LeakIX - Host 2.21.79.51

Host 2.21.79.51

Germany

Akamai International B.V.

Software information

AK-Ghost-Server

tcp/443

AkamaiGHost

tcp/80

Microsoft-IIS 10.0

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.89
Domain: api.training.vr.linde.com
Port: 443
URL: https://api.training.vr.linde.com

First seen 2025-12-05 06:47
Last seen 2026-02-08 01:02
Open for 64 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354914d7f30d18bc383787a899924ebf68afc6d5c0a4

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /companies/{id}/subscription/{courseId}
DELETE /trainingplans/{id}/accounts/{accountId}
GET /accounts
GET /accounts/current
GET /accounts/current/statistics
GET /accounts/current/statistics/usage.xlsx
GET /accounts/leaderboard
GET /accounts/sso/authorization-url/{provider}
GET /accounts/{id}
GET /accounts/{id}/statistics/courses
GET /accounts/{id}/statistics/sessions
GET /companies
GET /companies/{id}
GET /companies/{id}/plants
GET /companies/{id}/statistics
GET /companies/{id}/statistics/courses
GET /companies/{id}/statistics/sessions
GET /companies/{id}/statistics/trainees
GET /companies/{id}/statistics/usage.xlsx
GET /companies/{id}/subscription
GET /companies/{id}/subscription/courses
GET /companies/{id}/subscription/usage
GET /cores
GET /cores/courses/{id}
GET /cores/{id}
GET /courses
GET /courses/runnable
GET /courses/summary
GET /courses/{id}
GET /courses/{id}/runnable
GET /courses/{id}/sessions
GET /courses/{id}/sessions/statistics
GET /languages
GET /plants/{id}
GET /streamingvirtualmachine/status
GET /trainingplans
GET /trainingplans/accounts/{accountId}
GET /trainingplans/active
GET /trainingplans/{id}
GET /trainingplans/{id}/accounts
GET /trainingplans/{id}/accounts/{accountId}/progress
GET /trainingplans/{id}/accounts/{accountId}/sessions
GET /trainingplans/{id}/accounts/{accountId}/statistics
GET /trainingplans/{id}/courses
GET /trainingplans/{id}/statistics
POST /accounts/forgot-password
POST /accounts/login
POST /accounts/otp
POST /accounts/otp-login
POST /accounts/register-trial
POST /accounts/reset-password
POST /accounts/sso/callback/{provider}
POST /accounts/validate-reset-token
POST /accounts/{id}/activate
POST /accounts/{id}/deactivate
POST /assets/upload/core
POST /assets/upload/image
POST /assets/upload/video
POST /cores/{id}/version/{version}
POST /coursesessions
POST /coursesessions/create
POST /coursesessions/{id}/complete
POST /plants
POST /productinquiries
POST /streamingvirtualmachine/start
POST /streamingvirtualmachine/stop
PUT /companies/{id}/subscription/cancel
PUT /companies/{id}/subscription/update
PUT /courses/{id}/archive
PUT /courses/{id}/unarchive

Found on 2026-02-08 01:02

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-08 01:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.89
Domain: vr-staging.linde.com
Port: 443
URL: https://vr-staging.linde.com

First seen 2025-12-05 06:47
Last seen 2026-02-08 01:02
Open for 64 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-08 01:02

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354914d7f30d18bc383787a899924ebf68afc6d5c0a4

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /companies/{id}/subscription/{courseId}
DELETE /trainingplans/{id}/accounts/{accountId}
GET /accounts
GET /accounts/current
GET /accounts/current/statistics
GET /accounts/current/statistics/usage.xlsx
GET /accounts/leaderboard
GET /accounts/sso/authorization-url/{provider}
GET /accounts/{id}
GET /accounts/{id}/statistics/courses
GET /accounts/{id}/statistics/sessions
GET /companies
GET /companies/{id}
GET /companies/{id}/plants
GET /companies/{id}/statistics
GET /companies/{id}/statistics/courses
GET /companies/{id}/statistics/sessions
GET /companies/{id}/statistics/trainees
GET /companies/{id}/statistics/usage.xlsx
GET /companies/{id}/subscription
GET /companies/{id}/subscription/courses
GET /companies/{id}/subscription/usage
GET /cores
GET /cores/courses/{id}
GET /cores/{id}
GET /courses
GET /courses/runnable
GET /courses/summary
GET /courses/{id}
GET /courses/{id}/runnable
GET /courses/{id}/sessions
GET /courses/{id}/sessions/statistics
GET /languages
GET /plants/{id}
GET /streamingvirtualmachine/status
GET /trainingplans
GET /trainingplans/accounts/{accountId}
GET /trainingplans/active
GET /trainingplans/{id}
GET /trainingplans/{id}/accounts
GET /trainingplans/{id}/accounts/{accountId}/progress
GET /trainingplans/{id}/accounts/{accountId}/sessions
GET /trainingplans/{id}/accounts/{accountId}/statistics
GET /trainingplans/{id}/courses
GET /trainingplans/{id}/statistics
POST /accounts/forgot-password
POST /accounts/login
POST /accounts/otp
POST /accounts/otp-login
POST /accounts/register-trial
POST /accounts/reset-password
POST /accounts/sso/callback/{provider}
POST /accounts/validate-reset-token
POST /accounts/{id}/activate
POST /accounts/{id}/deactivate
POST /assets/upload/core
POST /assets/upload/image
POST /assets/upload/video
POST /cores/{id}/version/{version}
POST /coursesessions
POST /coursesessions/create
POST /coursesessions/{id}/complete
POST /plants
POST /productinquiries
POST /streamingvirtualmachine/start
POST /streamingvirtualmachine/stop
PUT /companies/{id}/subscription/cancel
PUT /companies/{id}/subscription/update
PUT /courses/{id}/archive
PUT /courses/{id}/unarchive

Found on 2026-01-23 07:43

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.21.79.51
Domain: liquidos.linde.com
Port: 80
URL: http://liquidos.linde.com

First seen 2025-12-05 06:47
Last seen 2026-01-16 13:50
Open for 42 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c43a749332306f26a19271bc73d7eb3c9ada0fec

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Archivos
GET /Archivos/OnDemand
GET /Archivos/{id}
GET /Emails
GET /Emails/OnDemand
GET /Emails/{id}
GET /EmailsLog
GET /EmailsLog/OnDemand
GET /EmailsLog/Resend/{id}
GET /EmailsLog/{id}
GET /Menus
GET /Menus/OnDemand
GET /Menus/{id}
GET /Modulos
GET /Modulos/OnDemand
GET /Modulos/{id}
GET /Perfiles
GET /Perfiles/GetByIDRol/{Id}
GET /Perfiles/OnDemand
GET /Perfiles/{id}
GET /Permisos/activar/{idMenu}/{idPerfil}
GET /Permisos/{idPerfil}
GET /Seguridad/ReenviarCodigo/{email}
GET /Seguridad/RememberPassword/{email}
GET /Seguridad/SecurityCode/{email}/{code}
GET /Seguridad/ValidSignature
GET /Usuarios/OnDemand
GET /Usuarios/{id}
POST /Permisos/{chkTodos}
POST /Seguridad/ChangeSignature
POST /Seguridad/CreatePassword
POST /Seguridad/RecoverPassword
POST /Seguridad/Register
POST /Seguridad/RenovarToken
POST /Seguridad/SecurityCode
POST /Seguridad/login
POST /Usuarios

Found on 2026-01-16 13:50

Create report

Open service 2.21.79.51:443 · www.admin.gsk-on.com.br

2026-01-25 21:07

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Referrer-Policy: same-origin
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
ETag: "bi5ahqjnfr5oa"
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=31536000
Vary: rsc
Vary: next-router-state-tree
Vary: next-router-prefetch
Vary: next-router-segment-prefetch
Date: Sun, 25 Jan 2026 21:07:11 GMT
Content-Length: 7354
Connection: close
Set-Cookie: GCLB=CP7Vw7q80IOd6QEQAw; path=/; HttpOnly; expires=Mon, 26-Jan-2026 21:07:11 GMT
Alt-Svc: h3=":443"; ma=93600

Page title: GSKON CMS

<!DOCTYPE html><!--Q0T8Gx7th0Q1Lnpz1T4Mo--><html lang="pt-BR"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/css/ad27c676daf4b70e.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-b8e1e74fcc0052ca.js"/><script src="/_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js" async=""></script><script src="/_next/static/chunks/1255-8befde0980f5cba9.js" async=""></script><script src="/_next/static/chunks/main-app-f3336e172256d2ab.js" async=""></script><script src="/_next/static/chunks/3399-5223729932a56b4d.js" async=""></script><script src="/_next/static/chunks/3701-44cced757e9bd8dc.js" async=""></script><script src="/_next/static/chunks/8593-b056974ee93a5e94.js" async=""></script><script src="/_next/static/chunks/app/layout-a096dcfc62a85af2.js" async=""></script><script src="/_next/static/chunks/app/page-b584a57b118e8661.js" async=""></script><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><meta name="robots" content="noindex, nofollow, noarchive, nosnippet, noimageindex"/><title>GSKON CMS</title><meta name="description" content="Sistema de gerenciamento GSKON"/><meta name="Cache-Control" content="no-cache, no-store, must-revalidate, private"/><meta name="Pragma" content="no-cache"/><meta name="Expires" content="0"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><style data-emotion="css-global 1bd2rq4">html{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;box-sizing:border-box;-webkit-text-size-adjust:100%;}*,*::before,*::after{box-sizing:inherit;}strong,b{font-weight:700;}body{margin:0;color:#fff;font-family:"Roboto","Helvetica","Arial",sans-serif;font-weight:400;font-size:1rem;line-height:1.5;letter-spacing:0.00938em;background-color:#121212;}@media print{body{background-color:#fff;}}body::backdrop{background-color:#121212;}</style><!--$--><!--/$--><script src="/_next/static/chunks/webpack-b8e1e74fcc0052ca.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[27321,[\"3399\",\"static/chunks/3399-5223729932a56b4d.js\",\"3701\",\"static/chunks/3701-44cced757e9bd8dc.js\",\"8593\",\"static/chunks/8593-b056974ee93a5e94.js\",\"7177\",\"static/chunks/app/layout-a096dcfc62a85af2.js\"],\"default\"]\n3:I[9766,[],\"\"]\n4:I[98924,[],\"\"]\n5:I[81959,[],\"ClientPageRoot\"]\n6:I[89547,[\"8974\",\"static/chunks/app/page-b584a57b118e8661.js\"],\"default\"]\n9:I[24431,[],\"OutletBoundary\"]\nb:I[15278,[],\"AsyncMetadataOutlet\"]\nd:I[24431,[],\"ViewportBoundary\"]\nf:I[24431,[],\"MetadataBoundary\"]\n10:\"$Sreact.suspense\"\n12:I[57150,[],\"\"]\n:HL[\"/_next/static/css/ad27c676daf4b70e.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"Q0T8Gx7th0Q1Lnpz1T4Mo\",\"p\":\"\",\"c\":[\"\",\"\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/css/ad27c676daf4b70e.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"pt-BR\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[[\"$\",\"meta\",null,{\"httpEquiv\":\"Cache-Control\",\"content\":\"no-cache, no-store, must-revalidate\"}],[\"$\",\"meta\",null,{\"httpEquiv\":\"Pragma\",\"content\":\"no-cache\"}],[\"$\",\"meta\",null,{\"httpEquiv\":\"Expires\",\"content\":\"0\"}],[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex, nofollow, noarchive, nosnippet, noimageindex\"}]]}],[\"$\",\"body\",null,{\"suppressHydrationWarning\":true,\"children\":[\"$\",\"$L2\",null

Found 2026-01-25 by HttpPlugin

Host 2.21.79.51

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Domain summary