Kestrel
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497229962fecbd6bbe45a4d461b2d29522982a199d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /taskdetails/{id}
GET /taskhandlers
GET /taskhandlers/{id}
GET /taskhandlers/{id}/events
GET /tasks
GET /tasks/{id}
GET /tasktemplates
GET /tasktemplates/{id}
GET /tasktemplates/{id}/events
GET /workflowexecutions
GET /workflowexecutions/{id}
GET /workflowmanagers
GET /workflows
GET /workflows/{id}
GET /workflowtemplates
GET /workflowtemplates/{id}
GET /workflowtemplates/{id}/events
POST /taskexecutions/{id}/reset
POST /tasks/{id}/reset
POST /tasks/{id}/tasks
POST /workflowexecutions/new
PUT /taskexecutions/{id}
PUT /workflowmanagers/{id}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497229962fecbd6bbe45a4d461b2d29522982a199d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /taskdetails/{id}
GET /taskhandlers
GET /taskhandlers/{id}
GET /taskhandlers/{id}/events
GET /tasks
GET /tasks/{id}
GET /tasktemplates
GET /tasktemplates/{id}
GET /tasktemplates/{id}/events
GET /workflowexecutions
GET /workflowexecutions/{id}
GET /workflowmanagers
GET /workflows
GET /workflows/{id}
GET /workflowtemplates
GET /workflowtemplates/{id}
GET /workflowtemplates/{id}/events
POST /taskexecutions/{id}/reset
POST /tasks/{id}/reset
POST /tasks/{id}/tasks
POST /workflowexecutions/new
PUT /taskexecutions/{id}
PUT /workflowmanagers/{id}
Open service 13.80.19.74:80 · prod-j1-workflows.junecomet.com
2026-01-23 08:19
HTTP/1.1 403 Site Disabled
Content-Length: 1148
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 08:19:45 GMT
Page title: Web App - Unavailable
<!DOCTYPE html><html><head><title>Web App - Unavailable</title><style type="text/css">html{height:100%;width:100%;}#feature{width:960px;margin:95px auto 0 auto;overflow:auto;}#content{font-family:"Segoe UI";font-weight:normal;font-size:22px;color:#fff;float:left;width:460px;margin-top:68px;margin-left:0px;vertical-align:middle;}#content h1{font-family:"Segoe UI Light";color:#fff;font-weight:normal;font-size:60px;line-height:48pt;width:800px;}p a,p a:visited,p a:active,p a:hover{color:#fff;}</style></head><body bgcolor="#00abec"><div id="feature"><div id="content"><h1 id="unavailable">Error 403 - This web app is stopped.</h1><p id="tryAgain">The web app you have attempted to reach is currently stopped and does not accept any requests. Please try to reload the page or visit it again soon.</p><p id="toAdmin">If you are the web app administrator, please find the common 403 error scenarios and resolution <a href="https://go.microsoft.com/fwlink/?linkid=2095007" target="_blank">here</a>. For further troubleshooting tools and recommendations, please visit <a href="https://portal.azure.com/">Azure Portal</a>.</p></div></div></body></html>
Open service 13.80.19.74:443 · prod-j1-workflows.junecomet.com
2026-01-23 05:22
HTTP/1.1 403 Site Disabled
Content-Length: 1148
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 05:23:18 GMT
Page title: Web App - Unavailable
<!DOCTYPE html><html><head><title>Web App - Unavailable</title><style type="text/css">html{height:100%;width:100%;}#feature{width:960px;margin:95px auto 0 auto;overflow:auto;}#content{font-family:"Segoe UI";font-weight:normal;font-size:22px;color:#fff;float:left;width:460px;margin-top:68px;margin-left:0px;vertical-align:middle;}#content h1{font-family:"Segoe UI Light";color:#fff;font-weight:normal;font-size:60px;line-height:48pt;width:800px;}p a,p a:visited,p a:active,p a:hover{color:#fff;}</style></head><body bgcolor="#00abec"><div id="feature"><div id="content"><h1 id="unavailable">Error 403 - This web app is stopped.</h1><p id="tryAgain">The web app you have attempted to reach is currently stopped and does not accept any requests. Please try to reload the page or visit it again soon.</p><p id="toAdmin">If you are the web app administrator, please find the common 403 error scenarios and resolution <a href="https://go.microsoft.com/fwlink/?linkid=2095007" target="_blank">here</a>. For further troubleshooting tools and recommendations, please visit <a href="https://portal.azure.com/">Azure Portal</a>.</p></div></div></body></html>
Open service 13.80.19.74:80 · prod-j1-workflows.junecomet.com
2026-01-09 10:09
HTTP/1.1 307 Temporary Redirect Content-Length: 0 Connection: close Date: Fri, 09 Jan 2026 10:10:47 GMT Server: Kestrel Location: https://prod-j1-workflows.junecomet.com/ X-Powered-By: ASP.NET
Open service 13.80.19.74:443 · prod-j1-workflows.junecomet.com
2026-01-09 08:51
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 09 Jan 2026 08:52:42 GMT Server: Kestrel X-Powered-By: ASP.NET
Open service 13.80.19.74:80 · prod-j1-workflows.junecomet.com
2026-01-02 14:42
HTTP/1.1 307 Temporary Redirect Content-Length: 0 Connection: close Date: Fri, 02 Jan 2026 14:42:01 GMT Server: Kestrel Location: https://prod-j1-workflows.junecomet.com/ X-Powered-By: ASP.NET
Open service 13.80.19.74:443 · prod-j1-workflows.junecomet.com
2026-01-02 09:35
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 02 Jan 2026 09:35:35 GMT Server: Kestrel X-Powered-By: ASP.NET
Open service 13.80.19.74:80 · prod-j1-workflows.junecomet.com
2025-12-23 02:04
HTTP/1.1 307 Temporary Redirect Content-Length: 0 Connection: close Date: Tue, 23 Dec 2025 02:04:19 GMT Server: Kestrel Location: https://prod-j1-workflows.junecomet.com/ X-Powered-By: ASP.NET
Open service 13.80.19.74:443 · prod-j1-workflows.junecomet.com
2025-12-22 17:47
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 22 Dec 2025 17:47:07 GMT Server: Kestrel X-Powered-By: ASP.NET