LeakIX - Host 13.107.213.53

Host 13.107.213.53

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.107.213.53
Domain: dinoffentligetransport.dk
Port: 443
URL: https://dinoffentligetransport.dk

First seen 2025-10-22 07:10
Last seen 2026-02-02 10:14
Open for 103 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a6349b596e82e193f6c4b6bd34d2859a48b9b8bb

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Basket
GET /api/BusLines/directions/{busLineId}
GET /api/BusLines/endstoppoints/{busLineId}/{direction}
GET /api/BusLines/fromstoppoints/{busLineId}/{direction}
GET /api/BusLines/lines
GET /api/BusLines/schedulechanges
GET /api/BusLines/schedulechanges/{busLineId}
GET /api/BusLines/schedulefileinfo/{busLineId}
GET /api/BusLines/timetable/{busLineId}/{direction}/{fromStopPointId}/{endStopPointId}/{date}
GET /api/BusLines/timetable/{busLineId}/{direction}/{fromStopPointId}/{endStopPointId}/{fromDate}/{toDate}
GET /api/ControlCharge/{id}
GET /api/ControlCharge/{id}/getpaymenturl
GET /api/Country
GET /api/JourneyPlanner/addresses/{input}
GET /api/JourneyPlanner/seasonpasszone/{origin}/{destination}
GET /api/MailTemplates/get
GET /api/MailTemplates/list
GET /api/MitId/Validate
GET /api/MitId/login
GET /api/MitId/logout
GET /api/MitId/tryLoginWithMember
GET /api/Order
GET /api/Order/GetSubscription
GET /api/Order/{orderid}
GET /api/Payment/paymentrequest/{paymentMethodId}/{paymentId}
GET /api/UCBackOfficeSetting/b2cshippingdelay
GET /api/UCBackofficeMember
GET /api/UCBackofficeMember/RetireeStatus
GET /api/content/type/{contentType}
GET /api/lostandfound/{busLine}
GET /api/member/logout
GET /api/member/me
GET /api/member/resetkeyactive
GET /api/search
GET /api/transportationChanges
GET /sitemap.xml
GET /umbraco/backoffice/ImportMember/Upload
GET /umbraco/backoffice/testcpr/{memberId}
POST /api/Basket/clearorderlines
POST /api/Basket/payment
POST /api/ControlCharge/checkoutcomplete
POST /api/Payment/checkoutcomplete/{paymentMethodId}/{paymentId}
POST /api/Product/GetPrivateProducts
POST /api/Product/find
POST /api/Subscription/checkoutcomplete/{paymentMethodId}/{paymentId}
POST /api/Subscription/renew
POST /api/UCBackOfficeStorage
POST /api/UCBackofficeMail
POST /api/UCBackofficeMember/CreatePrivate
POST /api/UCBackofficeMember/updateMember
POST /api/documentation
POST /api/form/submit
POST /api/images
POST /api/member/create
POST /api/member/login
POST /api/member/resetpass
PUT /api/Basket/billing
PUT /api/Basket/product
PUT /api/Basket/shipping
PUT /api/member/processreset

Found on 2026-02-02 10:14

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.107.213.53
Domain: verify.bridgepointgroup.com
Port: 443
URL: https://verify.bridgepointgroup.com

First seen 2025-11-27 04:55
Last seen 2026-02-02 03:27
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 03:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.107.213.53
Domain: onnenpantti.fi
Port: 443
URL: https://onnenpantti.fi

First seen 2024-10-10 09:38
Last seen 2025-09-02 18:29
Open for 327 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c515fc99fca06c0584bd42d6e
```
Found 4 files trough .DS_Store spidering:

/css
/fonts
/images
/js
```
  Found on 2025-09-02 18:29
Create report

Open service 13.107.213.53:80

2026-01-26 15:47

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 15:47:58 GMT
Content-Type: text/html
Content-Length: 266478
Connection: close
Vary: Accept-Encoding
Cache-Control: no-store
x-azure-ref: 20260126T154758Z-r1d6d54d956rtn8jhC1LON3mcn0000000asg000000003vy0
X-Cache: CONFIG_NOCACHE

Page title: Page not found

<!DOCTYPE html>
<!-- saved from url=(0058)https://df.onecloud.azure-test.net/Error/UE_404?shown=true -->
<html lang="en" dir="ltr">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <title>Page not found</title>

    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <meta name="msapplication-config" content="none" />
    <link rel="icon" type="image/x-icon" href="data:image/x-icon;base64,AAABAAQAQEAAAAEAIAAoQgAARgAAADAwAAABACAAqCUAAG5CAAAgIAAAAQAgAKgQAAAWaAAAEBAAAAEAIABoBAAAvngAACgAAABAAAAAgAAAAAEAIAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Found 2026-01-26 by HttpPlugin

Host 13.107.213.53

United States

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

eiendomsinnsyn.no

datatorg.no

arealplaner.no

e-torg.no

dinoffentligetransport.dk

skottsmeat.com

*.learningtools.onenote.comlearningtools.onenote.com

ramboll.info

*.azureedge.net

www.getinge.at

ultracleansystems.com

www.pulsion.com

pulsion.com

pulsion.de

getinge.us

ramboll.ae

udi.no

udiutv.no

mitrphol.com

Domain summary