LeakIX - Host 20.105.216.7

Host 20.105.216.7

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

nginx nginx 1.29.3

tcp/443

nginx nginx 1.25.0

tcp/443

nginx nginx 1.28.0

tcp/443

nginx nginx 1.26.2

tcp/443

nginx nginx 1.24.0

tcp/443

nginx nginx 1.22.1

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: test.intercalc.online
Port: 443
URL: https://test.intercalc.online

First seen 2025-12-13 05:37
Last seen 2026-02-09 20:23
Open for 58 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 20:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: developer-bs-oad.q-plant-dev.com
Port: 443
URL: https://developer-bs-oad.q-plant-dev.com

First seen 2026-01-11 02:07
Last seen 2026-02-09 18:19
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 18:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: test-leonardocap-be.rina.org
Port: 443
URL: https://test-leonardocap-be.rina.org

First seen 2025-12-07 05:29
Last seen 2026-02-09 17:12
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 17:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: skjalaveitaapi.hms.is
Port: 80
URL: http://skjalaveitaapi.hms.is

First seen 2025-12-30 09:40
Last seen 2026-02-09 02:34
Open for 40 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549999abc5bf7d6eb68f7d6eb68f7d6eb68f7d6eb68
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/ping
GET /api/v1/{kennitala}/Documents/{documentId}
```
  Found on 2026-02-09 02:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: skjalaveitaapi.hms.is
Port: 443
URL: https://skjalaveitaapi.hms.is

First seen 2025-12-30 09:40
Last seen 2026-02-02 01:43
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549999abc5bf7d6eb68f7d6eb68f7d6eb68f7d6eb68
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/ping
GET /api/v1/{kennitala}/Documents/{documentId}
```
  Found on 2026-02-02 01:43
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 20.105.216.7
Domain: track-service.credion.eu
Port: 443
URL: https://track-service.credion.eu

First seen 2026-01-03 05:59
Last seen 2026-01-23 02:27
Open for 19 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3cf9f96a5cb373ba74c4d07c51adb7c67372ff9cb
```
GraphQL introspection enabled at /graphql
Types: 58 (by kind: ENUM: 15, INPUT_OBJECT: 16, OBJECT: 22, SCALAR: 5)
Operations:
- Query: Query | fields: _schemaDefinition, track
- Mutation: Mutation | fields: saveTrack
Directives: include, skip (total: 2)
```
  Found on 2026-01-23 02:27
  
  56.2 kBytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: developer-api.q-plant-dev.com
Port: 443
URL: https://developer-api.q-plant-dev.com

First seen 2026-01-11 02:25
Last seen 2026-01-22 23:13
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-22 23:13
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.216.7
Domain: developer.q-plant-dev.com
Port: 443
URL: https://developer.q-plant-dev.com

First seen 2026-01-11 02:09
Last seen 2026-01-16 15:00
Open for 5 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354931fecb4701c26d0e2a5027231e123a67365cf065

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/auth/login
GET /api/directoriesxvehicles/{vehicleRegistrationNumber}
GET /api/directoriesxvehicles/{vehicleRegistrationNumber}/presence
GET /api/onboardings/mobiledevice/{phoneNumber}/status
GET /api/pip/devices/{deviceid}/messagetypes/{messagetype}
GET /api/pip/devices/{deviceid}/messagetypes/{messagetype}/dates/{datetime}
GET /api/pip/devices/{deviceid}/messagetypes/{messagetype}/years/{year}
GET /api/secrets/googleanalyticskey
GET /api/secrets/googlemapskey
GET /api/secrets/webpushpublickey
GET /api/users/supportuser/profileimage
GET /api/users/{userId}/profileimage
GET /api/users/{userId}/profileimagedefault
GET /api/vehicles/truckBuddyAppEnabled
GET /api/vehicles/truckBuddyAppEnabledByIdentifiers
GET /signup/begin
POST /signup/finish
PUT /api/vehicles/{id}/startonboarding

Found on 2026-01-16 15:00

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.105.216.7
Domain: demo.app.dev.oversite.dev
Port: 443
URL: https://demo.app.dev.oversite.dev

First seen 2023-06-22 10:34
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561ca64e9376a97110fffdb12a17
```
Found 4 files trough .DS_Store spidering:

/css
/demo
/images
/js
```
  Found on 2023-06-22 10:34
Create report

Open service 20.105.216.7:80 · diginetid.com

2026-01-26 04:23

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Mon, 26 Jan 2026 04:23:53 GMT
Location: https://diginetid.com/

Found 2026-01-26 by HttpPlugin

Host 20.105.216.7

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file