AkamaiGHost
tcp/80
Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d606a2c9a1476cb247b7bde9b663afe4526e6d9195d
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /services/data/{apiVersion}/sobjects/MobilePushServiceDevice/{id}
GET /Asset/LindeSerialNumber
GET /Asset/Tools
GET /AssetScrappingReason
GET /HcUtilities/CheckVersion
GET /HcUtilities/UserProfile
GET /Job/GetJobByFoJobId/{foJobId}
GET /Job/GetJobNoSignedReasons
GET /Job/GetJobsByTechnician
GET /Material/KitSearch
GET /Material/Search
GET /MaterialPoint/AssetDefaultDestination
GET /MaterialPoint/Search
GET /Patient/GetPatientByFoPatientId/{foPatientId}
GET /RiskAssessment
GET /RiskAssessment/{riskAssessmentId}
GET /WorkshopActivity
GET /WorkshopActivity/SparePartExchangeReason
GET /WorkshopActivity/SpareParts
GET /WorkshopActivity/Tools
GET /WorkshopActivityType
GET /api/Values
GET /api/Values/{id}
GET /asset/activeassets
GET /document
GET /document/Index
GET /notifications/registration/GetAll
GET /services/apexrest/MobileVizArt/countryTranslations
GET /services/apexrest/MobileVizArt/getCountrySettingnew/{countryName}
GET /services/apexrest/MobileVizArt/getTripJobsCount
GET /services/apexrest/MobileVizArt/getUserInfo
GET /services/apexrest/MobileVizArt/utils
GET /services/data/connect/proxy/HelloMSync
GET /services/data/{apiVersion}/query
GET /services/data/{apiVersion}/queryAll
GET /services/data/{apiVersion}/sobjects/{entityName}/describe
GET /services/data/{apiVersion}/sobjects/{entityName}/describe/layouts/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}/{entityExternalId}
POST /Job
POST /RiskAssessment/JobRiskAssessments
POST /Task
POST /log
POST /notifications/registration/{handle}
POST /notifications/sending/{pns}
POST /services/apexrest/MobileVizArt/appReinstallNotification
POST /services/apexrest/MobileVizArt/checkObjectTypesToSynchronize
POST /services/apexrest/MobileVizArt/endCleanup
POST /services/apexrest/MobileVizArt/endUpload
POST /services/apexrest/MobileVizArt/getObjectPermissions
POST /services/apexrest/MobileVizArt/getRecordIds
POST /services/apexrest/MobileVizArt/getRecordsByIdsEnhanced
POST /services/apexrest/MobileVizArt/startDownload
POST /services/apexrest/MobileVizArt/syncRecordsToSfdc
POST /services/apexrest/MobileVizArt/syncTime
POST /services/apexrest/MobileVizArt/updateJobSyncTime
POST /services/apexrest/getRecordsOnDemand
POST /services/data/{apiVersion}/connect/proxy/app-analytics-logging
POST /services/data/{apiVersion}/sobjects/Attachment
POST /services/data/{apiVersion}/sobjects/ContentVersion
POST /services/data/{apiVersion}/sobjects/MobilePushServiceDevice
POST /services/data/{apiVersion}/sobjects/User/{entityId}
PUT /notifications/registration/{id}
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491da2c34d351e21362f8c821f0889d1fd2a899098
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /services/data/{apiVersion}/sobjects/MobilePushServiceDevice/{id}
GET /Asset/LindeSerialNumber
GET /Asset/Tools
GET /AssetScrappingReason
GET /HcUtilities/CheckVersion
GET /HcUtilities/UserProfile
GET /Job/GetJobByFoJobId/{foJobId}
GET /Job/GetJobNoSignedReasons
GET /Job/GetJobsByTechnician
GET /Material/KitSearch
GET /Material/Search
GET /MaterialPoint/AssetDefaultDestination
GET /MaterialPoint/Search
GET /Patient/GetPatientByFoPatientId/{foPatientId}
GET /RiskAssessment
GET /RiskAssessment/{riskAssessmentId}
GET /WorkshopActivity
GET /WorkshopActivity/SparePartExchangeReason
GET /WorkshopActivity/SpareParts
GET /WorkshopActivity/Tools
GET /WorkshopActivityType
GET /api/Values
GET /api/Values/{id}
GET /asset/activeassets
GET /document
GET /document/Index
GET /notifications/registration/GetAll
GET /services/apexrest/MobileVizArt/countryTranslations
GET /services/apexrest/MobileVizArt/getCountrySettingnew/{countryName}
GET /services/apexrest/MobileVizArt/getTripJobsCount
GET /services/apexrest/MobileVizArt/getUserInfo
GET /services/apexrest/MobileVizArt/utils
GET /services/data/connect/proxy/HelloMSync
GET /services/data/{apiVersion}/query
GET /services/data/{apiVersion}/queryAll
GET /services/data/{apiVersion}/sobjects/{entityName}/describe
GET /services/data/{apiVersion}/sobjects/{entityName}/describe/layouts/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}/{entityExternalId}
POST /Job
POST /RiskAssessment/JobRiskAssessments
POST /Task
POST /log
POST /notifications/registration/{handle}
POST /notifications/sending/{pns}
POST /services/apexrest/MobileVizArt/appReinstallNotification
POST /services/apexrest/MobileVizArt/checkObjectTypesToSynchronize
POST /services/apexrest/MobileVizArt/endCleanup
POST /services/apexrest/MobileVizArt/endUpload
POST /services/apexrest/MobileVizArt/getObjectPermissions
POST /services/apexrest/MobileVizArt/getRecordIds
POST /services/apexrest/MobileVizArt/getRecordsByIdsEnhanced
POST /services/apexrest/MobileVizArt/startDownload
POST /services/apexrest/MobileVizArt/syncRecordsToSfdc
POST /services/apexrest/MobileVizArt/syncTime
POST /services/apexrest/MobileVizArt/updateJobSyncTime
POST /services/apexrest/getRecordsOnDemand
POST /services/data/{apiVersion}/connect/proxy/app-analytics-logging
POST /services/data/{apiVersion}/sobjects/Attachment
POST /services/data/{apiVersion}/sobjects/ContentVersion
POST /services/data/{apiVersion}/sobjects/MobilePushServiceDevice
POST /services/data/{apiVersion}/sobjects/User/{entityId}
PUT /notifications/registration/{id}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491da2c34d351e21362f8c821f0889d1fd2a899098
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /services/data/{apiVersion}/sobjects/MobilePushServiceDevice/{id}
GET /Asset/LindeSerialNumber
GET /Asset/Tools
GET /AssetScrappingReason
GET /HcUtilities/CheckVersion
GET /HcUtilities/UserProfile
GET /Job/GetJobByFoJobId/{foJobId}
GET /Job/GetJobNoSignedReasons
GET /Job/GetJobsByTechnician
GET /Material/KitSearch
GET /Material/Search
GET /MaterialPoint/AssetDefaultDestination
GET /MaterialPoint/Search
GET /Patient/GetPatientByFoPatientId/{foPatientId}
GET /RiskAssessment
GET /RiskAssessment/{riskAssessmentId}
GET /WorkshopActivity
GET /WorkshopActivity/SparePartExchangeReason
GET /WorkshopActivity/SpareParts
GET /WorkshopActivity/Tools
GET /WorkshopActivityType
GET /api/Values
GET /api/Values/{id}
GET /asset/activeassets
GET /document
GET /document/Index
GET /notifications/registration/GetAll
GET /services/apexrest/MobileVizArt/countryTranslations
GET /services/apexrest/MobileVizArt/getCountrySettingnew/{countryName}
GET /services/apexrest/MobileVizArt/getTripJobsCount
GET /services/apexrest/MobileVizArt/getUserInfo
GET /services/apexrest/MobileVizArt/utils
GET /services/data/connect/proxy/HelloMSync
GET /services/data/{apiVersion}/query
GET /services/data/{apiVersion}/queryAll
GET /services/data/{apiVersion}/sobjects/{entityName}/describe
GET /services/data/{apiVersion}/sobjects/{entityName}/describe/layouts/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}/{entityExternalId}
POST /Job
POST /RiskAssessment/JobRiskAssessments
POST /Task
POST /log
POST /notifications/registration/{handle}
POST /notifications/sending/{pns}
POST /services/apexrest/MobileVizArt/appReinstallNotification
POST /services/apexrest/MobileVizArt/checkObjectTypesToSynchronize
POST /services/apexrest/MobileVizArt/endCleanup
POST /services/apexrest/MobileVizArt/endUpload
POST /services/apexrest/MobileVizArt/getObjectPermissions
POST /services/apexrest/MobileVizArt/getRecordIds
POST /services/apexrest/MobileVizArt/getRecordsByIdsEnhanced
POST /services/apexrest/MobileVizArt/startDownload
POST /services/apexrest/MobileVizArt/syncRecordsToSfdc
POST /services/apexrest/MobileVizArt/syncTime
POST /services/apexrest/MobileVizArt/updateJobSyncTime
POST /services/apexrest/getRecordsOnDemand
POST /services/data/{apiVersion}/connect/proxy/app-analytics-logging
POST /services/data/{apiVersion}/sobjects/Attachment
POST /services/data/{apiVersion}/sobjects/ContentVersion
POST /services/data/{apiVersion}/sobjects/MobilePushServiceDevice
POST /services/data/{apiVersion}/sobjects/User/{entityId}
PUT /notifications/registration/{id}
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491da2c34d351e21362f8c821f0889d1fd2a899098
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /services/data/{apiVersion}/sobjects/MobilePushServiceDevice/{id}
GET /Asset/LindeSerialNumber
GET /Asset/Tools
GET /AssetScrappingReason
GET /HcUtilities/CheckVersion
GET /HcUtilities/UserProfile
GET /Job/GetJobByFoJobId/{foJobId}
GET /Job/GetJobNoSignedReasons
GET /Job/GetJobsByTechnician
GET /Material/KitSearch
GET /Material/Search
GET /MaterialPoint/AssetDefaultDestination
GET /MaterialPoint/Search
GET /Patient/GetPatientByFoPatientId/{foPatientId}
GET /RiskAssessment
GET /RiskAssessment/{riskAssessmentId}
GET /WorkshopActivity
GET /WorkshopActivity/SparePartExchangeReason
GET /WorkshopActivity/SpareParts
GET /WorkshopActivity/Tools
GET /WorkshopActivityType
GET /api/Values
GET /api/Values/{id}
GET /asset/activeassets
GET /document
GET /document/Index
GET /notifications/registration/GetAll
GET /services/apexrest/MobileVizArt/countryTranslations
GET /services/apexrest/MobileVizArt/getCountrySettingnew/{countryName}
GET /services/apexrest/MobileVizArt/getTripJobsCount
GET /services/apexrest/MobileVizArt/getUserInfo
GET /services/apexrest/MobileVizArt/utils
GET /services/data/connect/proxy/HelloMSync
GET /services/data/{apiVersion}/query
GET /services/data/{apiVersion}/queryAll
GET /services/data/{apiVersion}/sobjects/{entityName}/describe
GET /services/data/{apiVersion}/sobjects/{entityName}/describe/layouts/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}
PATCH /services/data/{apiVersion}/sobjects/Attachment/{entityId}/{entityExternalId}
POST /Job
POST /RiskAssessment/JobRiskAssessments
POST /Task
POST /log
POST /notifications/registration/{handle}
POST /notifications/sending/{pns}
POST /services/apexrest/MobileVizArt/appReinstallNotification
POST /services/apexrest/MobileVizArt/checkObjectTypesToSynchronize
POST /services/apexrest/MobileVizArt/endCleanup
POST /services/apexrest/MobileVizArt/endUpload
POST /services/apexrest/MobileVizArt/getObjectPermissions
POST /services/apexrest/MobileVizArt/getRecordIds
POST /services/apexrest/MobileVizArt/getRecordsByIdsEnhanced
POST /services/apexrest/MobileVizArt/startDownload
POST /services/apexrest/MobileVizArt/syncRecordsToSfdc
POST /services/apexrest/MobileVizArt/syncTime
POST /services/apexrest/MobileVizArt/updateJobSyncTime
POST /services/apexrest/getRecordsOnDemand
POST /services/data/{apiVersion}/connect/proxy/app-analytics-logging
POST /services/data/{apiVersion}/sobjects/Attachment
POST /services/data/{apiVersion}/sobjects/ContentVersion
POST /services/data/{apiVersion}/sobjects/MobilePushServiceDevice
POST /services/data/{apiVersion}/sobjects/User/{entityId}
PUT /notifications/registration/{id}
Open service 2.16.183.12:80 · tst.api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://tst.api.mobilesync.hc.linde.com/ Date: Fri, 23 Jan 2026 13:17:03 GMT Connection: close
Open service 2.16.183.16:80 · tst.api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://tst.api.mobilesync.hc.linde.com/ Date: Fri, 23 Jan 2026 13:17:04 GMT Connection: close
Open service 2.16.183.16:443 · tst.api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:d8c6ac62-5cc3-4147-a53a-cf518c3079e6 Date: Fri, 23 Jan 2026 13:16:42 GMT Connection: close
Open service 2.16.183.12:443 · tst.api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:d8c6ac62-5cc3-4147-a53a-cf518c3079e6 Date: Fri, 23 Jan 2026 13:16:42 GMT Connection: close
Open service 2.16.183.12:443 · api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:e0db755f-826e-4902-a358-1d766ad79780 Date: Fri, 23 Jan 2026 13:16:41 GMT Connection: close Set-Cookie: TiPMix=76.0268316159053; path=/; HttpOnly; Domain=api.mobilesync.hc.linde.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=api.mobilesync.hc.linde.com; Max-Age=3600; Secure; SameSite=None
Open service 2.16.183.12:80 · api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 387 Expires: Fri, 23 Jan 2026 13:17:03 GMT Date: Fri, 23 Jan 2026 13:17:03 GMT Connection: close Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://api.mobilesync.hc.linde.com/" on this server.<P> Reference #18.cc1d1002.1769174223.e800790 <P>https://errors.edgesuite.net/18.cc1d1002.1769174223.e800790</P> </BODY> </HTML>
Open service 2.16.183.16:80 · api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://api.mobilesync.hc.linde.com/ Date: Fri, 23 Jan 2026 13:17:03 GMT Connection: close
Open service 2.16.183.16:443 · api.mobilesync.hc.linde.com
2026-01-23 13:16
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:e0db755f-826e-4902-a358-1d766ad79780 Date: Fri, 23 Jan 2026 13:16:41 GMT Connection: close Set-Cookie: TiPMix=62.910090914818284; path=/; HttpOnly; Domain=api.mobilesync.hc.linde.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=api.mobilesync.hc.linde.com; Max-Age=3600; Secure; SameSite=None
Open service 23.50.131.149:443 · 2sbx.api.mobilesync.hc.linde.com
2026-01-23 05:32
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:c0e22035-f746-498f-b13a-da229be887a3 Date: Fri, 23 Jan 2026 05:32:16 GMT Connection: close
Open service 23.50.131.149:443 · 2sbx.api.mobilesync.hc.linde.com
2026-01-09 19:00
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:c0e22035-f746-498f-b13a-da229be887a3 Date: Fri, 09 Jan 2026 19:00:52 GMT Connection: close
Open service 23.50.131.149:443 · 2sbx.api.mobilesync.hc.linde.com
2026-01-02 04:09
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:c0e22035-f746-498f-b13a-da229be887a3 Date: Fri, 02 Jan 2026 04:09:29 GMT Connection: close
Open service 23.50.131.149:443 · 2sbx.api.mobilesync.hc.linde.com
2025-12-22 11:54
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Request-Context: appId=cid-v1:c0e22035-f746-498f-b13a-da229be887a3 Date: Mon, 22 Dec 2025 11:54:01 GMT Connection: close