LeakIX - Host 92.123.104.19

Host 92.123.104.19

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.123.104.19
Domain: mut-services.extapps.homedepot.com
Port: 443
URL: https://mut-services.extapps.homedepot.com

First seen 2025-11-16 06:49
Last seen 2026-02-09 09:20
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-09 09:20
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.134
Domain: pipelinemanagement-apps.pr-mit-pipeline-mgmt-thd.gcp.homedepot.com
Port: 443
URL: https://pipelinemanagement-apps.pr-mit-pipeline-mgmt-thd.gcp.homedepot.com

First seen 2025-10-29 17:52
Last seen 2026-02-09 06:32
Open for 102 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf75b8c0b4ff4308be4d86d5665a3cdb75dd2558ab6

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /actuator
GET /actuator/health
GET /actuator/info
GET /actuator/mappings
GET /actuator/metrics
GET /actuator/metrics/{requiredMetricName}
GET /actuator/prometheus
GET /appointment/getAvailableTimeSlots
GET /appointment/getProductTypes
GET /appointment/timeslots/project/{projectId}
GET /store/getStoreInfo/{storeNumber}
GET /store/hierarchy
GET /store/stores
POST /appointment/timeslots/associate
POST /appointment/timeslots/bulk
POST /appointment/timeslots/trigger-scheduled-task
POST /associate/shifts/store/{storeNumber}
POST /associate/shifts/stores
POST /pubsub/appointment-events
POST /pubsub/consultation-events
PUT /store/store/{storeNumber}

Found on 2026-02-09 06:32

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf75b8c0b4ff4308be4253dee5eb78d4963013273ba

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /actuator
GET /actuator/health
GET /actuator/health/**
GET /actuator/info
GET /actuator/mappings
GET /appointment/getAvailableTimeSlots
GET /appointment/getProductTypes
GET /appointment/timeslots/project/{projectId}
GET /store/getStoreInfo/{storeNumber}
GET /store/hierarchy
GET /store/stores
POST /appointment/timeslots/associate
POST /appointment/timeslots/bulk
POST /appointment/timeslots/trigger-scheduled-task
POST /associate/shifts/store/{storeNumber}
POST /associate/shifts/stores
POST /pubsub/appointment-events
POST /pubsub/consultation-events
PUT /store/store/{storeNumber}

Found on 2026-01-15 19:25

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.123.104.19
Domain: esba.extapps.homedepot.com
Port: 443
URL: https://esba.extapps.homedepot.com

First seen 2025-11-16 06:49
Last seen 2026-02-09 01:26
Open for 84 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
Found on 2026-02-09 01:26

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf76b9679e034507371305e788b283562794723eba5

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
DELETE /esba-submission/{ldap}/vendor
DELETE /vendors/{vendorId}
GET /approval/thd/{ldap}/vendor
GET /catalogs/app/{appId}/class/{classId}/type/{typeId}/id/{id}
GET /catalogs/app/{appId}/class/{classId}/type/{typeId}/id/{id}/value/{value}
GET /catalogs/countries-wo-zipcode
GET /catalogs/custom-agents
GET /catalogs/dom/{departmentId}
GET /catalogs/merchandise-departments
GET /catalogs/merchant-assistant/{departmentId}
GET /catalogs/merchant/{departmentId}
GET /catalogs/newStore-payment-terms
GET /catalogs/regular-payment-terms
GET /catalogs/shipping-port
GET /catalogs/sites
GET /catalogs/status
GET /catalogs/status/{statusName}
GET /catalogs/transportation-country
GET /catalogs/transportation-zone/{transportation-country-id}/transportation-country
GET /catalogs/type/{typeId}/id/{id}/value/{value}
GET /catalogs/vendor-categories
GET /configs
GET /configs/app/{appId}
GET /configs/app/{appId}/class/{classId}
GET /configs/app/{appId}/class/{classId}/type/{typeId}
GET /configs/app/{appId}/class/{classId}/type/{typeId}/id/{id}
GET /configs/carrier/{carrierId}
GET /configs/s4
GET /configs/s4/
GET /contact
GET /contact/{ldap}/vendor
GET /countries
GET /countries/{countryId}
GET /data-management/pdf
GET /data-management/pdf/sap
GET /data-management/pdf/{ldap}/vendor
GET /data-management/pdf/{ldap}/{companyName}/vendor/sap
GET /data-management/terms-and-conditions
GET /data-management/terms-and-conditions/{id}
GET /esba-submission/vendor
GET /esba-submission/vendor/dom
GET /esba-submission/vendor/email/{email}
GET /esba-submission/vendor/home-depot-partner-guardian
GET /esba-submission/vendor/ldap/{ldap}
GET /esba-submission/vendor/merchandise-department
GET /esba-submission/vendor/merchant
GET /esba-submission/vendor/merchant-assistant
GET /esba-submission/{ldap}/vendor/home-depot-partner-guardian
GET /general/basic
GET /general/basic/{ldap}/vendor
GET /general/diversity-and-inclusion
GET /general/diversity-and-inclusion/{ldap}/vendor
GET /general/financial
GET /general/financial/{ldap}/vendor
GET /general/special-stipulations
GET /general/special-stipulations/{ldap}/vendor
GET /general/terms-and-conditions
GET /general/terms-and-conditions/{ldap}/vendor
GET /jwt
GET /jwt/generateSupplierHubHmacToken
GET /jwt/v2
GET /mandatory-pre-requisites
GET /mandatory-pre-requisites/edi
GET /mandatory-pre-requisites/met
GET /mandatory-pre-requisites/{email}/edi
GET /mandatory-pre-requisites/{ldap}/vendor
GET /partner-profile/user/{ldap}
GET /payment/discounts
GET /payment/discounts/{ldap}/vendor
GET /payment/terms
GET /payment/terms/{ldap}/vendor
GET /pre-requisites
GET /pre-requisites/page/{thd-member}/thd
GET /pre-requisites/page/{thd-member}/{thd-ldap}/thd
GET /pre-requisites/reassigned/page/{thd-member}/{thd-role}
GET /pre-requisites/thd-users/{thd-member}/{pre-requisites-id}
GET /pre-requisites/{id}
GET /pre-requisites/{ldap}/vendor
GET /product
GET /product/{ldap}/vendor
GET /reject/thd/{ldap}/vendor
GET /reject/vendor
GET /rtv/{id}
GET /shipping
GET /shipping/factory
GET /shipping/factory/{ldap}/vendor
GET /shipping/info
GET /shipping/info/{ldap}/vendor
GET /shipping/{ldap}/vendor
GET /signature
GET /signature/{ldap}/vendor
GET /vendors/contacts/{vendorId}
GET /vendors/status/{referenceId}
GET /vendors/test/{vendorId}
GET /vendors/{vendorID}
POST /approval/dom-approval/{ldap}/vendor
POST /approval/m-approval/{ldap}/vendor
POST /approval/ma-approval/{ldap}/vendor
POST /approval/{ldap}/vendor
POST /general/financial/{keyId}/{phase}
POST /reject/dom-reject/{ldap}/vendor
POST /reject/m-reject/{ldap}/vendor
POST /reject/ma-reject/{ldap}/vendor
POST /reject/{ldap}/vendor
POST /vendors/{keyId}/{phase}
POST /vendors/{vendorId}/approve/submission
POST /vendors/{vendorId}/{keyId}/{phase}
PUT /esba-submission/vendor/email/{email}/status
PUT /esba-submission/vendor/ldap/{ldap}/status
PUT /esba-submission/vendor/status
PUT /pre-requisites/reassign/{ldap}/vendor/{thd-ldap}/thd-member
PUT /pre-requisites/{id}/approve-edi
PUT /pre-requisites/{id}/reject-edi
PUT /vendors/{vendorId}/return/submission
PUT /vendors/{vendorId}/unlock/submission

Found on 2026-02-02 05:29

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf76b9679e034507371305e788b28356279c41e1737

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
DELETE /esba-submission/{ldap}/vendor
DELETE /vendors/{vendorId}
GET /approval/thd/{ldap}/vendor
GET /catalogs/app/{appId}/class/{classId}/type/{typeId}/id/{id}
GET /catalogs/app/{appId}/class/{classId}/type/{typeId}/id/{id}/value/{value}
GET /catalogs/countries-wo-zipcode
GET /catalogs/custom-agents
GET /catalogs/dom/{departmentId}
GET /catalogs/merchandise-departments
GET /catalogs/merchant-assistant/{departmentId}
GET /catalogs/merchant/{departmentId}
GET /catalogs/newStore-payment-terms
GET /catalogs/regular-payment-terms
GET /catalogs/shipping-port
GET /catalogs/sites
GET /catalogs/status
GET /catalogs/status/{statusName}
GET /catalogs/transportation-country
GET /catalogs/transportation-zone/{transportation-country-id}/transportation-country
GET /catalogs/type/{typeId}/id/{id}/value/{value}
GET /catalogs/vendor-categories
GET /configs
GET /configs/app/{appId}
GET /configs/app/{appId}/class/{classId}
GET /configs/app/{appId}/class/{classId}/type/{typeId}
GET /configs/app/{appId}/class/{classId}/type/{typeId}/id/{id}
GET /configs/carrier/{carrierId}
GET /configs/s4
GET /contact
GET /contact/{ldap}/vendor
GET /countries
GET /countries/{countryId}
GET /data-management/pdf
GET /data-management/pdf/sap
GET /data-management/pdf/{ldap}/vendor
GET /data-management/pdf/{ldap}/{companyName}/vendor/sap
GET /data-management/terms-and-conditions
GET /data-management/terms-and-conditions/{id}
GET /esba-submission/vendor
GET /esba-submission/vendor/dom
GET /esba-submission/vendor/email/{email}
GET /esba-submission/vendor/home-depot-partner-guardian
GET /esba-submission/vendor/ldap/{ldap}
GET /esba-submission/vendor/merchandise-department
GET /esba-submission/vendor/merchant
GET /esba-submission/vendor/merchant-assistant
GET /esba-submission/{ldap}/vendor/home-depot-partner-guardian
GET /general/basic
GET /general/basic/{ldap}/vendor
GET /general/diversity-and-inclusion
GET /general/diversity-and-inclusion/{ldap}/vendor
GET /general/financial
GET /general/financial/{ldap}/vendor
GET /general/special-stipulations
GET /general/special-stipulations/{ldap}/vendor
GET /general/terms-and-conditions
GET /general/terms-and-conditions/{ldap}/vendor
GET /jwt
GET /jwt/v2
GET /mandatory-pre-requisites
GET /mandatory-pre-requisites/edi
GET /mandatory-pre-requisites/met
GET /mandatory-pre-requisites/{email}/edi
GET /mandatory-pre-requisites/{ldap}/vendor
GET /payment/discounts
GET /payment/discounts/{ldap}/vendor
GET /payment/terms
GET /payment/terms/{ldap}/vendor
GET /pre-requisites
GET /pre-requisites/page/{thd-member}/thd
GET /pre-requisites/page/{thd-member}/{thd-ldap}/thd
GET /pre-requisites/reassigned/page/{thd-member}/{thd-role}
GET /pre-requisites/thd-users/{thd-member}/{pre-requisites-id}
GET /pre-requisites/{id}
GET /pre-requisites/{ldap}/vendor
GET /product
GET /product/{ldap}/vendor
GET /reject/thd/{ldap}/vendor
GET /reject/vendor
GET /rtv/{id}
GET /shipping
GET /shipping/factory
GET /shipping/factory/{ldap}/vendor
GET /shipping/info
GET /shipping/info/{ldap}/vendor
GET /shipping/{ldap}/vendor
GET /signature
GET /signature/{ldap}/vendor
GET /vendors/contacts/{vendorId}
GET /vendors/status/{referenceId}
GET /vendors/{vendorID}
POST /approval/dom-approval/{ldap}/vendor
POST /approval/m-approval/{ldap}/vendor
POST /approval/ma-approval/{ldap}/vendor
POST /approval/{ldap}/vendor
POST /general/financial/{keyId}/{phase}
POST /partner-profile
POST /partner-profile/delete
POST /partner-profile/get
POST /reject/dom-reject/{ldap}/vendor
POST /reject/m-reject/{ldap}/vendor
POST /reject/ma-reject/{ldap}/vendor
POST /reject/{ldap}/vendor
POST /vendors/{keyId}/{phase}
POST /vendors/{vendorId}/approve/submission
POST /vendors/{vendorId}/{keyId}/{phase}
PUT /esba-submission/vendor/email/{email}/status
PUT /esba-submission/vendor/ldap/{ldap}/status
PUT /esba-submission/vendor/status
PUT /pre-requisites/reassign/{ldap}/vendor/{thd-ldap}/thd-member
PUT /pre-requisites/{id}/approve-edi
PUT /pre-requisites/{id}/reject-edi
PUT /vendors/{vendorId}/return/submission
PUT /vendors/{vendorId}/unlock/submission

Found on 2026-01-17 01:39

Create report

Open service 92.123.104.19:80 · www.napletonsvalleygenesis.com

2026-02-05 05:07

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 384
Expires: Thu, 05 Feb 2026 05:07:33 GMT
Date: Thu, 05 Feb 2026 05:07:33 GMT
Connection: close
Set-Cookie: ddc_diag_akam_clientIP=165.22.235.3; expires=Thu, 05-Feb-2026 05:22:33 GMT
Set-Cookie: ddc_diag_akam_currentTime=1770268053; expires=Thu, 05-Feb-2026 05:22:33 GMT
Set-Cookie: ddc_diag_akam_requestID=1c553a88; expires=Thu, 05-Feb-2026 05:22:33 GMT
Set-Cookie: ddc_diag_akam_ghostIP=92.123.104.19; expires=Thu, 05-Feb-2026 05:22:33 GMT
Set-Cookie: ddc_diag_akam_fullPath=/; expires=Thu, 05-Feb-2026 05:22:33 GMT
Set-Cookie: DDC.postalCode=M3H+M
Set-Cookie: DDC.postalCityState=TORONTO%2C%20ON%2C%20CA
Set-Cookie: DDC.userCoordinates=43.67%2C-79.42
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1770268053772_388605843_475347592_23_12726_106_0_-";dur=1

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;www&#46;napletonsvalleygenesis&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;93a72917&#46;1770268053&#46;1c553a88
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;93a72917&#46;1770268053&#46;1c553a88</P>
</BODY>
</HTML>

Found 2026-02-05 by HttpPlugin

Host 92.123.104.19

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

napletonsmitsubishiofurbana.com

spradleykia.com

flowaudicharlottesville.com

augustaaudi.com

donjacksonnorth.com

keyacuragainesville.com

hicksautogroup.com

burnsvillemotors.com

Domain summary