LeakIX - Host 23.50.131.150

Host 23.50.131.150

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: cert.bamse.pl
Port: 80
URL: http://cert.bamse.pl

First seen 2025-11-19 16:13
Last seen 2026-01-09 17:41
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 17:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: externaltags.volleyballworld.com
Port: 443
URL: https://externaltags.volleyballworld.com

First seen 2025-11-19 17:13
Last seen 2026-01-09 15:17
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 15:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: redis-api.volleyballworld.com
Port: 443
URL: https://redis-api.volleyballworld.com

First seen 2025-11-19 17:13
Last seen 2026-01-09 09:12
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493b3b7350a287b0f4226a29f6bd67c07fbd67c07f
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /api/Items/{key}
POST /api/Items
POST /api/Items/GetSet
```
  Found on 2026-01-09 09:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: www.mecode.com.tw
Port: 443
URL: https://www.mecode.com.tw

First seen 2025-10-23 23:44
Last seen 2026-01-08 22:21
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-08 22:21
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 23.50.131.150
Domain: containers.pretest.cloud.ibm.com
Port: 443
URL: https://containers.pretest.cloud.ibm.com

First seen 2025-11-16 06:49
Last seen 2026-01-02 18:30
Open for 47 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c5e705b28530dc429feaeacc8ce3f329ed3a53a8
```
GraphQL introspection enabled at /graphql
Types: 28 (by kind: ENUM: 1, INPUT_OBJECT: 3, INTERFACE: 2, OBJECT: 15, SCALAR: 7)
Operations:
- Query: Query | fields: globalSearchSatelliteConnectorAccounts, node, satelliteConnectors
- Mutation: Mutation | fields: createSatelliteConnector, removeSatelliteConnector, updateSatelliteLocation
Directives: defer, deprecated, ibm_internal_only, include, skip, specifiedBy (total: 6)
```
  Found on 2026-01-02 18:30
  
  21.0 kBytes
Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 23.50.131.150
Domain: old-admin.se1.eshop.b2b.prod.somfy.com
Port: 443
URL: https://old-admin.se1.eshop.b2b.prod.somfy.com

First seen 2025-11-20 15:15
Last seen 2026-01-02 13:04
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
Found on 2026-01-02 13:04
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-11 02:10

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3badd9242c5fa9e52586ecc04e7e6919c488e5c9e

GraphQL introspection enabled at /graphql
Types: 851 (by kind: ENUM: 77, INPUT_OBJECT: 223, INTERFACE: 34, OBJECT: 507, SCALAR: 5, UNION: 5)
Operations:
- Query: Query | fields: CheckFreeGiftList, adyenPaymentMethods, adyenPaymentStatus, attributesForm, attributesList
- Mutation: Mutation | fields: acceptCompanyInvitation, acceptNegotiableQuoteTemplate, activateCustomer, addBundleProductsToCart, addConfigurableProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-11-30 16:29

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2d6fb00bfe30ef60d8dff966594623997158013df

GraphQL introspection enabled at /graphql/api
Types: 851 (by kind: ENUM: 77, INPUT_OBJECT: 223, INTERFACE: 34, OBJECT: 507, SCALAR: 5, UNION: 5)
Operations:
- Query: Query | fields: CheckFreeGiftList, adyenPaymentMethods, adyenPaymentStatus, attributesForm, attributesList
- Mutation: Mutation | fields: acceptCompanyInvitation, acceptNegotiableQuoteTemplate, activateCustomer, addBundleProductsToCart, addConfigurableProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-11-20 15:15

1.2 MBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: goldenplains-api-uat.vmonline.com.au
Port: 443
URL: https://goldenplains-api-uat.vmonline.com.au

First seen 2025-12-04 20:07
Last seen 2026-01-02 03:14
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035496fec35e198c771c7063b67d4e68a0001fbf72084
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /BuildingPermit
POST /Land
POST /Lease
POST /Owners
POST /PlanningPermit
POST /Properties
POST /Sales
POST /SouthAustraliaProperties
POST /Token
POST /Valuation
```
  Found on 2026-01-02 03:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: cert.bamse.pl
Port: 443
URL: https://cert.bamse.pl

First seen 2025-11-19 16:13
Last seen 2025-12-26 16:57
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-26 16:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.150
Domain: qa-public-swoopyrevolution.discovery.com
Port: 443
URL: https://qa-public-swoopyrevolution.discovery.com

First seen 2025-11-15 20:54
Last seen 2025-12-02 01:13
Open for 16 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549048b72f3048b72f3048b72f3048b72f3048b72f3
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /appian
```
  Found on 2025-12-02 01:13
Create report

Open service 23.50.131.150:443 · containers.pretest.cloud.ibm.com

2026-01-10 01:08

HTTP/1.1 301 Moved Permanently
Location: https://containers.pretest.cloud.ibm.com/global/v1/build
Content-Length: 0
Expires: Sat, 10 Jan 2026 01:08:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 01:08:55 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=114
Server-Timing: origin; dur=3
Server-Timing: ak_p; desc="1768007335431_389224212_317154113_11677_982_166_168_-";dur=1

Found 2026-01-10 by HttpPlugin

Create report

Open service 23.50.131.150:443 · goldenplains-api-uat.vmonline.com.au

2026-01-09 19:22

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Content-Length: 162
Expires: Fri, 09 Jan 2026 19:22:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 19:22:42 GMT
Connection: close
Alt-Svc: h3=":443"; ma=93600

Page title: 503 Service Temporarily Unavailable

<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body>
<center><h1>503 Service Temporarily Unavailable</h1></center>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:80 · cert.bamse.pl

2026-01-09 17:41

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
ETag: W/"1252f-19aa70e1437"
Feature-Policy: payment 'self'
Last-Modified: Fri, 21 Nov 2025 15:35:09 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Recruiting: /#/jobs
dupa: dupa
X-Akamai-Transformed: 0 - 0 -
Expires: Fri, 09 Jan 2026 17:42:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 17:42:19 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: juiceshop_sticky=http://10.0.3.59:3000; Path=/
X-WAF-RULES-DETECTED: 684927:60197687:BOT-62322944
X-WAF-RULES-TRIGGERED: 684927:60197687:BOT-62322944
Set-Cookie: _abck=94B0B352ED69673457EE294CEA97A0F6~-1~YAAQFhczF44afkabAQAAlx3aow9dV1bdG63fr7iM4xc44y1TLKGlyqPqEcsc5li2ORz+eIRnTGnRw/UuUklu3D0TVQ82R7KqzuC5ERK3ov2HsvmSrUDatSeR3qVWOxqGd0acToioJuxIwlV/Gyys6ygj5y+CBLff5y+mYLXJ3fUebQILPBjyL5Ybc305Ud7Wdml0Z/Ilwj1tprGw9bamYiN5Y3rnF8X8AjpSH8UsEzr+4bL+63klQttuzCMumaK2d7/gmssgnbf9g0eQzRbjdOsRbT8NTiy7azm7/RJzawNbGBT6kw6VKyM+Gnknp+Ai0/2cXmNaMOmbY9Bg/ASBfRUFJmDuqyMg/e+0cyBCqctW6wpwYWqIgtXd3qhjDDSQx0mA~-1~-1~-1~-1~-1; Domain=.bamse.pl; Path=/; Expires=Sat, 09 Jan 2027 17:42:19 GMT; Max-Age=31536000
Set-Cookie: bm_sz=537C00B69C9CFA45727A563A85741ECA~YAAQFhczF48afkabAQAAlx3aox6mCC3uLiXw0uAbv3E6CoOQaPwbg33Zt28+6SRyfJsvIMBbzebYQzzyVBDXBgkAb5gIt4TlsxLe1YZBgFaRP2GJKH35pyZO8+tLgaB4no+UBDYD0x1ImZk+kt3PVe0hxDsF2RhWYPl4TyI5IhF97oycaR5o0ndqwxXQU83JhkuNqDK+5uAtKxIvj/gljXUz7ur3z3aFHwxoryG0iQsM1dzb1Pc43GnG1oybUooaKRd/6yAHmjzosMBci+cTi2EA99fvrgrQxWH9oJ1xGKBSH54EVFQW9GPsuJvbwsEvNkB7O7/3WTTgIeg0xY2M5L7/fw8PjSeBauJ3~4342596~3158328; Domain=.bamse.pl; Path=/; Expires=Fri, 09 Jan 2026 21:42:19 GMT; Max-Age=14400

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · externaltags.volleyballworld.com

2026-01-09 15:17

HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: private, max-age=3600
Expires: Fri, 09 Jan 2026 16:17:33 GMT
Date: Fri, 09 Jan 2026 15:17:33 GMT
Content-Length: 60
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=12
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767971853062_389224214_1248693860_1226_718_150_153_-";dur=1


{"version":"0.4.0+85e94eddf7f8b9d38b966abc2e2ddbb0168cdfec"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · cert.bamse.pl

2026-01-09 11:14

HTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 367
Expires: Fri, 09 Jan 2026 11:14:26 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 11:14:26 GMT
Connection: close
X-WAF-RULES-DETECTED: 
X-WAF-RULES-TRIGGERED: IPBLOCK

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;cert&#46;bamse&#46;pl&#47;" on this server.<P>
Reference&#32;&#35;18&#46;16173317&#46;1767957266&#46;4756e27d
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;16173317&#46;1767957266&#46;4756e27d</P>
</BODY>
</HTML>

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · raynet.de

2026-01-09 10:42

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Link: <https://raynet.de/wp-json/>; rel="https://api.w.org/"
Link: <https://raynet.de/wp-json/wp/v2/pages/2588>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://raynet.de/>; rel=shortlink
Expires: Fri, 09 Jan 2026 10:42:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 10:42:54 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=63072000 ; includeSubDomains
Akamai-GRN: 0.10173317.1767955373.3695deb0
Akamai-Cache-Status: NotCacheable from child

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · redis-api.volleyballworld.com

2026-01-09 09:12

HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
X-Request-ID: 0HNI1D6TP3QJU:000001B4
X-Correlation-ID: c48f6583-0daa-48d2-8869-76755746cb1f
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Fri, 09 Jan 2026 09:12:49 GMT
Content-Length: 65
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767949969245_389224214_1173143378_14_949_94_98_-";dur=1


{"version":"1.5.0\u002B63f218fdf735b0cff6a921d4c5a9477f4936bd67"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · old-admin.se1.eshop.b2b.prod.somfy.com

2026-01-09 08:00

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 0
X-Magento-Shop: b2b-se1
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Location: https://www.somfypro.it/?error=90
X-FRAME-OPTIONS: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Magento-Cache-Debug: MISS
Expires: Fri, 09 Jan 2026 08:00:41 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 08:00:41 GMT
Connection: close
Set-Cookie: PHPSESSID=da6e463f2b403e9caf1225c6a2a3fecf; expires=Fri, 09 Jan 2026 09:00:41 GMT; Max-Age=3600; path=/; domain=old-admin.se1.eshop.b2b.prod.somfy.com; secure; HttpOnly; SameSite=Lax
Set-Cookie: X-Magento-Vary=76110a1ac2b77a4c545b0ec2201745ec83bb69cc78cbbe32576056ab61cd2f07; expires=Fri, 09 Jan 2026 09:00:41 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · api.staging.chirpsystems.com

2026-01-09 05:31

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 139
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Content-Security-Policy: default-src 'none'
Date: Fri, 09 Jan 2026 05:31:52 GMT
Connection: close
Alt-Svc: h3=":443"; ma=93600

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.150:443 · www.mecode.com.tw

2026-01-08 22:21

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 169
Location: https://www.mecode.com.tw/home
Date: Thu, 08 Jan 2026 22:21:44 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=14
Server-Timing: origin; dur=266
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=15768000
Server-Timing: ak_p; desc="1767910903932_389224223_333503488_27909_2861_102_105_-";dur=1

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.26.2</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 23.50.131.150:443 · qa-public-swoopyrevolution.discovery.com

2026-01-08 20:51

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 402
Expires: Thu, 08 Jan 2026 20:51:21 GMT
Date: Thu, 08 Jan 2026 20:51:21 GMT
Connection: close

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;qa&#45;public&#45;swoopyrevolution&#46;discovery&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;20173317&#46;1767905481&#46;42ec1e4c
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;20173317&#46;1767905481&#46;42ec1e4c</P>
</BODY>
</HTML>

Found 2026-01-08 by HttpPlugin

Create report

Open service 23.50.131.150:443 · schoolgateway.com

2026-01-07 12:36

HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Location: https://login.schoolgateway.com/
Content-Length: 0
Cache-Control: max-age=0
Expires: Wed, 07 Jan 2026 12:36:49 GMT
Date: Wed, 07 Jan 2026 12:36:49 GMT
Connection: close
Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload

Found 2026-01-07 by HttpPlugin

Create report

Open service 23.50.131.150:80 · schoolgateway.com

2026-01-07 12:36

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://schoolgateway.com/
Cache-Control: max-age=0
Expires: Wed, 07 Jan 2026 12:37:29 GMT
Date: Wed, 07 Jan 2026 12:37:29 GMT
Connection: close

Found 2026-01-07 by HttpPlugin