LeakIX - Host timesheet.deheus-apps.com

Domain timesheet.deheus-apps.com

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.38
Domain: timesheet.deheus-apps.com
Port: 443
URL: https://timesheet.deheus-apps.com

First seen 2025-10-23 12:53
Last seen 2025-11-12 17:13
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354983e3c9be180bd6e721bc7eb213cd811313cd8113
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Login
GET /requestlogin
POST /Auth/login
POST /Auth/register
```
  Found on 2025-11-12 17:13
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-11-06 20:42
Create report

Open service 20.105.232.38:443 · timesheet.deheus-apps.com

2026-01-08 22:59

HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Thu, 08 Jan 2026 23:00:09 GMT
x-ms-forbidden-ip: 128.199.182.152

Page title: Web App - Unavailable

<!DOCTYPE html>
<html>
<head>
    <title>Web App - Unavailable</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 95px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            width: 460px;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        p a, p a:visited, p a:active, p a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1 id="unavailable">Error 403 - Forbidden</h1>
            <p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
        </div>
    </div>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 20.105.232.38:443 · timesheet.deheus-apps.com

2026-01-01 22:34

HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Thu, 01 Jan 2026 22:34:10 GMT
x-ms-forbidden-ip: 68.183.180.73

Page title: Web App - Unavailable

<!DOCTYPE html>
<html>
<head>
    <title>Web App - Unavailable</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 95px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            width: 460px;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        p a, p a:visited, p a:active, p a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1 id="unavailable">Error 403 - Forbidden</h1>
            <p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
        </div>
    </div>
</body>
</html>

Found 2026-01-01 by HttpPlugin

Create report

Open service 20.105.232.38:443 · timesheet.deheus-apps.com

2025-12-22 07:13

HTTP/1.1 403 Ip Forbidden
Content-Length: 1892
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 07:13:24 GMT
x-ms-forbidden-ip: 159.223.132.86

Page title: Web App - Unavailable

<!DOCTYPE html>
<html>
<head>
    <title>Web App - Unavailable</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 95px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            width: 460px;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        p a, p a:visited, p a:active, p a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1 id="unavailable">Error 403 - Forbidden</h1>
            <p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
        </div>
    </div>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

*.deheus-apps.comdeheus-apps.com

Fingerprint:

2358386aac1e05234cf1a76784799e3d229b28be95f7965689dd4d18527360a8

CN:

*.deheus-apps.com

Key:

RSA-2048

Issuer:

Sectigo RSA Domain Validation Secure Server CA

Not before:

2025-01-02 00:00

Not after:

2026-01-19 23:59

Domain summary

timesheet.deheus-apps.com 4

1 recorded

IP summary

20.105.232.38 2

1 recorded

Domain timesheet.deheus-apps.com

The Netherlands

Swagger API description is publicly available

Create report

Create report

Create report

*.deheus-apps.comdeheus-apps.com

Domain summary

IP summary