LeakIX - Host 191.235.90.70

Host 191.235.90.70

Brazil

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: nucleos-usp.unimedvitoria.com.br
Port: 80
URL: http://nucleos-usp.unimedvitoria.com.br

First seen 2025-12-29 04:06
Last seen 2026-02-09 13:08
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 13:08
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: admin.mrdoctor.com.br
Port: 443
URL: https://admin.mrdoctor.com.br

First seen 2026-01-14 11:47
Last seen 2026-02-02 12:59
Open for 19 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 12:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: nucleos-usp.unimedvitoria.com.br
Port: 443
URL: https://nucleos-usp.unimedvitoria.com.br

First seen 2025-12-29 04:06
Last seen 2026-02-02 09:49
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 09:49
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: api.motar.com.br
Port: 443
URL: https://api.motar.com.br

First seen 2025-12-12 04:08
Last seen 2026-02-02 06:02
Open for 52 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494ce4a5393509d70689a79dbc4b6baffa9c7d539b

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/event-participant/{EventId}/{ProfileId}
DELETE /api/group-member/{GroupId}/{ProfileId}
DELETE /api/profile/all-devices
DELETE /api/profile/{id}
GET /.well-known/apple-app-site-association
GET /.well-known/assetlinks.json
GET /api/car-filter
GET /api/car/by-id-or-license-plate
GET /api/car/{Id}
GET /api/comment/car/{id}
GET /api/comment/reply/{id}
GET /api/event-filter/cities
GET /api/event-participant/export/{EventId}/{AllowCarInformation}
GET /api/event/{Id}
GET /api/file/{fileName}/{width}/{height}
GET /api/group-member/{Id}
GET /api/group/{Id}
GET /api/notification/{Id}
GET /api/profile
GET /api/profile/car-creation-restrictions
GET /api/profile/privacy
GET /api/profile/tos
GET /api/profile/{Id}
GET /api/report/{Id}
GET /api/version
GET /share/Share
GET /share/cars/details/{Id}
GET /share/events/details/{Id}
GET /share/groups/details/{Id}
GET /share/share-image
PATCH /api/comment/like
PATCH /api/comment/toggle
PATCH /api/notifications/seen
PATCH /api/profile/metadata
PATCH /api/profile/settings
POST /api/car
POST /api/car-filter/manufacturers
POST /api/car-filter/models
POST /api/car-ranking
POST /api/car/data
POST /api/car/initial-data
POST /api/car/search
POST /api/car/set-needs-review/{Id}
POST /api/car/update/{Id}
POST /api/comment
POST /api/comment/reply
POST /api/event
POST /api/event-interest/{EventId}
POST /api/event-participant/accept/{EventId}/{ProfileId}
POST /api/event-participant/enter/{EventId}/{CarId}
POST /api/event-participant/search
POST /api/event-participant/set-role/{EventId}/{ProfileId}/{UserRole}
POST /api/event-participant/update-car/{EventParticipantId}/{CarId}
POST /api/event/search
POST /api/event/update/{Id}
POST /api/group
POST /api/group-member/accept/{GroupId}/{ProfileId}
POST /api/group-member/enter/{GroupId}
POST /api/group-member/search
POST /api/group-member/set-role/{GroupId}/{ProfileId}/{UserRole}
POST /api/group-member/silence/{GroupId}/{Silenced}
POST /api/group/search
POST /api/group/update/{Id}
POST /api/notification/act/{Id}
POST /api/notification/count
POST /api/notification/read-all
POST /api/notification/removeJoinGroupNotification
POST /api/notification/search
POST /api/profile/add-device
POST /api/profile/deletion
POST /api/tag/search

Found on 2026-02-02 06:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: api-ajinomoto.indution.com.br
Port: 443
URL: https://api-ajinomoto.indution.com.br

First seen 2025-12-23 01:11
Last seen 2026-02-02 05:42
Open for 41 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549a4364ee6ff977ddfff977ddfff977ddfff977ddf
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/integration/get-products-integration
POST /api/integration/update-products
```
  Found on 2026-02-02 05:42
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60256d87a9a295148ea295148ea295148ea295148e
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/integration/get-products-integration
POST /api/integration/update-products
```
  Found on 2026-01-23 00:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: corporatesms-prod.api.valeglobal.net
Port: 443
URL: https://corporatesms-prod.api.valeglobal.net

First seen 2026-01-14 09:52
Last seen 2026-02-02 05:35
Open for 18 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 05:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: admin.cubplus.com.br
Port: 443
URL: https://admin.cubplus.com.br

First seen 2026-01-13 09:25
Last seen 2026-02-01 23:27
Open for 19 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-01 23:27
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.90.70
Domain: api-identity.adven.tech
Port: 443
URL: https://api-identity.adven.tech

First seen 2026-01-01 10:59
Last seen 2026-01-16 16:04
Open for 15 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d606dc5263a7176135bb11370bf10607ecbda8b7fff

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/v{version}/Users/{id}
GET /api/v{version}/Apps/clientId/{clientId}
GET /api/v{version}/CompaniesUsers/ByClientId
GET /api/v{version}/CompaniesUsersApps
GET /api/v{version}/Users/management
POST /api/v{version}/Apps
POST /api/v{version}/Companies/common
POST /api/v{version}/CompaniesApps/common
POST /api/v{version}/CompaniesUsers/common
POST /api/v{version}/CompaniesUsersApps/common
POST /api/v{version}/Users/authCriticalOperation
POST /api/v{version}/Users/changeApp
POST /api/v{version}/Users/checkPasswordResetCode
POST /api/v{version}/Users/common
POST /api/v{version}/Users/generateCodeToForgotPassword
POST /api/v{version}/Users/login
POST /api/v{version}/Users/sendEmailCreateFirstEvent
POST /api/v{version}/Users/setPasswordByAskNewPassword
POST /api/v{version}/Users/setPasswordByForgotPassword
PUT /api/v{version}/Apps/{id}
PUT /api/v{version}/Companies/{id}
PUT /api/v{version}/Users/management/{Id}
PUT /api/v{version}/Users/setPassword
PUT /api/v{version}/Users/{id}/common

Found on 2026-01-16 16:04

Create report

Open service 191.235.90.70:443 · api.motar.com.br

2026-02-02 06:02

HTTP/1.1 401 Unauthorized
Content-Length: 0
Connection: close
Content-Type: application/json
Date: Mon, 02 Feb 2026 06:03:07 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=8fd4dfa8a53eba4432d04230c803f236394f4690c87bb2079aa40e93e92199e0;Path=/;HttpOnly;Secure;Domain=api.motar.com.br
Set-Cookie: ARRAffinitySameSite=8fd4dfa8a53eba4432d04230c803f236394f4690c87bb2079aa40e93e92199e0;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.motar.com.br
Request-Context: appId=cid-v1:a421c38a-a225-4859-83e3-bbc97818a0f4
X-Powered-By: ASP.NET

Found 2026-02-02 by HttpPlugin

Host 191.235.90.70

Brazil

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

api.motar.com.br

www.bloomatelie.com.br

bloomatelie.com.br

geoembraesp.com.br

tfsprodsbr3.azdevcommand.com

api-ajinomoto-integration.indution.com.br

aerosimulados.com.brwww.aerosimulados.com.br

*.unimedvitoria.com.brunimedvitoria.com.br

admin.drcob.com.br

*.api.valeglobal.netapi.valeglobal.net

*.indution.com.brindution.com.br

admin.mrdoctor.com.br

admin.cubplus.com.br

www.velorafimaquillarte.com

infatec.intemobile.com

integration.pontocash.com.br

casasafari.intemobile.com

apimasterebs.chef.totvs.com.br

lmsoticasimet.academiag5.cl

modelo.politicoweb.com.br

dtwebportal.dottazapp.com.br

lmsg5.grupo5.cl

tayaimoveis.com.br

rocketlaunch.dottazapp.com.br

www.edilzanunes.com.br

rgimovel.com.br

edilzanunes.com.br

lstranslog.com.br

new.posesa.com.br

docsazure.metax.ind.br

api.torreakzo.intemobile.com

chefwebtotvseai.chef.totvs.com.br

www.mariafelipeaviamentos.com.br

www.f1modulos.com

www.imobiliariacolibri.com

www.therasmart.com.br

Domain summary