Microsoft-IIS 7.5
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 51.75.166.70:80 · play.abc.es
2026-01-09 19:38
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Fri, 09 Jan 2026 19:38:30 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 9.2983245849609E-5 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.22:80 x-request-id: 1767987510.426-31557551-1-1ddbbeb5c3e5eff511c19a08dca8263e x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb3 x-request-time: 0.003 server-timing: uncached, connection;dur=0.000, header;dur=0.000, request;dur=0.003 alt-svc: h3="51.68.14.42:443"; ma=3600 x-frontend: haproxy1 connection: close
Open service 51.75.166.70:80 · play.abc.es
2026-01-02 22:20
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Fri, 02 Jan 2026 22:20:38 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 0.00013303756713867 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.21:80 x-request-id: 1767392438.278-21794198-1-3110fab42f6e118ec9ba81cb88b2e0c1 x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb3 x-request-time: 0.004 server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.004 alt-svc: h3="51.68.14.42:443"; ma=3600 x-frontend: haproxy1 connection: close
Open service 51.75.166.70:80 · play.abc.es
2025-12-23 06:44
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Tue, 23 Dec 2025 06:44:42 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 8.7976455688477E-5 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.23:80 x-request-id: 1766472282.906-198379929-1-e04e9dbea930a6c38eaa9568b022da86 x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb4 x-request-time: 0.003 server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.003 alt-svc: h3="51.68.14.42:443"; ma=3600 x-frontend: haproxy1 connection: close
Open service 51.75.166.73:443 · play.abc.es
2025-12-22 23:10
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Mon, 22 Dec 2025 23:10:37 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 8.702278137207E-5 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.23:80 x-request-id: 1766445037.991-197449364-1-8ade797be0dadd7058a2f521f14adbfb x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb4 x-request-time: 0.003 server-timing: uncached, connection;dur=0.004, header;dur=0.004, request;dur=0.003 alt-svc: h3="51.75.166.68:443"; ma=3600 x-frontend: haproxy4 connection: close
Open service 51.75.166.70:80 · play.abc.es
2025-12-21 02:05
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Sun, 21 Dec 2025 02:05:14 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 0.00012588500976562 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.22:80 x-request-id: 1766282714.948-186293559-1-9e19faa78d30f2a92face71b85c67ef8 x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb4 x-request-time: 0.004 server-timing: uncached, connection;dur=0.004, header;dur=0.004, request;dur=0.004 alt-svc: h3="51.68.14.42:443"; ma=3600 x-frontend: haproxy1 connection: close
Open service 51.75.166.73:443 · play.abc.es
2025-12-21 02:04
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Sun, 21 Dec 2025 02:04:22 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 0.00011396408081055 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.21:80 x-request-id: 1766282662.787-186291593-1-b6134adc86419041224d72366c16cdbf x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb4 x-request-time: 0.003 server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.003 alt-svc: h3="51.75.166.68:443"; ma=3600 x-frontend: haproxy4 connection: close
Open service 51.75.166.70:80 · play.abc.es
2025-12-19 06:57
HTTP/1.1 301 Moved Permanently content-type: application/json content-length: 0 access-control-allow-origin: * cache-control: no-cache, must-revalidate date: Fri, 19 Dec 2025 06:57:48 GMT expires: Sat, 1 Jul 2016 05:00:00 GMT location: https://www.abc.es x-cached-shortener: true x-process-time: 0.00011706352233887 server: Microsoft-IIS/7.5 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET x-backend-addr: 192.168.50.21:80 x-request-id: 1766127468.263-176276618-1-9e68c9bbca2cdf5b8629600576813396 x-log: 0 vary: Accept-Encoding, Origin x-frontend-host: lb4 x-request-time: 0.006 server-timing: uncached, connection;dur=0.004, header;dur=0.008, request;dur=0.006 alt-svc: h3="51.68.14.42:443"; ma=3600 x-frontend: haproxy1 connection: close