LeakIX - Host 2.16.204.208

Host 2.16.204.208

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

AmazonS3

tcp/443

Bhoot

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: crypto.economictimes.indiatimes.com
Port: 443
URL: https://crypto.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-05 05:24
Open for 112 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: infra.economictimes.indiatimes.com
Port: 443
URL: https://infra.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-01 23:34
Open for 109 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-01 23:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: ciosea.economictimes.indiatimes.com
Port: 443
URL: https://ciosea.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-01 20:50
Open for 109 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-01 20:50
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: oauth.economictimes.indiatimes.com
Port: 443
URL: https://oauth.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-01-09 10:59
Open for 86 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2026-01-09 10:59

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec8e81180a976506df5b0372e363e336a735a81760

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-26 19:11

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7ca8ceae76968ba00e6fa90c0fbcced32fd04277b

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-20 17:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2.16.204.208
Domain: profile.disneyauditions.com
Port: 443
URL: https://profile.disneyauditions.com

First seen 2025-06-11 18:10
Last seen 2025-10-01 00:15
Open for 111 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2025-10-01 00:15
Create report

Open service 2.16.204.208:80 · futureofwork.economictimes.com

2026-01-28 08:59

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: http://economictimes.indiatimes.com/
Date: Wed, 28 Jan 2026 08:59:36 GMT
Connection: close
Server-Timing: ak_p; desc="1769590776486_34677296_3767493894_5_262_12_0_-";dur=1

Found 2026-01-28 by HttpPlugin

Host 2.16.204.208

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

adventures.natgeolive.com

latest.residency-validation-dlr.wdprapps.disney.com

latest.dtr-wdw.wdprapps.disney.comload.dtr-wdw.wdprapps.disney.comstage.dtr-wdw.wdprapps.disney.com

www.metropark.it

Domain summary