Domain user-access-dev-4a.testfaz.net
Germany
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 2.18.64.197
Domain: user-access-dev-4a.testfaz.net
Port: 443
URL: https://user-access-dev-4a.testfaz.netFirst seen 2025-12-04 09:14
Last seen 2026-02-09 16:11
Open for 67 days-
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b60fee5cf8d9eff4c93b7cadc802742641c741763Public Swagger UI/API detected at path: /v3/api-docs - sample paths: GET /authorize GET /oauth/entitlement-check GET /sessions GET /spotify/init GET /spotify/link GET /user-access GET /user/auth GET /user/sessions GET /user/setCookie POST /session/{sessionId} POST /user/login POST /user/loginExternal POST /user/logout POST /user/logoutExternal POST /user/register POST /user/resendValidationMail POST /user/restorePassword POST /user/session POST /user/session/{sessionId} POST /webhook/frisbiiFound on 2026-02-09 16:11 -
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b60fee5cf8d9eff4c93b7cadc6bfaced94f7a3e54Public Swagger UI/API detected at path: /v3/api-docs - sample paths: GET /authorize GET /oauth/entitlement-check GET /sessions GET /user-access GET /user/auth GET /user/sessions GET /user/setCookie POST /session/{sessionId} POST /user/login POST /user/loginExternal POST /user/logout POST /user/logoutExternal POST /user/register POST /user/resendValidationMail POST /user/restorePassword POST /user/session POST /user/session/{sessionId}Found on 2026-01-23 07:36
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 2.18.64.197
Domain: user-access-dev-4a.testfaz.net
Port: 80
URL: http://user-access-dev-4a.testfaz.netFirst seen 2025-12-04 09:14
Last seen 2026-02-09 04:55
Open for 66 days-
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b60fee5cf8d9eff4c93b7cadc802742641c741763Public Swagger UI/API detected at path: /v3/api-docs - sample paths: GET /authorize GET /oauth/entitlement-check GET /sessions GET /spotify/init GET /spotify/link GET /user-access GET /user/auth GET /user/sessions GET /user/setCookie POST /session/{sessionId} POST /user/login POST /user/loginExternal POST /user/logout POST /user/logoutExternal POST /user/register POST /user/resendValidationMail POST /user/restorePassword POST /user/session POST /user/session/{sessionId} POST /webhook/frisbiiFound on 2026-02-09 04:55 -
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b60fee5cf8d9eff4c93b7cadc6bfaced94f7a3e54Public Swagger UI/API detected at path: /v3/api-docs - sample paths: GET /authorize GET /oauth/entitlement-check GET /sessions GET /user-access GET /user/auth GET /user/sessions GET /user/setCookie POST /session/{sessionId} POST /user/login POST /user/loginExternal POST /user/logout POST /user/logoutExternal POST /user/register POST /user/resendValidationMail POST /user/restorePassword POST /user/session POST /user/session/{sessionId}Found on 2026-01-09 12:40
-
-
Open service 2.18.64.197:443 · user-access-dev-4a.testfaz.net
2026-01-23 07:36
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: bed6976b856635bd557374b14ede3dfa Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Fri, 23 Jan 2026 07:36:32 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2026-01-23T07:36:32.072+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2026-01-23 by HttpPluginCreate report
-
Open service 2.18.64.197:80 · user-access-dev-4a.testfaz.net
2026-01-09 12:40
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: 561aaaf1b03cef2b6c72c84fb6c2f187 Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Fri, 09 Jan 2026 12:40:47 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2026-01-09T12:40:47.021+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2026-01-09 by HttpPluginCreate report
-
Open service 2.18.64.197:443 · user-access-dev-4a.testfaz.net
2026-01-09 11:24
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: 4cbee836bfe8afda92c708039d2ced56 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Fri, 09 Jan 2026 11:24:02 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2026-01-09T11:24:02.972+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2026-01-09 by HttpPluginCreate report
-
Open service 2.18.64.197:443 · user-access-dev-4a.testfaz.net
2026-01-02 16:54
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: 093b9907f2170b6ab0126cd1e23ea8a5 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Fri, 02 Jan 2026 16:54:58 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2026-01-02T16:54:58.329+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.18.64.197:80 · user-access-dev-4a.testfaz.net
2026-01-02 01:54
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: dea6c09e6950b2498e44139766a512c0 Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Fri, 02 Jan 2026 01:54:54 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2026-01-02T01:54:54.450+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.18.64.197:443 · user-access-dev-4a.testfaz.net
2025-12-23 07:34
HTTP/1.1 404 Not Found Content-Type: application/json X-Request-ID: c4c12296043f4703ca22ac510a152e47 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: origin Vary: access-control-request-method Vary: access-control-request-headers Date: Tue, 23 Dec 2025 07:34:33 GMT Content-Length: 122 Connection: close X-Debug-A-Serial: 313-1669027486 X-Debug-A-Add-Debug-Headers: true {"timestamp":"2025-12-23T07:34:33.348+00:00","status":404,"error":"Not Found","message":"No static resource .","path":"/"}Found 2025-12-23 by HttpPluginCreate report