AkamaiGHost
tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d602b25014e3915e53a5b94746f045effcd26f831c7
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /deviceCategory/{id}
GET /Licenses/get-all
GET /Licenses/get-last-text
GET /Licenses/get-text
GET /Media/download-document/{mediaId}
GET /Media/download/{mediaId}
GET /Media/get-document/{mediaId}
GET /Media/get-documents
GET /Media/get-images
GET /Media/icon/{mediaId}
GET /Media/original/{mediaId}
GET /Media/thumbnail/{mediaId}
GET /Media/thumbnail/{mediaId}/{width}/{height}
GET /Users/download
GET /Users/get-added-users
GET /Users/get-not-added-users
GET /Users/get-user
GET /category
GET /category/therapies
GET /category/{id}
GET /coachmenu-data
GET /coachmenu-data/{id}
GET /contact-data
GET /contact-data/main
GET /device
GET /device/{index}
GET /deviceCategory
GET /deviceCategory/category/{idCategory}/id/{id}
GET /deviceCategory/id/{id}
GET /devices/GetConsumptionData/daily
GET /devices/GetConsumptionData/monthly
GET /devices/GetConsumptionData/quarterly
GET /devices/GetConsumptionData/weekly
GET /empowerment-data
GET /empowerment-data/main
GET /equipment-articles
GET /equipment-articles/main
GET /equipment-articles/{id}
GET /faq-data
GET /faq-data/category
GET /faq-data/main
GET /faq-data/{id}
GET /generalSettings
GET /generalSettings/CountrySettings
GET /generalSettings/{key}
GET /help-data
GET /help-data/main
GET /help-data/{id}
GET /homecare
GET /homecare/main
GET /homecare/{id}
GET /jobs/getpatients
GET /jobs/getpatients/{countryCode}
GET /jobs/sendtestnotification
GET /message/find
GET /message/messagetype
GET /mobile-content/{screenName}
GET /mobile-content/{screenName}/public
GET /mobile-content/{screenName}/{id}
GET /mobileScreenCategory
GET /mobileScreenCategory/{id}
GET /mobileScreenCategory/{id}/{idCategory}
GET /patient-data/download
GET /patient-data/get-all-patients
GET /patient-data/get-patient-details
GET /patient-data/is-last-major-version-signed
GET /patients/GetAlerts
GET /patients/GetNextDeliveries
GET /patients/GetPatient
GET /patients/GetPatientData
GET /patients/GetServiceData
GET /patients/GetTherapyData
GET /shorttips-data
GET /shorttips-data/main
GET /shorttips-data/{id}
GET /therapy-insight
GET /therapy-insight/main
GET /therapy-insight/{id}
GET /tips-data
GET /tips-data/main
GET /tips-data/{id}
POST /Licenses/publish
POST /Licenses/save-draft
POST /Media/add-document
POST /Media/add-image
POST /Media/delete
POST /Users/add
POST /Users/delete
POST /Users/update
POST /contact-data/update-content
POST /equipment-articles/update-content
POST /faq-data/update-content
POST /help-data/update-content
POST /homecare/update-content
POST /jobs/calculate-daily-score-patient/{countryCode}
POST /jobs/send-points-reset
POST /jobs/update-device-list/{countryCode}/{languageCode}
POST /jobs/updatedpatient
POST /mail
POST /message
POST /mobile-content/{screenName}/update-content/{id}
POST /notification
POST /notification/delete
POST /notification/push
POST /patient-data/accept-last-license
POST /patient-data/register-patient
POST /patient-data/update-patient
POST /patients/{id}/refresh
POST /shorttips-data/update-content
POST /therapy-insight/update-content
POST /tips-data/update-content
PUT /device/{id}
PUT /equipment-articles/update-content/{id}
PUT /faq-data/update-content/{id}
PUT /help-data/update-content/{id}
PUT /homecare/update-content/{id}
PUT /message/change-status
PUT /patient-data/update-patient-status-from-provider
PUT /shorttips-data/update-content/{id}
PUT /therapy-insight/update-content/{id}
PUT /tips-data/update-content/{id}
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549720d6411cfc3cdafe7f1d8605b6db95612588b30
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /deviceCategory/{id}
GET /Licenses/get-all
GET /Licenses/get-last-text
GET /Licenses/get-text
GET /Media/download-document/{mediaId}
GET /Media/download/{mediaId}
GET /Media/get-document/{mediaId}
GET /Media/get-documents
GET /Media/get-images
GET /Media/icon/{mediaId}
GET /Media/original/{mediaId}
GET /Media/thumbnail/{mediaId}
GET /Media/thumbnail/{mediaId}/{width}/{height}
GET /Users/download
GET /Users/get-added-users
GET /Users/get-not-added-users
GET /Users/get-user
GET /category
GET /category/therapies
GET /category/{id}
GET /coachmenu-data
GET /coachmenu-data/{id}
GET /contact-data
GET /contact-data/main
GET /device
GET /device/{index}
GET /deviceCategory
GET /deviceCategory/category/{idCategory}/id/{id}
GET /deviceCategory/id/{id}
GET /devices/GetConsumptionData/daily
GET /devices/GetConsumptionData/monthly
GET /devices/GetConsumptionData/quarterly
GET /devices/GetConsumptionData/weekly
GET /empowerment-data
GET /empowerment-data/main
GET /equipment-articles
GET /equipment-articles/main
GET /equipment-articles/{id}
GET /faq-data
GET /faq-data/category
GET /faq-data/main
GET /faq-data/{id}
GET /generalSettings
GET /generalSettings/CountrySettings
GET /generalSettings/{key}
GET /help-data
GET /help-data/main
GET /help-data/{id}
GET /homecare
GET /homecare/main
GET /homecare/{id}
GET /jobs/getpatients
GET /jobs/getpatients/{countryCode}
GET /jobs/sendtestnotification
GET /message/find
GET /message/messagetype
GET /mobile-content/{screenName}
GET /mobile-content/{screenName}/public
GET /mobile-content/{screenName}/{id}
GET /mobileScreenCategory
GET /mobileScreenCategory/{id}
GET /mobileScreenCategory/{id}/{idCategory}
GET /patient-data/download
GET /patient-data/get-all-patients
GET /patient-data/get-patient-details
GET /patient-data/is-last-major-version-signed
GET /patients/GetAlerts
GET /patients/GetNextDeliveries
GET /patients/GetPatient
GET /patients/GetPatientData
GET /patients/GetServiceData
GET /patients/GetTherapyData
GET /shorttips-data
GET /shorttips-data/main
GET /shorttips-data/{id}
GET /therapy-insight
GET /therapy-insight/main
GET /therapy-insight/{id}
GET /tips-data
GET /tips-data/main
GET /tips-data/{id}
POST /Licenses/publish
POST /Licenses/save-draft
POST /Media/add-document
POST /Media/add-image
POST /Media/delete
POST /Users/add
POST /Users/delete
POST /Users/update
POST /contact-data/update-content
POST /equipment-articles/update-content
POST /faq-data/update-content
POST /help-data/update-content
POST /homecare/update-content
POST /jobs/calculate-daily-score-patient/{countryCode}
POST /jobs/send-points-reset
POST /jobs/update-device-list/{countryCode}/{languageCode}
POST /jobs/updatedpatient
POST /mail
POST /message
POST /mobile-content/{screenName}/update-content/{id}
POST /notification
POST /notification/delete
POST /notification/push
POST /patient-data/accept-last-license
POST /patient-data/register-patient
POST /patient-data/update-patient
POST /patients/{id}/refresh
POST /shorttips-data/update-content
POST /therapy-insight/update-content
POST /tips-data/update-content
PUT /device/{id}
PUT /equipment-articles/update-content/{id}
PUT /faq-data/update-content/{id}
PUT /help-data/update-content/{id}
PUT /homecare/update-content/{id}
PUT /message/change-status
PUT /patient-data/update-patient-status-from-provider
PUT /shorttips-data/update-content/{id}
PUT /therapy-insight/update-content/{id}
PUT /tips-data/update-content/{id}
Open service 2.18.244.90:80 · dev.lisa-api.linde.com
2026-01-27 10:57
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://lg-ea-hclisa-api-dev.azurewebsites.net/ Date: Tue, 27 Jan 2026 10:57:51 GMT Connection: close
Open service 2.16.1.234:443 · tst.lisa-api.linde.com
2026-01-09 17:30
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:df9c52a8-f375-4995-b152-a7f1e22aed52 Date: Fri, 09 Jan 2026 17:30:53 GMT Connection: close Set-Cookie: ARRAffinity=83fcfb125b31c877e32a7f88107673cc695657e88982b9979feaf56be30ae0ee;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net Set-Cookie: ARRAffinitySameSite=83fcfb125b31c877e32a7f88107673cc695657e88982b9979feaf56be30ae0ee;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net
Open service 2.16.6.159:80 · lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://lg-ea-hclisa-api-prd.azurewebsites.net/ Date: Wed, 07 Jan 2026 14:57:47 GMT Connection: close
Open service 2.16.6.197:443 · tst.lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:df9c52a8-f375-4995-b152-a7f1e22aed52 Date: Wed, 07 Jan 2026 14:57:05 GMT Connection: close Set-Cookie: ARRAffinity=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net Set-Cookie: ARRAffinitySameSite=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net
Open service 2.16.6.197:80 · tst.lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://lg-ea-hclisa-api-tst.azurewebsites.net/ Date: Wed, 07 Jan 2026 14:57:47 GMT Connection: close
Open service 2.16.6.155:80 · lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://lg-ea-hclisa-api-prd.azurewebsites.net/ Date: Wed, 07 Jan 2026 14:57:46 GMT Connection: close
Open service 2.16.6.222:80 · tst.lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 384 Expires: Wed, 07 Jan 2026 14:57:46 GMT Date: Wed, 07 Jan 2026 14:57:46 GMT Connection: close Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://tst.lisa-api.linde.com/" on this server.<P> Reference #18.5e8a1402.1767797866.5fe37c42 <P>https://errors.edgesuite.net/18.5e8a1402.1767797866.5fe37c42</P> </BODY> </HTML>
Open service 2.16.6.155:443 · lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 404 Not Found Content-Length: 0 Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:d929afa9-3e84-4fbc-84b7-3cf8b25daa5c Date: Wed, 07 Jan 2026 14:57:05 GMT Connection: close Set-Cookie: ARRAffinity=a2851722c59c4829bbe6b1257b283e16beda6f04f4858d4d1460170cd77c1e8c;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-prd.azurewebsites.net Set-Cookie: ARRAffinitySameSite=a2851722c59c4829bbe6b1257b283e16beda6f04f4858d4d1460170cd77c1e8c;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-prd.azurewebsites.net
Open service 2.16.6.222:443 · tst.lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:df9c52a8-f375-4995-b152-a7f1e22aed52 Date: Wed, 07 Jan 2026 14:57:05 GMT Connection: close Set-Cookie: ARRAffinity=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net Set-Cookie: ARRAffinitySameSite=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net
Open service 2.16.6.159:443 · lisa-api.linde.com
2026-01-07 14:57
HTTP/1.1 404 Not Found Content-Length: 0 Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:d929afa9-3e84-4fbc-84b7-3cf8b25daa5c Date: Wed, 07 Jan 2026 14:57:05 GMT Connection: close Set-Cookie: ARRAffinity=a2851722c59c4829bbe6b1257b283e16beda6f04f4858d4d1460170cd77c1e8c;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-prd.azurewebsites.net Set-Cookie: ARRAffinitySameSite=a2851722c59c4829bbe6b1257b283e16beda6f04f4858d4d1460170cd77c1e8c;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-prd.azurewebsites.net
Open service 2.16.1.234:443 · tst.lisa-api.linde.com
2026-01-02 09:57
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:df9c52a8-f375-4995-b152-a7f1e22aed52 Date: Fri, 02 Jan 2026 09:57:49 GMT Connection: close Set-Cookie: ARRAffinity=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net Set-Cookie: ARRAffinitySameSite=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net
Open service 2.16.1.234:443 · tst.lisa-api.linde.com
2025-12-22 23:27
HTTP/1.1 404 Not Found Content-Length: 0 Request-Context: appId=cid-v1:df9c52a8-f375-4995-b152-a7f1e22aed52 Date: Mon, 22 Dec 2025 23:27:52 GMT Connection: close Set-Cookie: ARRAffinity=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net Set-Cookie: ARRAffinitySameSite=da47d32e79501176e81b1c3683ccfcfeb94f60049fd06b28b5c1b37d0ee3c3bb;Path=/;HttpOnly;SameSite=None;Secure;Domain=lg-ea-hclisa-api-tst.azurewebsites.net