Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Open service 60.221.17.73:443 · screen-capture.toolapi.soogif.com
2026-01-23 15:01
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 15:02:13 GMT
Content-Type: application/json
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Server: Lego Server
X-Cache-Lookup: Cache Miss
X-Cache-Lookup: Hit From Upstream Cluster
X-Cache-Lookup: Hit From Inner Cluster
Transfer-Encoding: chunked
X-NWS-LOG-UUID: 2053428754419326864
Connection: close
X-Cache-Lookup: Cache Miss
{"timestamp":"2026-01-23T15:02:13.631+0000","status":404,"error":"Not Found","message":"No message available","path":"/"}
Open service 116.142.249.102:80 · screen-capture.toolapi.soogif.com
2026-01-23 01:15
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 01:15:28 GMT
Content-Type: application/json
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Server: Lego Server
X-Cache-Lookup: Cache Miss
X-Cache-Lookup: Hit From Upstream Cluster
X-Cache-Lookup: Hit From Inner Cluster
Transfer-Encoding: chunked
X-NWS-LOG-UUID: 10517458601253129724
Connection: close
X-Cache-Lookup: Cache Miss
{"timestamp":"2026-01-23T01:15:28.262+0000","status":404,"error":"Not Found","message":"No message available","path":"/"}