LeakIX - Host utilities.borobudurmarathon.com

Domain utilities.borobudurmarathon.com

Indonesia

INDO Internet, PT

Ubuntu

Software information

nginx nginx 1.18.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: utilities.borobudurmarathon.com
Port: 8443
URL: https://utilities.borobudurmarathon.com:8443

First seen 2025-10-14 01:47
Last seen 2026-01-12 19:17
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 19:17
Create report

Open service 202.159.30.243:80 · utilities.borobudurmarathon.com

2026-01-12 19:17

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:17:28 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2026-01-12 19:17

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Mon, 12 Jan 2026 19:17:28 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · utilities.borobudurmarathon.com

2026-01-12 19:17

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:17:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6
Connection: close
X-Powered-By: Express
ETag: W/"6-aTQsXDnlrl8Ad67MMsD4GBH7gZM"


Hello!

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2026-01-09 16:39

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Fri, 09 Jan 2026 16:39:31 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2026-01-01 21:06

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Thu, 01 Jan 2026 21:06:32 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-01 by HttpPlugin

Create report

Open service 202.159.30.243:443 · utilities.borobudurmarathon.com

2025-12-29 20:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 29 Dec 2025 20:16:35 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6
Connection: close
X-Powered-By: Express
ETag: W/"6-aTQsXDnlrl8Ad67MMsD4GBH7gZM"


Hello!

Found 2025-12-29 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2025-12-29 20:16

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Mon, 29 Dec 2025 20:16:35 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-29 by HttpPlugin

Create report

Open service 202.159.30.243:80 · utilities.borobudurmarathon.com

2025-12-29 20:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 29 Dec 2025 20:16:35 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2025-12-29 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2025-12-22 20:46

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Mon, 22 Dec 2025 20:46:57 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:80 · utilities.borobudurmarathon.com

2025-12-22 20:46

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 22 Dec 2025 20:46:58 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:443 · utilities.borobudurmarathon.com

2025-12-22 20:46

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 22 Dec 2025 20:46:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6
Connection: close
X-Powered-By: Express
ETag: W/"6-aTQsXDnlrl8Ad67MMsD4GBH7gZM"


Hello!

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2025-12-22 18:50

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Mon, 22 Dec 2025 18:50:58 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2025-12-20 21:01

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Sat, 20 Dec 2025 21:01:20 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · utilities.borobudurmarathon.com

2025-12-20 00:18

HTTP/1.1 302 Found
location: http://utilities.borobudurmarathon.com/manager
content-length: 0
date: Sat, 20 Dec 2025 00:18:53 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 202.159.30.243:443 · utilities.borobudurmarathon.com

2025-12-20 00:18

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 20 Dec 2025 00:18:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6
Connection: close
X-Powered-By: Express
ETag: W/"6-aTQsXDnlrl8Ad67MMsD4GBH7gZM"


Hello!

Found 2025-12-20 by HttpPlugin

Create report

Open service 202.159.30.243:80 · utilities.borobudurmarathon.com

2025-12-20 00:18

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 20 Dec 2025 00:18:54 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

localhost

Fingerprint:

1bf2c5323b3abfe26935f03c021f98596c3b92fc50a1d1f161f43aa8fefc7448

CN:

OpenRemote Demo Cert

Key:

RSA-2048

Issuer:

OpenRemote Demo Cert

Not before:

2020-06-08 19:17

Not after:

2050-06-01 19:17

utilities.borobudurmarathon.com

Fingerprint:

02bbdd912010a48a80e41985712f4a9a81575c4dc72362e9243db28ddc7690a4

CN:

utilities.borobudurmarathon.com

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-12 18:17

Not after:

2026-04-12 18:17

utilities.borobudurmarathon.com

Fingerprint:

5344d804fa7664b188df95f92bd397a3b63c016077856c4036dbbe53534f574c

CN:

utilities.borobudurmarathon.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-29 19:17

Not after:

2026-03-29 19:17

utilities.borobudurmarathon.com

Fingerprint:

0e9c31168e2008ad241c2c8157cc3417c8c4ceee9588c8abb3c9d48fb4b54800

CN:

utilities.borobudurmarathon.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-22 19:48

Not after:

2026-03-22 19:48

utilities.borobudurmarathon.com

Fingerprint:

2ca4ce84f8d4ff4fd88bdcc6e3a4f73c0b8142baeb46a9e340cdbe9d9af02a19

CN:

utilities.borobudurmarathon.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-15 20:17

Not after:

2026-03-15 20:17

Domain summary

utilities.borobudurmarathon.com 16

1 recorded

IP summary

202.159.30.243 2

1 recorded

Domain utilities.borobudurmarathon.com

Indonesia

Software information

Swagger API description is publicly available

localhost

utilities.borobudurmarathon.com

utilities.borobudurmarathon.com

utilities.borobudurmarathon.com

utilities.borobudurmarathon.com

Domain summary

IP summary