LeakIX - Host 52.138.218.121

Host 52.138.218.121

Ireland

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: client-staging.clanwilliamconnect.com
Port: 80
URL: http://client-staging.clanwilliamconnect.com

First seen 2025-12-26 13:00
Last seen 2026-02-09 01:33
Open for 44 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494d4f4c1b182d9afd69bc3f3c53d08c4a0608c10a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Bookings
GET /api/Bookings/{id}
GET /api/PatientVerifications/unread
GET /api/Patients
GET /api/Patients/{id}
GET /api/Payments
GET /api/Portal/url
GET /api/Practice/GetPracticeSettings
GET /api/Refills
GET /api/SuremedRequests
GET /api/SuremedRequests/{id}
GET /api/SuremedRequests/{id}/requestdata
GET /api/VideoConsultationEvents
GET /api/VideoConsultations/{id}
POST /api/Availability
POST /api/Practice
POST /api/Practice/ConfigureArcus
POST /api/Practice/RegisterHealthlinkIdentifier
POST /api/Practice/RegisterProvider
POST /api/Practice/RegisterWithSuremed
POST /api/PracticeAppointments
POST /api/PracticePatients
POST /api/PracticePayments
POST /api/Prescriptions
POST /api/SuremedRequests/{id}/attachments
POST /api/SuremedRequests/{id}/decline
POST /api/SuremedRequests/{id}/decline/{reason}
POST /api/SuremedRequests/{requestReferenceId}/MarkDeregisterRequestAsCompleted
POST /api/VideoConsultations
PUT /api/Bookings/{id}/Cancel
PUT /api/Bookings/{id}/Confirm
PUT /api/Bookings/{id}/Decline
PUT /api/Bookings/{id}/DeclineExtended
PUT /api/Bookings/{id}/MarkAsRead
PUT /api/Bookings/{id}/Reschedule
PUT /api/PatientVerifications/{id}/Confirm
PUT /api/PatientVerifications/{id}/Confirm/{patientid}
PUT /api/PatientVerifications/{id}/Decline
PUT /api/PatientVerifications/{id}/MarkAsRead
PUT /api/Patients/{id}/Confirm
PUT /api/Patients/{id}/Decline
PUT /api/Patients/{id}/MarkAsRead
PUT /api/Payments/{id}/MarkAsRead
PUT /api/Refills/{id}/Confirm
PUT /api/Refills/{id}/Decline
PUT /api/Refills/{id}/MarkAsRead
PUT /api/SuremedRequests/MarkAsRead
PUT /api/VideoConsultationEvents/{id}
PUT /api/VideoConsultations/{id}/Cancel
PUT /api/VideoConsultations/{id}/Reschedule

Found on 2026-02-09 01:33

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: val2022.ax365.se
Port: 443
URL: https://val2022.ax365.se

First seen 2025-12-30 05:00
Last seen 2026-02-06 05:04
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d600e4abeb49779f178fe4f7a2b604b988c8cc534f5
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/v1/domesticorder/{number}
GET /api/v1/foreignorder/{number}
GET /api/v1/productlist
GET /api/v1/user
POST /api/v1/domesticorder
POST /api/v1/foreignorder
POST /api/v1/orderstatus
POST /api/v1/user/token
```
  Found on 2026-02-06 05:04
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: client-staging.clanwilliamconnect.com
Port: 443
URL: https://client-staging.clanwilliamconnect.com

First seen 2025-12-26 13:00
Last seen 2026-02-05 15:14
Open for 41 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494d4f4c1b182d9afd69bc3f3c53d08c4a0608c10a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Bookings
GET /api/Bookings/{id}
GET /api/PatientVerifications/unread
GET /api/Patients
GET /api/Patients/{id}
GET /api/Payments
GET /api/Portal/url
GET /api/Practice/GetPracticeSettings
GET /api/Refills
GET /api/SuremedRequests
GET /api/SuremedRequests/{id}
GET /api/SuremedRequests/{id}/requestdata
GET /api/VideoConsultationEvents
GET /api/VideoConsultations/{id}
POST /api/Availability
POST /api/Practice
POST /api/Practice/ConfigureArcus
POST /api/Practice/RegisterHealthlinkIdentifier
POST /api/Practice/RegisterProvider
POST /api/Practice/RegisterWithSuremed
POST /api/PracticeAppointments
POST /api/PracticePatients
POST /api/PracticePayments
POST /api/Prescriptions
POST /api/SuremedRequests/{id}/attachments
POST /api/SuremedRequests/{id}/decline
POST /api/SuremedRequests/{id}/decline/{reason}
POST /api/SuremedRequests/{requestReferenceId}/MarkDeregisterRequestAsCompleted
POST /api/VideoConsultations
PUT /api/Bookings/{id}/Cancel
PUT /api/Bookings/{id}/Confirm
PUT /api/Bookings/{id}/Decline
PUT /api/Bookings/{id}/DeclineExtended
PUT /api/Bookings/{id}/MarkAsRead
PUT /api/Bookings/{id}/Reschedule
PUT /api/PatientVerifications/{id}/Confirm
PUT /api/PatientVerifications/{id}/Confirm/{patientid}
PUT /api/PatientVerifications/{id}/Decline
PUT /api/PatientVerifications/{id}/MarkAsRead
PUT /api/Patients/{id}/Confirm
PUT /api/Patients/{id}/Decline
PUT /api/Patients/{id}/MarkAsRead
PUT /api/Payments/{id}/MarkAsRead
PUT /api/Refills/{id}/Confirm
PUT /api/Refills/{id}/Decline
PUT /api/Refills/{id}/MarkAsRead
PUT /api/SuremedRequests/MarkAsRead
PUT /api/VideoConsultationEvents/{id}
PUT /api/VideoConsultations/{id}/Cancel
PUT /api/VideoConsultations/{id}/Reschedule

Found on 2026-02-05 15:14

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-30 02:57

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: client.clanwilliamconnect.com
Port: 443
URL: https://client.clanwilliamconnect.com

First seen 2025-12-26 15:03
Last seen 2026-02-02 09:48
Open for 37 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494d4f4c1b182d9afd69bc3f3c53d08c4a0608c10a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Bookings
GET /api/Bookings/{id}
GET /api/PatientVerifications/unread
GET /api/Patients
GET /api/Patients/{id}
GET /api/Payments
GET /api/Portal/url
GET /api/Practice/GetPracticeSettings
GET /api/Refills
GET /api/SuremedRequests
GET /api/SuremedRequests/{id}
GET /api/SuremedRequests/{id}/requestdata
GET /api/VideoConsultationEvents
GET /api/VideoConsultations/{id}
POST /api/Availability
POST /api/Practice
POST /api/Practice/ConfigureArcus
POST /api/Practice/RegisterHealthlinkIdentifier
POST /api/Practice/RegisterProvider
POST /api/Practice/RegisterWithSuremed
POST /api/PracticeAppointments
POST /api/PracticePatients
POST /api/PracticePayments
POST /api/Prescriptions
POST /api/SuremedRequests/{id}/attachments
POST /api/SuremedRequests/{id}/decline
POST /api/SuremedRequests/{id}/decline/{reason}
POST /api/SuremedRequests/{requestReferenceId}/MarkDeregisterRequestAsCompleted
POST /api/VideoConsultations
PUT /api/Bookings/{id}/Cancel
PUT /api/Bookings/{id}/Confirm
PUT /api/Bookings/{id}/Decline
PUT /api/Bookings/{id}/DeclineExtended
PUT /api/Bookings/{id}/MarkAsRead
PUT /api/Bookings/{id}/Reschedule
PUT /api/PatientVerifications/{id}/Confirm
PUT /api/PatientVerifications/{id}/Confirm/{patientid}
PUT /api/PatientVerifications/{id}/Decline
PUT /api/PatientVerifications/{id}/MarkAsRead
PUT /api/Patients/{id}/Confirm
PUT /api/Patients/{id}/Decline
PUT /api/Patients/{id}/MarkAsRead
PUT /api/Payments/{id}/MarkAsRead
PUT /api/Refills/{id}/Confirm
PUT /api/Refills/{id}/Decline
PUT /api/Refills/{id}/MarkAsRead
PUT /api/SuremedRequests/MarkAsRead
PUT /api/VideoConsultationEvents/{id}
PUT /api/VideoConsultations/{id}/Cancel
PUT /api/VideoConsultations/{id}/Reschedule

Found on 2026-02-02 09:48

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: provider.clanwilliamconnect.com
Port: 443
URL: https://provider.clanwilliamconnect.com

First seen 2025-12-26 15:07
Last seen 2026-02-02 04:44
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549c874d3734c6c3fc27e149511a1de03804f06182a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Bookings/{id}
GET /api/Events
GET /api/Events/{id}
GET /api/Payments/Unread
POST /api/Bookings
POST /api/PatientVerifications
POST /api/Patients
POST /api/Payments
POST /api/Refills
PUT /api/Bookings/{id}/Cancel
PUT /api/Bookings/{id}/Reschedule
PUT /api/Practices/{id}/UpdatePatientModule
PUT /api/Refills/{id}/Cancel
```
  Found on 2026-02-02 04:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: provider-staging.clanwilliamconnect.com
Port: 443
URL: https://provider-staging.clanwilliamconnect.com

First seen 2025-12-26 13:01
Last seen 2026-02-01 23:44
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549c874d3734c6c3fc27e149511a1de03804f06182a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Bookings/{id}
GET /api/Events
GET /api/Events/{id}
GET /api/Payments/Unread
POST /api/Bookings
POST /api/PatientVerifications
POST /api/Patients
POST /api/Payments
POST /api/Refills
PUT /api/Bookings/{id}/Cancel
PUT /api/Bookings/{id}/Reschedule
PUT /api/Practices/{id}/UpdatePatientModule
PUT /api/Refills/{id}/Cancel
```
  Found on 2026-02-01 23:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: configuration.happident.se
Port: 443
URL: https://configuration.happident.se

First seen 2025-12-18 02:02
Last seen 2026-01-23 03:46
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 03:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.138.218.121
Domain: api.randek.com
Port: 443
URL: https://api.randek.com

First seen 2025-12-20 08:37
Last seen 2026-01-23 02:32
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 02:32
Create report

Open service 52.138.218.121:80 · blendproducer.com

2026-02-09 08:31

HTTP/1.1 404 Site Not Found
Content-Length: 2667
Connection: close
Content-Type: text/html
Date: Mon, 09 Feb 2026 08:31:37 GMT

Page title: Microsoft Azure Web App - Error 404

<!DOCTYPE html>
<html>
<head>
    <title>Microsoft Azure Web App - Error 404</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 75px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        a, a:visited, a:active, a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
    <script type="text/javascript">
        function toggle_visibility(id) {
            var e = document.getElementById(id);
            if (e.style.display == 'block')
                e.style.display = 'none';
            else
                e.style.display = 'block';
        }
    </script>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1>404 Web Site not found.</h1>
            <p>You may be seeing this error due to one of the reasons listed below :</p>
            <ul>
                <li>Custom domain has not been configured inside Azure. See <a href="https://go.microsoft.com/fwlink/?linkid=2194614">how to map an existing domain</a> to resolve this.</li>
                <li>Client cache is still pointing the domain to old IP address. Clear the cache by running the command <i>ipconfig/flushdns.</i></li>
            </ul>
            <p>Checkout <a href="https://go.microsoft.com/fwlink/?linkid=2194451">App Service Domain FAQ</a> for more questions.</p>
        </div>
     </div>
</body>
</html>

Found 6 hours ago by HttpPlugin