LeakIX - Host uranus-api.internal.congatec.app

Domain uranus-api.internal.congatec.app

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.68
Domain: uranus-api.internal.congatec.app
Port: 80
URL: http://uranus-api.internal.congatec.app

First seen 2026-01-02 11:05
Last seen 2026-02-09 11:36
Open for 38 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c63689b93ff213739117a92f38e31adb9e1ab33c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/DataQualityChecks/DeleteDataQualityCheck
DELETE /api/v1/DwhDatabase/DwhDatabasesDelete
DELETE /api/v1/ScheduledExecutions/ScheduledExecutionDelete
GET /api/v1/DataQualityChecks/FindById/{id}
GET /api/v1/DataQualityChecks/List
GET /api/v1/DataQualityChecks/{id}
GET /api/v1/DwhDatabase
GET /api/v1/DwhDatabase/DWHDatabaseBehavior
GET /api/v1/DwhDatabase/DWHDatabasePerformance
GET /api/v1/DwhDatabase/DWHDatabasePerformanceFolderList
GET /api/v1/DwhDatabase/DwhDatabaseDetails
GET /api/v1/DwhDatabase/DwhDatabasePerformancePackageList
GET /api/v1/DwhDatabase/DwhDatabaseTables
GET /api/v1/Executions
GET /api/v1/Executions/Details
GET /api/v1/MMDwhDatabasesUsersNotification/Details
GET /api/v1/MMScheduledExecutionDataQualityCheck/Delete
GET /api/v1/ScheduledExecutions/ScheduledExecutionDetails
GET /api/v1/ScheduledExecutions/ScheduledExecutionExecute
GET /api/v1/ScheduledExecutions/ScheduledExecutionList
GET /api/v1/Users/Details
GET /api/v1/Users/List
OPTIONS /api/v1/DwhDatabase/DwhDatabaseSwitch
OPTIONS /api/v1/MMDwhDatabasesUsersNotification/SetNotification
POST /api/v1/DataQualityChecks
POST /api/v1/DataQualityChecks/Execute
POST /api/v1/DwhDatabase/DwhDatabaseCreate
POST /api/v1/Error/LogError
POST /api/v1/ScheduledExecutions/ScheduledExecutionCreate
POST /api/v1/Users/Create
POST /api/v1/Users/Delete
POST /api/v1/Users/Edit
POST /api/v1/Users/Login
POST /api/v1/Users/RefreshToken
PUT /api/v1/DwhDatabase/DwhDatabseUpdate
PUT /api/v1/ScheduledExecutions/ScheduledExecutionUpdate

Found on 2026-02-09 11:36

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.68
Domain: uranus-api.internal.congatec.app
Port: 443
URL: https://uranus-api.internal.congatec.app

First seen 2026-01-02 11:05
Last seen 2026-01-23 08:22
Open for 20 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c63689b93ff213739117a92f38e31adb9e1ab33c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/DataQualityChecks/DeleteDataQualityCheck
DELETE /api/v1/DwhDatabase/DwhDatabasesDelete
DELETE /api/v1/ScheduledExecutions/ScheduledExecutionDelete
GET /api/v1/DataQualityChecks/FindById/{id}
GET /api/v1/DataQualityChecks/List
GET /api/v1/DataQualityChecks/{id}
GET /api/v1/DwhDatabase
GET /api/v1/DwhDatabase/DWHDatabaseBehavior
GET /api/v1/DwhDatabase/DWHDatabasePerformance
GET /api/v1/DwhDatabase/DWHDatabasePerformanceFolderList
GET /api/v1/DwhDatabase/DwhDatabaseDetails
GET /api/v1/DwhDatabase/DwhDatabasePerformancePackageList
GET /api/v1/DwhDatabase/DwhDatabaseTables
GET /api/v1/Executions
GET /api/v1/Executions/Details
GET /api/v1/MMDwhDatabasesUsersNotification/Details
GET /api/v1/MMScheduledExecutionDataQualityCheck/Delete
GET /api/v1/ScheduledExecutions/ScheduledExecutionDetails
GET /api/v1/ScheduledExecutions/ScheduledExecutionExecute
GET /api/v1/ScheduledExecutions/ScheduledExecutionList
GET /api/v1/Users/Details
GET /api/v1/Users/List
OPTIONS /api/v1/DwhDatabase/DwhDatabaseSwitch
OPTIONS /api/v1/MMDwhDatabasesUsersNotification/SetNotification
POST /api/v1/DataQualityChecks
POST /api/v1/DataQualityChecks/Execute
POST /api/v1/DwhDatabase/DwhDatabaseCreate
POST /api/v1/Error/LogError
POST /api/v1/ScheduledExecutions/ScheduledExecutionCreate
POST /api/v1/Users/Create
POST /api/v1/Users/Delete
POST /api/v1/Users/Edit
POST /api/v1/Users/Login
POST /api/v1/Users/RefreshToken
PUT /api/v1/DwhDatabase/DwhDatabseUpdate
PUT /api/v1/ScheduledExecutions/ScheduledExecutionUpdate

Found on 2026-01-23 08:22

Create report

Open service 20.50.2.68:80 · uranus-api.internal.congatec.app

2026-02-09 11:36

HTTP/1.1 400 Bad Request
Connection: close
Content-Type: application/json
Date: Mon, 09 Feb 2026 11:36:51 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:37b13602-dced-49f5-bccf-a64f32bbcca9


{"Error":"The call you made was not found. For all available endpoints, check \u003Ca href=\u0022/swagger\u0022\u003Eswaggegr\u003C/a\u003E"}

Found 2026-02-09 by HttpPlugin

Create report

Open service 20.50.2.68:443 · uranus-api.internal.congatec.app

2026-01-23 08:22

HTTP/1.1 400 Bad Request
Connection: close
Content-Type: application/json
Date: Fri, 23 Jan 2026 08:23:03 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:37b13602-dced-49f5-bccf-a64f32bbcca9


{"Error":"The call you made was not found. For all available endpoints, check \u003Ca href=\u0022/swagger\u0022\u003Eswaggegr\u003C/a\u003E"}

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.50.2.68:80 · uranus-api.internal.congatec.app

2026-01-23 08:22

HTTP/1.1 400 Bad Request
Connection: close
Content-Type: application/json
Date: Fri, 23 Jan 2026 08:23:03 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:37b13602-dced-49f5-bccf-a64f32bbcca9


{"Error":"The call you made was not found. For all available endpoints, check \u003Ca href=\u0022/swagger\u0022\u003Eswaggegr\u003C/a\u003E"}

Found 2026-01-23 by HttpPlugin

Create report

uranus-api.internal.congatec.app

Fingerprint:

afde174664066f38b96bfef15a75d1db2b7ea8c98041cc1f82c808792dd8677e

CN:

uranus-api.internal.congatec.app

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2026-01-02 00:00

Not after:

2026-04-14 23:59

Domain summary

uranus-api.internal.congatec.app 4

1 recorded

IP summary

20.50.2.68 2

1 recorded