cloudflare
tcp/80
nginx
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4981c46c8dcb44a691d7d2a9316b2a21383df2145
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /local/ls
GET /local/presets
GET /local/presigned-url
GET /local/{filename}
POST /local/kraken
POST /local/mkdir
POST /local/moddir
POST /local/modfile
POST /local/mv
POST /local/rm
POST /local/rmdir
POST /local/ul-complete
POST /local/ul-part
POST /local/ul-start
POST /local/upload
Open service 103.73.82.11:443 · findapropertyprofessional.api.org.au
2026-01-23 08:43
HTTP/1.1 404 Not Found Server: nginx Date: Fri, 23 Jan 2026 08:43:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Vary: Origin, Accept-Encoding Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 104.26.5.199:80 · api.org.au
2026-01-10 05:43
HTTP/1.1 301 Moved Permanently
Date: Sat, 10 Jan 2026 05:43:04 GMT
Content-Length: 0
Connection: close
Location: https://www.api.org.au/
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=EAInnLZ%2BSEntnE7iMr08LWr2OcsiJtnhPkFEhH%2BsOwE3%2FWDBtXbViTCVoOzypH7%2Fhmu39fUsk5VeSbuDaM14%2BXEc5eCOZILm%2BQ%3D%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Server: cloudflare
CF-RAY: 9bb9dacc9da8fdac-SIN
alt-svc: h3=":443"; ma=86400