LeakIX - Host www.addcodes.top

Domain www.addcodes.top

China

China Telecom Group

Software information

Tengine

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.111
Domain: www.addcodes.top
Port: 443
URL: https://www.addcodes.top

First seen 2026-01-16 06:46
Last seen 2026-01-23 01:49
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-23 01:49
Create report

Open service 180.163.146.111:443 · www.addcodes.top

2026-01-23 01:49

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Language: zh-CN
Cache-Control: max-age=15552000
Pragma: no-cache
Expires: 0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
set-cookie: XSRF-TOKEN=6e837408-9499-4080-8421-714821e3bb6c; Path=/; HTTPOnly
Via: ens-cache12.l2cn9014[89,89,200-0,M], ens-cache43.l2cn9014[91,0], kunlun10.cn7174[110,109,200-0,M], kunlun10.cn7174[120,0]
X-Ali-Tproxy-Consistent-Hash-Hot: 1
Ali-Swift-Global-Savetime: 1769132968
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 23 Jan 2026 01:49:28 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: b4a3921e17691329679551617e

Page title: Bona萧のblog

<!doctype html>
<html lang="zh-CN">
  <head>
    
  <meta charset="UTF-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge" />
  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2" />
  <title>Bona萧のblog</title>
  
  <link rel="stylesheet" href="/themes/theme-earth/assets/dist/style.css?v=1.13.1" />
  <script>
    window.i18nResources = {
      "jsModule.colorSchemeSwitcher.dark": `暗色`,
      "jsModule.colorSchemeSwitcher.light": `亮色`,
      "jsModule.colorSchemeSwitcher.auto": `跟随系统`,
      "jsModule.share.qzone": `QQ 空间`,
      "jsModule.share.weibo": `微博`,
      "jsModule.share.douban": `豆瓣`,
      "jsModule.share.wechat": `微信`,
      "jsModule.share.native": `系统分享`,
      "jsModule.share.windowTitle": `分享`,
      "jsModule.upvote.networkError": `网络请求失败，请稍后再试`,
    };
  </script>
  <script src="/themes/theme-earth/assets/dist/main.iife.js?v=1.13.1"></script>
  <script>
    main.initColorScheme("system",true)
  </script>


    
  <meta name="robots" content="noindex"/><meta name="generator" content="Halo 2.21.9"/><!-- plugin-comment-widget start -->
<link rel="modulepreload" href="/plugins/PluginCommentWidget/assets/static/comment-widget.js?version=3.0.0">
<link rel="stylesheet" href="/plugins/PluginCommentWidget/assets/static/index.css?version=3.0.0" />
<!-- plugin-comment-widget end -->
<!-- plugin-editor-hyperlink-card start -->
<script src="/plugins/editor-hyperlink-card/assets/static/hyperlink-card.iife.js?version=1.5.2"></script>
<link rel="stylesheet" href="/plugins/editor-hyperlink-card/assets/static/var.css?version=1.5.2" />
<!-- plugin-editor-hyperlink-card end -->
<!-- PluginSearchWidget start -->
<script src="/plugins/PluginSearchWidget/assets/static/search-widget.iife.js?version=1.7.1" defer></script>
<link rel="stylesheet" href="/plugins/PluginSearchWidget/assets/static/style.css?version=1.7.1" />
<!-- PluginSearchWidget end -->
</head>
  <body class="bg-slate-50 dark:bg-slate-900">
    <header
  id="header-menu"
  class="sticky top-0 z-10 flex h-16 bg-white py-3 shadow-sm transition-all dark:bg-gray-800"
  x-data="{ open : false }"
>
  <div class="mx-auto flex h-full w-full max-w-7xl justify-between px-4 lg:px-6">
    <div class="flex h-full items-center gap-6">
      <div class="mr-2 h-full">
        <a href="/" class="inline-flex h-full items-center">
          
          <span
            id="site-title"
            class="text-lg font-medium text-gray-900 dark:text-slate-100"
          >Bona萧のblog</span>
        </a>
      </div>
      <ul class="hidden items-center gap-8 sm:flex">
        <li
          class="relative cursor-pointer text-sm font-medium transition-all"
          x-data="dropdown"
          @mouseenter="open()"
          @mouseleave="close()"
        >
          <a
            class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
            href="/"
          >首页</a>
          
        </li>
        <li
          class="relative cursor-pointer text-sm font-medium transition-all"
          x-data="dropdown"
          @mouseenter="open()"
          @mouseleave="close()"
        >
          <a
            class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
            href="/article"
            target="_self"
          >文章</a>
          
        </li>
        <li
          class="relative cursor-pointer text-sm font-medium transition-all"
          x-data="dropdown"
          @mouseenter="open()"
          @mouseleave="close()"
        >
          <a
            class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover:text-gray-300"
            href="/about"
          >关于</a>
          
        </li>
        <li
          class="relative cursor-pointer text-sm font-medium transition-all"
          x-data="dropdown"
          @mouseenter="open()"
          @mouseleave="close()"
        >
          <a
            class="text-gray-600 hover:text-blue-600 dark:text-slate-50 dark:hover

Found 2026-01-23 by HttpPlugin

Create report

www.addcodes.topaddcodes.top

Fingerprint:

cc7f7a3db27bc472c560be37abf9bed4837cad3294001b4617193c91284331bb

CN:

www.addcodes.top

Key:

RSA-2048

Issuer:

Encryption Everywhere DV TLS CA - G2

Not before:

2026-01-16 00:00

Not after:

2026-04-15 23:59

Domain summary

www.addcodes.top 1

1 recorded

IP summary

180.163.146.111 2