Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Open service 45.154.183.183:443 · herczegtimea.com
2025-12-30 06:08
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 06:08:54 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 41823647 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 92b2d671f2e39b48756d52bed27ef708 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · herczegtimea.com
2025-12-22 06:44
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:44:30 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 5708665 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 79bc1ab555b6c3e3f684032cf13e5031 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:443 · www.herczegtimea.com
2025-12-22 05:32
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 05:32:28 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 6974750 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: a11e5fee67d2d5b65b5574a735a10b6c Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · herczegtimea.com
2025-12-20 07:17
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 07:17:48 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 3107368 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: ca377287cfa571042be2bff47fdc4881 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:443 · www.herczegtimea.com
2025-12-20 05:58
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:58:51 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 2868988 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: d4e0aae845b6020d0f0776425073e30f Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>