LeakIX - Host 2.16.183.12

Host 2.16.183.12

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

AkamaiNetStorage

tcp/443

Cloudinary

tcp/443 tcp/80

Kestrel Kestrel

tcp/443

Microsoft-IIS 10.0

tcp/443

nginx nginx

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 2.16.183.12
Domain: swag.verkada.com
Port: 80
URL: http://swag.verkada.com

First seen 2025-10-31 10:28
Last seen 2026-01-05 10:34
Open for 66 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30af01f80cf0bd144968a3457bc37f87fc008dbba

GraphQL introspection enabled at /graphql
Types: 380 (by kind: ENUM: 26, INPUT_OBJECT: 88, INTERFACE: 20, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Detected: Magento

Found on 2026-01-05 10:34

646.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30af01f80cf0bd144968a3457bc37f87f052d02df

GraphQL introspection enabled at /graphql
Types: 380 (by kind: ENUM: 26, INPUT_OBJECT: 88, INTERFACE: 20, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: availableStores, cart, categories, category, categoryList
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-06 05:11

646.0 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.12
Domain: uatcre.nonprodtops.cbre.co.nz
Port: 443
URL: https://uatcre.nonprodtops.cbre.co.nz

First seen 2025-11-13 13:49
Last seen 2026-01-01 13:54
Open for 49 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6020418814a9cbaa008ea1bca7365a92341304ce40

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/Lease-Search/{leaseId}/{valuationId}/DeleteComparisonData
DELETE /api/Sales-Search/{salesId}/{valuationId}/DeleteComparisonData
GET /api/GetInsuranceReplacementCost
GET /api/InsuranceReplacementCostEstimate
GET /api/Lease-Search/{groupName}/GetGroupNames
GET /api/Lease-Search/{leaseId}/{valuationId}/GetLeaseQuickWizardComparisonData
GET /api/Lease-Search/{valuationId}
GET /api/Lease-Search/{valuationId}/GetLeaseSummary
GET /api/LocationCommercialLookupList
GET /api/LookupListGroup/{groupName}/Lookuplist
GET /api/RiskAssessement/{valuationId}
GET /api/Sales-Search/{groupNames}/GetGroupNames
GET /api/Sales-Search/{salesId}/{valuationId}/GetSalesQuickWizardComparisonData
GET /api/Sales-Search/{valuationId}
GET /api/Sales-Search/{valuationId}/GetSalesSummary
GET /api/Tops-Common/{documentId}
GET /api/Tops-Common/{state}/{keyword}/GetLga
GET /api/Tops-Common/{state}/{keyword}/GetPropertyName
GET /api/Tops-Common/{state}/{keyword}/GetStreetNameList
GET /api/Tops-Common/{state}/{keyword}/GetSuburb
GET /api/ValuationDirectComparison/{valuationId}
GET /api/commercial-report-entry-references/{number}
GET /api/commercial-report-entry/getmap
GET /api/commercial-report-entry/{number}
GET /api/commercial-report-entry/{number}/bytracker
GET /api/commercial-report-entry/{trackerId}/getCREValuationCheck
GET /api/commercial-report/generate/{trackerId}/{valuationInfoId}
GET /api/feature-toggles
GET /api/feature-toggles/{feature}
GET /api/internal-description
GET /api/internal-description-quick-choice/components
GET /api/internal-description-quick-choice/valuation/{valuationId}
GET /api/internal-description-quick-choice/{tenantId}
GET /api/outgoing-expense/{valuationId}
GET /api/ping
GET /api/propertyandsubtype
GET /api/sales-search-references/{number}
GET /api/summation-insurance/{valuationId}
GET /api/users
GET /api/users/{id}
GET /api/valuation-config-references/{number}
POST /api/Lease-Search
POST /api/Sales-Search
POST /api/commercial-lease
POST /api/commercial-report-entry-config
POST /api/commercial-sale
POST /api/file-upload
PUT /api/LongLookupListItems
PUT /api/commercial-sale/{commercialSalesId}/internal-comments

Found on 2026-01-01 13:54

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6020418814a9cbaa008ea1bca7365a9234d2d02364

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/Lease-Search/{leaseId}/{valuationId}/DeleteComparisonData
DELETE /api/Sales-Search/{salesId}/{valuationId}/DeleteComparisonData
GET /api/GetInsuranceReplacementCost
GET /api/InsuranceReplacementCostEstimate
GET /api/Lease-Search/{groupName}/GetGroupNames
GET /api/Lease-Search/{leaseId}/{valuationId}/GetLeaseQuickWizardComparisonData
GET /api/Lease-Search/{valuationId}
GET /api/Lease-Search/{valuationId}/GetLeaseSummary
GET /api/LocationCommercialLookupList
GET /api/LookupListGroup/{groupName}/Lookuplist
GET /api/RiskAssessement/{valuationId}
GET /api/Sales-Search/{groupNames}/GetGroupNames
GET /api/Sales-Search/{salesId}/{valuationId}/GetSalesQuickWizardComparisonData
GET /api/Sales-Search/{valuationId}
GET /api/Sales-Search/{valuationId}/GetSalesSummary
GET /api/Tops-Common/{documentId}
GET /api/Tops-Common/{state}/{keyword}/GetLga
GET /api/Tops-Common/{state}/{keyword}/GetPropertyName
GET /api/Tops-Common/{state}/{keyword}/GetStreetNameList
GET /api/Tops-Common/{state}/{keyword}/GetSuburb
GET /api/ValuationDirectComparison/{valuationId}
GET /api/commercial-report-entry-references/{number}
GET /api/commercial-report-entry/getmap
GET /api/commercial-report-entry/{number}
GET /api/commercial-report-entry/{number}/bytracker
GET /api/commercial-report-entry/{trackerId}/getCREValuationCheck
GET /api/commercial-report/generate/{trackerId}/{valuationInfoId}
GET /api/feature-toggles
GET /api/feature-toggles/{feature}
GET /api/internal-description
GET /api/internal-description-quick-choice/components
GET /api/internal-description-quick-choice/valuation/{valuationId}
GET /api/internal-description-quick-choice/{tenantId}
GET /api/outgoing-expense/{valuationId}
GET /api/ping
GET /api/propertyandsubtype
GET /api/sales-search-references/{number}
GET /api/summation-insurance/{valuationId}
GET /api/users
GET /api/users/{id}
GET /api/valuation-config-references/{number}
POST /api/Lease-Search
POST /api/Sales-Search
POST /api/commercial-lease
POST /api/commercial-report-entry-config
POST /api/commercial-sale
POST /api/file-upload
PUT /api/LongLookupListItems

Found on 2025-11-18 08:20

Create report

Open service 2.16.183.12:443 · www.teachstream.org

2026-01-09 22:37

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://teachstream.org/wp-json/>; rel="https://api.w.org/"
Link: <https://teachstream.org/wp-json/wp/v2/pages/7467>; rel="alternate"; type="application/json"
Link: <https://teachstream.org/>; rel=shortlink
X-Akamai-Transformed: 9 - 0 pmb=mRUM,1
Expires: Fri, 09 Jan 2026 22:37:23 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 22:37:23 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=nvqks7aabuft2a1dbrekeoblil; path=/
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=401
Server-Timing: origin; dur=147
Server-Timing: ak_p; desc="1767998242809_34610646_3071156272_54625_18105_90_144_-";dur=1

Found 2026-01-09 by HttpPlugin