LeakIX - Host geolibrary-api.elyntis.com

Domain geolibrary-api.elyntis.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: geolibrary-api.elyntis.com
Port: 443
URL: https://geolibrary-api.elyntis.com

First seen 2025-11-21 11:53
Last seen 2026-01-02 20:09
Open for 42 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f33674e143a8ffb5bfacd2182b433ad01e0c679

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Identity/devices/{deviceId}
DELETE /api/Publications/{id}/pdf
DELETE /api/Test/delete-pdf/{publicationId}
GET /api/AiChatbot/history/{sessionId}
GET /api/Analytics/dashboard
GET /api/Analytics/debug/cache
GET /api/Analytics/popular
GET /api/Analytics/recent-activities
GET /api/ApplicationParams/export
GET /api/ApplicationParams/{key}
GET /api/AzureSearch/autocomplete
GET /api/AzureSearch/document
GET /api/AzureSearch/document-sas-url
GET /api/AzureSearch/search
GET /api/AzureSearch/suggest
GET /api/Configuration/file-settings
GET /api/Configuration/yms-logout-url
GET /api/DocumentChatbot/content/{documentId}
GET /api/DocumentChatbot/summary/{documentId}
GET /api/Identity/access-token
GET /api/Identity/devices
GET /api/Identity/logout
GET /api/Publications
GET /api/Publications/author/{authorName}
GET /api/Publications/journal/{journalName}
GET /api/Publications/year/{year}
GET /api/Publications/{id}
GET /api/Test/check-file
GET /api/Test/db-connection
GET /api/Test/db-schema
GET /api/Test/page-views-debug
GET /api/Test/requests-debug
GET /api/Textract/extraction-history
GET /api/Textract/extraction-result/{extractionId}
GET /api/Textract/history
GET /api/Textract/validate-folder
GET /api/Textract/{batchId}
GET /api/Users/roles
GET /api/Users/roles/{role}
GET /api/Users/{userId}
GET /api/Users/{userId}/roles
GET /api/ftp/extracted-files
GET /api/users/me/profile
GET /api/users/me/settings
GET /api/ymssso/callback
GET /api/ymssso/login
GET /api/ymssso/profile
GET /api/ymssso/sync
POST /api/AiChatbot/ask
POST /api/AiChatbot/clear/{sessionId}
POST /api/Analytics/refresh
POST /api/Analytics/track/admin-action
POST /api/Analytics/track/download
POST /api/Analytics/track/error
POST /api/Analytics/track/preview
POST /api/Analytics/track/search
POST /api/ApplicationParams
POST /api/ApplicationParams/import
POST /api/ApplicationParams/search
POST /api/DocumentChatbot/ask
POST /api/DocumentChatbot/start/{documentId}
POST /api/Email/send
POST /api/Identity/change-email
POST /api/Identity/change-password
POST /api/Identity/confirm-email-change
POST /api/Identity/login
POST /api/Identity/new-password
POST /api/Identity/register
POST /api/Identity/request-magic-link
POST /api/Identity/request-verification-email
POST /api/Identity/reset-password
POST /api/Identity/verify-code
POST /api/Identity/verify-email
POST /api/Publications/search
POST /api/Publications/{id}/increment-citation
POST /api/Publications/{id}/upload-pdf
POST /api/Test/analytics-test
POST /api/Test/textract-test
POST /api/Textract/analyze-document
POST /api/Textract/process-folder
POST /api/Textract/process-single-file
POST /api/Textract/{batchId}/cancel
POST /api/Users/claims/search
POST /api/Users/get-by-ids
POST /api/Users/roles/{role}/{userId}
POST /api/Users/search
POST /api/Users/user-claims/search
POST /api/Users/{userId}/claims
POST /api/Users/{userId}/lock
POST /api/Users/{userId}/unlock
POST /api/ftp/batch-textract
POST /api/ftp/connect
POST /api/ftp/disconnect
POST /api/ftp/list
POST /api/ftp/test
POST /api/ftp/textract
POST /api/users/me/notifications
PUT /api/users/me/notifications/mark-all-as-read
PUT /api/users/me/notifications/{id}/mark-as-read

Found on 2026-01-02 20:09

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-23 07:27

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f33674e143a8ffb5bfacd2182b433ad0c137931

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Identity/devices/{deviceId}
DELETE /api/Publications/{id}/pdf
DELETE /api/Test/delete-pdf/{publicationId}
GET /api/AiChatbot/history/{sessionId}
GET /api/Analytics/dashboard
GET /api/Analytics/debug/cache
GET /api/Analytics/popular
GET /api/Analytics/recent-activities
GET /api/ApplicationParams/export
GET /api/ApplicationParams/{key}
GET /api/AzureSearch/autocomplete
GET /api/AzureSearch/document
GET /api/AzureSearch/document-sas-url
GET /api/AzureSearch/search
GET /api/AzureSearch/suggest
GET /api/Configuration/file-settings
GET /api/Configuration/yms-logout-url
GET /api/DocumentChatbot/content/{documentId}
GET /api/DocumentChatbot/summary/{documentId}
GET /api/Identity/access-token
GET /api/Identity/devices
GET /api/Identity/logout
GET /api/Publications
GET /api/Publications/author/{authorName}
GET /api/Publications/journal/{journalName}
GET /api/Publications/year/{year}
GET /api/Publications/{id}
GET /api/Test/check-file
GET /api/Test/db-connection
GET /api/Test/db-schema
GET /api/Test/page-views-debug
GET /api/Test/requests-debug
GET /api/Textract/extraction-history
GET /api/Textract/extraction-result/{extractionId}
GET /api/Textract/history
GET /api/Textract/validate-folder
GET /api/Textract/{batchId}
GET /api/Users/roles
GET /api/Users/roles/{role}
GET /api/Users/{userId}
GET /api/Users/{userId}/roles
GET /api/ftp/extracted-files
GET /api/users/me/profile
GET /api/users/me/settings
GET /api/ymssso/callback
GET /api/ymssso/login
GET /api/ymssso/profile
POST /api/AiChatbot/ask
POST /api/AiChatbot/clear/{sessionId}
POST /api/Analytics/track/admin-action
POST /api/Analytics/track/download
POST /api/Analytics/track/error
POST /api/Analytics/track/preview
POST /api/Analytics/track/search
POST /api/ApplicationParams
POST /api/ApplicationParams/import
POST /api/ApplicationParams/search
POST /api/DocumentChatbot/ask
POST /api/DocumentChatbot/start/{documentId}
POST /api/Email/send
POST /api/Identity/change-email
POST /api/Identity/change-password
POST /api/Identity/confirm-email-change
POST /api/Identity/login
POST /api/Identity/new-password
POST /api/Identity/register
POST /api/Identity/request-magic-link
POST /api/Identity/request-verification-email
POST /api/Identity/reset-password
POST /api/Identity/verify-code
POST /api/Identity/verify-email
POST /api/Publications/search
POST /api/Publications/{id}/increment-citation
POST /api/Publications/{id}/upload-pdf
POST /api/Test/analytics-test
POST /api/Test/textract-test
POST /api/Textract/analyze-document
POST /api/Textract/process-folder
POST /api/Textract/process-single-file
POST /api/Textract/{batchId}/cancel
POST /api/Users/claims/search
POST /api/Users/get-by-ids
POST /api/Users/roles/{role}/{userId}
POST /api/Users/search
POST /api/Users/user-claims/search
POST /api/Users/{userId}/claims
POST /api/Users/{userId}/lock
POST /api/Users/{userId}/unlock
POST /api/ftp/batch-textract
POST /api/ftp/connect
POST /api/ftp/disconnect
POST /api/ftp/list
POST /api/ftp/test
POST /api/ftp/textract
POST /api/users/me/notifications
PUT /api/users/me/notifications/mark-all-as-read
PUT /api/users/me/notifications/{id}/mark-as-read

Found on 2025-11-21 11:53

Create report

Open service 13.89.172.7:443 · geolibrary-api.elyntis.com

2026-01-23 06:57

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 06:58:27 GMT
Server: Kestrel
Request-Context: appId=cid-v1:9f5d1a0f-96c2-4820-a7bc-b332be53271f

Found 2026-01-23 by HttpPlugin

Create report

geolibrary-api.elyntis.com

Fingerprint:

7e7b7e7b297d6277c3b2d2f6f98ce833c42a1beae65c94cdaebe258744b95ce2

CN:

geolibrary-api.elyntis.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-11-21 00:00

Not after:

2026-04-14 23:59

Domain summary

geolibrary-api.elyntis.com 3

1 recorded

IP summary

13.89.172.7 2

1 recorded