[hackversity]

I came across this endpoint http://172.104.142.27 that leaks the docker-compose, empty env file and a postman collection. 
Might be of interest.
Dev's forgot to cleanup

# API Works now. Please note the DB is live... # API Basic Auth: root:rootpassword for POST, PUT, DELETE methods version: '3.8' services:   apache:     image: httpd:latest     volumes:       - ./www:/usr/local/apache2/htdocs     ports:       - "80:80"     networks:       - ihtr-dev     restart: unless-stopped   db:     image: mysql:5.7     environment:       MYSQL_ROOT_PASSWORD: rootpassword     volumes:       - db_data:/var/lib/mysql     ports:       - "3306:3306"     networks:       - ihtr-dev     restart: unless-stopped   api:     build:       context: .       dockerfile: Dockerfile-api     ports:       - "3000:3000"     environment:       - MYSQL_HOST=db       - MYSQL_ROOT_PASSWORD=rootpassword       - MYSQL_DATABASE=employeesdb     depends_on:       - db     networks:       - ihtr-dev     restart: unless-stopped volumes:   db_data: networks:   ihtr-dev:

API Collection accessible: http://172.104.142.27/Postman-Collection.json

[Violator]

Nice catch up! Thank you for sharing it

[num1]

I came across this endpoint http://172.104.142.27 that leaks the docker-compose, empty env file and a postman collection. 
Might be of interest.
Dev's forgot to cleanup

# API Works now. Please note the DB is live... # API Basic Auth: root:rootpassword for POST, PUT, DELETE methods version: '3.8' services:   apache:     image: httpd:latest     volumes:       - ./www:/usr/local/apache2/htdocs     ports:       - "80:80"     networks:       - ihtr-dev     restart: unless-stopped   db:     image: mysql:5.7     environment:       MYSQL_ROOT_PASSWORD: rootpassword     volumes:       - db_data:/var/lib/mysql     ports:       - "3306:3306"     networks:       - ihtr-dev     restart: unless-stopped   api:     build:       context: .       dockerfile: Dockerfile-api     ports:       - "3000:3000"     environment:       - MYSQL_HOST=db       - MYSQL_ROOT_PASSWORD=rootpassword       - MYSQL_DATABASE=employeesdb     depends_on:       - db     networks:       - ihtr-dev     restart: unless-stopped volumes:   db_data: networks:   ihtr-dev:

API Collection accessible: http://172.104.142.27/Postman-Collection.json

here you go

Hidden Content

You must register or login to view this content.

Hidden Content

You must register or login to view this content.

---

most likely a honeypot .

sql username = root
sql password = rootpassword