Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Open service 45.154.183.183:443 · aba-practice.com
2025-12-31 23:10
HTTP/1.1 403 Forbidden Date: Wed, 31 Dec 2025 23:10:24 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 31697707 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 675106397cb636b9e83e0bf629f82243 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:80 · aba-practice.com
2025-12-31 23:10
HTTP/1.1 403 Forbidden Date: Wed, 31 Dec 2025 23:10:24 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 50014429 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 8dba64e698be6284df59539b2c2a4ec8 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · aba-practice.com
2025-12-22 08:45
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 08:45:51 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 21799596 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: bd7f79f494334fe601e890e113a12bd1 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:443 · www.aba-practice.com
2025-12-22 08:45
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 08:45:50 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 8622855 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 7e6bf80dc63b3f5cc27427293f4396ca Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · aba-practice.com
2025-12-20 09:27
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 09:27:09 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 19837000 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 662ba7a8b09a46a8c1c922d80947f421 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:443 · www.aba-practice.com
2025-12-20 09:27
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 09:27:07 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4959626 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 05a442f308e15e6cd05242d92ec84d8f Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>