Domain mongorest.aduang.co
Singapore
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-10 01:41
Last seen 2026-02-16 20:14
Open for 68 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549379c4ac493b06a1901797d481b9bd67d8f545580Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/cards GET /api/cards/{id} GET /api/cards_android GET /api/cards_android/{id} GET /api/cards_ios GET /api/cards_ios/{id} GET /api/cards_web GET /api/cards_web/{id} GET /api/categories GET /api/categories/{category_id}/readings GET /api/categories/{id} GET /api/courts GET /api/courts/{id} GET /api/digit_numbers GET /api/digit_numbers/{id} GET /api/fortune_sticks GET /api/fortune_sticks/{id} GET /api/occasion GET /api/occasion/{category}/{year}/{month} GET /api/occasion/{id} GET /api/occasion/{year}/{month} GET /api/reading GET /api/reading/{id} GET /api/suits/{id} GET /api/tools GET /data/{database}/{view} GET /data/{database}/{view}/{id} GET /data/{database}/{view}/{id}/{arrayFieldName} GET /exception/binding GET /linebot/cards GET /linebot/cards/{id} GET /p/json GET /p/{id} GET /sys/stats POST /p POST /restartFound on 2026-02-16 20:14
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-10 01:41
Last seen 2026-02-16 04:52
Open for 68 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549379c4ac493b06a1901797d481b9bd67d8f545580Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/cards GET /api/cards/{id} GET /api/cards_android GET /api/cards_android/{id} GET /api/cards_ios GET /api/cards_ios/{id} GET /api/cards_web GET /api/cards_web/{id} GET /api/categories GET /api/categories/{category_id}/readings GET /api/categories/{id} GET /api/courts GET /api/courts/{id} GET /api/digit_numbers GET /api/digit_numbers/{id} GET /api/fortune_sticks GET /api/fortune_sticks/{id} GET /api/occasion GET /api/occasion/{category}/{year}/{month} GET /api/occasion/{id} GET /api/occasion/{year}/{month} GET /api/reading GET /api/reading/{id} GET /api/suits/{id} GET /api/tools GET /data/{database}/{view} GET /data/{database}/{view}/{id} GET /data/{database}/{view}/{id}/{arrayFieldName} GET /exception/binding GET /linebot/cards GET /linebot/cards/{id} GET /p/json GET /p/{id} GET /sys/stats POST /p POST /restartFound on 2026-02-16 04:52
-
-
Open service 13.67.63.90:80 · mongorest.aduang.co
2026-01-23 12:03
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 12:03:31 GMT Set-Cookie: ARRAffinity=c3d499196ff1a48b9ee10652b08c50bac07efe695b4ad5350795dad37a4749c8;Path=/;HttpOnly;Domain=mongorest.aduang.co X-Powered-By: ASP.NET
Found 2026-01-23 by HttpPluginCreate report
-
Open service 13.67.63.90:443 · mongorest.aduang.co
2026-01-23 01:11
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 01:11:45 GMT Set-Cookie: ARRAffinity=c3d499196ff1a48b9ee10652b08c50bac07efe695b4ad5350795dad37a4749c8;Path=/;HttpOnly;Secure;Domain=mongorest.aduang.co Set-Cookie: ARRAffinitySameSite=c3d499196ff1a48b9ee10652b08c50bac07efe695b4ad5350795dad37a4749c8;Path=/;HttpOnly;SameSite=None;Secure;Domain=mongorest.aduang.co X-Powered-By: ASP.NET
Found 2026-01-23 by HttpPluginCreate report