LeakIX - Host 20.50.64.9

Host 20.50.64.9

Ireland

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Apache Apache 2.4.54

tcp/443

Apache Apache

tcp/443 tcp/80

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443

gunicorn

tcp/443

nginx nginx 1.29.4

tcp/443

nginx nginx 1.25.4

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.23.2

tcp/443

nginx nginx 1.28.0

tcp/443

nginx nginx 1.29.2

tcp/443

nginx nginx 1.24.0

tcp/443

nginx nginx 1.25.5

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: norskeiendomsforvaltning.kundesjekk.no
Port: 443
URL: https://norskeiendomsforvaltning.kundesjekk.no

First seen 2026-01-03 09:08
Last seen 2026-02-10 10:16
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-10 10:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: api.chronosadvisory.nl
Port: 443
URL: https://api.chronosadvisory.nl

First seen 2025-12-22 05:51
Last seen 2026-02-09 23:16
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 23:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: dev-backend.bidvestalice.com
Port: 443
URL: https://dev-backend.bidvestalice.com

First seen 2025-12-27 04:35
Last seen 2026-02-09 23:08
Open for 44 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 23:08
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: ultima.kundesjekk.no
Port: 443
URL: https://ultima.kundesjekk.no

First seen 2025-12-23 09:12
Last seen 2026-02-09 22:35
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 22:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: pmnyeboligeroslo.kundesjekk.no
Port: 443
URL: https://pmnyeboligeroslo.kundesjekk.no

First seen 2026-01-11 09:21
Last seen 2026-02-09 22:28
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 22:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: asbregnskap.kundesjekk.no
Port: 443
URL: https://asbregnskap.kundesjekk.no

First seen 2025-12-23 09:20
Last seen 2026-02-09 20:28
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 20:28
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: www.elephantwelfareproject.org
Port: 443
URL: https://www.elephantwelfareproject.org

First seen 2022-12-19 13:33
Last seen 2026-02-09 18:21
Open for 1148 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2026-02-09 18:21
  
  380 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: easy.cbt.aero
Port: 443
URL: https://easy.cbt.aero

First seen 2025-12-06 09:27
Last seen 2026-02-09 17:19
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549c0fbce27d5f1f26b3541d11959ad9139b7ae526a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/administrator/create-company
POST /api/administrator/create-course
POST /api/auth/login
POST /api/auth/reset-password
POST /api/auth/send-reset-password-email
POST /api/enrollments/add-new
POST /api/enrollments/pay
POST /api/users/create-administrator
POST /api/users/create-manager
POST /api/users/create-student
```
  Found on 2026-02-09 17:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: dev-identity.bidvestalice.com
Port: 443
URL: https://dev-identity.bidvestalice.com

First seen 2025-12-26 10:50
Last seen 2026-02-09 16:48
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354901e64ab578761f3324375ddeddee23170bfa4daa
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Admin/users
GET /api/ConfirmAccount/email
GET /api/ConfirmAccount/sign-up
GET /api/Preflight
GET /api/RefreshTokens
GET /api/TimeBasedOtp/{email}
GET /api/TimeBasedOtp/{email}/reset
GET /api/Token
POST /api/Admin/setusermfareset/{id}
POST /api/Admin/setuserpasswordreset/{id}
POST /api/ConfirmAccount/send-email-confirmation
POST /api/ForgotPassword
POST /api/Login
POST /api/MultifactorAuthentication
POST /api/RefreshTokens/refreshtoken
POST /api/RefreshTokens/revoketoken
POST /api/Registration
POST /api/ResetPassword
```
  Found on 2026-02-09 16:48
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: dev-lab-api.bidvestalice.com
Port: 443
URL: https://dev-lab-api.bidvestalice.com

First seen 2025-12-26 11:07
Last seen 2026-02-09 15:44
Open for 45 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035490315d328998c8c8d3370ce17af877135cb3ab372

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/BusinessProcess
GET /api/BusinessProcess/{id}
GET /api/Category
GET /api/Category/{id}
GET /api/Clients
GET /api/Clients/{id}
GET /api/Countries
GET /api/Countries/{id}
GET /api/Customers
GET /api/Customers/{id}
GET /api/DataAssetDefinition
GET /api/DataAssetDefinition/{id}
GET /api/DataAssetFiles
GET /api/DataAssetFiles/{id}
GET /api/DataAssetTransformation/SQLDataTypes
GET /api/DataAssetTransformation/{id}
GET /api/LinkDataAssetDefinitionToProcedureStep
GET /api/LinkDataAssetDefinitionToProcedureStep/{id}
GET /api/LocalLab
GET /api/LocalLab/update
GET /api/LocalLab/update/{target}/{arch}/{version}
GET /api/PreflightChecks/auth
GET /api/PreflightChecks/un-auth
GET /api/Problems
GET /api/Problems/{id}
GET /api/ProcedureOutcomeType
GET /api/ProcedureOutcomeType/{id}
GET /api/ProcedureSteps
GET /api/ProcedureSteps/{id}
GET /api/Procedures
GET /api/Procedures/{id}
GET /api/Projects
GET /api/Projects/{id}
GET /api/RoleAssignments
GET /api/RoleAssignments/{id}
GET /api/Roles
GET /api/Roles/{id}
GET /api/Schema
GET /api/Schema/GetReservedNames
GET /api/Schema/{dataAssetDefinitionId}
GET /api/SourceDefinition
GET /api/SourceDefinition/{id}
GET /api/SourceFiles
GET /api/SourceFiles/{id}
GET /api/Status
GET /api/Status/{id}
GET /api/Users
GET /api/Users/{id}
POST /api/DataAssetTransformation/CreateTable

Found on 2026-02-09 15:44

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: cdn.cloud.prio.org
Port: 443
URL: https://cdn.cloud.prio.org

First seen 2025-11-12 12:06
Last seen 2026-02-09 15:38
Open for 89 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354938cdd7d0015367a70a35940dd180ece9884ce58b
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /MicrosoftIdentity/Account/Challenge/{scheme}
GET /MicrosoftIdentity/Account/EditProfile/{scheme}
GET /MicrosoftIdentity/Account/ResetPassword/{scheme}
GET /MicrosoftIdentity/Account/SignIn/{scheme}
GET /MicrosoftIdentity/Account/SignOut/{scheme}
GET /files/hash/{hash}
GET /files/{id}
GET /files/{id}/metadata
GET /files/{id}/{filename}
GET /graphics/{id}
GET /images/hash/{hash}
GET /images/latest/{take}
GET /images/search/{query}
GET /images/tags
GET /images/{filename}
GET /images/{filename}/download
GET /images/{filename}/metadata
GET /images/{filename}/preview
POST /files
POST /files/legacy
POST /images
```
  Found on 2026-02-09 15:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: connect-resultsanalysisservice-neu.bentley.com
Port: 443
URL: https://connect-resultsanalysisservice-neu.bentley.com

First seen 2025-11-03 07:03
Last seen 2026-02-09 14:31
Open for 98 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a5d8d620c62cff6b3f979237a6aae23f51300784
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /results
GET /results/{id}
GET /results/{type}/compare
GET /results/{type}/suppress
POST /results/cancelbyids
```
  Found on 2026-02-09 14:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: dev-identity.bidvestalice.com
Port: 80
URL: http://dev-identity.bidvestalice.com

First seen 2025-12-26 10:50
Last seen 2026-02-07 17:26
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354901e64ab578761f3324375ddeddee23170bfa4daa
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Admin/users
GET /api/ConfirmAccount/email
GET /api/ConfirmAccount/sign-up
GET /api/Preflight
GET /api/RefreshTokens
GET /api/TimeBasedOtp/{email}
GET /api/TimeBasedOtp/{email}/reset
GET /api/Token
POST /api/Admin/setusermfareset/{id}
POST /api/Admin/setuserpasswordreset/{id}
POST /api/ConfirmAccount/send-email-confirmation
POST /api/ForgotPassword
POST /api/Login
POST /api/MultifactorAuthentication
POST /api/RefreshTokens/refreshtoken
POST /api/RefreshTokens/revoketoken
POST /api/Registration
POST /api/ResetPassword
```
  Found on 2026-02-07 17:26
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: utleiestavanger.kundesjekk.no
Port: 443
URL: https://utleiestavanger.kundesjekk.no

First seen 2025-12-27 23:40
Last seen 2026-02-05 03:59
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-05 03:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: accuratus.kundesjekk.no
Port: 443
URL: https://accuratus.kundesjekk.no

First seen 2025-12-22 05:26
Last seen 2026-02-05 03:47
Open for 44 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-05 03:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: planner-bff.hotfix.rax-ip.net
Port: 443
URL: https://planner-bff.hotfix.rax-ip.net

First seen 2025-12-26 15:53
Last seen 2026-02-01 23:46
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-01 23:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: connect-designvalidationrulemanagement-neu.bentley.com
Port: 443
URL: https://connect-designvalidationrulemanagement-neu.bentley.com

First seen 2025-11-03 15:30
Last seen 2026-02-01 23:35
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1d83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bf
```
Public Swagger UI/API detected at path: /swagger/swagger-ui.html
```
  Found on 2026-02-01 23:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: planner-bff.acc.rax-ip.net
Port: 443
URL: https://planner-bff.acc.rax-ip.net

First seen 2025-12-26 16:13
Last seen 2026-02-01 22:31
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-01 22:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: cms-bff.hotfix.rax-ip.net
Port: 443
URL: https://cms-bff.hotfix.rax-ip.net

First seen 2025-12-27 07:31
Last seen 2026-02-01 22:26
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-01 22:26
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: elephantwelfareproject.org
Port: 443
URL: https://elephantwelfareproject.org

First seen 2023-11-13 07:19
Last seen 2026-01-23 08:18
Open for 802 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2026-01-23 08:18
  
  380 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.64.9
Domain: dev-internal-backend.bidvestalice.com
Port: 443
URL: https://dev-internal-backend.bidvestalice.com

First seen 2025-12-26 13:13
Last seen 2026-01-16 09:24
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 09:24
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: www.ancientbiotics.co.uk
Port: 443
URL: https://www.ancientbiotics.co.uk

First seen 2023-01-06 07:21
Last seen 2024-07-22 12:36
Open for 563 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-07-22 12:36
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: ancientbiotics.co.uk
Port: 443
URL: https://ancientbiotics.co.uk

First seen 2023-01-06 07:21
Last seen 2024-07-22 10:59
Open for 563 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-07-22 10:59
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: inclusivefood.org
Port: 443
URL: https://inclusivefood.org

First seen 2023-02-08 17:01
Last seen 2024-02-08 18:45
Open for 365 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2024-02-08 18:45
  
  380 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.50.64.9
Domain: pare.kattokeskus.fi
Port: 443
URL: https://pare.kattokeskus.fi

First seen 2022-10-30 05:40
Last seen 2023-09-23 01:59
Open for 327 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9de4db4e49e4db4e49e4db4e49e4db4e49
```
Found 1 files trough .DS_Store spidering:

/source_db_backup
```
  Found on 2022-10-30 05:40
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 20.50.64.9
Domain: inclusivefood.org
Port: 80
URL: http://inclusivefood.org

First seen 2023-02-08 17:01
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2023-02-08 17:01
  
  380 Bytes
Create report

Open service 20.50.64.9:443 · asbregnskap.kundesjekk.no

2026-02-09 20:28

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Mon, 09 Feb 2026 20:28:19 GMT
Server: Kestrel
Location: https://identity.poweroffice.net/connect/authorize?client_id=kundesjekk&redirect_uri=https%3A%2F%2Fasbregnskap.kundesjekk.no%2Fsignin-userauth&response_type=code&scope=openid%20name&code_challenge=KlBWlQk62gNpNlGyRbdFZbyEqb3masWoAq2G325Tg6c&code_challenge_method=S256&response_mode=form_post&nonce=639062657001737452.ZmViMzkwYjMtNDJkZi00MzI5LThjOTQtZTkyNjAyMDQzOTZiYjQ0YTEwNjItMDljYi00M2E3LTk4ZDQtMDhjNWM3MzA0ZmI1&state=CfDJ8PTPzT4lKKRHgiY7rnPSbmJBKB21_r0qtfndJC5TNrm2TWEYEEq9zstvkNwG6o7F2kSm2JDljO7AM8XP6NRTvWfF8vqxSE_4RxGzMLp5r3l96UqnHvaE8tfVB4Za9X42QS3r82m6610YGfs92eDUB8GIu5fiI2osashciSvmpdQuCH4rNTI1czpzv3q3DKfFTqzTzHB_q38FO-Vd7Wxy9GrP4z2Gkv-8rqPZ54ySdp1TR1rvn5TXGi0u9AbXRQOLFaYNdO8AEQME_r-yT-5gJJdlcMHuTId-P8q1XQ2zq0svxhqJc4gmfTMjfpOVjluJzCM26ghr-N5f0Y5FGx1uYpTZMIgn8Jn2U0-lF7cmU0sLsVig12IGNjGGSo5JEajruczj59xoarQPMlU4eNSSXKI&x-client-SKU=ID_NET8_0&x-client-ver=8.1.2.0
Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.CfDJ8PTPzT4lKKRHgiY7rnPSbmJ7Bdw0ZYyDTnTlZfVIzEyrAeuc1QrCL50ioS3CWbs9f2Vv9mx2por8vSJaTToG7QCm9aRxVy8phsMnquYAMts6Y3WQtNxueYCT4Vd_rV9gwJ6JC33WmEfUtyX1bjaQBRqw6DlFYZyOCGg7WfZmDjdDXrk7fNymJ5fdnFqP2Yyy7Rg0vUQN33ZRWEfcLzuPhNsBRdwCT1uoIT0s6S1CUpRxgyAc3yndHJwKclQiPVNSD7hZp-FSGKV1msVTRhply9g=N; expires=Mon, 09 Feb 2026 20:43:20 GMT; path=/signin-userauth; secure; samesite=none; httponly
Set-Cookie: .AspNetCore.Correlation.8L69J1irkce15KgdGrAFhmRHSW2RStYyWANw_owN09U=N; expires=Mon, 09 Feb 2026 20:43:20 GMT; path=/signin-userauth; secure; samesite=none; httponly
Set-Cookie: ARRAffinity=5b2008cde0b92d9a8a6da36c610692f13c692ed1ce73853cff06cc5bb1681877;Path=/;HttpOnly;Secure;Domain=asbregnskap.kundesjekk.no
Set-Cookie: ARRAffinitySameSite=5b2008cde0b92d9a8a6da36c610692f13c692ed1ce73853cff06cc5bb1681877;Path=/;HttpOnly;SameSite=None;Secure;Domain=asbregnskap.kundesjekk.no
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:e7f34920-47e4-456e-b26d-fadf9a86830f
Content-Security-Policy: default-src 'self'; script-src 'self' https://az416426.vo.msecnd.net https://cdnjs.cloudflare.com/ajax/libs/pdf.js/2.10.377/pdf.js https://cdnjs.cloudflare.com/ajax/libs/pdf.js/2.10.377/pdf.worker.js https://unpkg.com/pdfjs-dist@3.6.172/build/pdf.worker.min.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data:; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; connect-src 'self' cachedlookup.azurewebsites.net graf.kundesjekk.no dc.services.visualstudio.com;

Found 15 hours ago by HttpPlugin

Host 20.50.64.9

Ireland

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed