LeakIX - Host 20.50.2.9

Host 20.50.2.9

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.9
Domain: printing.suitapi.com
Port: 443
URL: https://printing.suitapi.com

First seen 2025-11-13 00:49
Last seen 2026-01-09 23:54
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4433acc7bf4ad1cc5fbc78c4718ea5d0518ea5d05
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /GetOrderDetails
GET /GetOrders
GET /GetPrinters
POST /SearchCustomers
```
  Found on 2026-01-09 23:54
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.9
Domain: 2160063.pmcrm.nl
Port: 443
URL: https://2160063.pmcrm.nl

First seen 2025-12-09 09:15
Last seen 2026-01-09 19:32
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549f6031dfa60803b0b46181177ab09c4f605c045fb

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /_api/web-hook-subscriptions/{webHookSubscriptionId}/delete
GET /_api/accounts
GET /_api/accounts/{accountId}
GET /_api/accounts/{accountId}/addresses
GET /_api/accounts/{accountId}/addresses/{accountAddressId}
GET /_api/accounts/{accountId}/contacts
GET /_api/accounts/{accountId}/contacts/{contactId}
GET /_api/activities/{subjectType}/{subjectId}
GET /_api/activities/{subjectType}/{subjectId}/{activityId}
GET /_api/attachments/{subjectType}/{subjectId}
GET /_api/attachments/{subjectType}/{subjectId}/{attachmentId}
GET /_api/data-service/extended-activity-hierarchy-by-activity-id
GET /_api/data-service/extended-participant-activity-hierarchy
GET /_api/data-service/subject-labels/{subjectType}
GET /_api/external-resources/{subjectType}/{subjectId}
GET /_api/external-resources/{subjectType}/{subjectId}/{externalResourceId}
GET /_api/labels
GET /_api/labels/{labelId}
GET /_api/labels/{subjectType}/{subjectId}
GET /_api/labels/{subjectType}/{subjectId}/{resourceLabelId}
GET /_api/notes/{subjectType}/{subjectId}
GET /_api/notes/{subjectType}/{subjectId}/{noteId}
GET /_api/salutations
GET /_api/salutations/{salutationId}
GET /_api/search
GET /_api/search/accounts
GET /_api/search/activities
GET /_api/search/contacts
GET /_api/search/notes
GET /_api/users
GET /_api/users/account-owners
GET /_api/users/{userId}
GET /_api/web-hook-subscriptions
GET /_api/web-hook-subscriptions/{webHookSubscriptionId}

Found on 2026-01-09 19:32

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-09 09:15

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.9
Domain: 2160052.pmcrm.nl
Port: 443
URL: https://2160052.pmcrm.nl

First seen 2025-12-09 09:27
Last seen 2026-01-09 18:17
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-09 18:17

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b21d144b8a081880655d9d154c0ed40d0a9324c7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /_api/accounts/{accountId}/permissions/{accountPermissionId}/delete
DELETE /_api/web-hook-subscriptions/{webHookSubscriptionId}/delete
GET /_api/accounts
GET /_api/accounts/{accountId}
GET /_api/accounts/{accountId}/addresses
GET /_api/accounts/{accountId}/addresses/{accountAddressId}
GET /_api/accounts/{accountId}/contacts
GET /_api/accounts/{accountId}/contacts/{contactId}
GET /_api/accounts/{accountId}/permissions
GET /_api/accounts/{accountId}/permissions/{accountPermissionId}
GET /_api/activities/{subjectType}/{subjectId}
GET /_api/activities/{subjectType}/{subjectId}/{activityId}
GET /_api/attachments/{subjectType}/{subjectId}
GET /_api/attachments/{subjectType}/{subjectId}/{attachmentId}
GET /_api/data-service/extended-activity-hierarchy-by-activity-id
GET /_api/data-service/extended-participant-activity-hierarchy
GET /_api/data-service/subject-labels/{subjectType}
GET /_api/external-resources/{subjectType}/{subjectId}
GET /_api/external-resources/{subjectType}/{subjectId}/{externalResourceId}
GET /_api/labels
GET /_api/labels/{labelId}
GET /_api/labels/{subjectType}/{subjectId}
GET /_api/labels/{subjectType}/{subjectId}/{resourceLabelId}
GET /_api/masterdata/actions
GET /_api/masterdata/actions/{taskActivityActionId}
GET /_api/masterdata/departments
GET /_api/masterdata/departments/{contactDepartmentId}
GET /_api/masterdata/legalforms
GET /_api/masterdata/legalforms/{legalFormId}
GET /_api/masterdata/positions
GET /_api/masterdata/positions/{contactPositionId}
GET /_api/masterdata/relations
GET /_api/masterdata/relations/{personsRelationTypeId}
GET /_api/masterdata/salutations
GET /_api/masterdata/salutations/{salutationId}
GET /_api/masterdata/titlesafter
GET /_api/masterdata/titlesafter/{titlesAfterId}
GET /_api/masterdata/titlesbefore
GET /_api/masterdata/titlesbefore/{titlesBeforeId}
GET /_api/masterdata/types
GET /_api/masterdata/types/{taskActivityTypeId}
GET /_api/notes/{subjectType}/{subjectId}
GET /_api/notes/{subjectType}/{subjectId}/{noteId}
GET /_api/persons
GET /_api/persons/{personId}
GET /_api/roles
GET /_api/roles/{roleId}
GET /_api/search
GET /_api/search/accounts
GET /_api/search/activities
GET /_api/search/contacts
GET /_api/search/notes
GET /_api/search/persons
GET /_api/users
GET /_api/users/account-owners
GET /_api/users/person-owners
GET /_api/users/{userId}
GET /_api/web-hook-subscriptions
GET /_api/web-hook-subscriptions/{webHookSubscriptionId}

Found on 2025-12-27 00:11

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.9
Domain: 2112004.pmcrm.nl
Port: 443
URL: https://2112004.pmcrm.nl

First seen 2025-12-02 05:36
Last seen 2026-01-09 14:34
Open for 38 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549b21d144b8a081880655d9d154c0ed40d0a9324c7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /_api/accounts/{accountId}/permissions/{accountPermissionId}/delete
DELETE /_api/web-hook-subscriptions/{webHookSubscriptionId}/delete
GET /_api/accounts
GET /_api/accounts/{accountId}
GET /_api/accounts/{accountId}/addresses
GET /_api/accounts/{accountId}/addresses/{accountAddressId}
GET /_api/accounts/{accountId}/contacts
GET /_api/accounts/{accountId}/contacts/{contactId}
GET /_api/accounts/{accountId}/permissions
GET /_api/accounts/{accountId}/permissions/{accountPermissionId}
GET /_api/activities/{subjectType}/{subjectId}
GET /_api/activities/{subjectType}/{subjectId}/{activityId}
GET /_api/attachments/{subjectType}/{subjectId}
GET /_api/attachments/{subjectType}/{subjectId}/{attachmentId}
GET /_api/data-service/extended-activity-hierarchy-by-activity-id
GET /_api/data-service/extended-participant-activity-hierarchy
GET /_api/data-service/subject-labels/{subjectType}
GET /_api/external-resources/{subjectType}/{subjectId}
GET /_api/external-resources/{subjectType}/{subjectId}/{externalResourceId}
GET /_api/labels
GET /_api/labels/{labelId}
GET /_api/labels/{subjectType}/{subjectId}
GET /_api/labels/{subjectType}/{subjectId}/{resourceLabelId}
GET /_api/masterdata/actions
GET /_api/masterdata/actions/{taskActivityActionId}
GET /_api/masterdata/departments
GET /_api/masterdata/departments/{contactDepartmentId}
GET /_api/masterdata/legalforms
GET /_api/masterdata/legalforms/{legalFormId}
GET /_api/masterdata/positions
GET /_api/masterdata/positions/{contactPositionId}
GET /_api/masterdata/relations
GET /_api/masterdata/relations/{personsRelationTypeId}
GET /_api/masterdata/salutations
GET /_api/masterdata/salutations/{salutationId}
GET /_api/masterdata/titlesafter
GET /_api/masterdata/titlesafter/{titlesAfterId}
GET /_api/masterdata/titlesbefore
GET /_api/masterdata/titlesbefore/{titlesBeforeId}
GET /_api/masterdata/types
GET /_api/masterdata/types/{taskActivityTypeId}
GET /_api/notes/{subjectType}/{subjectId}
GET /_api/notes/{subjectType}/{subjectId}/{noteId}
GET /_api/persons
GET /_api/persons/{personId}
GET /_api/roles
GET /_api/roles/{roleId}
GET /_api/search
GET /_api/search/accounts
GET /_api/search/activities
GET /_api/search/contacts
GET /_api/search/notes
GET /_api/search/persons
GET /_api/users
GET /_api/users/account-owners
GET /_api/users/person-owners
GET /_api/users/{userId}
GET /_api/web-hook-subscriptions
GET /_api/web-hook-subscriptions/{webHookSubscriptionId}

Found on 2026-01-09 14:34

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-30 14:29

Create report

Open service 20.50.2.9:443 · www.swedishneutral.se

2026-01-12 23:54

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Date: Mon, 12 Jan 2026 23:55:17 GMT
Server: Microsoft-IIS/10.0
Cache-Control: no-cache
Set-Cookie: ARRAffinity=18d16ff1e64c8118132bfe16669f4566f07f42f903a9501c97061da23b522b9d;Path=/;HttpOnly;Secure;Domain=www.swedishneutral.se
Set-Cookie: ARRAffinitySameSite=18d16ff1e64c8118132bfe16669f4566f07f42f903a9501c97061da23b522b9d;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.swedishneutral.se
Transfer-Encoding: chunked
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline'; connect-src https://www.swedishneutral.se 'self' wss://localhost:44386 ws://localhost:63622 http://localhost:63622; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://swn.blob.core.windows.net; frame-src 'self' https://www.youtube.com
X-Content-Type-Options: nosniff
X-Powered-By: ASP.NET

Page title: Swedish Neutral - HomeSwedish Neutral logotype

<!DOCTYPE html>
<html lang="en-us">
<head>
    <meta charset="utf-8">
    
    <title>Swedish Neutral - Home</title>
    <meta name="description" content="Develops, manufactures and markets systems for neutral treatment and earth fault protection" />

    <meta name="viewport" content="width=device-width" />
    <link rel="stylesheet" href="/sn.css?v=7uRaboO181h8xqdGx1Rpbj4LqVqkb3LUK6vM7VknS2k">
    <link rel="icon" href="/favicon.svg">
</head>

<body>
    <div class="outer">
        <header>
    <div class="header-container">
        <div class="logo-container">
            <a href="/">
                <svg viewBox="0 0 571 211">
                    <title>Swedish Neutral logotype</title>
                    <path d="M257.887 99.2034H255.025C248.656 99.2034 243.486 97.1734 239.795 93.5744C238.319 92.1884 237.118 90.6184 236.103 88.8664C235.733 88.3124 235.365 87.4804 236.287 86.9264L245.886 80.5574C246.532 80.0974 247.364 80.0974 247.732 80.8344C249.394 83.9734 251.701 85.6344 254.841 85.6344H257.701C260.563 85.6344 262.408 84.0644 262.408 81.3894C262.408 77.2354 257.795 76.6814 251.61 74.5574C241.732 71.1434 236.195 67.0824 236.195 56.8354C236.195 45.3904 243.856 38.5584 256.501 38.5584H257.887C263.887 38.5584 268.778 40.3124 272.378 43.4524C274.132 44.9284 275.609 46.7734 276.809 48.8054C277.178 49.3594 277.547 50.2814 276.623 50.8354L267.024 57.2044C266.378 57.6664 265.548 57.6664 265.179 56.9274C263.516 53.7894 261.209 52.1274 258.071 52.1274H256.501C253.733 52.1274 251.887 53.4214 251.887 56.3744C251.887 59.9744 257.517 61.2664 262.133 62.7424C272.932 66.1584 278.101 70.6824 278.101 81.0184C278.101 92.3714 270.902 99.2034 257.887 99.2034Z" class="gray" />
                    <path d="M334.622 97.2654C334.53 97.7274 334.254 98.0034 333.792 98.0034H322.899C322.439 98.0034 322.161 97.8194 322.069 97.3574L315.145 69.2964C314.592 67.0824 314.5 64.2204 314.5 64.2204H314.224C314.224 64.2204 314.132 67.1744 313.578 69.2964L306.839 97.3574C306.746 97.8194 306.471 98.0034 305.917 98.0034H295.115C294.747 98.0034 294.378 97.7274 294.285 97.2654L280.717 40.8664C280.533 40.2204 280.901 39.7584 281.547 39.7584H295.764C296.224 39.7584 296.501 40.0364 296.594 40.4984L301.393 68.4664C301.763 70.5894 301.854 73.9114 301.854 73.9114H302.131C302.131 73.9114 302.316 70.5894 302.777 68.4664L308.87 40.6824C308.962 40.2204 309.238 39.7584 309.884 39.7584H319.669C320.224 39.7584 320.594 40.0364 320.685 40.5904L326.039 68.3734C326.501 70.6824 326.501 73.9114 326.501 73.9114H326.776C326.776 73.9114 326.961 70.6824 327.331 68.3734L332.223 40.4984C332.314 40.0364 332.593 39.7584 333.055 39.7584H347.268C348.007 39.7584 348.283 40.2204 348.099 40.8664L334.622 97.2654Z" class="gray" />
                    <path d="M392.833 98.0037H354.435C353.973 98.0037 353.604 97.8197 353.604 97.0797V40.6827C353.604 39.9447 353.973 39.7587 354.435 39.7587H392.833C393.203 39.7587 393.757 39.9447 393.757 40.6827V52.4977C393.757 53.1437 393.388 53.3277 392.833 53.3277H370.127C369.296 53.3277 369.02 53.6967 369.02 54.3427V60.7127C369.02 61.3587 369.296 61.7287 370.127 61.7287H388.771C389.233 61.7287 389.695 61.9127 389.695 62.5587V74.4657C389.695 75.1117 389.233 75.2967 388.771 75.2967H370.127C369.296 75.2967 369.02 75.6657 369.02 76.3117V83.4187C369.02 84.0647 369.296 84.4347 370.127 84.4347H392.833C393.295 84.4347 393.757 84.6187 393.757 85.2647V97.0797C393.757 97.8197 393.388 98.0037 392.833 98.0037Z" class="gray" />
                    <path d="M431.559 57.2047C431.559 55.3587 429.437 53.3277 426.946 53.3277H416.884C416.052 53.3277 415.777 53.6967 415.777 54.3427V83.4187C415.777 84.0647 416.052 84.4347 416.884 84.4347H426.946C429.53 84.4347 431.559 82.5887 431.559 80.6507V57.2047ZM426.946 98.0037H401.192C400.73 98.0037 400.362 97.8197 400.362 97.0797V40.6827C400.362 39.9447 400.73 39.7587 401.192 39.7587H426.946C439.037 39.7587 446.79 46.6817 446.79 58.0347V79.9107C446.79 91.0797 439.037 98.0037 426.946 98.0037Z" class="gray" />
                    <path d="M468.533 98.0037H454.965C454.503 98.0037 454.135 97.8197 454.135 97.0797V40.6827C454.135 39.9447 454.503 3

Found 2 days ago by HttpPlugin