Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 188.166.133.246:443 · user.waybler.com
2026-01-09 12:57
HTTP/1.1 404 Not Found Date: Fri, 09 Jan 2026 12:57:29 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
Open service 188.166.133.246:443 · user.waybler.com
2026-01-02 20:05
HTTP/1.1 404 Not Found Date: Fri, 02 Jan 2026 20:05:12 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
Open service 188.166.133.246:443 · user.waybler.com
2025-12-23 07:39
HTTP/1.1 404 Not Found Date: Tue, 23 Dec 2025 07:39:09 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
Open service 188.166.133.246:80 · user.waybler.com
2025-12-21 12:56
HTTP/1.1 308 Permanent Redirect Date: Sun, 21 Dec 2025 12:56:27 GMT Content-Type: text/html Content-Length: 164 Connection: close Location: https://user.waybler.com Page title: 308 Permanent Redirect <html> <head><title>308 Permanent Redirect</title></head> <body> <center><h1>308 Permanent Redirect</h1></center> <hr><center>nginx</center> </body> </html>
Open service 188.166.133.246:443 · user.waybler.com
2025-12-21 12:56
HTTP/1.1 404 Not Found Date: Sun, 21 Dec 2025 12:56:27 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
Open service 188.166.133.246:443 · user.waybler.com
2025-12-21 06:24
HTTP/1.1 404 Not Found Date: Sun, 21 Dec 2025 06:24:13 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
Open service 188.166.133.246:443 · user.waybler.com
2025-12-19 08:22
HTTP/1.1 404 Not Found Date: Fri, 19 Dec 2025 08:22:30 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains