/Account/Registration
POST /api/Account/Registration/Push
POST /api/Account/Registration/Status
POST /api/Account/Registration/TempAcnt
POST /api/Account/Search/PersonalAcnt
POST /api/Account/SendVerifyEmail
POST /api/Account/SendVerifyPhone
POST /api/Account/Token
POST /api/Account/UploadPhoto
POST /api/Account/VerifyEmail
POST /api/Account/VerifyPhone
POST /api/Address/UpdatedAddressName
POST /api/Administration/Coordinate/Analytic
POST /api/Administration/Report
POST /api/Administration/Report/Order/Search
POST /api/Category/Question/{guid}/AddPhoto
POST /api/Category/Question/{guid}/AddTags
POST /api/Category/Question/{guid}/CategoryType
POST /api/Category/Question/{guid}/DeleteCategoryType/{typeId}
POST /api/Currencies
POST /api/Currencies/Export
POST /api/Currencies/Import
POST /api/Customer/Order/{orderId}/Refuse
POST /api/Customer/Order/{orderId}/SendPush
POST /api/Customer/Order/{orderId}/SetEmployee/{employeeId}
POST /api/Employee/Order/{orderId}/Accept
POST /api/Employee/Order/{orderId}/Confirm
POST /api/Employee/Order/{orderId}/InWork
POST /api/Employee/Order/{orderId}/Perform
POST /api/Employee/Order/{orderId}/Refuse
POST /api/Employee/Order/{orderId}/SetInspectionTime
POST /api/Employee/Order/{orderId}/TempResult
POST /api/Employee/Order/{orderId}/Viewed
POST /api/Employee/ReadyToWork/Search
POST /api/Event
POST /api/Event/Schedule/Search
POST /api/Event/Schedule/Search/ForWeb
POST /api/Event/User/{userId}
POST /api/Import
POST /api/Message
POST /api/Message/{id}/Read
POST /api/Notification/Send
POST /api/Order/Certificate/Create
POST /api/Order/Certificate/Perform
POST /api/Order/Common/Create
POST /api/Order/Emergency/AutoCreate
POST /api/Order/Emergency/Create
POST /api/Order/Emergency/OperatorCreate
POST /api/Order/Emergency/Status
POST /api/Order/Search
POST /api/Order/WorkEvaluation
POST /api/Order/WorkEvaluation/Search
POST /api/Order/list
POST /api/Order/{id}/ContractCreate
POST /api/Order/{id}/UpdateStatus/{orderStatus}
POST /api/Order/{orderId}/Complete
POST /api/Order/{orderId}/Read/CustomerComment
POST /api/Order/{orderId}/ReturnToEmployee
POST /api/Order/{orderId}/SetEmployee
POST /api/Payment/History
POST /api/Payment/History/Order/{id}
POST /api/Payment/History/User
POST /api/Payment/Order/Process
POST /api/Payment/Order/{orderId}
POST /api/Portfolio/Group
POST /api/Products
POST /api/Products/Export
POST /api/Products/Import
POST /api/Promotion/GetForUser
POST /api/Promotion/{promotionId}/GetWinner
POST /api/Promotion/{promotionId}/Participate
POST /api/Promotion/{promotionId}/SendWinnerPush
POST /api/Role
POST /api/Survey/SendNotifyUsers
POST /api/Survey/{id}/Vote/{answerId}
POST /api/Units
POST /api/Units/Export
POST /api/Units/Import
POST /api/User/Address/Add
POST /api/User/Categories/Update
POST /api/User/Coordinate/Add
POST /api/User/Create
POST /api/User/Main/Address/{addressId}/Set
POST /api/User/Search
PUT /api/Portfolio/{id}

Found on 2025-12-20 13:48

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-18 13:21

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 20.50.2.52
Domain: test.app.meewind.nl
Port: 443
URL: https://test.app.meewind.nl/_profiler/empty/search/results

First seen 2024-01-15 10:54
- Fingerprint: 407cf4363b0e62fafca67e07d72a42abd72a42abd72a42abd72a42abd72a42ab
```
Symfony profiler enabled:
https://test.app.meewind.nl/_profiler/empty/search/results
```
  Found on 2024-01-15 10:54
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 20.50.2.52
Domain: app.meewind.nl
Port: 443
URL: https://app.meewind.nl/_profiler/empty/search/results

First seen 2023-10-31 09:41
Last seen 2024-01-07 05:44
Open for 67 days
- Fingerprint: 407cf4363b0e62fafca67e07d9b907e1d9b907e1d9b907e1d9b907e1d9b907e1
```
Symfony profiler enabled:
https://app.meewind.nl/_profiler/empty/search/results
```
  Found on 2024-01-07 05:44
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.50.2.52
Domain: www.bosch-nexeedit-summit.com
Port: 443
URL: https://www.bosch-nexeedit-summit.com

First seen 2022-10-05 04:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d89a8fd6d89a8fd6d89a8fd6d89a8fd6d
```
Found 1 files trough .DS_Store spidering:

/img
```
  Found on 2022-10-05 04:45
Create report

Open service 20.50.2.52:443 · info.zheo.ua

2026-01-12 23:53

HTTP/1.1 200 OK
Content-Length: 7307
Connection: close
Content-Type: text/html
Date: Mon, 12 Jan 2026 23:54:54 GMT
Server: Kestrel
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
ETag: "1dc74464a75288b"
Expires: -1
Last-Modified: Tue, 23 Dec 2025 19:56:56 GMT
Pragma: no-cache

Page title: ЖЕО

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/logo-transparent.png"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#000000"/><link rel="manifest" href="/manifest.json"/><link href="https://fonts.googleapis.com/css?family=Roboto+Mono|Roboto+Slab|Roboto:300,400,500,700" rel="stylesheet"/><link href="https://fonts.googleapis.com/css?family=Roboto+Mono&display=swap" rel="stylesheet"><title>ЖЕО</title><meta name="description" content=""/><meta name="keywords" content="react,material,kit,application,dashboard,admin,template"/><meta name="author" content="Devias IO"/><script src="/ai.js"></script><script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyAZekh3GwAiHwJgI1P7KW4owm8dgrIDBzA&libraries=places"></script><link href="/static/css/22.c4862038.chunk.css" rel="stylesheet"><link href="/static/css/main.5d13ca95.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function c(c){for(var f,t,n=c[0],o=c[1],b=c[2],u=0,l=[];u<n.length;u++)t=n[u],Object.prototype.hasOwnProperty.call(r,t)&&r[t]&&l.push(r[t][0]),r[t]=0;for(f in o)Object.prototype.hasOwnProperty.call(o,f)&&(e[f]=o[f]);for(i&&i(c);l.length;)l.shift()();return a.push.apply(a,b||[]),d()}function d(){for(var e,c=0;c<a.length;c++){for(var d=a[c],f=!0,t=1;t<d.length;t++){var o=d[t];0!==r[o]&&(f=!1)}f&&(a.splice(c--,1),e=n(n.s=d[0]))}return e}var f={},t={21:0},r={21:0},a=[];function n(c){if(f[c])return f[c].exports;var d=f[c]={i:c,l:!1,exports:{}};return e[c].call(d.exports,d,d.exports,n),d.l=!0,d.exports}n.e=function(e){var c=[];t[e]?c.push(t[e]):0!==t[e]&&{9:1,12:1,23:1,94:1}[e]&&c.push(t[e]=new Promise((function(c,d){for(var f="static/css/"+({}[e]||e)+"."+{0:"31d6cfe0",1:"31d6cfe0",2:"31d6cfe0",3:"31d6cfe0",4:"31d6cfe0",5:"31d6cfe0",6:"31d6cfe0",7:"31d6cfe0",8:"31d6cfe0",9:"7f4b16cd",10:"31d6cfe0",11:"31d6cfe0",12:"38a393b5",13:"31d6cfe0",14:"31d6cfe0",15:"31d6cfe0",16:"31d6cfe0",17:"31d6cfe0",18:"31d6cfe0",19:"31d6cfe0",23:"89505123",24:"31d6cfe0",25:"31d6cfe0",26:"31d6cfe0",27:"31d6cfe0",28:"31d6cfe0",29:"31d6cfe0",30:"31d6cfe0",31:"31d6cfe0",32:"31d6cfe0",33:"31d6cfe0",34:"31d6cfe0",35:"31d6cfe0",36:"31d6cfe0",37:"31d6cfe0",38:"31d6cfe0",39:"31d6cfe0",40:"31d6cfe0",41:"31d6cfe0",42:"31d6cfe0",43:"31d6cfe0",44:"31d6cfe0",45:"31d6cfe0",46:"31d6cfe0",47:"31d6cfe0",48:"31d6cfe0",49:"31d6cfe0",50:"31d6cfe0",51:"31d6cfe0",52:"31d6cfe0",53:"31d6cfe0",54:"31d6cfe0",55:"31d6cfe0",56:"31d6cfe0",57:"31d6cfe0",58:"31d6cfe0",59:"31d6cfe0",60:"31d6cfe0",61:"31d6cfe0",62:"31d6cfe0",63:"31d6cfe0",64:"31d6cfe0",65:"31d6cfe0",66:"31d6cfe0",67:"31d6cfe0",68:"31d6cfe0",69:"31d6cfe0",70:"31d6cfe0",71:"31d6cfe0",72:"31d6cfe0",73:"31d6cfe0",74:"31d6cfe0",75:"31d6cfe0",76:"31d6cfe0",77:"31d6cfe0",78:"31d6cfe0",79:"31d6cfe0",80:"31d6cfe0",81:"31d6cfe0",82:"31d6cfe0",83:"31d6cfe0",84:"31d6cfe0",85:"31d6cfe0",86:"31d6cfe0",87:"31d6cfe0",88:"31d6cfe0",89:"31d6cfe0",90:"31d6cfe0",91:"31d6cfe0",92:"31d6cfe0",93:"31d6cfe0",94:"fabf8229",95:"31d6cfe0",96:"31d6cfe0",97:"31d6cfe0",98:"31d6cfe0",99:"31d6cfe0",100:"31d6cfe0",101:"31d6cfe0",102:"31d6cfe0",103:"31d6cfe0",104:"31d6cfe0",105:"31d6cfe0",106:"31d6cfe0",107:"31d6cfe0"}[e]+".chunk.css",r=n.p+f,a=document.getElementsByTagName("link"),o=0;o<a.length;o++){var b=(i=a[o]).getAttribute("data-href")||i.getAttribute("href");if("stylesheet"===i.rel&&(b===f||b===r))return c()}var u=document.getElementsByTagName("style");for(o=0;o<u.length;o++){var i;if((b=(i=u[o]).getAttribute("data-href"))===f||b===r)return c()}var l=document.createElement("link");l.rel="stylesheet",l.type="text/css",l.onload=c,l.onerror=function(c){var f=c&&c.target&&c.target.src||r,a=new Error("Loading CSS chunk "+e+" failed.\n("+f+")");a.code="CSS_CHUNK_LOAD_FAILED",a.request=f,delete t[e],l.parentNode.removeChild(l),d(a)},l.href=r,document.getElementsByTagName("head")[0].appendChild(l)})).then((function(){t[e]=0})));var d=r[e];if(0!==d)if(d)c.push(d[2]);else{var f

Found 3 days ago by HttpPlugin

Host 20.50.2.52

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file