LeakIX - Host 13.89.172.7

Host 13.89.172.7

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Debian

Software information

Kestrel Kestrel

tcp/443 tcp/80

Python 3.10.19

tcp/443

Werkzeug 3.0.4

tcp/443

gunicorn

tcp/443

nginx nginx 1.29.0

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.28.0

tcp/443 tcp/80

nginx nginx 1.27.5

tcp/443 tcp/80

nginx nginx 1.27.4

tcp/443

nginx nginx 1.29.4

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins1srtportal.p360connect.biz
Port: 80
URL: http://adins1srtportal.p360connect.biz

First seen 2025-12-22 15:24
Last seen 2026-02-09 22:17
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 22:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins11srtportal.p360connect.biz
Port: 80
URL: http://ins11srtportal.p360connect.biz

First seen 2025-10-30 15:28
Last seen 2026-02-09 22:07
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 22:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: api-preprod.vccmax.com
Port: 443
URL: https://api-preprod.vccmax.com

First seen 2025-12-10 02:37
Last seen 2026-02-09 19:46
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 19:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins11srtportal.p360connect.biz
Port: 443
URL: https://ins11srtportal.p360connect.biz

First seen 2025-10-30 15:28
Last seen 2026-02-09 19:21
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 19:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprst1srtportal.p360connect.biz
Port: 80
URL: http://sprst1srtportal.p360connect.biz

First seen 2025-11-18 19:28
Last seen 2026-02-09 19:12
Open for 82 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 19:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins1authapi.p360connect.biz
Port: 443
URL: https://adins1authapi.p360connect.biz

First seen 2025-12-22 15:25
Last seen 2026-02-09 19:03
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 19:03
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins2srtportal.p360connect.biz
Port: 80
URL: http://adins2srtportal.p360connect.biz

First seen 2025-12-22 17:26
Last seen 2026-02-09 18:16
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 18:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins10asrtportal.p360connect.biz
Port: 443
URL: https://ins10asrtportal.p360connect.biz

First seen 2025-10-29 19:44
Last seen 2026-02-09 17:51
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 17:51
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins2authapi.p360connect.biz
Port: 443
URL: https://adins2authapi.p360connect.biz

First seen 2025-12-22 17:26
Last seen 2026-02-09 17:39
Open for 49 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 17:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins3srtportal.p360connect.biz
Port: 443
URL: https://adins3srtportal.p360connect.biz

First seen 2025-12-22 18:26
Last seen 2026-02-09 17:01
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 17:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins3authapi.p360connect.biz
Port: 443
URL: https://adins3authapi.p360connect.biz

First seen 2025-12-22 18:26
Last seen 2026-02-09 17:01
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 17:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins3authapi.p360connect.biz
Port: 80
URL: http://adins3authapi.p360connect.biz

First seen 2025-12-22 18:26
Last seen 2026-02-09 17:01
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 17:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprst1authapi.p360connect.biz
Port: 80
URL: http://sprst1authapi.p360connect.biz

First seen 2025-11-19 14:39
Last seen 2026-02-09 16:28
Open for 82 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 16:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins01-stgsrtportal.p360connect.biz
Port: 80
URL: http://ins01-stgsrtportal.p360connect.biz

First seen 2025-11-12 14:37
Last seen 2026-02-09 14:55
Open for 89 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 14:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100messageapi.p360connect.biz
Port: 80
URL: http://ins100messageapi.p360connect.biz

First seen 2025-12-01 18:02
Last seen 2026-02-09 13:46
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 13:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins3srtportal.p360connect.biz
Port: 80
URL: http://adins3srtportal.p360connect.biz

First seen 2025-12-22 18:26
Last seen 2026-02-09 13:12
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 13:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins06srtportal.p360connect.biz
Port: 80
URL: http://ins06srtportal.p360connect.biz

First seen 2025-10-22 19:56
Last seen 2026-02-09 09:01
Open for 109 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 09:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100callapi.p360connect.biz
Port: 80
URL: http://ins100callapi.p360connect.biz

First seen 2025-12-01 18:02
Last seen 2026-02-09 08:44
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 08:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins1authapi.p360connect.biz
Port: 80
URL: http://adins1authapi.p360connect.biz

First seen 2025-12-22 15:25
Last seen 2026-02-09 07:40
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 07:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins101srtportal.p360connect.biz
Port: 80
URL: http://ins101srtportal.p360connect.biz

First seen 2025-11-19 15:24
Last seen 2026-02-09 05:47
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 05:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprststg1srtportal.p360connect.biz
Port: 80
URL: http://sprststg1srtportal.p360connect.biz

First seen 2025-12-03 14:26
Last seen 2026-02-09 05:34
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 05:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprststg1authapi.p360connect.biz
Port: 80
URL: http://sprststg1authapi.p360connect.biz

First seen 2025-12-03 14:16
Last seen 2026-02-09 05:34
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 05:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins10asrtportal.p360connect.biz
Port: 80
URL: http://ins10asrtportal.p360connect.biz

First seen 2025-10-29 19:44
Last seen 2026-02-09 04:46
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 04:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins2authapi.p360connect.biz
Port: 80
URL: http://adins2authapi.p360connect.biz

First seen 2025-12-22 17:26
Last seen 2026-02-09 04:11
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 04:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: testsp02srtportal.p360connect.biz
Port: 80
URL: http://testsp02srtportal.p360connect.biz

First seen 2025-11-03 13:48
Last seen 2026-02-09 02:23
Open for 97 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 02:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100srtportal.p360connect.biz
Port: 80
URL: http://ins100srtportal.p360connect.biz

First seen 2025-11-13 12:54
Last seen 2026-02-09 00:18
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 00:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100srtportal.p360connect.biz
Port: 443
URL: https://ins100srtportal.p360connect.biz

First seen 2025-11-13 12:54
Last seen 2026-02-02 08:28
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 08:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100callapi.p360connect.biz
Port: 443
URL: https://ins100callapi.p360connect.biz

First seen 2025-12-01 18:02
Last seen 2026-02-02 08:28
Open for 62 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 08:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprststg1authapi.p360connect.biz
Port: 443
URL: https://sprststg1authapi.p360connect.biz

First seen 2025-12-03 14:16
Last seen 2026-02-02 06:58
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 06:58
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins2srtportal.p360connect.biz
Port: 443
URL: https://adins2srtportal.p360connect.biz

First seen 2025-12-22 17:26
Last seen 2026-02-02 04:05
Open for 41 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 04:05
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: api.datadock.ai
Port: 443
URL: https://api.datadock.ai

First seen 2025-12-11 18:34
Last seen 2026-02-02 03:05
Open for 52 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 03:05
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins100messageapi.p360connect.biz
Port: 443
URL: https://ins100messageapi.p360connect.biz

First seen 2025-12-01 18:02
Last seen 2026-02-02 02:25
Open for 62 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 02:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins06srtportal.p360connect.biz
Port: 443
URL: https://ins06srtportal.p360connect.biz

First seen 2025-10-22 19:56
Last seen 2026-02-02 00:17
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-02 00:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprststg1srtportal.p360connect.biz
Port: 443
URL: https://sprststg1srtportal.p360connect.biz

First seen 2025-12-03 14:26
Last seen 2026-02-01 19:17
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-01 19:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: trexstoragedev.embla.ar
Port: 443
URL: https://trexstoragedev.embla.ar

First seen 2025-11-26 05:45
Last seen 2026-01-23 15:00
Open for 58 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354966d7dd904c44c6f3330d922d65bb7969c32031cc
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/storage/{containerName}/{id}
GET /api/v1/storage/GetBlobs/{containerName}/{companyId}/{externalId}
GET /api/v1/storage/GetThumbnails/{containerName}/{companyId}/{externalId}
GET /api/v1/storage/{containerName}/{companyId}/{externalId}
POST /api/v1/uploads
PUT /api/v1/uploads/Rotate
```
  Found on 2026-01-23 15:00
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354966d7dd904c44c6f3330d922d65bb7969bb3da18f
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/storage/{containerName}/{id}
GET /api/v1/storage/GetBlobs/{containerName}/{companyId}/{externalId}
GET /api/v1/storage/GetThumbnails/{containerName}/{companyId}/{externalId}
GET /api/v1/storage/{containerName}/{companyId}/{externalId}
POST /api/v1/uploads
```
  Found on 2026-01-02 22:15
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035496026e8c962fd74ed9c90f5aa7a9f20afe91c2bed
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/storage/{id}
GET /api/v1/storage/GetBlobs/{companyId}/{externalId}
GET /api/v1/storage/GetThumbnails/{companyId}/{externalId}
GET /api/v1/storage/{companyId}/{externalId}
POST /api/v1/uploads
```
  Found on 2025-12-18 20:35
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035497c7d4e177b05f8a57b05f8a57b05f8a57b05f8a5
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/auth/token
POST /api/v1/uploads
```
  Found on 2025-11-26 05:45
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.89.172.7
Domain: wiki.iconem.com
Port: 443
URL: https://wiki.iconem.com

First seen 2025-12-30 02:11
Last seen 2026-01-23 02:28
Open for 24 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dec863f59258a9f72eacd4d9eb5bbc5a957af4f2

GraphQL introspection enabled at /graphql
Types: 134 (by kind: ENUM: 10, INPUT_OBJECT: 12, OBJECT: 107, SCALAR: 5)
Operations:
- Query: Query | fields: analytics, assets, authentication, comments, contribute
- Mutation: Mutation | fields: analytics, assets, authentication, comments, groups
- Subscription: Subscription | fields: loggingLiveTrail
Directives: auth, cacheControl, deprecated, include, rateLimit, skip, specifiedBy (total: 7)

Found on 2026-01-23 02:28

190.9 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: testsp02srtportal.p360connect.biz
Port: 443
URL: https://testsp02srtportal.p360connect.biz

First seen 2025-11-03 13:48
Last seen 2026-01-23 02:05
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-23 02:05
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: api.dev.eltoncyber.com
Port: 443
URL: https://api.dev.eltoncyber.com

First seen 2025-12-24 01:58
Last seen 2026-01-23 00:28
Open for 29 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354909e71c726665ffa296d54a788105714e5ed1c150

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/assets/{id}
GET /api/v1/auth/login-method
GET /api/v1/auth/login/saml/{tenantSlug}
GET /api/v1/auth/saml/callback
GET /api/v1/auth/userinfo
GET /api/v1/components/{id}
GET /api/v1/cwes
GET /api/v1/cwes/{id}
GET /api/v1/dataflows/{id}
GET /api/v1/exhibits/{id}/file
GET /api/v1/materials/sboms/{id}
GET /api/v1/materials/sboms/{id}/download
GET /api/v1/materials/{id}
GET /api/v1/mitigations/{componentId}
GET /api/v1/physical-interfaces/types
GET /api/v1/physical-interfaces/{id}
GET /api/v1/product-families
GET /api/v1/product-families/summaries
GET /api/v1/product-families/{id}
GET /api/v1/product-families/{productFamilyId}/products
GET /api/v1/products/{id}
GET /api/v1/products/{productId}/views
GET /api/v1/reports/scheduled-daily
GET /api/v1/reports/scheduled-weekly
GET /api/v1/reports/{id}
GET /api/v1/reports/{id}/download
GET /api/v1/tenants
GET /api/v1/tenants/presentations
GET /api/v1/trust-levels/{id}
GET /api/v1/use-cases/{id}
GET /api/v1/views/{id}
GET /api/v1/views/{id}/graph
GET /api/v1/views/{viewId}/assets
GET /api/v1/views/{viewId}/components
GET /api/v1/views/{viewId}/dataflows
GET /api/v1/views/{viewId}/materials
GET /api/v1/views/{viewId}/materials/sboms
GET /api/v1/views/{viewId}/physical-interfaces
GET /api/v1/views/{viewId}/physical-interfaces/interfaces
GET /api/v1/views/{viewId}/reports
GET /api/v1/views/{viewId}/tests
GET /api/v1/views/{viewId}/trust-levels
GET /api/v1/views/{viewId}/use-cases
GET /api/v1/views/{viewId}/vulnerability-findings/report
GET /api/v1/vulnerability-findings
GET /api/v1/vulnerability-findings/time-series
GET /api/v1/vulnerability-findings/{eltonId}
GET /api/v1/vulnerability-findings/{id}
GET /api/v1/vulnerability-findings/{id}/scores/{scoreId}
GET /api/v1/vulnerability-findings/{id}/scores/{scoreId}/download
POST /api/v1/auth/login
POST /api/v1/auth/logout
POST /api/v1/auth/refresh-token
POST /api/v1/auth/register
POST /api/v1/cdx/import
POST /api/v1/countermeasures/search
POST /api/v1/export
POST /api/v1/materials/assignments
POST /api/v1/product-families/search
POST /api/v1/product-families/summaries/search
POST /api/v1/product-families/{productFamilyId}/products/search
POST /api/v1/products/views
POST /api/v1/products/{productId}/views/search
POST /api/v1/tests/names/search
POST /api/v1/trust-levels/{id}/assignments
POST /api/v1/use-cases/{id}/assignments
POST /api/v1/views/search
POST /api/v1/views/{id}/analysis
POST /api/v1/views/{viewId}/assets/search
POST /api/v1/views/{viewId}/components/search
POST /api/v1/views/{viewId}/dataflows/search
POST /api/v1/views/{viewId}/materials/parse
POST /api/v1/views/{viewId}/materials/sboms/search
POST /api/v1/views/{viewId}/materials/search
POST /api/v1/views/{viewId}/physical-interfaces/interfaces/search
POST /api/v1/views/{viewId}/physical-interfaces/search
POST /api/v1/views/{viewId}/tests/search
POST /api/v1/views/{viewId}/trust-levels/search
POST /api/v1/views/{viewId}/use-cases/search
POST /api/v1/vulnerability-findings/report
POST /api/v1/vulnerability-findings/search
PUT /api/v1/materials
PUT /api/v1/views/{id}/canvas-data
PUT /api/v1/vulnerability-findings/status
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/recommended-scenario
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/validated-scenario
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/verified-scenario
PUT /api/v1/vulnerability-findings/{id}/status

Found on 2026-01-23 00:28

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354909e71c726665ffa296d54a788105714e2c505c63

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/assets/{id}
GET /api/v1/auth/login-method
GET /api/v1/auth/login/saml/{tenantSlug}
GET /api/v1/auth/saml/callback
GET /api/v1/auth/userinfo
GET /api/v1/components/{id}
GET /api/v1/cwes
GET /api/v1/cwes/{id}
GET /api/v1/dataflows/{id}
GET /api/v1/exhibits/{id}/file
GET /api/v1/materials/sboms/{id}
GET /api/v1/materials/sboms/{id}/download
GET /api/v1/materials/{id}
GET /api/v1/physical-interfaces/types
GET /api/v1/physical-interfaces/{id}
GET /api/v1/product-families
GET /api/v1/product-families/summaries
GET /api/v1/product-families/{id}
GET /api/v1/product-families/{productFamilyId}/products
GET /api/v1/products/{id}
GET /api/v1/products/{productId}/views
GET /api/v1/reports/scheduled-daily
GET /api/v1/reports/scheduled-weekly
GET /api/v1/reports/{id}
GET /api/v1/reports/{id}/download
GET /api/v1/tenants
GET /api/v1/tenants/presentations
GET /api/v1/trust-levels/{id}
GET /api/v1/use-cases/{id}
GET /api/v1/views/{id}
GET /api/v1/views/{id}/graph
GET /api/v1/views/{viewId}/assets
GET /api/v1/views/{viewId}/components
GET /api/v1/views/{viewId}/dataflows
GET /api/v1/views/{viewId}/materials
GET /api/v1/views/{viewId}/materials/sboms
GET /api/v1/views/{viewId}/physical-interfaces
GET /api/v1/views/{viewId}/physical-interfaces/interfaces
GET /api/v1/views/{viewId}/reports
GET /api/v1/views/{viewId}/tests
GET /api/v1/views/{viewId}/trust-levels
GET /api/v1/views/{viewId}/use-cases
GET /api/v1/views/{viewId}/vulnerability-findings/report
GET /api/v1/vulnerability-findings
GET /api/v1/vulnerability-findings/time-series
GET /api/v1/vulnerability-findings/{eltonId}
GET /api/v1/vulnerability-findings/{id}
GET /api/v1/vulnerability-findings/{id}/scores/{scoreId}
GET /api/v1/vulnerability-findings/{id}/scores/{scoreId}/download
POST /api/v1/auth/login
POST /api/v1/auth/logout
POST /api/v1/auth/refresh-token
POST /api/v1/auth/register
POST /api/v1/cdx/import
POST /api/v1/countermeasures/search
POST /api/v1/export
POST /api/v1/materials/assignments
POST /api/v1/product-families/search
POST /api/v1/product-families/summaries/search
POST /api/v1/product-families/{productFamilyId}/products/search
POST /api/v1/products/views
POST /api/v1/products/{productId}/views/search
POST /api/v1/tests/names/search
POST /api/v1/trust-levels/{id}/assignments
POST /api/v1/use-cases/{id}/assignments
POST /api/v1/views/search
POST /api/v1/views/{id}/analysis
POST /api/v1/views/{viewId}/assets/search
POST /api/v1/views/{viewId}/components/search
POST /api/v1/views/{viewId}/dataflows/search
POST /api/v1/views/{viewId}/materials/parse
POST /api/v1/views/{viewId}/materials/sboms/search
POST /api/v1/views/{viewId}/materials/search
POST /api/v1/views/{viewId}/physical-interfaces/interfaces/search
POST /api/v1/views/{viewId}/physical-interfaces/search
POST /api/v1/views/{viewId}/tests/search
POST /api/v1/views/{viewId}/trust-levels/search
POST /api/v1/views/{viewId}/use-cases/search
POST /api/v1/vulnerability-findings/search
PUT /api/v1/materials
PUT /api/v1/views/{id}/canvas-data
PUT /api/v1/vulnerability-findings/status
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/recommended-scenario
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/validated-scenario
PUT /api/v1/vulnerability-findings/{id}/scores/{scoreId}/verified-scenario
PUT /api/v1/vulnerability-findings/{id}/status

Found on 2026-01-02 04:31

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-30 07:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: demo-wsap.chronarpay.com
Port: 443
URL: https://demo-wsap.chronarpay.com

First seen 2026-01-08 16:02
Last seen 2026-01-22 22:09
Open for 14 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-22 22:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprst1srtportal.p360connect.biz
Port: 443
URL: https://sprst1srtportal.p360connect.biz

First seen 2025-11-18 19:28
Last seen 2026-01-16 12:27
Open for 58 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-16 12:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: sprst1authapi.p360connect.biz
Port: 443
URL: https://sprst1authapi.p360connect.biz

First seen 2025-11-19 14:39
Last seen 2026-01-16 10:17
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-16 10:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins01-stgsrtportal.p360connect.biz
Port: 443
URL: https://ins01-stgsrtportal.p360connect.biz

First seen 2025-11-12 14:37
Last seen 2026-01-16 09:25
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-16 09:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: adins1srtportal.p360connect.biz
Port: 443
URL: https://adins1srtportal.p360connect.biz

First seen 2025-12-22 15:24
Last seen 2026-01-16 09:15
Open for 24 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-16 09:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: ins101srtportal.p360connect.biz
Port: 443
URL: https://ins101srtportal.p360connect.biz

First seen 2025-11-19 15:24
Last seen 2026-01-16 04:06
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-16 04:06
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: library-api.geothermal.org
Port: 443
URL: https://library-api.geothermal.org

First seen 2026-01-05 17:10
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-05 17:10
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: geolibrary-api.elyntis.com
Port: 443
URL: https://geolibrary-api.elyntis.com

First seen 2025-11-21 11:53
Last seen 2026-01-02 20:09
Open for 42 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f33674e143a8ffb5bfacd2182b433ad01e0c679

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Identity/devices/{deviceId}
DELETE /api/Publications/{id}/pdf
DELETE /api/Test/delete-pdf/{publicationId}
GET /api/AiChatbot/history/{sessionId}
GET /api/Analytics/dashboard
GET /api/Analytics/debug/cache
GET /api/Analytics/popular
GET /api/Analytics/recent-activities
GET /api/ApplicationParams/export
GET /api/ApplicationParams/{key}
GET /api/AzureSearch/autocomplete
GET /api/AzureSearch/document
GET /api/AzureSearch/document-sas-url
GET /api/AzureSearch/search
GET /api/AzureSearch/suggest
GET /api/Configuration/file-settings
GET /api/Configuration/yms-logout-url
GET /api/DocumentChatbot/content/{documentId}
GET /api/DocumentChatbot/summary/{documentId}
GET /api/Identity/access-token
GET /api/Identity/devices
GET /api/Identity/logout
GET /api/Publications
GET /api/Publications/author/{authorName}
GET /api/Publications/journal/{journalName}
GET /api/Publications/year/{year}
GET /api/Publications/{id}
GET /api/Test/check-file
GET /api/Test/db-connection
GET /api/Test/db-schema
GET /api/Test/page-views-debug
GET /api/Test/requests-debug
GET /api/Textract/extraction-history
GET /api/Textract/extraction-result/{extractionId}
GET /api/Textract/history
GET /api/Textract/validate-folder
GET /api/Textract/{batchId}
GET /api/Users/roles
GET /api/Users/roles/{role}
GET /api/Users/{userId}
GET /api/Users/{userId}/roles
GET /api/ftp/extracted-files
GET /api/users/me/profile
GET /api/users/me/settings
GET /api/ymssso/callback
GET /api/ymssso/login
GET /api/ymssso/profile
GET /api/ymssso/sync
POST /api/AiChatbot/ask
POST /api/AiChatbot/clear/{sessionId}
POST /api/Analytics/refresh
POST /api/Analytics/track/admin-action
POST /api/Analytics/track/download
POST /api/Analytics/track/error
POST /api/Analytics/track/preview
POST /api/Analytics/track/search
POST /api/ApplicationParams
POST /api/ApplicationParams/import
POST /api/ApplicationParams/search
POST /api/DocumentChatbot/ask
POST /api/DocumentChatbot/start/{documentId}
POST /api/Email/send
POST /api/Identity/change-email
POST /api/Identity/change-password
POST /api/Identity/confirm-email-change
POST /api/Identity/login
POST /api/Identity/new-password
POST /api/Identity/register
POST /api/Identity/request-magic-link
POST /api/Identity/request-verification-email
POST /api/Identity/reset-password
POST /api/Identity/verify-code
POST /api/Identity/verify-email
POST /api/Publications/search
POST /api/Publications/{id}/increment-citation
POST /api/Publications/{id}/upload-pdf
POST /api/Test/analytics-test
POST /api/Test/textract-test
POST /api/Textract/analyze-document
POST /api/Textract/process-folder
POST /api/Textract/process-single-file
POST /api/Textract/{batchId}/cancel
POST /api/Users/claims/search
POST /api/Users/get-by-ids
POST /api/Users/roles/{role}/{userId}
POST /api/Users/search
POST /api/Users/user-claims/search
POST /api/Users/{userId}/claims
POST /api/Users/{userId}/lock
POST /api/Users/{userId}/unlock
POST /api/ftp/batch-textract
POST /api/ftp/connect
POST /api/ftp/disconnect
POST /api/ftp/list
POST /api/ftp/test
POST /api/ftp/textract
POST /api/users/me/notifications
PUT /api/users/me/notifications/mark-all-as-read
PUT /api/users/me/notifications/{id}/mark-as-read

Found on 2026-01-02 20:09

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-23 07:27

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495f33674e143a8ffb5bfacd2182b433ad0c137931

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Identity/devices/{deviceId}
DELETE /api/Publications/{id}/pdf
DELETE /api/Test/delete-pdf/{publicationId}
GET /api/AiChatbot/history/{sessionId}
GET /api/Analytics/dashboard
GET /api/Analytics/debug/cache
GET /api/Analytics/popular
GET /api/Analytics/recent-activities
GET /api/ApplicationParams/export
GET /api/ApplicationParams/{key}
GET /api/AzureSearch/autocomplete
GET /api/AzureSearch/document
GET /api/AzureSearch/document-sas-url
GET /api/AzureSearch/search
GET /api/AzureSearch/suggest
GET /api/Configuration/file-settings
GET /api/Configuration/yms-logout-url
GET /api/DocumentChatbot/content/{documentId}
GET /api/DocumentChatbot/summary/{documentId}
GET /api/Identity/access-token
GET /api/Identity/devices
GET /api/Identity/logout
GET /api/Publications
GET /api/Publications/author/{authorName}
GET /api/Publications/journal/{journalName}
GET /api/Publications/year/{year}
GET /api/Publications/{id}
GET /api/Test/check-file
GET /api/Test/db-connection
GET /api/Test/db-schema
GET /api/Test/page-views-debug
GET /api/Test/requests-debug
GET /api/Textract/extraction-history
GET /api/Textract/extraction-result/{extractionId}
GET /api/Textract/history
GET /api/Textract/validate-folder
GET /api/Textract/{batchId}
GET /api/Users/roles
GET /api/Users/roles/{role}
GET /api/Users/{userId}
GET /api/Users/{userId}/roles
GET /api/ftp/extracted-files
GET /api/users/me/profile
GET /api/users/me/settings
GET /api/ymssso/callback
GET /api/ymssso/login
GET /api/ymssso/profile
POST /api/AiChatbot/ask
POST /api/AiChatbot/clear/{sessionId}
POST /api/Analytics/track/admin-action
POST /api/Analytics/track/download
POST /api/Analytics/track/error
POST /api/Analytics/track/preview
POST /api/Analytics/track/search
POST /api/ApplicationParams
POST /api/ApplicationParams/import
POST /api/ApplicationParams/search
POST /api/DocumentChatbot/ask
POST /api/DocumentChatbot/start/{documentId}
POST /api/Email/send
POST /api/Identity/change-email
POST /api/Identity/change-password
POST /api/Identity/confirm-email-change
POST /api/Identity/login
POST /api/Identity/new-password
POST /api/Identity/register
POST /api/Identity/request-magic-link
POST /api/Identity/request-verification-email
POST /api/Identity/reset-password
POST /api/Identity/verify-code
POST /api/Identity/verify-email
POST /api/Publications/search
POST /api/Publications/{id}/increment-citation
POST /api/Publications/{id}/upload-pdf
POST /api/Test/analytics-test
POST /api/Test/textract-test
POST /api/Textract/analyze-document
POST /api/Textract/process-folder
POST /api/Textract/process-single-file
POST /api/Textract/{batchId}/cancel
POST /api/Users/claims/search
POST /api/Users/get-by-ids
POST /api/Users/roles/{role}/{userId}
POST /api/Users/search
POST /api/Users/user-claims/search
POST /api/Users/{userId}/claims
POST /api/Users/{userId}/lock
POST /api/Users/{userId}/unlock
POST /api/ftp/batch-textract
POST /api/ftp/connect
POST /api/ftp/disconnect
POST /api/ftp/list
POST /api/ftp/test
POST /api/ftp/textract
POST /api/users/me/notifications
PUT /api/users/me/notifications/mark-all-as-read
PUT /api/users/me/notifications/{id}/mark-as-read

Found on 2025-11-21 11:53

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: prod03srtportal.p360connect.biz
Port: 443
URL: https://prod03srtportal.p360connect.biz

First seen 2025-11-20 16:42
Last seen 2025-12-01 00:45
Open for 10 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-01 00:45
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: prod03callapi.p360connect.biz
Port: 80
URL: http://prod03callapi.p360connect.biz

First seen 2025-11-20 16:26
Last seen 2025-11-30 20:31
Open for 10 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-30 20:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: prod03srtportal.p360connect.biz
Port: 80
URL: http://prod03srtportal.p360connect.biz

First seen 2025-11-20 16:42
Last seen 2025-11-30 14:15
Open for 9 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-30 14:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.89.172.7
Domain: prod03messageapi.p360connect.biz
Port: 80
URL: http://prod03messageapi.p360connect.biz

First seen 2025-11-20 16:26
Last seen 2025-11-28 22:01
Open for 8 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-11-28 22:01
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.7
Domain: www.tuskegeeairmen.org
Port: 443
URL: https://www.tuskegeeairmen.org

First seen 2022-10-31 14:48
Last seen 2025-07-03 01:31
Open for 975 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-07-03 01:31
  
  380 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.89.172.7
Domain: tuskegeeairmen.org
Port: 443
URL: https://tuskegeeairmen.org

First seen 2022-10-31 14:48
Last seen 2025-06-30 23:59
Open for 973 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://github.com/azureappserviceoss/wordpress-azure
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "linux-appservice"]
	remote = origin
	merge = refs/heads/linux-appservice
```
  Found on 2025-06-30 23:59
  
  380 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.89.172.7
Domain: www.faizanakhtar.com
Port: 443
URL: https://www.faizanakhtar.com

First seen 2022-08-29 15:50
Last seen 2025-04-06 01:09
Open for 950 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bca7f85031ca19e65f95d9dee17a418cef
```
Found 22 files trough .DS_Store spidering:

/.git
/assets
/assets/css
/assets/fonts
/assets/icons
/assets/img
/assets/img/alumniportal.jpg
/assets/img/blurred-image-1.jpg
/assets/img/drdalvi.jpg
/assets/img/Events
/assets/img/Faizan_Hololens.jpg
/assets/img/Faizan_HoloLens_original.jpg
/assets/img/faizann.jpg
/assets/img/flags
/assets/img/OC_MR.png
/assets/img/PowerApp.png
/assets/img/Sessions
/assets/js
/assets/scss
/blogs.html
/index.php
/README.md
```
  Found on 2025-04-06 01:09
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772677f26171928c419b54801afb2f6f920
```
Found 11 files trough .DS_Store spidering:

/.git
/assets
/assets/css
/assets/fonts
/assets/icons
/assets/img
/assets/js
/assets/scss
/blogs.html
/index.php
/README.md
```
  Found on 2024-11-20 11:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80ea47a45c51631d375df255dd58c467c
```
Found 8 files trough .DS_Store spidering:

/.git
/assets
/assets/css
/assets/fonts
/assets/icons
/assets/img
/assets/js
/assets/scss
```
  Found on 2022-08-29 15:50
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.89.172.7
Domain: app.preanestesia.com.br
Port: 443
URL: https://app.preanestesia.com.br

First seen 2025-01-14 15:57
- Severity: high
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe0ea6debdf7a9db6602e0c862fd07496e
```
Found 15 files trough .DS_Store spidering:

/application
/Arquivo.zip
/assets
/assets.zip
/configdocker
/data
/data.zip
/docker-compose.yml
/Dockerfile
/index.php
/README.md
/robots.txt
/system
/system.zip
/tmp
```
  Found on 2025-01-14 15:57
Create report

Open service 13.89.172.7:80 · officelionus.com

2026-02-08 01:16

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sun, 08 Feb 2026 01:16:46 GMT
Location: https://officelionus.com/

Found 2 days ago by HttpPlugin

Host 13.89.172.7

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file