BunnyCDN-DE1-1328
tcp/443
BunnyCDN-DE1-1332
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60e4a82f630271a66ef913060de3d9a0fe70bb0b0b
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/admin/Conversations/{id}
DELETE /api/admin/CrmIngestionStatus/reset
DELETE /api/admin/CrmIngestionStatus/reset-all
GET /api/Auth/me
GET /api/Chat/usage
GET /api/Conversations
GET /api/Conversations/active
GET /api/Conversations/{id}
GET /api/NewsSearch/health
GET /api/NewsSearch/search
GET /api/NewsSearch/suggestions
GET /api/admin/Conversations
GET /api/admin/Conversations/{id}/messages
GET /api/admin/Crm/debug-fields
GET /api/admin/Crm/raw-orders
GET /api/admin/Crm/stats
GET /api/admin/Crm/test-basic-query
GET /api/admin/Crm/test-connection
GET /api/admin/Crm/test-orders
GET /api/admin/Crm/test-screenshot-fields
GET /api/admin/Crm/vector-status
GET /api/admin/CrmIngestionStatus/debug-timestamps
GET /api/admin/CrmIngestionStatus/overview
GET /api/admin/CrmIngestionStatus/progress
GET /api/admin/CrmIngestionStatus/status
GET /api/admin/Dashboard/cost-by-user
GET /api/admin/Dashboard/recent-queries
GET /api/admin/Dashboard/stats
GET /api/admin/Dashboard/usage-by-day
GET /api/admin/Dashboard/user-usage/{userId}
GET /api/admin/News
GET /api/admin/News/ingestion/progress
GET /api/admin/News/ingestion/statuses
GET /api/admin/News/scheduler/status
GET /api/admin/News/stats
GET /api/admin/News/{id}
GET /api/admin/PdfDocuments
GET /api/admin/PdfDocuments/openai-files
GET /api/admin/PdfDocuments/{id}
GET /api/admin/Settings
GET /api/admin/Settings/{key}
GET /api/admin/Users
GET /api/admin/Users/{id}
GET /api/query-logs
GET /api/query-logs/export
GET /api/query-logs/user/{userId}
GET /api/usage-logs
GET /api/usage-logs/export
GET /api/usage-logs/summary
GET /api/usage-logs/user/{userId}
GET /health
POST /api/Auth/login
POST /api/Auth/logout
POST /api/Auth/register
POST /api/Chat/conversation
POST /api/Chat/crm/conversation
POST /api/Chat/message
POST /api/Chat/news/conversation
POST /api/admin/Auth/login
POST /api/admin/Crm/ingest
POST /api/admin/Crm/ingest-historic
POST /api/admin/Crm/search
POST /api/admin/CrmIngestionStatus/cleanup-stuck
POST /api/admin/News/ingest
POST /api/admin/News/ingest/batched
POST /api/admin/News/ingest/by-id
POST /api/admin/News/ingest/full
POST /api/admin/News/ingest/historic
POST /api/admin/News/ingestion/force-complete
POST /api/admin/News/ingestion/reset-stale
POST /api/admin/News/ingestion/resume
POST /api/admin/News/vector-store/initialize
POST /api/admin/PdfDocuments/sync-vector-store
POST /api/admin/PdfDocuments/upload
POST /api/admin/PdfDocuments/{id}/reprocess
POST /api/admin/Users/{id}/lock
POST /api/admin/Users/{id}/reset-password
POST /api/admin/Users/{id}/unlock
PUT /api/Conversations/{id}/title
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60e4a82f630271a66ef913060de3d9a0fe70bb0b0b
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/admin/Conversations/{id}
DELETE /api/admin/CrmIngestionStatus/reset
DELETE /api/admin/CrmIngestionStatus/reset-all
GET /api/Auth/me
GET /api/Chat/usage
GET /api/Conversations
GET /api/Conversations/active
GET /api/Conversations/{id}
GET /api/NewsSearch/health
GET /api/NewsSearch/search
GET /api/NewsSearch/suggestions
GET /api/admin/Conversations
GET /api/admin/Conversations/{id}/messages
GET /api/admin/Crm/debug-fields
GET /api/admin/Crm/raw-orders
GET /api/admin/Crm/stats
GET /api/admin/Crm/test-basic-query
GET /api/admin/Crm/test-connection
GET /api/admin/Crm/test-orders
GET /api/admin/Crm/test-screenshot-fields
GET /api/admin/Crm/vector-status
GET /api/admin/CrmIngestionStatus/debug-timestamps
GET /api/admin/CrmIngestionStatus/overview
GET /api/admin/CrmIngestionStatus/progress
GET /api/admin/CrmIngestionStatus/status
GET /api/admin/Dashboard/cost-by-user
GET /api/admin/Dashboard/recent-queries
GET /api/admin/Dashboard/stats
GET /api/admin/Dashboard/usage-by-day
GET /api/admin/Dashboard/user-usage/{userId}
GET /api/admin/News
GET /api/admin/News/ingestion/progress
GET /api/admin/News/ingestion/statuses
GET /api/admin/News/scheduler/status
GET /api/admin/News/stats
GET /api/admin/News/{id}
GET /api/admin/PdfDocuments
GET /api/admin/PdfDocuments/openai-files
GET /api/admin/PdfDocuments/{id}
GET /api/admin/Settings
GET /api/admin/Settings/{key}
GET /api/admin/Users
GET /api/admin/Users/{id}
GET /api/query-logs
GET /api/query-logs/export
GET /api/query-logs/user/{userId}
GET /api/usage-logs
GET /api/usage-logs/export
GET /api/usage-logs/summary
GET /api/usage-logs/user/{userId}
GET /health
POST /api/Auth/login
POST /api/Auth/logout
POST /api/Auth/register
POST /api/Chat/conversation
POST /api/Chat/crm/conversation
POST /api/Chat/message
POST /api/Chat/news/conversation
POST /api/admin/Auth/login
POST /api/admin/Crm/ingest
POST /api/admin/Crm/ingest-historic
POST /api/admin/Crm/search
POST /api/admin/CrmIngestionStatus/cleanup-stuck
POST /api/admin/News/ingest
POST /api/admin/News/ingest/batched
POST /api/admin/News/ingest/by-id
POST /api/admin/News/ingest/full
POST /api/admin/News/ingest/historic
POST /api/admin/News/ingestion/force-complete
POST /api/admin/News/ingestion/reset-stale
POST /api/admin/News/ingestion/resume
POST /api/admin/News/vector-store/initialize
POST /api/admin/PdfDocuments/sync-vector-store
POST /api/admin/PdfDocuments/upload
POST /api/admin/PdfDocuments/{id}/reprocess
POST /api/admin/Users/{id}/lock
POST /api/admin/Users/{id}/reset-password
POST /api/admin/Users/{id}/unlock
PUT /api/Conversations/{id}/title
Open service 185.111.111.158:443 · newsadmin.cemnet.com
2026-01-10 02:07
HTTP/1.1 404 Not Found Date: Sat, 10 Jan 2026 02:07:47 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 01/10/2026 02:07:47 CDN-EdgeStorageId: 1330 CDN-RequestId: 1b75c2d679a44c34f415caa3d32276b0 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:80 · newsadmin.cemnet.com
2026-01-09 18:09
HTTP/1.1 404 Not Found Date: Fri, 09 Jan 2026 18:09:52 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: NL Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 01/09/2026 18:09:52 CDN-EdgeStorageId: 1330 CDN-RequestId: 8361435f0b24ec2761eac2e3ec7904a5 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 2400:52e0:1e00:2::1332:1:443 · newsadmin.cemnet.com
2026-01-07 12:06
HTTP/1.1 404 Not Found Date: Wed, 07 Jan 2026 12:06:39 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 01/07/2026 12:06:39 CDN-EdgeStorageId: 1330 CDN-RequestId: 7b02dd65a3b79013622c98ca6e8bb872 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.154:443 · newsadmin.cemnet.com
2026-01-07 12:06
HTTP/1.1 404 Not Found Date: Wed, 07 Jan 2026 12:06:39 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1328 CDN-PullZone: 4683683 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 01/07/2026 12:06:39 CDN-EdgeStorageId: 1330 CDN-RequestId: a857f1595acaeda8f53460e0f7c45f0f CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:443 · newsadmin.cemnet.com
2026-01-02 18:19
HTTP/1.1 404 Not Found Date: Fri, 02 Jan 2026 18:19:08 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 01/02/2026 18:19:08 CDN-EdgeStorageId: 1330 CDN-RequestId: 28b7ed7c4022ea358c4c9b0136f5e764 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:443 · newsadmin.cemnet.com
2025-12-23 08:18
HTTP/1.1 404 Not Found Date: Tue, 23 Dec 2025 08:18:07 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/23/2025 08:18:07 CDN-EdgeStorageId: 1330 CDN-RequestId: 58dccf2f31e3141d4386b339ee5d776f CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:80 · newsadmin.cemnet.com
2025-12-23 07:56
HTTP/1.1 404 Not Found Date: Tue, 23 Dec 2025 07:56:11 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/23/2025 07:56:11 CDN-EdgeStorageId: 1330 CDN-RequestId: 3d317b456a247a0f23475d21d338f822 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:443 · newsadmin.cemnet.com
2025-12-21 10:36
HTTP/1.1 404 Not Found Date: Sun, 21 Dec 2025 10:36:35 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: GB Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/21/2025 10:36:35 CDN-EdgeStorageId: 1330 CDN-RequestId: f818c628fd01d459c61ac51d8a9a813f CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:80 · newsadmin.cemnet.com
2025-12-20 21:10
HTTP/1.1 404 Not Found Date: Sat, 20 Dec 2025 21:10:26 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/20/2025 21:10:26 CDN-EdgeStorageId: 1330 CDN-RequestId: cd9389d35c178e13d5275b4174d59e83 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0
Open service 185.111.111.158:443 · newsadmin.cemnet.com
2025-12-19 09:12
HTTP/1.1 404 Not Found Date: Fri, 19 Dec 2025 09:12:36 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1332 CDN-PullZone: 4683683 CDN-RequestCountryCode: IN Cache-Control: public, max-age=0 X-Powered-By: ASP.NET CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/19/2025 09:12:36 CDN-EdgeStorageId: 1330 CDN-RequestId: f502d58b2aa67ce43dbb18476e95f714 CDN-Cache: BYPASS CDN-Status: 404 CDN-RequestTime: 0