Microsoft-IIS 10.0
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549f9c0e215a64d4ed6f59739aaef7dbaab1de524e3
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/AuxiliarApi/GetCountries GET /api/AuxiliarApi/GetInsurers GET /api/AuxiliarApi/GetSex GET /api/Beneficiary/GetBeneficiary GET /api/ClientPolicyApi/GetPlansByPolicyId GET /api/ClientPolicyApi/GetPolicies GET /api/ClientPolicyApi/GetPoliciesDocuments GET /api/ClientPolicyApi/GetPolicyDependents POST /api/ProviderAPI/SearchClinic
Open service 20.126.135.158:443 · client.mediplus.co.ao
2026-01-23 10:18
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Fri, 23 Jan 2026 10:18:28 GMT Connection: close
Open service 20.126.135.158:443 · client.mediplus.co.ao
2026-01-10 09:43
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Sat, 10 Jan 2026 09:43:37 GMT Connection: close
Open service 20.126.135.158:80 · client.mediplus.co.ao
2026-01-10 09:43
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sat, 10 Jan 2026 09:43:37 GMT Connection: close Content-Length: 204 Page title: client.mediplus.co.ao - / <html><head><title>client.mediplus.co.ao - /</title></head><body><H1>client.mediplus.co.ao - /</H1><hr> <pre> 7/23/2025 10:21 PM <dir> <A HREF="/kisl/">kisl</A><br></pre><hr></body></html>
Open service 20.126.135.158:443 · client.mediplus.co.ao
2026-01-09 12:49
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Fri, 09 Jan 2026 12:49:56 GMT Connection: close
Open service 20.126.135.158:443 · client.mediplus.co.ao
2026-01-02 08:03
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Fri, 02 Jan 2026 08:03:17 GMT Connection: close
Open service 20.126.135.158:80 · client.mediplus.co.ao
2026-01-02 08:03
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Fri, 02 Jan 2026 08:03:16 GMT Connection: close Content-Length: 204 Page title: client.mediplus.co.ao - / <html><head><title>client.mediplus.co.ao - /</title></head><body><H1>client.mediplus.co.ao - /</H1><hr> <pre> 7/23/2025 10:21 PM <dir> <A HREF="/kisl/">kisl</A><br></pre><hr></body></html>
Open service 20.126.135.158:443 · client.mediplus.co.ao
2026-01-02 06:48
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Fri, 02 Jan 2026 06:48:05 GMT Connection: close
Open service 20.126.135.158:443 · client.mediplus.co.ao
2025-12-23 08:59
HTTP/1.1 302 Found Transfer-Encoding: chunked Location: https://client.mediplus.co.ao/Account/Login?ReturnUrl=%2F Server: Microsoft-IIS/10.0 WWW-Authenticate: Bearer X-Powered-By: ASP.NET Date: Tue, 23 Dec 2025 08:59:19 GMT Connection: close