LeakIX - Host security.iprod.it

Domain security.iprod.it

Italy

MICROSOFT-CORP-MSN-AS-BLOCK

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 4.232.99.1
Domain: security.iprod.it
Port: 443
URL: https://security.iprod.it

First seen 2025-11-01 10:41
Last seen 2026-01-09 03:16
Open for 68 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fc235d7acc8be39aef42a5cab2197f7b536c659c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Security/CheckUserConnection
GET /Security/CreateEntityPin/{customerId}/{entityType}/{entityId}/{startValidity}/{endValidity}
GET /Security/DecodeEntityToken/{token}
GET /Security/EncodeEntityToken/{customerId}/{entityType}/{entityId}/{entityPos}
GET /Security/GetSecretsForTenant/{tenantId}
GET /Security/GetSecretsForUser/{username}
GET /Security/GetSecretsForUserByNfcCard/{nfcCardId}
GET /Security/GetTenantsForUser/{username}
GET /Security/GetUsersConnectionInfo
GET /Security/IsTenant/{vat}
GET /Security/IsTenantUser/{tenantId}/{username}
GET /Security/IsUser/{username}
GET /Security/TestLicense
POST /Security/ActivateNfcCard
POST /Security/AddUserToTenant/{tenantId}/{username}/{allowSameUserOnDifferentTenants}
POST /Security/AddUserToTenant/{tenantId}/{username}/{allowSameUserOnDifferentTenants}/{nfcCardId}
POST /Security/AppLicenseTest
POST /Security/AppLogout
POST /Security/AppTokenRenewal
POST /Security/AttendanceMarkTime
POST /Security/CheckMachine
POST /Security/ConnectUser
POST /Security/CustomerNfcCardLogin
POST /Security/CustomerTokenLogin
POST /Security/CustomerUserLogin
POST /Security/CustomerWebLogin
POST /Security/CustomerWebLogin2FA
POST /Security/CustomerWebLogin2FASMS
POST /Security/CustomerWebLoginV2
POST /Security/DecodeEntityPin/{pin}/{checkStartValidity}
POST /Security/DeleteEntityPin/{pin}
POST /Security/RefreshMachine
POST /Security/RefreshMachines
POST /Security/RefreshUser
POST /Security/RemoveUserFromTenant/{tenantId}/{username}
POST /Security/SendData
POST /Security/SwitchTenant
POST /Security/TestMachinesLicense
POST /Security/UpdateEntityPin/{pin}/{startValidity}/{endValidity}
POST /Security/UpdateTenantUser/{tenantId}/{username}
POST /Security/UpdateTenantUser/{tenantId}/{username}/{nfcCardId}
POST /Security/UserLogout

Found on 2026-01-09 03:16

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fc235d7acc8be39aef42a5cab2197f7bfd8a61e9

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Security/CheckUserConnection
GET /Security/CreateEntityPin/{customerId}/{entityType}/{entityId}/{startValidity}/{endValidity}
GET /Security/DecodeEntityToken/{token}
GET /Security/EncodeEntityToken/{customerId}/{entityType}/{entityId}/{entityPos}
GET /Security/GetSecretsForTenant/{tenantId}
GET /Security/GetSecretsForUser/{username}
GET /Security/GetSecretsForUserByNfcCard/{nfcCardId}
GET /Security/GetTenantsForUser/{username}
GET /Security/GetUsersConnectionInfo
GET /Security/IsTenant/{vat}
GET /Security/IsTenantUser/{tenantId}/{username}
GET /Security/IsUser/{username}
GET /Security/TestLicense
POST /Security/ActivateNfcCard
POST /Security/AddUserToTenant/{tenantId}/{username}/{allowSameUserOnDifferentTenants}
POST /Security/AddUserToTenant/{tenantId}/{username}/{allowSameUserOnDifferentTenants}/{nfcCardId}
POST /Security/AppLicenseTest
POST /Security/AppLogout
POST /Security/AppTokenRenewal
POST /Security/AttendanceMarkTime
POST /Security/CheckMachine
POST /Security/ConnectUser
POST /Security/CustomerNfcCardLogin
POST /Security/CustomerTokenLogin
POST /Security/CustomerUserLogin
POST /Security/CustomerWebLogin
POST /Security/CustomerWebLogin2FA
POST /Security/CustomerWebLogin2FASMS
POST /Security/CustomerWebLoginV2
POST /Security/DecodeEntityPin/{pin}/{checkStartValidity}
POST /Security/DeleteEntityPin/{pin}
POST /Security/RefreshMachine
POST /Security/RefreshUser
POST /Security/RemoveUserFromTenant/{tenantId}/{username}
POST /Security/SendData
POST /Security/SwitchTenant
POST /Security/TestMachinesLicense
POST /Security/UpdateEntityPin/{pin}/{startValidity}/{endValidity}
POST /Security/UpdateTenantUser/{tenantId}/{username}
POST /Security/UpdateTenantUser/{tenantId}/{username}/{nfcCardId}
POST /Security/UserLogout

Found on 2025-12-01 16:07

Create report

Open service 4.232.99.1:443 · security.iprod.it

2026-01-09 03:16

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 03:17:12 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:667e8060-c0a4-4b4e-a737-585320c7f9d7

Found 2026-01-09 by HttpPlugin

Create report

Open service 4.232.99.1:443 · security.iprod.it

2026-01-02 10:36

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Fri, 02 Jan 2026 10:36:47 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:667e8060-c0a4-4b4e-a737-585320c7f9d7

Found 2026-01-02 by HttpPlugin

Create report

Open service 4.232.99.1:443 · security.iprod.it

2025-12-22 19:13

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 19:13:07 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:667e8060-c0a4-4b4e-a737-585320c7f9d7

Found 2025-12-22 by HttpPlugin

Create report

Open service 4.232.99.1:443 · security.iprod.it

2025-12-20 20:36

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Sat, 20 Dec 2025 20:36:15 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:667e8060-c0a4-4b4e-a737-585320c7f9d7

Found 2025-12-20 by HttpPlugin

Create report

security.iprod.it

Fingerprint:

d2bb5387a3e4ef1b4b373614dff3571842fcd9b66c1a4422098dd3dc4ee28d9e

CN:

security.iprod.it

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-11-01 00:00

Not after:

2026-04-14 23:59

Domain summary

security.iprod.it 5

1 recorded

IP summary

4.232.99.1 2

1 recorded