openresty
tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Open service 3.90.123.2:80 · elink.dev.cd-developers.org
2026-01-09 09:13
HTTP/1.1 404
Server: openresty
Date: Fri, 09 Jan 2026 09:13:04 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Frame-Options: DENY
Expires: 0
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
{
"timestamp" : "2026-01-09T09:13:04.746+00:00",
"status" : 404,
"error" : "Not Found",
"message" : "",
"path" : "/"
}
Open service 3.90.123.2:80 · elink.dev.cd-developers.org
2026-01-02 12:52
HTTP/1.1 404
Server: openresty
Date: Fri, 02 Jan 2026 12:52:26 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Frame-Options: DENY
Expires: 0
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
{
"timestamp" : "2026-01-02T12:52:26.492+00:00",
"status" : 404,
"error" : "Not Found",
"message" : "",
"path" : "/"
}
Open service 3.90.123.2:80 · elink.dev.cd-developers.org
2025-12-22 18:47
HTTP/1.1 404
Server: openresty
Date: Mon, 22 Dec 2025 18:47:34 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Frame-Options: DENY
Expires: 0
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
{
"timestamp" : "2025-12-22T18:47:34.772+00:00",
"status" : 404,
"error" : "Not Found",
"message" : "",
"path" : "/"
}
Open service 3.90.123.2:80 · elink.dev.cd-developers.org
2025-12-20 16:21
HTTP/1.1 404
Server: openresty
Date: Sat, 20 Dec 2025 16:21:55 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
X-Frame-Options: DENY
Expires: 0
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
{
"timestamp" : "2025-12-20T16:21:55.511+00:00",
"status" : 404,
"error" : "Not Found",
"message" : "",
"path" : "/"
}