LeakIX - Host 20.74.192.2

Host 20.74.192.2

United Arab Emirates

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.progress-tracker.ae.uat.mkmapps.com
Port: 443
URL: https://odin.progress-tracker.ae.uat.mkmapps.com

First seen 2025-12-28 18:02
Last seen 2026-02-09 18:12
Open for 43 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491d2d030cc1966a1363aa46cc9fdc422ba33ba401

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/DeleteAssignment/{id}
GET /api/Assignment
GET /api/Assignment/{id}
GET /api/AssignmentDeployedToUser
GET /api/AssignmentDeployedToUser/ids
GET /api/AssignmentDeployedToUser/{assignmentId}/deployedAssignments/{id}
GET /api/AssignmentDeployedToUser/{assignmentId}/deployedAssignments/{id}/permissions
GET /api/EditAssignment
GET /api/Permissions/{id}
GET /api/Rubrics/branch/{branchId}/gradingscheme/{gradingSchemeId}
GET /api/Rubrics/id/{id}
GET /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/downloadcertificate
GET /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/downloadexport
GET /api/deployedAssignment/DeploymentForMe
GET /api/deployedAssignment/DeploymentForMe/default
GET /api/deployedAssignment/DeploymentForMe/user
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}/comments
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}/comments/{whatForDetailId}
GET /api/deployedAssignment/DeploymentForOthers
GET /api/deployedAssignment/DeploymentForOthers/user/{whoForId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/all
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/all/{groupId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/comments/{whatForDetailId}/{whoForId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/comments/{whoForId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/user/{whoForId}
GET /api/deployedAssignment/EvidenceForMe/evidenceSourceId/{evidenceSourceId}/unlocked
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}/comments
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}/detail
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/summary
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/{whatForDetailId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary/ids
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary/{whoForId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/who/{whoForId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/who/{whoForId}/evidence/{evidenceId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/who/{whoForId}/evidence/{evidenceId}/comments
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/{whatForDetailId}/who/{whoForId}
GET /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}
GET /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}/{detailId}
GET /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/who/{whoForId}
GET /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{detailId}/who/{whoForId}
POST /api/ArchiveAssignment/{id}/archive
POST /api/ArchiveAssignment/{id}/unarchive
POST /api/ArchiveAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/archive
POST /api/ArchiveAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/unarchive
POST /api/CreateAssignment
POST /api/CreateAssignmentDeployedToUser/{assignmentId}
POST /api/EditAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/sample
POST /api/Rubrics
POST /api/Rubrics/branchIds/gradingScheme
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/addaccess/many
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/removeaccess/many
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/completed
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/export
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/exportcompleted
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/notcompleted
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/status
POST /api/deployedAssignment/EvidenceForOther/source/who/{userId}
POST /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}/{markId}/retract
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/accept/who/{whoForId}
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/reject/who/{whoForId}
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/retract/who/{whoForId}
PUT /api/AssignmentDeployedToUser/addReadAccess/{id}
PUT /api/AssignmentDeployedToUser/removeReadAccess/{id}
PUT /api/EditAssignment/{assignmentId}
PUT /api/EditAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}
PUT /api/Permissions/{assignmentId}
PUT /api/PublishAssignment/{assignmentId}
PUT /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}/cache/clear
PUT /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/cache/clear/{whoForId}
PUT /api/deployedAssignment/EvidenceForMe/{assignmentId}/{branchId}/evidence

Found on 2026-02-09 18:12

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: forms.ae.uat.mkmapps.com
Port: 443
URL: https://forms.ae.uat.mkmapps.com

First seen 2025-12-28 17:52
Last seen 2026-02-09 17:37
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 17:37
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: progress-tracker.ae.uat.mkmapps.com
Port: 443
URL: https://progress-tracker.ae.uat.mkmapps.com

First seen 2025-12-28 18:29
Last seen 2026-02-09 15:17
Open for 42 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491d2d030cc1966a1363aa46cc9fdc422b145dbf82

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/DeleteAssignment/{id}
GET /api/Assignment
GET /api/Assignment/{id}
GET /api/AssignmentDeployedToUser
GET /api/AssignmentDeployedToUser/ids
GET /api/AssignmentDeployedToUser/{assignmentId}/deployedAssignments/{id}
GET /api/AssignmentDeployedToUser/{assignmentId}/deployedAssignments/{id}/permissions
GET /api/EditAssignment
GET /api/Permissions/{id}
GET /api/Rubrics/branch/{branchId}/gradingscheme/{gradingSchemeId}
GET /api/Rubrics/id/{id}
GET /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/downloadexport
GET /api/deployedAssignment/DeploymentForMe
GET /api/deployedAssignment/DeploymentForMe/default
GET /api/deployedAssignment/DeploymentForMe/user
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}/comments
GET /api/deployedAssignment/DeploymentForMe/{assignmentDeployedToUserId}/comments/{whatForDetailId}
GET /api/deployedAssignment/DeploymentForOthers
GET /api/deployedAssignment/DeploymentForOthers/user/{whoId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/all
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/all/{groupId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/comments/{whatForDetailId}/{whoId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/comments/{whoId}
GET /api/deployedAssignment/DeploymentForOthers/{assignmentDeployedToUserId}/user/{whoId}
GET /api/deployedAssignment/EvidenceForMe/evidenceSourceId/{evidenceSourceId}/unlocked
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}/comments
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/evidence/{evidenceId}/detail
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/summary
GET /api/deployedAssignment/EvidenceForMe/{assignmentId}/{whatForDetailId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/evidence/{evidenceId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/evidence/{evidenceId}/comments
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/evidence/{evidenceId}/detail
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary/ids
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/summary/{whoForId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/who/{whoId}
GET /api/deployedAssignment/EvidenceForOther/{assignmentId}/{whatForDetailId}/who/{whoId}
GET /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}
GET /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}/{detailId}
GET /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/who/{whoId}
GET /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{detailId}/who/{whoId}
POST /api/ArchiveAssignment/{id}/archive
POST /api/ArchiveAssignment/{id}/unarchive
POST /api/ArchiveAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/archive
POST /api/ArchiveAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/unarchive
POST /api/CreateAssignment
POST /api/CreateAssignmentDeployedToUser/{assignmentId}
POST /api/EditAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}/sample
POST /api/Rubrics
POST /api/Rubrics/branchIds/gradingScheme
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/addaccess/many
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/removeaccess/many
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/completed
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/export
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/exportcompleted
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/notcompleted
POST /api/admin/AssignmentDeployedToUserAdmin/{assignmentDeployedToUserId}/user/{userId}/status
POST /api/deployedAssignment/EvidenceForOther/source/who/{userId}
POST /api/deployedAssignment/EvidenceForOther/{assignmentId}
POST /api/deployedAssignment/MarkForMe/{assignmentDeployedToUserId}/{markId}/retract
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/accept/who/{whoId}
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/reject/who/{whoId}
POST /api/deployedAssignment/MarkForOther/{assignmentDeployedToUserId}/{markId}/retract/who/{whoId}
PUT /api/AssignmentDeployedToUser/addReadAccess/{id}
PUT /api/AssignmentDeployedToUser/removeReadAccess/{id}
PUT /api/EditAssignment/{assignmentId}
PUT /api/EditAssignmentDeployedToUser/{assignmentId}/deployedAssignments/{deployedAssignmentId}
PUT /api/Permissions/{assignmentId}
PUT /api/PublishAssignment/{assignmentId}
PUT /api/deployedAssignment/EvidenceForMe/{assignmentId}/{branchId}/evidence

Found on 2026-02-09 15:17

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.mkmapi.ae.uat.mkmapps.com
Port: 443
URL: https://odin.mkmapi.ae.uat.mkmapps.com

First seen 2025-12-28 17:59
Last seen 2026-02-09 15:16
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60217677447f0ec0a3d7d6e4a0d7d6e4a0d7d6e4a0
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /outputcache/{region}
GET /configuration
GET /identity
```
  Found on 2026-02-09 15:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: mkmapi.ae.uat.mkmapps.com
Port: 443
URL: https://mkmapi.ae.uat.mkmapps.com

First seen 2025-12-28 17:53
Last seen 2026-02-09 15:15
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60217677447f0ec0a3d7d6e4a0d7d6e4a0d7d6e4a0
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /outputcache/{region}
GET /configuration
GET /identity
```
  Found on 2026-02-09 15:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: apigateway.ae.uat.mkmapps.com
Port: 443
URL: https://apigateway.ae.uat.mkmapps.com

First seen 2025-12-28 18:50
Last seen 2026-02-09 13:55
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354982b0e721ccca0a3eccca0a3eccca0a3eccca0a3e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /outputcache/{region}
GET /configuration
```
  Found on 2026-02-09 13:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.apigateway.ae.uat.mkmapps.com
Port: 443
URL: https://odin.apigateway.ae.uat.mkmapps.com

First seen 2025-12-28 18:45
Last seen 2026-02-02 04:39
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354982b0e721ccca0a3eccca0a3eccca0a3eccca0a3e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /outputcache/{region}
GET /configuration
```
  Found on 2026-02-02 04:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.tenant.ae.uat.mkmapps.com
Port: 443
URL: https://odin.tenant.ae.uat.mkmapps.com

First seen 2025-12-28 18:13
Last seen 2026-02-02 04:38
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 04:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: resources.ae.uat.mkmapps.com
Port: 443
URL: https://resources.ae.uat.mkmapps.com

First seen 2025-12-28 17:52
Last seen 2026-01-23 12:16
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035490e6450e62ac3b9cdd32f84407b1222b57b1222b5
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/FileResources/{id}
GET /api/UrlResource/{id}
POST /api/FileResources
POST /api/UrlResource
```
  Found on 2026-01-23 12:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.placements-service.ae.uat.mkmapps.com
Port: 443
URL: https://odin.placements-service.ae.uat.mkmapps.com

First seen 2025-12-28 17:56
Last seen 2026-01-23 12:16
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 12:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.odata-reporting.ae.uat.mkmapps.com
Port: 443
URL: https://odin.odata-reporting.ae.uat.mkmapps.com

First seen 2025-12-28 18:14
Last seen 2026-01-23 05:23
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 05:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.frameworks-management.ae.uat.mkmapps.com
Port: 443
URL: https://odin.frameworks-management.ae.uat.mkmapps.com

First seen 2025-12-28 18:50
Last seen 2026-01-16 16:36
Open for 18 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035494a1583394a1583394a1583394a1583394a158339
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/ExportFramework/{frameworkId}
```
  Found on 2026-01-16 16:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: odin.published-frameworks.ae.uat.mkmapps.com
Port: 443
URL: https://odin.published-frameworks.ae.uat.mkmapps.com

First seen 2025-12-28 17:56
Last seen 2026-01-16 11:58
Open for 18 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354987a7829d86ffefdd69116664f2faf42278773ab8
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/InternalPublishedFrameworks
GET /api/InternalPublishedFrameworks/{id}
GET /api/InternalPublishedFrameworks/{id}/branches
GET /api/InternalPublishedFrameworks/{id}/branches/sample/{count}
GET /api/Ping
GET /api/PublishedFrameworks
GET /api/PublishedFrameworks/type/{type}
GET /api/PublishedFrameworks/{id}
GET /api/PublishedFrameworks/{id}/public
POST /api/ArchivePublishedFrameworks/{id}/archive
POST /api/ArchivePublishedFrameworks/{id}/unarchive
POST /api/PublishedFrameworks/branchdetails/simple
```
  Found on 2026-01-16 11:58
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.74.192.2
Domain: tenant.ae.uat.mkmapps.com
Port: 443
URL: https://tenant.ae.uat.mkmapps.com

First seen 2025-12-28 18:13
Last seen 2026-01-16 06:12
Open for 18 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 06:12
Create report

Open service 20.74.192.2:80 · uae.solaborate.com

2026-01-25 03:54

HTTP/1.1 404 Site Not Found
Content-Length: 2667
Connection: close
Content-Type: text/html
Date: Sun, 25 Jan 2026 03:54:55 GMT

Page title: Microsoft Azure Web App - Error 404

<!DOCTYPE html>
<html>
<head>
    <title>Microsoft Azure Web App - Error 404</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 75px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        a, a:visited, a:active, a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
    <script type="text/javascript">
        function toggle_visibility(id) {
            var e = document.getElementById(id);
            if (e.style.display == 'block')
                e.style.display = 'none';
            else
                e.style.display = 'block';
        }
    </script>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1>404 Web Site not found.</h1>
            <p>You may be seeing this error due to one of the reasons listed below :</p>
            <ul>
                <li>Custom domain has not been configured inside Azure. See <a href="https://go.microsoft.com/fwlink/?linkid=2194614">how to map an existing domain</a> to resolve this.</li>
                <li>Client cache is still pointing the domain to old IP address. Clear the cache by running the command <i>ipconfig/flushdns.</i></li>
            </ul>
            <p>Checkout <a href="https://go.microsoft.com/fwlink/?linkid=2194451">App Service Domain FAQ</a> for more questions.</p>
        </div>
     </div>
</body>
</html>

Found 2026-01-25 by HttpPlugin