LeakIX - Host 51.144.7.192

Host 51.144.7.192

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: client-api.pixiby.dev
Port: 443
URL: https://client-api.pixiby.dev

First seen 2026-01-10 13:31
Last seen 2026-02-09 18:27
Open for 30 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491307d0c7256140fcc3f885769fd5d8fc6c28f839

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/galleries/{galleryId}/images/{imageId}/comments/{commentId}
GET /v1/accounts/me/photographers
GET /v1/calendar/{photographerId}
GET /v1/chat/unread-messages
GET /v1/chat/{chatId}/lines
GET /v1/chat/{photographerId}
GET /v1/files/{imageId}/crop
GET /v1/files/{imageId}/crop-guest
GET /v1/galleries-preview/friendly-url/{friendlyUrl}/id
GET /v1/galleries-preview/{galleryId}
GET /v1/galleries-preview/{galleryId}/images
GET /v1/galleries-preview/{galleryId}/images/{imageId}/preview
GET /v1/galleries/friendly-url/{friendlyUrl}/id
GET /v1/galleries/{galleryId}
GET /v1/galleries/{galleryId}/access
GET /v1/galleries/{galleryId}/account-access
GET /v1/galleries/{galleryId}/auth-info
GET /v1/galleries/{galleryId}/deliveries
GET /v1/galleries/{galleryId}/deliveries-guest
GET /v1/galleries/{galleryId}/guest
GET /v1/galleries/{galleryId}/images
GET /v1/galleries/{galleryId}/images-guest
GET /v1/galleries/{galleryId}/images/{imageId}/comments
GET /v1/galleries/{galleryId}/images/{imageId}/comments-guest
GET /v1/galleries/{galleryId}/images/{imageId}/preview
GET /v1/galleries/{galleryId}/images/{imageId}/preview-guest
GET /v1/galleries/{galleryId}/info
GET /v1/galleries/{galleryId}/info-guest
GET /v1/galleries/{galleryId}/password-access
GET /v1/galleries/{galleryId}/payments
GET /v1/galleries/{galleryId}/payments-guest
GET /v1/orders/guest/{orderId}
GET /v1/orders/{orderId}
GET /v1/orders/{orderId}/payment/przelewy24/{paymentId}/status
GET /v1/photographers/friendly-url/{friendlyUrl}/id
GET /v1/photographers/{photographerId}
GET /v1/photographers/{photographerId}/galleries
GET /v1/zip/guest/{zipId}/status
GET /v1/zip/guest/{zipId}/url
GET /v1/zip/{zipId}/status
GET /v1/zip/{zipId}/url
POST /v1/calendar/{calendarEventId}/cancel
POST /v1/calendar/{calendarEventId}/reserve
POST /v1/chat/{chatRoomId}/message-seen
POST /v1/chat/{chatRoomId}/send-message
POST /v1/chat/{contactId}
POST /v1/galleries/{galleryId}/images/urls
POST /v1/galleries/{galleryId}/images/urls-guest
POST /v1/galleries/{galleryId}/images/{imageId}/comments/seen
POST /v1/galleries/{galleryId}/images/{imageId}/hide
POST /v1/orders
POST /v1/orders/guest
POST /v1/orders/guest/{orderId}/submit
POST /v1/orders/{orderId}/payment/przelewy24
POST /v1/orders/{orderId}/payment/przelewy24/update-status
POST /v1/orders/{orderId}/submit
POST /v1/photographers/{photographerId}/contact
POST /v1/zip/create
POST /v1/zip/guest/create
PUT /v1/galleries/{galleryId}/images/{imageId}/favorite

Found on 2026-02-09 18:27

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: api.heimdallcloud-dev.com
Port: 443
URL: https://api.heimdallcloud-dev.com

First seen 2026-01-10 07:15
Last seen 2026-02-09 17:44
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60f28790fd3969d00411fdfda1333b9506193b9a56
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/v1/aggregated-measurements
GET /api/v1/dlr/aggregated-dlr
GET /api/v1/dlr/aggregated-dlr-forecast
GET /api/v1/icing-data
GET /api/v1/lines
GET /api/v1/sag-and-clearances
```
  Found on 2026-02-09 17:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: identity-governor-acc.skillstown.dev
Port: 443
URL: https://identity-governor-acc.skillstown.dev

First seen 2025-12-29 11:42
Last seen 2026-02-02 09:06
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035492ff234957ca66696001b1d91105c9a3a41f8b0b4
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v1/clients
GET /api/v1/clients/{clientId}
GET /api/v1/companies
GET /api/v1/companies/{id}
GET /api/v1/identity-providers
GET /api/v1/identity-providers/{scheme}
GET /api/v1/users/find
GET /api/v1/users/idp/{userId}
GET /api/v1/users/{userId}
POST /api/v1/identity-providers/oidc
POST /api/v1/identity-providers/saml
POST /api/v1/login/context/{email}
POST /api/v1/users
POST /api/v1/users/password-reset-email/{email}
POST /api/v1/users/password-reset/{userId}
POST /api/v1/users/password-set-email/{email}/{inspireCompanyId}
POST /api/v1/users/password/{userId}
```
  Found on 2026-02-02 09:06
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: maurer-portal2api.novacuracloud.net
Port: 443
URL: https://maurer-portal2api.novacuracloud.net

First seen 2025-12-25 08:09
Last seen 2026-02-01 22:20
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-01 22:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: arvo.mll.fi
Port: 443
URL: https://arvo.mll.fi

First seen 2026-01-10 11:30
Last seen 2026-01-16 15:20
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 15:20
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: panel-api.pixiby.dev
Port: 443
URL: https://panel-api.pixiby.dev

First seen 2026-01-10 13:39
Last seen 2026-01-16 15:17
Open for 6 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491307d0c73bc204cba3aafb1c99b5d670b5209a7b

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/galleries/{galleryId}/images/{imageId}/comments/{commentId}
DELETE /v1/photographers/me/hello-page
DELETE /v1/plans/cancel
DELETE /v1/recycle-bin/delete/gallery/{galleryId}
DELETE /v1/recycle-bin/delete/image/{imageId}
GET /v1/admin/emails
GET /v1/calendar
GET /v1/calendar/availability
GET /v1/calendar/{calendarEventId}
GET /v1/chat
GET /v1/chat/unread-messages
GET /v1/chat/{chatId}
GET /v1/chat/{chatId}/lines
GET /v1/clients
GET /v1/clients/{clientId}
GET /v1/clients/{clientId}/galleries
GET /v1/clients/{clientId}/orders
GET /v1/files/galleries/{galleryId}/images/{imageId}/download
GET /v1/galleries
GET /v1/galleries/friendly-url/{friendlyUrl}/availability
GET /v1/galleries/{galleryId}
GET /v1/galleries/{galleryId}/access-control
GET /v1/galleries/{galleryId}/clients
GET /v1/galleries/{galleryId}/cover
GET /v1/galleries/{galleryId}/cover/image
GET /v1/galleries/{galleryId}/images
GET /v1/galleries/{galleryId}/images/lightroom-export
GET /v1/galleries/{galleryId}/images/{imageId}
GET /v1/galleries/{galleryId}/images/{imageId}/comments
GET /v1/galleries/{galleryId}/images/{imageId}/original
GET /v1/galleries/{galleryId}/images/{imageId}/preview
GET /v1/galleries/{galleryId}/images/{imageId}/thumbnail
GET /v1/galleries/{galleryId}/images/{imageId}/watermark
GET /v1/galleries/{galleryId}/publish
GET /v1/galleries/{galleryId}/sale
GET /v1/galleries/{galleryId}/statistics
GET /v1/orders
GET /v1/orders/{orderId}
GET /v1/payments/przelewy24/{paymentId}/status
GET /v1/photo-albums
GET /v1/photo-albums/{photoAlbumId}
GET /v1/photo-albums/{photoAlbumId}/gallery
GET /v1/photographers/email/{email}/availability
GET /v1/photographers/me
GET /v1/photographers/me/payments
GET /v1/photographers/me/payments/{invoiceId}/document
GET /v1/photographers/me/plan-usage
GET /v1/photographers/me/portfolio
GET /v1/photographers/me/settings
GET /v1/photographers/me/summary
GET /v1/photographers/me/watermark
GET /v1/plans
GET /v1/plans/{planId}/downgrade/summary
GET /v1/plans/{planId}/upgrade/summary
GET /v1/pricings
GET /v1/pricings/delivery-pricing
GET /v1/pricings/delivery-pricing/{deliveryPricingCommonId}/newest
GET /v1/pricings/delivery-pricing/{deliveryPricingId}
GET /v1/pricings/delivery-pricing/{deliveryPricingId}/delivery/{deliveryId}
GET /v1/pricings/sale-pricing
GET /v1/pricings/sale-pricing/{pricingId}
GET /v1/pricings/sale-pricing/{salePricingCommonId}/newest
GET /v1/recycle-bin
GET /v1/tickets
GET /v1/tickets/mine
GET /v1/tickets/{ticketId}
GET /v1/zip/{zipId}/status
GET /v1/zip/{zipId}/url
POST /v1/chat/{chatRoomId}/message-seen
POST /v1/chat/{chatRoomId}/send-message
POST /v1/chat/{contactId}
POST /v1/files/galleries/{galleryId}/images/{imageId}/swap
POST /v1/files/galleries/{galleryId}/upload
POST /v1/galleries/{galleryId}/clients/{clientId}
POST /v1/galleries/{galleryId}/images/reorder
POST /v1/galleries/{galleryId}/images/watermark
POST /v1/galleries/{galleryId}/images/{imageId}/comments/seen
POST /v1/galleries/{galleryId}/images/{imageId}/watermark/manual
POST /v1/orders/{orderId}/paid
POST /v1/payments/card/complete/przelewy24
POST /v1/photo-albums/{photoAlbumId}/gallery/{galleryId}/pages
POST /v1/photographers/me/feedback/ratings
POST /v1/plans/{photographerId}/charge/complete/przelewy24
POST /v1/plans/{photographerId}/downgrade/complete/przelewy24
POST /v1/plans/{photographerId}/upgrade/complete/przelewy24
POST /v1/plans/{planId}/downgrade
POST /v1/plans/{planId}/upgrade/przelewy24
POST /v1/pricings/delivery-pricing/{deliveryPricingId}/delivery
POST /v1/recycle-bin/empty
POST /v1/recycle-bin/restore/gallery/{galleryId}
POST /v1/recycle-bin/restore/image/{imageId}
POST /v1/tickets/{ticketId}/close
POST /v1/tickets/{ticketId}/comments
POST /v1/tickets/{ticketId}/reopen
POST /v1/zip/create
PUT /v1/files/galleries/{galleryId}/cover/upload
PUT /v1/galleries/{galleryId}/access-control/access
PUT /v1/galleries/{galleryId}/comments
PUT /v1/galleries/{galleryId}/comments/type
PUT /v1/galleries/{galleryId}/cover/button-text
PUT /v1/galleries/{galleryId}/cover/focal-point
PUT /v1/galleries/{galleryId}/cover/title
PUT /v1/galleries/{galleryId}/currency
PUT /v1/galleries/{galleryId}/digital-sale
PUT /v1/galleries/{galleryId}/digital-sale/prepaid-copies
PUT /v1/galleries/{galleryId}/features/cover/display-date
PUT /v1/galleries/{galleryId}/features/cover/display-photographer
PUT /v1/galleries/{galleryId}/features/cover/enabled
PUT /v1/galleries/{galleryId}/features/cover/focal-point
PUT /v1/galleries/{galleryId}/features/digital-sale/disable
PUT /v1/galleries/{galleryId}/features/digital-sale/prepaid-copies/disable
PUT /v1/galleries/{galleryId}/features/print-sale/disable
PUT /v1/galleries/{galleryId}/friendly-url
PUT /v1/galleries/{galleryId}/images/{imageId}/favorite
PUT /v1/galleries/{galleryId}/images/{imageId}/type
PUT /v1/galleries/{galleryId}/layout
PUT /v1/galleries/{galleryId}/print-sale
PUT /v1/payments/card/przelewy24
PUT /v1/photographers/me/email
PUT /v1/photographers/me/feedback/{feedbackId}/additional
PUT /v1/photographers/me/logo/upload
PUT /v1/photographers/me/payments/przelewy24
PUT /v1/photographers/me/portfolio/cover-image
PUT /v1/photographers/me/settings/email-notifications
PUT /v1/photographers/me/settings/language
PUT /v1/photographers/me/settings/operating-system
PUT /v1/photographers/me/settings/quality
PUT /v1/photographers/me/settings/theme
PUT /v1/photographers/me/watermark/upload

Found on 2026-01-16 15:17

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.144.7.192
Domain: api.beleggingspanden.nl
Port: 443
URL: https://api.beleggingspanden.nl

First seen 2025-11-20 04:09
Last seen 2025-12-08 00:48
Open for 17 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-08 00:48
Create report

Open service 51.144.7.192:80 · vdv454-dds.rnv-online.de

2026-02-03 13:00

HTTP/1.1 404 Not Found
Content-Length: 17
Connection: close
Content-Type: application/json; charset=utf-8
Date: Tue, 03 Feb 2026 13:00:53 GMT
Server: Microsoft-IIS/10.0
Access-Control-Allow-Origin: *
ETag: W/"11-jFpRHYf7czya6xdcUmAQoG5EEjs"
Set-Cookie: ARRAffinity=71c5ecfca949e38fa6d8b6899df69a8bc1065f71ea6211c776e43d3b7b216b7d;Path=/;HttpOnly;Domain=vdv454-dds.rnv-online.de
X-Powered-By: Express
X-Powered-By: ASP.NET


{"message":"404"}

Found 2026-02-03 by HttpPlugin