Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 76.223.57.73:80 · api.codemetrics.ai
2026-01-09 09:42
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 09:43:53 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=t5u5dhy5zaEoLfoBPFPSwSwX70W%2FnPAIuGxJQDvFZ%2Bk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767951833"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=t5u5dhy5zaEoLfoBPFPSwSwX70W%2FnPAIuGxJQDvFZ%2Bk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767951833"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 3.33.241.96:443 · api.codemetrics.ai
2026-01-09 09:42
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 09:42:52 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=AJgU%2BD5b1tsb4LK32W%2By4z3qiHrDbZjW70torwNvmsE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767951772"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=AJgU%2BD5b1tsb4LK32W%2By4z3qiHrDbZjW70torwNvmsE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767951772"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 3.33.241.96:443 · api.codemetrics.ai
2026-01-02 07:39
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 07:39:10 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=klt8Bkw5000zBn%2FrH1NFcgFVo%2Bgx3qTOHRj8%2FPpH1tU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767339550"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=klt8Bkw5000zBn%2FrH1NFcgFVo%2Bgx3qTOHRj8%2FPpH1tU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767339550"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 76.223.57.73:80 · api.codemetrics.ai
2026-01-02 07:39
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 07:39:11 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SpGvd6mlVMwYB5z1aDEWwP3lsNUhtwYQ4v6OljF0%2BKk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767339551"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SpGvd6mlVMwYB5z1aDEWwP3lsNUhtwYQ4v6OljF0%2BKk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767339551"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 3.33.241.96:443 · api.codemetrics.ai
2025-12-23 03:52
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 03:52:22 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hK%2BwaXZoTRm1hxjyBs%2BIEo2HjdyknJP1TScy3ZyL1%2Fc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766461942"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hK%2BwaXZoTRm1hxjyBs%2BIEo2HjdyknJP1TScy3ZyL1%2Fc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766461942"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 76.223.57.73:80 · api.codemetrics.ai
2025-12-23 03:52
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 03:52:25 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bLk3wk%2Fg5R%2B2dzu15c6DA71t%2FAcqeInpqOzDpIXEM0Q%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766461945"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=bLk3wk%2Fg5R%2B2dzu15c6DA71t%2FAcqeInpqOzDpIXEM0Q%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766461945"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 76.223.57.73:80 · api.codemetrics.ai
2025-12-21 01:31
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sun, 21 Dec 2025 01:31:18 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xTkFnKsPI0AZUQGLxIQOS4A2pKXJ5i%2B9%2FHIV6VTJBSM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766280678"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xTkFnKsPI0AZUQGLxIQOS4A2pKXJ5i%2B9%2FHIV6VTJBSM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766280678"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 3.33.241.96:443 · api.codemetrics.ai
2025-12-21 01:31
HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sun, 21 Dec 2025 01:31:14 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=c7idK1DVw1TvGARcl%2FjEozqm510G1Yc5H4WyMaPMJCc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766280674"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=c7idK1DVw1TvGARcl%2FjEozqm510G1Yc5H4WyMaPMJCc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766280674"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}