Kestrel
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354906af09da06af09da06af09da06af09da06af09da
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/companies/norrecco/datasets/weighings
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035490ac9810c76de3ec376de3ec376de3ec376de3ec3
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/companies/citycontainer/datasets/co2 GET /api/companies/norrecco/datasets/weighings
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354906af09da06af09da06af09da06af09da06af09da
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/companies/norrecco/datasets/weighings
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035490ac9810c76de3ec376de3ec376de3ec376de3ec3
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/companies/citycontainer/datasets/co2 GET /api/companies/norrecco/datasets/weighings
Open service 13.69.68.45:443 · api.dataportal.reconor.com
2026-01-23 10:15
HTTP/1.1 401 Unauthorized
Connection: close
Content-Type: application/json; charset=utf-8
Date: Fri, 23 Jan 2026 10:15:43 GMT
Server: Kestrel
Set-Cookie: ARRAffinity=468d0ea46d71e59e280e62637e3893ec6921273cc256dc3b336bb721eb18c2d1;Path=/;HttpOnly;Secure;Domain=api.dataportal.reconor.com
Set-Cookie: ARRAffinitySameSite=468d0ea46d71e59e280e62637e3893ec6921273cc256dc3b336bb721eb18c2d1;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.dataportal.reconor.com
Transfer-Encoding: chunked
{"error":"Unauthorized","message":"API key is required. Please provide a valid API key in the X-API-Key header."}
Open service 13.69.68.45:80 · api.dataportal.reconor.com
2026-01-23 02:04
HTTP/1.1 401 Unauthorized
Connection: close
Content-Type: application/json; charset=utf-8
Date: Fri, 23 Jan 2026 02:05:22 GMT
Server: Kestrel
Set-Cookie: ARRAffinity=468d0ea46d71e59e280e62637e3893ec6921273cc256dc3b336bb721eb18c2d1;Path=/;HttpOnly;Domain=api.dataportal.reconor.com
Transfer-Encoding: chunked
{"error":"Unauthorized","message":"API key is required. Please provide a valid API key in the X-API-Key header."}
Open service 13.69.68.45:80 · api.dataportal.reconor.com
2026-01-10 01:24
HTTP/1.1 401 Unauthorized
Connection: close
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 01:25:06 GMT
Server: Kestrel
Set-Cookie: ARRAffinity=468d0ea46d71e59e280e62637e3893ec6921273cc256dc3b336bb721eb18c2d1;Path=/;HttpOnly;Domain=api.dataportal.reconor.com
Transfer-Encoding: chunked
{"error":"Unauthorized","message":"API key is required. Please provide a valid API key in the X-API-Key header."}