LeakIX - Host 20.105.232.29

Host 20.105.232.29

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: rest-endpoint.steyr.biz
Port: 443
URL: https://rest-endpoint.steyr.biz

First seen 2025-12-25 07:49
Last seen 2026-02-02 10:08
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 10:08
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549116f59789998a6fbd82502e4280f3c94b0237106
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/IF0011_1SalesOrder
POST /api/IF0057CustomerScheduledRelease
POST /api/IF0110Seko
POST /api/IF0116PlanningResultsScheduling
POST /api/IF0116PlanningResultsSequencing
POST /api/IF0116PlanningResultsSlotting
POST /api/IF0132_PALSupplierContact
POST /api/IF0133_PALSupplierQuotaChanges
```
  Found on 2026-01-23 04:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: replication.staging.amep-eviden.com
Port: 443
URL: https://replication.staging.amep-eviden.com

First seen 2026-01-06 10:54
Last seen 2026-02-02 07:59
Open for 26 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60337cf83c181cc479dc320eec8b1504ca371c9584
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/Sync/DeleteEvent/{eventId}
GET /api/Sync
GET /api/Sync/GetEquipmentReplenishmentQuantity/{equipmentId}
GET /api/Sync/GetLocalizationResources
GET /api/Sync/GetParameters
GET /api/Sync/GetSAS
GET /api/Sync/GetStorageUrl
GET /api/Sync/GetUserInfo
GET /api/Sync/GetUsers
GET /api/Sync/UserFeatures
POST /api/Sync/CreateEvent
PUT /api/Sync/UpdateEvent/{eventId}
```
  Found on 2026-02-02 07:59
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: hub-api-acc.zcnvervoer.nl
Port: 443
URL: https://hub-api-acc.zcnvervoer.nl

First seen 2025-12-28 06:31
Last seen 2026-02-01 22:21
Open for 35 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-01 22:21

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354916bc9ddb23490e49953e865a7e3534885273b389

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/services/app/DeclarationCode/DeleteDeclarationCode
DELETE /api/services/app/DeclarationCode/RemoveDeclarationCodeFromOrganizationUnit
DELETE /api/services/app/DynamicEntityProperty/Delete
DELETE /api/services/app/DynamicEntityPropertyValue/Delete
DELETE /api/services/app/DynamicProperty/Delete
DELETE /api/services/app/DynamicPropertyValue/Delete
DELETE /api/services/app/Friendship/RemoveFriend
DELETE /api/services/app/Language/DeleteLanguage
DELETE /api/services/app/Notification/DeleteAllUserNotifications
DELETE /api/services/app/Notification/DeleteNotification
DELETE /api/services/app/OrganizationUnit/DeleteOrganizationUnit
DELETE /api/services/app/OrganizationUnit/RemoveRoleFromOrganizationUnit
DELETE /api/services/app/OrganizationUnit/RemoveUserFromOrganizationUnit
DELETE /api/services/app/Role/DeleteRole
DELETE /api/services/app/Tenant/DeleteTenant
DELETE /api/services/app/User/DeleteUser
DELETE /api/services/app/UserDelegation/RemoveDelegation
GET /TenantCustomization/GetTenantLogo/{skin}/{tenantId}/{extension}
GET /api/TokenAuth/GetExternalAuthenticationProviders
GET /api/TokenAuth/LogOut
GET /api/TokenAuth/TestNotification
GET /api/services/app/Archive/GetAllLocations
GET /api/services/app/AuditLog/GetAuditLogExtended
GET /api/services/app/AuditLog/GetAuditLogs
GET /api/services/app/AuditLog/GetAuditLogsToExcel
GET /api/services/app/AuditLog/GetEntityChanges
GET /api/services/app/AuditLog/GetEntityChangesToExcel
GET /api/services/app/AuditLog/GetEntityHistoryObjectTypes
GET /api/services/app/AuditLog/GetEntityPropertyChanges
GET /api/services/app/AuditLog/GetEntityTypeChanges
GET /api/services/app/Caching/GetAllCaches
GET /api/services/app/Chat/GetUserChatFriendsWithSettings
GET /api/services/app/Chat/GetUserChatMessages
GET /api/services/app/CommonLookup/GetDefaultEditionName
GET /api/services/app/CommonLookup/GetEditionsForCombobox
GET /api/services/app/DeclarationCode/GetDeclarationCodeForEdit
GET /api/services/app/DynamicEntityProperty/Get
GET /api/services/app/DynamicEntityProperty/GetAll
GET /api/services/app/DynamicEntityProperty/GetAllEntitiesHasDynamicProperty
GET /api/services/app/DynamicEntityProperty/GetAllPropertiesOfAnEntity
GET /api/services/app/DynamicEntityPropertyDefinition/GetAllAllowedInputTypeNames
GET /api/services/app/DynamicEntityPropertyDefinition/GetAllEntities
GET /api/services/app/DynamicEntityPropertyValue/Get
GET /api/services/app/DynamicEntityPropertyValue/GetAll
GET /api/services/app/DynamicEntityPropertyValue/GetAllDynamicEntityPropertyValues
GET /api/services/app/DynamicProperty/Get
GET /api/services/app/DynamicProperty/GetAll
GET /api/services/app/DynamicPropertyValue/Get
GET /api/services/app/DynamicPropertyValue/GetAllValuesOfDynamicProperty
GET /api/services/app/HostDashboard/GetEditionTenantStatistics
GET /api/services/app/HostDashboard/GetRecentTenantsData
GET /api/services/app/HostDashboard/GetSubscriptionExpiringTenantsData
GET /api/services/app/HostDashboard/GetTopStatsData
GET /api/services/app/HostSettings/GetAllSettings
GET /api/services/app/HostSettings/GetEnabledSocialLoginSettings
GET /api/services/app/HostSettings/GetEnvironment
GET /api/services/app/Install/GetAppSettingsJson
GET /api/services/app/Language/GetLanguageForEdit
GET /api/services/app/Language/GetLanguageTexts
GET /api/services/app/Language/GetLanguages
GET /api/services/app/Notification/GetAllMassNotifications
GET /api/services/app/Notification/GetAllNotifiers
GET /api/services/app/Notification/GetAllOrganizationUnitForLookupTable
GET /api/services/app/Notification/GetAllUserForLookupTable
GET /api/services/app/Notification/GetNotificationSettings
GET /api/services/app/Notification/GetNotificationsPublishedByUser
GET /api/services/app/Notification/GetUserNotifications
GET /api/services/app/Notification/GetUserNotificationsOLD
GET /api/services/app/OrganizationTrip/GetCurrentDutchDateTime
GET /api/services/app/OrganizationUnit/GetAll
GET /api/services/app/OrganizationUnit/GetOrganizationUnit
GET /api/services/app/OrganizationUnit/GetOrganizationUnitDetails
GET /api/services/app/OrganizationUnit/GetOrganizationUnitForEdit
GET /api/services/app/OrganizationUnit/GetOrganizationUnitRoles
GET /api/services/app/OrganizationUnit/GetOrganizationUnitUsers
GET /api/services/app/OrganizationUnit/GetOrganizationUnits
GET /api/services/app/Permission/GetAllPermissions
GET /api/services/app/PortalTrip/GetClientAddressOptions
GET /api/services/app/PortalTrip/GetSoapEnabled
GET /api/services/app/PortalTripAudit/GetAuditLogsToExcel
GET /api/services/app/PortalTripSync/GetCurrentOrLastSync
GET /api/services/app/PortalTripSync/GetSyncErrorsByClientName
GET /api/services/app/PortalTripSync/GetSyncErrorsByTripOrName
GET /api/services/app/Profile/GetCurrentUserProfileForEdit
GET /api/services/app/Profile/GetFriendProfilePicture
GET /api/services/app/Profile/GetPasswordComplexitySetting
GET /api/services/app/Profile/GetProfilePicture
GET /api/services/app/Profile/GetProfilePictureByUser
GET /api/services/app/Profile/GetProfilePictureByUserName
GET /api/services/app/Role/GetRoleForEdit
GET /api/services/app/Session/GetCurrentLoginInformations
GET /api/services/app/Soap/GetClientAddresses
GET /api/services/app/Soap/GetClientById
GET /api/services/app/Soap/GetTestClient
GET /api/services/app/Soap/GetTripById
GET /api/services/app/System/GetCurrentDutchDateTime
GET /api/services/app/System/GetEnvironment
GET /api/services/app/System/GetIP
GET /api/services/app/System/GetOrganizationCacheItem
GET /api/services/app/System/GetTripMessage
GET /api/services/app/Tenant/GetTenantFeaturesForEdit
GET /api/services/app/Tenant/GetTenantForEdit
GET /api/services/app/Tenant/GetTenants
GET /api/services/app/TenantDashboard/GetDailySales
GET /api/services/app/TenantDashboard/GetDashboardData
GET /api/services/app/TenantDashboard/GetGeneralStats
GET /api/services/app/TenantDashboard/GetMemberActivity
GET /api/services/app/TenantDashboard/GetProfitShare
GET /api/services/app/TenantDashboard/GetRegionalStats
GET /api/services/app/TenantDashboard/GetSalesSummary
GET /api/services/app/TenantDashboard/GetTopStats
GET /api/services/app/TenantRegistration/GetEdition
GET /api/services/app/TenantRegistration/GetEditionsForSelect
GET /api/services/app/TenantSettings/GetAllSettings
GET /api/services/app/TenantSettings/GetEnabledSocialLoginSettings
GET /api/services/app/TenantSettings/GetEnvironment
GET /api/services/app/TenantSettings/GetSoapSettings
GET /api/services/app/TenantSettings/GetSyncSettings
GET /api/services/app/Timing/GetTimezoneComboboxItems
GET /api/services/app/Timing/GetTimezones
GET /api/services/app/UiCustomizationSettings/GetUiManagementSettings
GET /api/services/app/User/GetUserForEdit
GET /api/services/app/User/GetUserPermissionsForEdit
GET /api/services/app/User/GetUsersToExcel
GET /api/services/app/UserDelegation/GetActiveUserDelegations
GET /api/services/app/UserDelegation/GetDelegatedUsers
GET /api/services/app/UserLink/GetLinkedUsers
GET /api/services/app/UserLink/GetRecentlyUsedLinkedUsers
GET /api/services/app/UserLogin/GetAllLoginAttempts
GET /api/services/app/UserLogin/GetUserLoginAttempts
GET /api/services/app/WebLog/GetLatestWebLogs
GET /api/services/app/WebhookEvent/Get
GET /api/services/app/WebhookSendAttempt/GetAllSendAttempts
GET /api/services/app/WebhookSendAttempt/GetAllSendAttemptsOfWebhookEvent
GET /api/services/app/WebhookSubscription/GetAllAvailableWebhooks
GET /api/services/app/WebhookSubscription/GetAllSubscriptions
GET /api/services/app/WebhookSubscription/GetAllSubscriptionsIfFeaturesGranted
GET /api/services/app/WebhookSubscription/GetSubscription
POST /api/TokenAuth/Authenticate
POST /api/TokenAuth/DelegatedImpersonatedAuthenticate
POST /api/TokenAuth/ExternalAuthenticate
POST /api/TokenAuth/ImpersonatedAuthenticate
POST /api/TokenAuth/LinkedAccountAuthenticate
POST /api/TokenAuth/RefreshToken
POST /api/TokenAuth/SendTwoFactorAuthCode
POST /api/Twitter/GetAccessToken
POST /api/Twitter/GetRequestToken
POST /api/services/app/Account/ActivateEmail
POST /api/services/app/Account/BackToImpersonator
POST /api/services/app/Account/DelegatedImpersonate
POST /api/services/app/Account/ImpersonateUser
POST /api/services/app/Account/IsTenantAvailable
POST /api/services/app/Account/Register
POST /api/services/app/Account/ResetPassword
POST /api/services/app/Account/ResolveTenantId
POST /api/services/app/Account/SendEmailActivationLink
POST /api/services/app/Account/SendPasswordResetCode
POST /api/services/app/Account/SwitchToLinkedAccount
POST /api/services/app/Caching/ClearAllCaches
POST /api/services/app/Caching/ClearCache
POST /api/services/app/Chat/MarkAllUnreadMessagesOfUserAsRead
POST /api/services/app/CommonLookup/FindUsers
POST /api/services/app/DeclarationCode/AddDeclarationCodesToOrganizationUnit
POST /api/services/app/DeclarationCode/CreateOrUpdateDeclarationCode
POST /api/services/app/DeclarationCode/GetAllDeclarationCodes
POST /api/services/app/DeclarationCode/GetAvailableDeclarationCodesForOrganizationUnit
POST /api/services/app/DeclarationCode/GetDeclarationCodesForOrganizationUnit
POST /api/services/app/DynamicEntityProperty/Add
POST /api/services/app/DynamicEntityPropertyValue/Add
POST /api/services/app/DynamicEntityPropertyValue/CleanValues
POST /api/services/app/DynamicEntityPropertyValue/InsertOrUpdateAllValues
POST /api/services/app/DynamicProperty/Add
POST /api/services/app/DynamicProperty/FindAllowedInputType
POST /api/services/app/DynamicPropertyValue/Add
POST /api/services/app/Friendship/AcceptFriendshipRequest
POST /api/services/app/Friendship/BlockUser
POST /api/services/app/Friendship/CreateFriendshipRequest
POST /api/services/app/Friendship/CreateFriendshipRequestByUserName
POST /api/services/app/Friendship/UnblockUser
POST /api/services/app/HostSettings/SendTestEmail
POST /api/services/app/Install/CheckDatabase
POST /api/services/app/Install/Setup
POST /api/services/app/Language/CreateOrUpdateLanguage
POST /api/services/app/Language/SetDefaultLanguage
POST /api/services/app/Notification/CreateMassNotification
POST /api/services/app/Notification/CreateNewVersionReleasedNotification
POST /api/services/app/Notification/EditMassNotification
POST /api/services/app/Notification/SetAllAvailableVersionNotificationAsRead
POST /api/services/app/Notification/SetAllNotificationsAsRead
POST /api/services/app/Notification/SetNotificationAsRead
POST /api/services/app/Notification/ShouldUserUpdateApp
POST /api/services/app/OrganizationTrip/GetAllTrips
POST /api/services/app/OrganizationTrip/GetOuTrips
POST /api/services/app/OrganizationUnit/AddRolesToOrganizationUnit
POST /api/services/app/OrganizationUnit/AddUsersToOrganizationUnit
POST /api/services/app/OrganizationUnit/CreateOrUpdateOrganizationUnit
POST /api/services/app/OrganizationUnit/CreateOrganizationUnit
POST /api/services/app/OrganizationUnit/FindRoles
POST /api/services/app/OrganizationUnit/FindUsers
POST /api/services/app/OrganizationUnit/GetAllOrganizationUnits
POST /api/services/app/OrganizationUnit/MoveOrganizationUnit
POST /api/services/app/OrganizationUnit/StartLocationImportJob
POST /api/services/app/PortalFeedback/SendFeedback
POST /api/services/app/PortalTrip/AddDetailsToTrip
POST /api/services/app/PortalTrip/CancelTrip
POST /api/services/app/PortalTrip/CreateReturnTrip
POST /api/services/app/PortalTrip/InitializeCustomTrip
POST /api/services/app/PortalTrip/InitializeReturnTrip
POST /api/services/app/PortalTrip/InitializeViewTrip
POST /api/services/app/PortalTrip/SearchClientByBirthdate
POST /api/services/app/PortalTripSync/GetAllSyncs
POST /api/services/app/Profile/ChangeLanguage
POST /api/services/app/Profile/ChangePassword
POST /api/services/app/Profile/DisableGoogleAuthenticator
POST /api/services/app/Profile/GenerateGoogleAuthenticatorKey
POST /api/services/app/Profile/GetTermsAndConditions
POST /api/services/app/Profile/PrepareCollectedData
POST /api/services/app/Profile/SendVerificationSms
POST /api/services/app/Profile/VerifyAuthenticatorCode
POST /api/services/app/Profile/VerifySmsCode
POST /api/services/app/Profile/ViewRecoveryCodes
POST /api/services/app/Role/CreateOrUpdateRole
POST /api/services/app/Role/GetRoles
POST /api/services/app/Subscription/DisableRecurringPayments
POST /api/services/app/Subscription/EnableRecurringPayments
POST /api/services/app/System/IsArchiveServerReachable
POST /api/services/app/System/IsArchiveTripsAvailable
POST /api/services/app/Tenant/CreateTenant
POST /api/services/app/Tenant/ResetTenantSpecificFeatures
POST /api/services/app/Tenant/UnlockTenantAdmin
POST /api/services/app/TenantRegistration/RegisterTenant
POST /api/services/app/TenantSettings/ClearCustomCss
POST /api/services/app/TenantSettings/ClearLogo
POST /api/services/app/TenantSettings/SendTestEmail
POST /api/services/app/UiCustomizationSettings/ChangeDarkModeOfCurrentTheme
POST /api/services/app/UiCustomizationSettings/ChangeThemeWithDefaultValues
POST /api/services/app/UiCustomizationSettings/UseSystemDefaultSettings
POST /api/services/app/User/CreateOrUpdateUser
POST /api/services/app/User/GetUsers
POST /api/services/app/User/ResetUserSpecificPermissions
POST /api/services/app/User/UnlockUser
POST /api/services/app/UserDelegation/DelegateNewUser
POST /api/services/app/UserLink/LinkToUser
POST /api/services/app/UserLink/UnlinkUser
POST /api/services/app/WebLog/DownloadWebLogs
POST /api/services/app/WebhookSendAttempt/Resend
POST /api/services/app/WebhookSubscription/ActivateWebhookSubscription
POST /api/services/app/WebhookSubscription/AddSubscription
POST /api/services/app/WebhookSubscription/IsSubscribed
POST /api/services/app/WebhookSubscription/PublishTestWebhook
PUT /api/services/app/DynamicEntityProperty/Update
PUT /api/services/app/DynamicEntityPropertyValue/Update
PUT /api/services/app/DynamicProperty/Update
PUT /api/services/app/DynamicPropertyValue/Update
PUT /api/services/app/HostSettings/UpdateAllSettings
PUT /api/services/app/Language/UpdateLanguageText
PUT /api/services/app/Notification/UpdateNotificationSettings
PUT /api/services/app/OrganizationUnit/UpdateOrganizationUnit
PUT /api/services/app/OrganizationUnit/UpdateOrganizationUnitSetSync
PUT /api/services/app/PortalTrip/UpdateTrip
PUT /api/services/app/Profile/UpdateCurrentUserProfile
PUT /api/services/app/Profile/UpdateGoogleAuthenticatorKey
PUT /api/services/app/Profile/UpdateProfilePicture
PUT /api/services/app/Session/UpdateUserSignInToken
PUT /api/services/app/Tenant/UpdateTenant
PUT /api/services/app/Tenant/UpdateTenantFeatures
PUT /api/services/app/TenantSettings/UpdateAllSettings
PUT /api/services/app/UiCustomizationSettings/UpdateDefaultUiManagementSettings
PUT /api/services/app/UiCustomizationSettings/UpdateUiManagementSettings
PUT /api/services/app/User/UpdateUserPermissions
PUT /api/services/app/WebhookSubscription/UpdateSubscription

Found on 2026-01-08 22:36

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: bedrockcpcas-euw-login.nidemo.com
Port: 443
URL: https://bedrockcpcas-euw-login.nidemo.com

First seen 2025-12-21 16:10
Last seen 2026-01-23 14:50
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493b3b73501e74bb8ec3838553ed9f9acfc10ba004
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /Account/Login
GET /Account/Logout
GET /External/Callback
GET /External/Challenge
GET /Home/PrivacyPolicy/privacypolicy
GET /Language/Index
GET /error
GET /service/Health/ping
```
  Found on 2026-01-23 14:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: fulfilment-api.craftos.enpal.io
Port: 443
URL: https://fulfilment-api.craftos.enpal.io

First seen 2025-10-31 00:33
Last seen 2026-01-23 13:15
Open for 84 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 13:15
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: api.acc.weauction.nl
Port: 443
URL: https://api.acc.weauction.nl

First seen 2025-12-30 11:03
Last seen 2026-01-22 23:02
Open for 23 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549067cd57ebc8baf8728663dd02f4021e98dfb18ab

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /auctions
GET /auctions/{id}
GET /auctions/{id}/logs
GET /clients
GET /clients/item-custom-field-definitions
GET /clients/{id}
GET /countries
GET /items
GET /items/{id}
GET /items/{id}/ascending/winner
GET /items/{id}/bids
GET /items/{id}/descending/winner
GET /items/{id}/logs
GET /users
GET /users/loginLink
GET /webhooks
POST /bids
POST /clerk/floor-bid
POST /clerk/{itemId}/bids/{bidId}/override
POST /clerk/{itemId}/bids/{bidId}/undo
POST /clerk/{itemId}/going-once
POST /clerk/{itemId}/going-twice
POST /clerk/{itemId}/next
POST /clerk/{itemId}/sold
POST /connect/token
POST /items/{id}/changeDescendingStartAmount/{amount}
POST /items/{id}/outOfSale
PUT /auctions/{auctionId}/close
PUT /auctions/{id}/publish
PUT /auctions/{id}/reorder
PUT /auctions/{id}/unpublish

Found on 2026-01-22 23:02

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: afwembuapi-test.azure.chevron.com
Port: 443
URL: https://afwembuapi-test.azure.chevron.com

First seen 2025-12-26 10:39
Last seen 2026-01-16 08:15
Open for 20 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549cbe8cddc95208efe53909d29bcb3659a205ebf91

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/DeleteForecastDeleteReferenceRecordsById
DELETE /api/DeleteWellMappingData
GET /api/GetAFWAdditionalData
GET /api/GetAfwToken
GET /api/GetBuildInfo
GET /api/GetCheckOBSHResultStatus
GET /api/GetCheckOBSHResultStatusWithModelId
GET /api/GetCheckParsedAfiResultStatus
GET /api/GetCheckParsedForecastResultStatus
GET /api/GetCheckParsedIxfResultStatus
GET /api/GetCheckPerformanceMetricstResultStatus
GET /api/GetCheckSubmittedJobStatus
GET /api/GetCheckUpdateIxfResultStatus
GET /api/GetContentsOfFile
GET /api/GetDirectoryList
GET /api/GetFieldVolPage
GET /api/GetForecastPage
GET /api/GetIXFFileGasLift
GET /api/GetIXSimulationJobsListByUser
GET /api/GetIdentity
GET /api/GetModelSummary/{environmentName}/{businessUnit}/{assetName}
GET /api/GetModelSummary/{environmentName}/{businessUnit}/{assetName}/{modelId}
GET /api/GetModelWellListData
GET /api/GetNetworkBusinessDecisionDB
GET /api/GetNetworkMetaDataByAfiFileName
GET /api/GetNetworkSummary
GET /api/GetOBSHManager
GET /api/GetOBSHUpdatedWellList
GET /api/GetOGIPFromSimulationResults
GET /api/GetOOIPFromSimulationResults
GET /api/GetObshCummsToPhaseRatesAndRatios
GET /api/GetParseAfi
GET /api/GetParseIxf
GET /api/GetPerformanceMetricsDataAsync
GET /api/GetPtsToken
GET /api/GetQueryForecastFromDb
GET /api/GetReadFieldInjVolumesFile
GET /api/GetReadFieldMonthlyInjVolumesFile
GET /api/GetReadFieldMonthlyVolumesFile
GET /api/GetReadFieldVolumesFile
GET /api/GetReadForecastFile
GET /api/GetReadPressureFile
GET /api/GetReadShutinFile
GET /api/GetSimulationFiles
GET /api/GetUserFromGraph
GET /api/GetUserPreferenceForPerformanceMetrics
GET /api/GetValidateApi
GET /api/GetWellMappingData
GET /api/GetXYPlotSummary
GET /api/PostExportWellPressuresDataToTextFile
POST /api/EesyDownloadFilestoreFilesToFolder
POST /api/GetCVXCheckSubmittedJobStatus
POST /api/GetOBSHDataPutinFolder
POST /api/OBSHScheduler
POST /api/OBSHSchedulerSingleAsset
POST /api/PostForecastDataInDatabase
POST /api/PostForecastPreProcessorBatch
POST /api/PostGenerateAFW_WellLevel_FieldLevel_ReportCSVS
POST /api/PostGetSimulationMetaData
POST /api/PostGetUpdatedAFiFile
POST /api/PostInsertAcceleratedForecastMetadata
POST /api/PostInsertAcceleratedForecastWellDepth
POST /api/PostInsertAcceleratedForecastXYPlotSummaryMapping
POST /api/PostInsertForecastSimulationFn
POST /api/PostInsertWellMappingData
POST /api/PostIxJobEesy
POST /api/PostIxJobEesyAsync
POST /api/PostIxJobStatus
POST /api/PostNetworkMetaDataByAfiFileNameService
POST /api/PostObshUpdatefromKrenimFunction
POST /api/PostParseAFIAndCopySelectIncludesToAFIFolderBatch
POST /api/PostRunIXParserBatch
POST /api/PostSageForecastData
POST /api/PostSageForecastDataParallel
POST /api/PostUpdateIXFFile
POST /api/PostUpdateOBSHFromKrenimFunction
POST /api/PostUpdateUserPreference
POST /api/PostUploadForecastData
POST /api/PostWriteContentsToFile
POST /api/PressureScheduler
POST /api/ShutinScheduler
POST /api/VolumeInjScheduler
POST /api/VolumeMonthlyInjScheduler
POST /api/VolumeMonthlyScheduler
POST /api/VolumeScheduler
POST /api/VolumeSchedulerPage
PUT /api/PutSetGetEESYToken
PUT /api/PutUpdateModelHMDate
PUT /api/PutUpdateWellMappingData
PUT /api/PutUpdatedIXFFileWithShutin

Found on 2026-01-16 08:15

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: bedrockcpcas-login.nidemo.com
Port: 443
URL: https://bedrockcpcas-login.nidemo.com

First seen 2025-12-21 16:10
Last seen 2026-01-15 22:56
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-15 22:56
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493b3b73501e74bb8ec3838553ed9f9acfc10ba004
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /Account/Login
GET /Account/Logout
GET /External/Callback
GET /External/Challenge
GET /Home/PrivacyPolicy/privacypolicy
GET /Language/Index
GET /error
GET /service/Health/ping
```
  Found on 2026-01-08 23:52
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d609b0a7cdbec7690a12070526aa9d8705a08589c07
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /
GET /Account/Login
GET /Account/Logout
GET /External/Callback
GET /External/Challenge
GET /Home/PrivacyPolicy/privacypolicy
GET /Language/Index
GET /error
GET /service/Health/ping
```
  Found on 2026-01-01 21:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: rapid-test.azure.chevron.com
Port: 443
URL: https://rapid-test.azure.chevron.com

First seen 2025-12-10 06:15
Last seen 2026-01-08 21:49
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549c1ae17c70fbce16bf61f66be91423cb38582abd6
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /actuals/session/{sessionId}
DELETE /business-plans/session/{sessionId}
GET /accounts
GET /actuals/session
GET /app-settings
GET /business-entities
GET /business-entities/by-type
GET /business-entities/top-level
GET /business-entities/tree-members
GET /business-plans/session/active
GET /outlook/session
GET /roles
GET /users
GET /users/current
POST /actuals/session/upload
POST /business-plans/session/upload
POST /uploads
PUT /business-entities/status
PUT /roles/status
PUT /users/status
```
  Found on 2026-01-08 21:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: test-pos-de.bax-group.com
Port: 443
URL: https://test-pos-de.bax-group.com

First seen 2025-10-24 08:28
Last seen 2025-12-14 13:34
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-14 13:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: test-pos.bax-group.com
Port: 443
URL: https://test-pos.bax-group.com

First seen 2025-10-24 08:28
Last seen 2025-12-13 18:41
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-13 18:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.29
Domain: test-mate.bax-group.com
Port: 443
URL: https://test-mate.bax-group.com

First seen 2025-10-24 08:28
Last seen 2025-12-13 14:24
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-13 14:24
Create report

Open service 20.105.232.29:80 · waws-prod-am2-675.api.azurewebsites.windows.net

2026-01-24 17:03

HTTP/1.1 404 Site Not Found
Content-Length: 2667
Connection: close
Content-Type: text/html
Date: Sat, 24 Jan 2026 17:04:10 GMT

Page title: Microsoft Azure Web App - Error 404

<!DOCTYPE html>
<html>
<head>
    <title>Microsoft Azure Web App - Error 404</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 75px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        a, a:visited, a:active, a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
    <script type="text/javascript">
        function toggle_visibility(id) {
            var e = document.getElementById(id);
            if (e.style.display == 'block')
                e.style.display = 'none';
            else
                e.style.display = 'block';
        }
    </script>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1>404 Web Site not found.</h1>
            <p>You may be seeing this error due to one of the reasons listed below :</p>
            <ul>
                <li>Custom domain has not been configured inside Azure. See <a href="https://go.microsoft.com/fwlink/?linkid=2194614">how to map an existing domain</a> to resolve this.</li>
                <li>Client cache is still pointing the domain to old IP address. Clear the cache by running the command <i>ipconfig/flushdns.</i></li>
            </ul>
            <p>Checkout <a href="https://go.microsoft.com/fwlink/?linkid=2194451">App Service Domain FAQ</a> for more questions.</p>
        </div>
     </div>
</body>
</html>

Found 2026-01-24 by HttpPlugin