cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0b7fa6db695144203417ff1893
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /attendance/report/export
GET /categories
GET /categories/{id}
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures
GET /daily-measures/{id}
GET /fronts
GET /fronts/{frontId}
GET /modules
GET /navigate
GET /persons
GET /persons/{personId}
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/members
GET /projects/{projectId}/photo
GET /projects/{projectId}/roles
GET /projects/{projectId}/timesheets
GET /reports/ip
GET /reports/ip/weekly
GET /reports/partidas/metrics
GET /reports/personal
GET /reports/productivity
GET /reports/progress
GET /reports/s-curve
GET /reports/weekly-hours
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/export-s10
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
GET /weekly-measures
PATCH /plan/partidas/{partidaId}/series/{type}
POST /attendance
POST /attendance/check-in
POST /attendance/check-out
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /projects/{projectId}/roles/{roleId}/permissions
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0b3b5e8a2e856c6cfdc2d50784
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /categories
GET /categories/{id}
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures
GET /daily-measures/{id}
GET /fronts
GET /fronts/{frontId}
GET /modules
GET /persons
GET /persons/{personId}
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/members
GET /projects/{projectId}/photo
GET /projects/{projectId}/roles
GET /projects/{projectId}/timesheets
GET /reports/partidas/metrics
GET /reports/productivity
GET /reports/progress
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/export-s10
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
GET /weekly-measures
PATCH /plan/partidas/{partidaId}/series/{type}
POST /attendance
POST /attendance/check-in
POST /attendance/check-out
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /projects/{projectId}/roles/{roleId}/permissions
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0b3b5e8a2e856c6cfd9d111a30
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /categories
GET /categories/{id}
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures
GET /daily-measures/{id}
GET /fronts
GET /fronts/{frontId}
GET /modules
GET /persons
GET /persons/{personId}
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/members
GET /projects/{projectId}/photo
GET /projects/{projectId}/roles
GET /projects/{projectId}/timesheets
GET /reports/productivity
GET /reports/progress
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/export-s10
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
GET /weekly-measures
PATCH /plan/partidas/{partidaId}/series/{type}
POST /attendance
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /projects/{projectId}/roles/{roleId}/permissions
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0b3b5e8a2e856c6cfd599c2691
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /categories
GET /categories/{id}
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures
GET /daily-measures/{id}
GET /modules
GET /persons
GET /persons/{personId}
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/fronts
GET /projects/{projectId}/fronts/{frontId}
GET /projects/{projectId}/members
GET /projects/{projectId}/photo
GET /projects/{projectId}/roles
GET /projects/{projectId}/timesheets
GET /reports/productivity
GET /reports/progress
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
POST /attendance
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /projects/{projectId}/roles/{roleId}/permissions
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0bb748647c42dd8077c575560b
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures
GET /daily-measures/{id}
GET /modules
GET /persons
GET /persons/{personId}
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/members
GET /projects/{projectId}/roles
GET /reports/productivity
GET /reports/progress
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
POST /attendance
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /projects/{projectId}/roles/{roleId}/permissions
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b433b80ecd590ce0bb748647c42dd8077cece1652
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /attendance/crew/{crewId}
GET /attendance/report
GET /crews
GET /crews/by-user
GET /crews/{crewId}
GET /crews/{crewId}/members
GET /daily-measures/{id}
GET /modules
GET /persons
GET /persons/{personId}/photo
GET /plan/config
GET /plan/import-batches
GET /plan/partidas
GET /plan/phases
GET /plan/series-versions
GET /plan/structure
GET /projects
GET /projects/{projectId}
GET /projects/{projectId}/daily-measures
GET /projects/{projectId}/members
GET /projects/{projectId}/roles
GET /reports/productivity
GET /reports/progress
GET /scalar
GET /scalar/scalar.js
GET /timesheets
GET /timesheets/{id}
GET /users
GET /users/me
GET /users/{userId}
GET /users/{userId}/project-roles
POST /attendance
POST /auth/login
POST /auth/refresh
POST /plan/import
POST /plan/import/preview
POST /timesheets/{id}/submit
POST /timesheets/{id}/validate
PUT /crews/{crewId}/partidas
PUT /persons/{personId}
PUT /projects/{projectId}/roles/{roleId}/permissions
Open service 188.114.96.12:443 · api.ingeniatecvirtual.com
2026-01-09 15:57
Open service 188.114.96.12:443 · api.ingeniatecvirtual.com
2026-01-02 20:21
HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 02 Jan 2026 20:21:28 GMT Content-Type: text/html Content-Length: 253 Connection: close CF-RAY: - Page title: 400 The plain HTTP request was sent to HTTPS port <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>cloudflare</center> </body> </html>
Open service 188.114.96.12:443 · api.ingeniatecvirtual.com
2025-12-23 03:03
HTTP/1.1 401 Unauthorized
Date: Tue, 23 Dec 2025 03:03:45 GMT
Content-Type: application/json
Content-Length: 108
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=udG4E%2FXFQ1e0jpT8ZU3PWmIXHGxcXPriZ%2FZMDZgXbQxJvUCrKyXqy%2Bhmv73zm3FTylyeMxfExQwu8F%2BwJVTMhJPhMZ%2Ba52AsoMC2gOEXI1mVzE5Q4257xLE%3D"}]}
CF-RAY: 9b24a0ac0f383c26-AMS
alt-svc: h3=":443"; ma=86400
{"success":false,"message":"Unauthorized","error":"Full authentication is required to access this resource"}
Open service 188.114.96.12:443 · api.ingeniatecvirtual.com
2025-12-21 07:58
HTTP/1.1 401 Unauthorized
Date: Sun, 21 Dec 2025 07:58:44 GMT
Content-Type: application/json
Content-Length: 108
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=4,cfOrigin;dur=14
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4B6h0dHsimca02Hf2r5cSXXqfUXQp24XkBKjH3t8C8uNxK%2F6rrlmOYswXKGQYVOMBN49ZpIP0tcpbaOO%2FDsMv0LpqO8Q1AQwn5Ac5%2F%2FtfDxUixtVRzOfamU%3D"}]}
CF-RAY: 9b15d609dadc592d-YYZ
alt-svc: h3=":443"; ma=86400
{"success":false,"message":"Unauthorized","error":"Full authentication is required to access this resource"}
Open service 188.114.96.12:443 · api.ingeniatecvirtual.com
2025-12-19 09:21
HTTP/1.1 401 Unauthorized
Date: Fri, 19 Dec 2025 09:21:01 GMT
Content-Type: application/json
Content-Length: 108
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hMbjU6Jx678zhUnvC6qoxBQrWoMwUU45lxqxCkdKVV1sIS9ysHX9Uv70z3XOebbD0%2F6acETRn0%2ByXPZle3MRYoROVdrHCw0SQBGAMfda%2B6Ewh%2Ft%2B5V4Llj0%3D"}]}
CF-RAY: 9b05d3cc885a2bae-FRA
alt-svc: h3=":443"; ma=86400
{"success":false,"message":"Unauthorized","error":"Full authentication is required to access this resource"}