LeakIX - Host 20.119.0.26

Host 20.119.0.26

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: tst-user-analytics.tymetrix360.com
Port: 443
URL: https://tst-user-analytics.tymetrix360.com

First seen 2025-12-25 06:05
Last seen 2026-02-09 20:12
Open for 46 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035496d7a13db3dd750fd35d9ed8cc93324b038c018f5

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /reports/{reportId}/bookmarks/removeSpecificUsers
DELETE /reports/{reportId}/unshare
GET /
GET /assets
GET /branding
GET /configuration
GET /dashboards
GET /dashboards/{dashboardId}
GET /datasets
GET /datasets/{datasetId}
GET /exportHistory
GET /reports
GET /reports/shared
GET /reports/{reportId}
GET /reports/{reportId}/bookmarks
GET /reports/{reportId}/bookmarks/{bookmarkId}
GET /reports/{reportId}/bookmarks/{reportBookmarkId}/getSpecificUsers
GET /reports/{reportId}/shared-with
GET /reports/{reportId}/subscriptions
GET /stagedUsers/all
GET /stagedUsers/by-email
GET /tenants/{tenantId}/themes
GET /tenants/{tenantId}/themes/{themeId}
GET /userDetail
GET /userSubscriptions
GET /workspace/{workspaceId}/dataset/{datasetId}/datasetSchema
GET /workspace/{workspaceId}/dataset/{datasetId}/permissions
PATCH /users/me/preferences
POST /assetsWithEmbedToken
POST /dashboards/generateEmbedToken
POST /datasets/generateEmbedTokenForCreate
POST /downloadFile
POST /downloadFile/{fileName}
POST /export
POST /exportStatus
POST /reports/generateEmbedToken
POST /reports/{reportId}/bookmarks/shareWithSpecificUsers
POST /reports/{reportId}/parameters
POST /reports/{reportId}/save
POST /reports/{reportId}/share
POST /sendemail/{reportSubscriptionId}
POST /visualExport
POST /workspace/{workspaceId}/dataset/{datasetId}/column
POST /workspace/{workspaceId}/dataset/{datasetId}/columns/generateDax
POST /workspace/{workspaceId}/dataset/{datasetId}/executeDax
POST /workspace/{workspaceId}/dataset/{datasetId}/measure
POST /workspace/{workspaceId}/dataset/{datasetId}/measures/generateDax
POST /workspace/{workspaceId}/dataset/{datasetId}/relationship
POST /workspace/{workspaceId}/dataset/{datasetId}/table
POST /workspace/{workspaceId}/dataset/{datasetId}/table/generateDax
PUT /assets/assetDescription
PUT /reports/{reportId}/subscriptions/{reportSubscriptionId}

Found on 2026-02-09 20:12

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: retrapi.com
Port: 443
URL: https://retrapi.com

First seen 2025-12-05 18:13
Last seen 2026-02-09 19:42
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493bcf91a1c93b7c2708e400c40e51d57c374ca382
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/AuthApi/authenticate
POST /api/AuthApi/refresh-token
POST /api/agent/agent-stats
POST /api/loanofficer/loan-officer-stats
POST /api/mortgage-company/production-stats
```
  Found on 2026-02-09 19:42
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493bcf91a1c93b7c2708e400c4d489fe7f0b57f9fc
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/AuthApi/authenticate
POST /api/AuthApi/refresh-token
POST /api/agent/agent-stats
POST /api/loanofficer/loan-officer-info
POST /api/loanofficer/loan-officer-rankings
POST /api/loanofficer/loan-officer-rankings-leaders
POST /api/loanofficer/loan-officer-stats
POST /api/mortgage-company/production-stats
```
  Found on 2025-12-05 18:13
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: devkioskb.qcpos.net
Port: 443
URL: https://devkioskb.qcpos.net

First seen 2025-11-10 15:43
Last seen 2026-02-09 19:20
Open for 91 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e4838694cc11e82b6d3c86fa5dfef4b9d77a58f5

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/terminal/ClaimPromoCode
POST /api/v1/terminal/GetAuthorizationToken
POST /api/v1/terminal/GetBillStackerEmptiedLog
POST /api/v1/terminal/GetBillsHistory
POST /api/v1/terminal/GetIncompleteRedemptions
POST /api/v1/terminal/GetPlayer
POST /api/v1/terminal/GetQuickReport
POST /api/v1/terminal/GetReceipt
POST /api/v1/terminal/GetReceiptHistory
POST /api/v1/terminal/GetReceiptTemporaryToken
POST /api/v1/terminal/GetSalesReport
POST /api/v1/terminal/GetTerminalInfo
POST /api/v1/terminal/LoginWithSMSVerification
POST /api/v1/terminal/LoginWithoutVerification
POST /api/v1/terminal/Logout
POST /api/v1/terminal/Purchase
POST /api/v1/terminal/RedeemDailyFreePlay
POST /api/v1/terminal/RedemptionCommit
POST /api/v1/terminal/RedemptionHold
POST /api/v1/terminal/RedemptionRollback
POST /api/v1/terminal/RegisterGuest
POST /api/v1/terminal/RegisterWithSMS
POST /api/v1/terminal/SendLoginSMSVerification
POST /api/v1/terminal/SendRedeemSMSVerification
POST /api/v1/terminal/SendRegisterSMSVerification
POST /api/v1/terminal/SetTerminalInfo
POST /api/v1/terminal/ValidateRedeemSMSVerification

Found on 2026-02-09 19:20

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e4838694cc11e82b443ad1fa81958e5cecd766ad

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/terminal/ClaimPromoCode
POST /api/v1/terminal/GetAuthorizationToken
POST /api/v1/terminal/GetIncompleteRedemptions
POST /api/v1/terminal/GetPlayer
POST /api/v1/terminal/GetReceipt
POST /api/v1/terminal/GetReceiptTemporaryToken
POST /api/v1/terminal/GetTerminalInfo
POST /api/v1/terminal/LoginWithSMSVerification
POST /api/v1/terminal/LoginWithoutVerification
POST /api/v1/terminal/Logout
POST /api/v1/terminal/Purchase
POST /api/v1/terminal/RedeemDailyFreePlay
POST /api/v1/terminal/RedemptionCommit
POST /api/v1/terminal/RedemptionHold
POST /api/v1/terminal/RedemptionRollback
POST /api/v1/terminal/RegisterGuest
POST /api/v1/terminal/RegisterWithSMS
POST /api/v1/terminal/SendLoginSMSVerification
POST /api/v1/terminal/SendRedeemSMSVerification
POST /api/v1/terminal/SendRegisterSMSVerification
POST /api/v1/terminal/SetTerminalInfo
POST /api/v1/terminal/ValidateRedeemSMSVerification

Found on 2025-12-01 12:49

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: www.retrapi.com
Port: 443
URL: https://www.retrapi.com

First seen 2025-12-05 18:15
Last seen 2026-02-09 19:12
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493bcf91a1c93b7c2708e400c40e51d57c374ca382
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/AuthApi/authenticate
POST /api/AuthApi/refresh-token
POST /api/agent/agent-stats
POST /api/loanofficer/loan-officer-stats
POST /api/mortgage-company/production-stats
```
  Found on 2026-02-09 19:12
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493bcf91a1c93b7c2708e400c4d489fe7f0b57f9fc
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/AuthApi/authenticate
POST /api/AuthApi/refresh-token
POST /api/agent/agent-stats
POST /api/loanofficer/loan-officer-info
POST /api/loanofficer/loan-officer-rankings
POST /api/loanofficer/loan-officer-rankings-leaders
POST /api/loanofficer/loan-officer-stats
POST /api/mortgage-company/production-stats
```
  Found on 2025-12-05 18:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: api.dev.uf.sampleeye.com
Port: 443
URL: https://api.dev.uf.sampleeye.com

First seen 2026-01-06 07:23
Last seen 2026-02-09 14:36
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549192db818735b60360408418fdfeeafe24cf01d9d
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/EndPage/cr-s2s
GET /api/Tracking/pixel
GET /api/Tracking/redirectbackpixel
POST /api/CompleteSurvey/CaptureUrlTimes
POST /api/CompleteSurvey/VerifyIdentity
POST /api/EndPage
POST /api/Error/UserflowGlobalErrorHandler
POST /api/Qualification/GetQualificationQuestion
POST /api/Qualification/SaveQualification
POST /api/Qualification/ValidateSecurity
POST /api/Session
POST /gmos2s
```
  Found on 2026-02-09 14:36
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-29 23:13
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60db3aff33eed57fbba6d10dfcbffc4b109134d6ac
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/EndPage/cr-s2s
GET /api/Tracking/pixel
GET /api/Tracking/redirectbackpixel
POST /api/EndPage
POST /api/Error/UserflowGlobalErrorHandler
POST /api/Qualification/GetQualificationQuestion
POST /api/Qualification/SaveQualification
POST /api/Qualification/ValidateSecurity
POST /api/Session
POST /gmos2s
```
  Found on 2026-01-06 07:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: api.uf.sampleeye.com
Port: 443
URL: https://api.uf.sampleeye.com

First seen 2026-01-06 07:24
Last seen 2026-02-09 14:36
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549192db818735b60360408418fdfeeafe24cf01d9d
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/EndPage/cr-s2s
GET /api/Tracking/pixel
GET /api/Tracking/redirectbackpixel
POST /api/CompleteSurvey/CaptureUrlTimes
POST /api/CompleteSurvey/VerifyIdentity
POST /api/EndPage
POST /api/Error/UserflowGlobalErrorHandler
POST /api/Qualification/GetQualificationQuestion
POST /api/Qualification/SaveQualification
POST /api/Qualification/ValidateSecurity
POST /api/Session
POST /gmos2s
```
  Found on 2026-02-09 14:36
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549192db818735b60360408418f48c27745dfecd2c9
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/EndPage/cr-s2s
GET /api/Tracking/pixel
GET /api/Tracking/redirectbackpixel
POST /api/EndPage
POST /api/Error/UserflowGlobalErrorHandler
POST /api/Qualification/GetQualificationQuestion
POST /api/Qualification/SaveQualification
POST /api/Qualification/ValidateSecurity
POST /api/Session
POST /gmos2s
```
  Found on 2026-01-06 07:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: qa.supplyapi.sampleeye.com
Port: 443
URL: https://qa.supplyapi.sampleeye.com

First seen 2026-01-12 13:31
Last seen 2026-02-02 05:37
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549b1c60cee4fe856526732166710d5c433b6d565b7
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/QualificationMapping/{supplierCode}/{languageCode}
GET /api/Survey/{supplierCode}
GET /api/SurveyGroup/{supplierCode}/{surveyId}
GET /api/SurveyQualifications/{supplierCode}/{surveyId}
GET /api/SurveyQuota/{supplierCode}/{surveyId}
```
  Found on 2026-02-02 05:37
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: aaonapidatadev.com
Port: 443
URL: https://aaonapidatadev.com

First seen 2025-11-11 01:22
Last seen 2026-02-02 01:36
Open for 83 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b2ae3e4c2baaf39514641fa4e8682b1424a01891

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/DeleteForecastingHistoricJob/{forecastingJobId}
DELETE /api/v1/DeleteForecastingWorkingJob/{forecastingJobId}
GET /
GET /api/v1/EcatUser
GET /api/v1/EcatUser/{userName}
GET /api/v1/Forecasting/GetAllContactsAsync
GET /api/v1/Forecasting/GetAllRegionalManagerAsync
GET /api/v1/Forecasting/GetContactByEmailaddressAsync
GET /api/v1/Forecasting/GetDirectorOfSalesAsync
GET /api/v1/Forecasting/GetDirectorOfSalesPerAccountAsync
GET /api/v1/Forecasting/GetNationalAccounts
GET /api/v1/Forecasting/GetRegionalManagerAsync
GET /api/v1/LeadTime/GetLeadTimeFeatures
GET /api/v1/LeadTime/GetLeadTimeProductFeatures
GET /api/v1/LeadTime/GetLeadTimeProducts
GET /api/v1/Locations
GET /api/v1/ModelLump/GetAllModelLumpDefinitions
GET /api/v1/PostalCodeCountry/{country}
GET /api/v1/PostalCodeRepNumber/{repNumber}
GET /api/v1/RepInfo/{country}/{stateProvince}/{countyName}
GET /api/v1/RepInfo/{postalCode}
GET /api/v1/RepNumber
GET /api/v1/RepNumber/{emailAddress}
GET /api/v1/Roles
GET /api/v1/Roles/{emailAddress}
GET /api/v1/Roles/{emailAddress}/{appName}
GET /api/v1/Telemetry
GET /api/v1/Telemetry/{emailAddress}/{eventType}
GET /api/v1/Telemetry/{startDate}/{endDate}/{emailAddress}/{eventType}
GET /api/v1/Telemetry/{startDate}/{endDate}/{eventType}
GET /favicon.ico
GET /robots.txt
PATCH /api/v1/ForecastingPost/PatchForecastingHistoricJobAsync
PATCH /api/v1/ForecastingPost/PatchForecastingWorkingJobAsync
POST /api/v1/Telemetry/PostFirstTelemtryWithUserAsync
POST /api/v1/Telemetry/PostTelemetryAsync
POST /api/v1/Telemetry/PostTelemetryObjectAsync

Found on 2026-02-02 01:36

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: adrws.inform.oceaneering.com
Port: 443
URL: https://adrws.inform.oceaneering.com

First seen 2026-01-02 05:00
Last seen 2026-02-02 00:38
Open for 30 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354948684d13feb77d6c14fdc0982f01ad66ade49520

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GraphQL
GET /HealthCheck/Verify
GET /HealthCheck/health
GET /api/AdrData/GetAllConfigLayouts
GET /api/AdrData/GetAllConfigValues
GET /api/AdrData/GetAllFlatAssetWithKeyColumn
GET /api/AdrData/GetAllKeyValues
GET /api/AdrData/GetAssetColumnsValue
GET /api/AdrData/GetAssetDataLayouts
GET /api/AdrData/GetAssetsByName
GET /api/AdrData/GetConfigValues
GET /api/AdrData/GetFlatSiteData
GET /api/AdrData/GetFlatSiteDataKeyValueOnly
GET /api/AdrData/GetFlatSiteDataKeysSorted
GET /api/AdrData/GetViewKeyValues
GET /api/AdrData/assetMedias/{rowId}
GET /api/AdrData/get
GET /api/AdrData/getAssetDataForReport/{reportType}
GET /api/AdrData/getAssetKeyColumns/{levelNumber}/{fullName}
GET /api/AdrData/getValuesByLayoutName/{name}
GET /api/Cache/get
GET /api/Events/GetAllEvents
GET /api/Events/get
GET /api/Hello
GET /api/Hello/testdata/{pageNum}/{itemsPerPage}
GET /api/Hello/testdata2
GET /api/Hello/testdata2/{pageNum}/{itemsPerPage}
GET /api/Notification
GET /api/PdfViewer
GET /api/PdfViewer/GetPdfStream
GET /api/Version
POST /api/AdrData/ChildAssetByParent
POST /api/AdrData/ChildAssetByParentWithFirstLevelData
POST /api/AdrData/GetAllFlatSiteRowWithoutColumns
POST /api/AdrData/GetAssetLevelDataByColumns
POST /api/AdrData/GetAssetUniqueValuesByColumnNames
POST /api/AdrData/GetAssetValuesByRowIdWithParentChildren
POST /api/AdrData/GetAssetsByIds
POST /api/AdrData/GetAssetsByIdsWithChildren
POST /api/AdrData/GetAssetsDefaultMedia
POST /api/AdrData/GetConfigColumnsByColumnIds
POST /api/AdrData/GetConfigDefaultValues
POST /api/AdrData/GetFlatSiteRowWithoutColumns
POST /api/AdrData/GetLookupFieldValueByLookupIds
POST /api/AdrData/SendMessageNotification
POST /api/AdrData/dataSource
POST /api/AdrData/getLookupColumns
POST /api/Cache/ClearCache
POST /api/DocumentEditor/Import
POST /api/Events/GetEventsByIds
POST /api/PdfViewer/Load
POST /api/PdfViewer/LoadFile
POST /api/Spreadsheet/Open

Found on 2026-02-02 00:38

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: dts-api.alpa.org
Port: 443
URL: https://dts-api.alpa.org

First seen 2025-12-27 08:38
Last seen 2026-02-01 22:17
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493b4e12a2877de10b5daa88fae77dc636309a91af
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/dtsapi/GetAssignedWorkerDropdownData
GET /api/dtsapi/GetContractDropdownData
GET /api/dtsapi/{id}
PATCH /api/dtsapi/UpdateDTSTicket
POST /api/dtsapi/CreateDTSTicket
```
  Found on 2026-02-01 22:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: dalrotationapi.alpa.org
Port: 443
URL: https://dalrotationapi.alpa.org

First seen 2025-12-27 08:16
Last seen 2026-01-23 05:45
Open for 26 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354987dfdadee9c4c76f3f013a97c3df398dd6688f6d
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /FileDetail/GetMPIRPHExtracted
GET /FileDetail/SearchMPIRPHExtractedData
GET /GetMPISection
GET /GetRPHSection
GET /MPIUnstructuredSectionById
GET /RPHUnstructuredSectionById
POST /User/login
```
  Found on 2026-01-23 05:45
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: tst-admin-analytics.tymetrix360.com
Port: 443
URL: https://tst-admin-analytics.tymetrix360.com

First seen 2025-12-27 23:59
Last seen 2026-01-23 00:21
Open for 26 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354961bf092eed178b3f551ca9ab4d647e0fda4c6c4a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /groups/{groupId}
DELETE /tenant/{tenantId}/unassign
DELETE /tenants/{tenantId}/pbiUsers/{userIdentifier}
DELETE /users/assets/{assetId}/users/{userId}
DELETE /users/{userId}/roles/revoke
GET /
GET /branding
GET /capacities
GET /capacities/skus
GET /configuration
GET /folders
GET /groups/{groupId}/assets
GET /groups/{groupId}/users
GET /resourceGroupCapacities/Embed
GET /resourceGroupCapacities/Fabric
GET /roles
GET /stagedUsers
GET /tenants
GET /tenants/onboard/available
GET /tenants/{tenantId}
GET /tenants/{tenantId}/access/users
GET /tenants/{tenantId}/assets
GET /tenants/{tenantId}/bind
GET /tenants/{tenantId}/groups
GET /tenants/{tenantId}/groups/{groupId}
GET /tenants/{tenantId}/onboard/name/{tenantName}/availability
GET /tenants/{tenantId}/onboard/users/details
GET /tenants/{tenantId}/pbiUsers
GET /tenants/{tenantId}/reports/{reportId}/bind
GET /tenants/{tenantId}/roles
GET /tenants/{tenantId}/update/name/{tenantName}/availability
GET /tenants/{tenantId}/users
GET /themes
GET /themes/{themeId}
GET /users
GET /users/{userId}
PATCH /capacities/updateCapacity
PATCH /tenants/{tenantId}/groups/{groupId}/assets/{assetId}
PATCH /tenants/{tenantId}/themes/default
POST /capacities/pauseCapacity
POST /capacities/startCapacity
POST /cleanup
POST /tenant/{tenantId}/assign/{capacityId}
POST /tenants/onboard
POST /tenants/refreshCapacities
POST /tenants/reports/{reportId}/reportTemplate
POST /tenants/{tenantId}/access/users/bulk-update
POST /tenants/{tenantId}/groups/{groupId}/assets
POST /tenants/{tenantId}/groups/{groupId}/users
POST /tenants/{tenantId}/refresh/{datasetId}
POST /tenants/{tenantId}/refreshAssets
POST /tenants/{tenantId}/refreshCapacity
POST /tenants/{tenantId}/themes/assign
POST /tenants/{tenantId}/themes/unassign
POST /tenants/{tenantId}/users/onboard
POST /tenants/{tenantId}/users/{userId}/roles
POST /themes/{themeId}/duplicate
POST /trace
POST /users/{userId}/roles/assign
PUT /reset
PUT /roles/{roleId}
PUT /stagedUsers/{userId}
PUT /tenants/{tenantId}/networkRedirectURL
PUT /users/assets/userId/{userId}

Found on 2026-01-23 00:21

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354961bf092eed178b3f551ca9ab4d647e0fe4d2dcb2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /groups/{groupId}
DELETE /tenant/{tenantId}/unassign
DELETE /tenants/{tenantId}/pbiUsers/{userIdentifier}
DELETE /users/assets/{assetId}/users/{userId}
DELETE /users/{userId}/roles/revoke
GET /
GET /branding
GET /capacities
GET /capacities/skus
GET /configuration
GET /folders
GET /groups/{groupId}/assets
GET /groups/{groupId}/users
GET /resourceGroupCapacities/Embed
GET /resourceGroupCapacities/Fabric
GET /roles
GET /stagedUsers
GET /tenants
GET /tenants/onboard/available
GET /tenants/{tenantId}
GET /tenants/{tenantId}/access/users
GET /tenants/{tenantId}/assets
GET /tenants/{tenantId}/bind
GET /tenants/{tenantId}/groups
GET /tenants/{tenantId}/groups/{groupId}
GET /tenants/{tenantId}/onboard/name/{tenantName}/availability
GET /tenants/{tenantId}/onboard/users/details
GET /tenants/{tenantId}/pbiUsers
GET /tenants/{tenantId}/reports/{reportId}/bind
GET /tenants/{tenantId}/roles
GET /tenants/{tenantId}/update/name/{tenantName}/availability
GET /tenants/{tenantId}/users
GET /themes
GET /themes/{themeId}
GET /users
GET /users/{userId}
PATCH /capacities/updateCapacity
PATCH /tenants/{tenantId}/groups/{groupId}/assets/{assetId}
PATCH /tenants/{tenantId}/themes/default
POST /capacities/pauseCapacity
POST /capacities/startCapacity
POST /cleanup
POST /tenant/{tenantId}/assign/{capacityId}
POST /tenants/onboard
POST /tenants/refreshCapacities
POST /tenants/reports/{reportId}/reportTemplate
POST /tenants/{tenantId}/groups/{groupId}/assets
POST /tenants/{tenantId}/groups/{groupId}/users
POST /tenants/{tenantId}/refresh/{datasetId}
POST /tenants/{tenantId}/refreshAssets
POST /tenants/{tenantId}/refreshCapacity
POST /tenants/{tenantId}/themes/assign
POST /tenants/{tenantId}/themes/unassign
POST /tenants/{tenantId}/users/onboard
POST /tenants/{tenantId}/users/{userId}/roles
POST /themes/{themeId}/duplicate
POST /trace
POST /users/{userId}/roles/assign
PUT /reset
PUT /roles/{roleId}
PUT /stagedUsers/{userId}
PUT /users/assets/userId/{userId}

Found on 2026-01-16 04:24

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354961bf092eed178b3f551ca9ab4d647e0f59f3de9e

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /groups/{groupId}
DELETE /tenant/{tenantId}/unassign
DELETE /tenants/{tenantId}/pbiUsers/{userIdentifier}
DELETE /users/assets/{assetId}/users/{userId}
DELETE /users/{userId}/roles/revoke
GET /
GET /branding
GET /capacities
GET /capacities/skus
GET /configuration
GET /folders
GET /groups/{groupId}/assets
GET /groups/{groupId}/users
GET /resourceGroupCapacities/Embed
GET /resourceGroupCapacities/Fabric
GET /roles
GET /stagedUsers
GET /tenants
GET /tenants/onboard/available
GET /tenants/{tenantId}
GET /tenants/{tenantId}/assets
GET /tenants/{tenantId}/bind
GET /tenants/{tenantId}/groups
GET /tenants/{tenantId}/groups/{groupId}
GET /tenants/{tenantId}/onboard/name/{tenantName}/availability
GET /tenants/{tenantId}/onboard/users/details
GET /tenants/{tenantId}/pbiUsers
GET /tenants/{tenantId}/reports/{reportId}/bind
GET /tenants/{tenantId}/roles
GET /tenants/{tenantId}/update/name/{tenantName}/availability
GET /tenants/{tenantId}/users
GET /themes
GET /themes/{themeId}
GET /users
GET /users/{userId}
PATCH /capacities/updateCapacity
PATCH /tenants/{tenantId}/groups/{groupId}/assets/{assetId}
PATCH /tenants/{tenantId}/themes/default
POST /capacities/pauseCapacity
POST /capacities/startCapacity
POST /cleanup
POST /tenant/{tenantId}/assign/{capacityId}
POST /tenants/onboard
POST /tenants/refreshCapacities
POST /tenants/reports/{reportId}/reportTemplate
POST /tenants/{tenantId}/groups/{groupId}/assets
POST /tenants/{tenantId}/groups/{groupId}/users
POST /tenants/{tenantId}/refresh/{datasetId}
POST /tenants/{tenantId}/refreshAssets
POST /tenants/{tenantId}/refreshCapacity
POST /tenants/{tenantId}/themes/assign
POST /tenants/{tenantId}/themes/unassign
POST /tenants/{tenantId}/users/onboard
POST /tenants/{tenantId}/users/{userId}/roles
POST /themes/{themeId}/duplicate
POST /trace
POST /users/{userId}/roles/assign
PUT /reset
PUT /roles/{roleId}
PUT /stagedUsers/{userId}
PUT /users/assets/userId/{userId}

Found on 2026-01-02 01:48

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: quote.ebeweb.com.mx
Port: 443
URL: https://quote.ebeweb.com.mx

First seen 2026-01-12 01:16
Last seen 2026-01-22 21:35
Open for 10 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d602d296e96f2bcd836cdb4a964d89e06fa7acfa37b

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/Activity/GetProductClassByCodeServicesAndDestiny
GET /api/Activity/GetZonesServiceByCompany
GET /api/Flight/GetAvailability
GET /api/Flight/GetAvailabilityHotelFlight
GET /api/Hotel/GetAvailability
GET /api/Hotel/GetAvailabilityHotelFlight
GET /api/Packages/GetAllSearchDataResponse
GET /api/Packages/GetAutocompleteZonesByComp
GET /api/Packages/GetAvailability
GET /api/Packages/GetAvailabilitySingle
GET /api/Packages/GetBasicSearchData
GET /api/Packages/GetDaysToInitQuote
GET /api/Packages/GetDepartureDatesDurPackageOrDes
GET /api/Packages/GetFeauredPackages
GET /api/Packages/GetFinalCost
GET /api/Packages/GetOriginZonesPackagesByJunDestination
GET /api/Packages/GetPackageChange
GET /api/Packages/GetParticipantTypesByOrDes
GET /api/Packages/GetParticipantTypesByProdClass
GET /api/Packages/ValidateCompanyPromotionCode
GET /api/Transfer/GetAllDestinations
GET /api/Transfer/GetAllOrigins
GET /api/Transfer/GetAvailability
POST /api/HotelFlight/GetAvailability
POST /api/Packages/GetCircuitEbeSimulator
POST /api/Packages/GetListServicesByPackage
POST /api/Packages/GetPackageChangeToUrlString
POST /api/Packages/GetPackageServicesChange

Found on 2026-01-22 21:35

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: mobile-messaging-api-dev.clickdimensions.com
Port: 80
URL: http://mobile-messaging-api-dev.clickdimensions.com

First seen 2026-01-11 12:39
Last seen 2026-01-22 21:31
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb43615b1331489b4513d84e4b140b67f510511cf2f
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /connectors
GET /connectors/healthCheck
GET /connectors/healthErrors/{connectorId}
GET /phoneformatter/{phonenumber}/{countryshortCode?}
POST /GetAccountPhoneNumbers
POST /GetAccountPhoneNumbers/{connectorId}
POST /bulksms/{connectorId}/response
POST /bulksms/{connectorId}/statuscallbackresponse
POST /connector
POST /messagemedia/{connectorId}/response
POST /messagemedia/{connectorId}/{recipientId}/{crmMessageId}/statuscallbackresponse
POST /twilio/{connectorId}/response
POST /twilio/{connectorId}/{recipientId}/{crmMessageId}/statuscallbackresponse
```
  Found on 2026-01-22 21:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: rbws.inform.oceaneering.com
Port: 443
URL: https://rbws.inform.oceaneering.com

First seen 2026-01-03 08:43
Last seen 2026-01-22 21:30
Open for 19 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354948684d13c5e882d5a9316a65f6109149c02017c6
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GraphQL
GET /HealthCheck/health
GET /api/Hello
GET /api/Hello/testdata/{pageNum}/{itemsPerPage}
GET /api/Hello/testdata2
GET /api/Hello/testdata2/{pageNum}/{itemsPerPage}
GET /api/Notification
GET /api/RbiData/CheckTriggerColumn
GET /api/Version
GET /api/inspplan/GetColumnsForInputResults
GET /api/inspplan/GetLegend
POST /api/Cache/ClearCache
POST /api/inspplan/GetValuesForColumnsFromParent
```
  Found on 2026-01-22 21:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: supplyapi.sampleeye.com
Port: 443
URL: https://supplyapi.sampleeye.com

First seen 2026-01-12 13:28
Last seen 2026-01-16 17:25
Open for 4 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549b1c60cee4fe856526732166710d5c433b6d565b7
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/QualificationMapping/{supplierCode}/{languageCode}
GET /api/Survey/{supplierCode}
GET /api/SurveyGroup/{supplierCode}/{surveyId}
GET /api/SurveyQualifications/{supplierCode}/{surveyId}
GET /api/SurveyQuota/{supplierCode}/{surveyId}
```
  Found on 2026-01-16 17:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: app.greenlight.life
Port: 443
URL: https://app.greenlight.life

First seen 2025-12-08 06:29
Last seen 2026-01-16 14:22
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 14:22
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: stage-app.greenlight.life
Port: 443
URL: https://stage-app.greenlight.life

First seen 2025-12-08 06:28
Last seen 2026-01-16 14:21
Open for 39 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 14:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: api.haulerhub.com
Port: 443
URL: https://api.haulerhub.com

First seen 2025-12-18 01:05
Last seen 2026-01-16 09:17
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 09:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.0.26
Domain: mobile-messaging-api-dev.clickdimensions.com
Port: 443
URL: https://mobile-messaging-api-dev.clickdimensions.com

First seen 2026-01-11 12:39
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb43615b1331489b4513d84e4b140b67f510511cf2f
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /connectors
GET /connectors/healthCheck
GET /connectors/healthErrors/{connectorId}
GET /phoneformatter/{phonenumber}/{countryshortCode?}
POST /GetAccountPhoneNumbers
POST /GetAccountPhoneNumbers/{connectorId}
POST /bulksms/{connectorId}/response
POST /bulksms/{connectorId}/statuscallbackresponse
POST /connector
POST /messagemedia/{connectorId}/response
POST /messagemedia/{connectorId}/{recipientId}/{crmMessageId}/statuscallbackresponse
POST /twilio/{connectorId}/response
POST /twilio/{connectorId}/{recipientId}/{crmMessageId}/statuscallbackresponse
```
  Found on 2026-01-11 12:39
Create report

Open service 20.119.0.26:80 · tours.mcordovamedia.com

2026-02-06 21:38

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Fri, 06 Feb 2026 21:38:37 GMT
Location: https://tours.mcordovamedia.com/

Found 2026-02-06 by HttpPlugin