BunnyCDN-DE1-752
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43893010f60b0aa35ab9191069b44dca723402b0ef
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /debug/settings/config
GET /debug/settings/pprof
GET /genesis
GET /health
GET /metrics
GET /ready
GET /swagger.json
GET /v2/accounts/{address}
GET /v2/accounts/{address}/applications/{application-id}
GET /v2/accounts/{address}/assets
GET /v2/accounts/{address}/assets/{asset-id}
GET /v2/accounts/{address}/transactions/pending
GET /v2/applications/{application-id}
GET /v2/applications/{application-id}/box
GET /v2/applications/{application-id}/boxes
GET /v2/assets/{asset-id}
GET /v2/blocks/{round}
GET /v2/blocks/{round}/hash
GET /v2/blocks/{round}/lightheader/proof
GET /v2/blocks/{round}/logs
GET /v2/blocks/{round}/transactions/{txid}/proof
GET /v2/blocks/{round}/txids
GET /v2/deltas/txn/group/{id}
GET /v2/deltas/{round}
GET /v2/deltas/{round}/txn/group
GET /v2/devmode/blocks/offset
GET /v2/experimental
GET /v2/ledger/supply
GET /v2/ledger/sync
GET /v2/participation
GET /v2/participation/{participation-id}
GET /v2/stateproofs/{round}
GET /v2/status
GET /v2/status/wait-for-block-after/{round}
GET /v2/transactions/params
GET /v2/transactions/pending
GET /v2/transactions/pending/{txid}
GET /versions
POST /v2/catchup/{catchpoint}
POST /v2/devmode/blocks/offset/{offset}
POST /v2/ledger/sync/{round}
POST /v2/participation/generate/{address}
POST /v2/shutdown
POST /v2/teal/compile
POST /v2/teal/disassemble
POST /v2/teal/dryrun
POST /v2/transactions
POST /v2/transactions/async
POST /v2/transactions/simulate
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43893010f60b0aa35ab9191069b44dca723402b0ef
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /debug/settings/config
GET /debug/settings/pprof
GET /genesis
GET /health
GET /metrics
GET /ready
GET /swagger.json
GET /v2/accounts/{address}
GET /v2/accounts/{address}/applications/{application-id}
GET /v2/accounts/{address}/assets
GET /v2/accounts/{address}/assets/{asset-id}
GET /v2/accounts/{address}/transactions/pending
GET /v2/applications/{application-id}
GET /v2/applications/{application-id}/box
GET /v2/applications/{application-id}/boxes
GET /v2/assets/{asset-id}
GET /v2/blocks/{round}
GET /v2/blocks/{round}/hash
GET /v2/blocks/{round}/lightheader/proof
GET /v2/blocks/{round}/logs
GET /v2/blocks/{round}/transactions/{txid}/proof
GET /v2/blocks/{round}/txids
GET /v2/deltas/txn/group/{id}
GET /v2/deltas/{round}
GET /v2/deltas/{round}/txn/group
GET /v2/devmode/blocks/offset
GET /v2/experimental
GET /v2/ledger/supply
GET /v2/ledger/sync
GET /v2/participation
GET /v2/participation/{participation-id}
GET /v2/stateproofs/{round}
GET /v2/status
GET /v2/status/wait-for-block-after/{round}
GET /v2/transactions/params
GET /v2/transactions/pending
GET /v2/transactions/pending/{txid}
GET /versions
POST /v2/catchup/{catchpoint}
POST /v2/devmode/blocks/offset/{offset}
POST /v2/ledger/sync/{round}
POST /v2/participation/generate/{address}
POST /v2/shutdown
POST /v2/teal/compile
POST /v2/teal/disassemble
POST /v2/teal/dryrun
POST /v2/transactions
POST /v2/transactions/async
POST /v2/transactions/simulate
Open service 79.127.216.111:443 · ext-testnet-api.algonode.cloud
2026-01-09 14:51
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 14:51:43 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/09/2026 14:51:43 CDN-EdgeStorageId: 1047 CDN-RequestId: 9ad9b92e69ae8ac64fefc36b96f5042f CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:80 · ext-testnet-api.algonode.cloud
2026-01-09 09:48
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 09:48:34 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/09/2026 09:48:34 CDN-EdgeStorageId: 1047 CDN-RequestId: cc4c0f0560d654ffde1e90a128d74121 CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:443 · ext-testnet-api.algonode.cloud
2026-01-02 18:02
HTTP/1.1 302 Found Date: Fri, 02 Jan 2026 18:02:15 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/02/2026 18:02:15 CDN-EdgeStorageId: 1047 CDN-RequestId: 98a91b6fd2283c82bc7a5d159e5ff5e8 CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:80 · ext-testnet-api.algonode.cloud
2026-01-02 16:07
HTTP/1.1 302 Found Date: Fri, 02 Jan 2026 16:07:18 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/02/2026 16:07:18 CDN-EdgeStorageId: 1047 CDN-RequestId: a9c7c0e79dd3632e209c21478290c84a CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:443 · ext-testnet-api.algonode.cloud
2025-12-23 08:41
HTTP/1.1 302 Found Date: Tue, 23 Dec 2025 08:41:21 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/23/2025 08:41:21 CDN-EdgeStorageId: 1047 CDN-RequestId: 0bcf6700204d5baf94c9f4ed5de67f6d CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:80 · ext-testnet-api.algonode.cloud
2025-12-23 06:15
HTTP/1.1 302 Found Date: Tue, 23 Dec 2025 06:15:35 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: SG Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/23/2025 06:15:35 CDN-EdgeStorageId: 1047 CDN-RequestId: 30ff85e8071fc2cc0abdd51d2061901b CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:443 · ext-testnet-api.algonode.cloud
2025-12-21 10:19
HTTP/1.1 302 Found Date: Sun, 21 Dec 2025 10:19:36 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/21/2025 10:19:36 CDN-EdgeStorageId: 1047 CDN-RequestId: 45c30c7a029d239a70aebd7b85923368 CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:80 · ext-testnet-api.algonode.cloud
2025-12-20 23:22
HTTP/1.1 302 Found Date: Sat, 20 Dec 2025 23:22:01 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: NL Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/20/2025 23:22:01 CDN-EdgeStorageId: 1047 CDN-RequestId: 1039bd2f2ce857f4e68c78c788f7227c CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>
Open service 79.127.216.111:80 · ext-testnet-api.algonode.cloud
2025-12-19 01:14
HTTP/1.1 302 Found Date: Fri, 19 Dec 2025 01:14:34 GMT Content-Type: text/html Content-Length: 142 Connection: close Server: BunnyCDN-DE1-752 CDN-PullZone: 3186857 CDN-RequestCountryCode: NL Cache-Control: public, max-age=0 Location: https://nodely.io/swagger/index.html?url=/swagger/api/4160/algod.oas3.yml CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/19/2025 01:14:34 CDN-EdgeStorageId: 1047 CDN-RequestId: a7696e0e30674de642c63fb33b1e5a09 CDN-Cache: BYPASS CDN-Status: 302 CDN-RequestTime: 0 Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>openresty</center> </body> </html>