LeakIX - Host 2.18.64.25

Host 2.18.64.25

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

Apache Apache

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.18.64.30
Domain: merribek-api-uat.vmonline.com.au
Port: 443
URL: https://merribek-api-uat.vmonline.com.au

First seen 2025-10-29 09:26
Last seen 2026-01-09 07:47
Open for 71 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035496fec35e198c771c7063b67d4e68a0001fbf72084
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /BuildingPermit
POST /Land
POST /Lease
POST /Owners
POST /PlanningPermit
POST /Properties
POST /Sales
POST /SouthAustraliaProperties
POST /Token
POST /Valuation
```
  Found on 2026-01-09 07:47
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-10-29 09:27
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.18.64.25
Domain: rspshare-uat-api.examsit.cn
Port: 443
URL: https://rspshare-uat-api.examsit.cn

First seen 2025-12-05 13:48
Last seen 2026-01-09 03:07
Open for 34 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60d0767011010215a50ae53ffe490b051c613d7b85

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /app/api/meeting/getmeeting
GET /app/api/meeting/test
GET /internal/api/attachment
GET /internal/api/meeting/huichang/test
GET /internal/api/meeting/meeting
GET /internal/api/meeting/test
GET /internal/api/meeting/{contractId}/available
GET /internal/api/question/random-one-available-question-set
GET /internal/api/question/{id}
GET /internal/api/question/{questionId}/part-details
GET /internal/api/questionset/{identifier}/identifier
GET /internal/api/questionset/{id}
GET /internal/api/v2/meeting/check-available
GET /internal/api/v2/meeting/{objectId}/available
POST /api/inspera/event
POST /app/api/attachment/upload
POST /app/ics/icsactivitylog/question-set/export
POST /app/ics/icsactivitylog/question-set/export/v2
POST /app/ics/icsactivitylog/question-set/export/v2/china
POST /app/ics/icsactivitylog/question-set/search
POST /app/ics/icsactivitylog/question-set/search/v2
POST /app/ics/icsquestionset/id
POST /app/ics/icsquestionset/search
POST /app/iol/iolactivitylog/question-set/export
POST /app/iol/iolactivitylog/question-set/search
POST /app/iol/iolquestionset/id
POST /app/iol/iolquestionset/search
POST /internal/api/attachment/activate-attachment-status
POST /internal/api/attachment/binding-session-attachment
POST /internal/api/attachment/search/by-ids
POST /internal/api/attachment/search/by-source-ids
POST /internal/api/attachment/unbinding-session-attachment
POST /internal/api/attachment/upload-with-url
POST /internal/api/meeting/load_meeting
POST /internal/api/meeting/query/transfer-status
POST /internal/api/meetingrecording/download
POST /internal/api/meetingrecording/download/{meetingId}
POST /internal/api/meetingrecording/file-url/meetingids
POST /internal/api/meetingrecording/file-url/objectids
POST /internal/api/question/list
POST /internal/api/questionset/question-set-details
POST /internal/api/questionset/random-one-available
POST /internal/api/questionset/{productType}/question-set-details
POST /internal/api/questionset/{questionId}/mark-as-checked
POST /internal/api/scheduler/batch-close-huichang-test-meeting
POST /internal/api/scheduler/batch-close-meeting
POST /internal/api/scheduler/close-abnormal-meeting
POST /internal/api/scheduler/close-fam-test-meeting
POST /internal/api/scheduler/generate-meeting
POST /internal/api/scheduler/huichang-transfer-recording-file
POST /internal/api/scheduler/transfer-meeting-recording
POST /internal/api/scheduler/transfer-meeting-recording/by-zoom-page
PUT /bcil/api/hub
PUT /bcil/api/organisation
PUT /bcil/api/region
PUT /bcil/api/zone
PUT /internal/api/meeting/{id}/finish

Found on 2026-01-09 03:07

Create report

Open service 2.18.64.25:80 · autovantage.rbc.com

2026-01-12 03:05

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://autovantage.rbc.com/
Date: Mon, 12 Jan 2026 03:06:37 GMT
Connection: close

Found 2 days ago by HttpPlugin

Host 2.18.64.25

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

*.ticketnew.comticketnew.com

Domain summary