Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ff8924aa28cc29cdb853514842bca83e5cb7806b
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Config/{key}
GET /Image/{client}/{cesimId}
GET /Stream/tokenize
GET /Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /compliances/{client}/{eid}
GET /events
GET /events/byId/{id}
GET /events/{channels}/nowAndNextByChannels
GET /events/{clients}/byDate
GET /events/{clients}/byEventItemId
GET /events/{clients}/eventSportList
GET /events/{clients}/live
GET /events/{clients}/nowAndNext
GET /events/{client}/{eventItemId}/{offset}
GET /highlightEditor/echo
GET /highlights
GET /highlights/byId/{id}
GET /highlights/byUrn/{urn}
GET /highlights/{clients}/byDateRange/{from}/{to}
GET /highlights/{clients}/byEventItemId/{eids}
GET /status
GET /tickers
GET /tickers/byId/{id}
GET /tickers/{clients}/byEventItemId/{eids}
GET /tickers/{clients}/meta/{eids}
GET /v{version}/Config/{key}
GET /v{version}/Image/{client}/{cesimId}
GET /v{version}/Stream/tokenize
GET /v{version}/Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /v{version}/compliances/{client}/{eid}
GET /v{version}/events
GET /v{version}/events/byId/{id}
GET /v{version}/events/{channels}/nowAndNextByChannels
GET /v{version}/events/{clients}/byDate
GET /v{version}/events/{clients}/byEventItemId
GET /v{version}/events/{clients}/eventSportList
GET /v{version}/events/{clients}/live
GET /v{version}/events/{clients}/nowAndNext
GET /v{version}/events/{client}/{eventItemId}/{offset}
GET /v{version}/highlightEditor/echo
GET /v{version}/highlights
GET /v{version}/highlights/byId/{id}
GET /v{version}/highlights/byUrn/{urn}
GET /v{version}/highlights/{clients}/byDateRange/{from}/{to}
GET /v{version}/highlights/{clients}/byEventItemId/{eids}
GET /v{version}/status
GET /v{version}/tickers
GET /v{version}/tickers/byId/{id}
GET /v{version}/tickers/{clients}/byEventItemId/{eids}
GET /v{version}/tickers/{clients}/meta/{eids}
POST /Schedule
POST /editor/byEvent
POST /editor/byEventItemId/{eventItemId}
POST /editor/create
POST /editor/delete/{id}
POST /highlightEditor/deleteById/{id}
POST /highlightEditor/save
POST /highlightEditor/update
POST /tickerEditor/deleteById/{id}
POST /tickerEditor/save
POST /tickerEditor/update
POST /v{version}/Schedule
POST /v{version}/editor/byEvent
POST /v{version}/editor/byEventItemId/{eventItemId}
POST /v{version}/editor/create
POST /v{version}/editor/delete/{id}
POST /v{version}/highlightEditor/deleteById/{id}
POST /v{version}/highlightEditor/save
POST /v{version}/highlightEditor/update
POST /v{version}/tickerEditor/deleteById/{id}
POST /v{version}/tickerEditor/save
POST /v{version}/tickerEditor/update
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ff8924aa28cc29cdb853514842bca83e663df54a
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Config/{key}
GET /Image/{client}/{cesimId}
GET /Stream/tokenize
GET /Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /compliances/{client}/{eid}
GET /events
GET /events/byId/{id}
GET /events/{channels}/nowAndNextByChannels
GET /events/{clients}/byDate
GET /events/{clients}/byEventItemId
GET /events/{clients}/eventSportList
GET /events/{clients}/live
GET /events/{clients}/nowAndNext
GET /events/{client}/{eventItemId}/{offset}
GET /highlightEditor/echo
GET /highlights
GET /highlights/byId/{id}
GET /highlights/byUrn/{urn}
GET /highlights/{clients}/byEventItemId/{eids}
GET /status
GET /tickers
GET /tickers/byId/{id}
GET /tickers/{clients}/byEventItemId/{eids}
GET /tickers/{clients}/meta/{eids}
GET /v{version}/Config/{key}
GET /v{version}/Image/{client}/{cesimId}
GET /v{version}/Stream/tokenize
GET /v{version}/Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /v{version}/compliances/{client}/{eid}
GET /v{version}/events
GET /v{version}/events/byId/{id}
GET /v{version}/events/{channels}/nowAndNextByChannels
GET /v{version}/events/{clients}/byDate
GET /v{version}/events/{clients}/byEventItemId
GET /v{version}/events/{clients}/eventSportList
GET /v{version}/events/{clients}/live
GET /v{version}/events/{clients}/nowAndNext
GET /v{version}/events/{client}/{eventItemId}/{offset}
GET /v{version}/highlightEditor/echo
GET /v{version}/highlights
GET /v{version}/highlights/byId/{id}
GET /v{version}/highlights/byUrn/{urn}
GET /v{version}/highlights/{clients}/byEventItemId/{eids}
GET /v{version}/status
GET /v{version}/tickers
GET /v{version}/tickers/byId/{id}
GET /v{version}/tickers/{clients}/byEventItemId/{eids}
GET /v{version}/tickers/{clients}/meta/{eids}
POST /Schedule
POST /editor/byEvent
POST /editor/byEventItemId/{eventItemId}
POST /editor/create
POST /editor/delete/{id}
POST /highlightEditor/deleteById/{id}
POST /highlightEditor/save
POST /highlightEditor/update
POST /tickerEditor/deleteById/{id}
POST /tickerEditor/save
POST /tickerEditor/update
POST /v{version}/Schedule
POST /v{version}/editor/byEvent
POST /v{version}/editor/byEventItemId/{eventItemId}
POST /v{version}/editor/create
POST /v{version}/editor/delete/{id}
POST /v{version}/highlightEditor/deleteById/{id}
POST /v{version}/highlightEditor/save
POST /v{version}/highlightEditor/update
POST /v{version}/tickerEditor/deleteById/{id}
POST /v{version}/tickerEditor/save
POST /v{version}/tickerEditor/update
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ff8924aa28cc29cdb853514842bca83e14fa8269
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Config/{key}
GET /Image/{client}/{cesimId}
GET /Stream/tokenize
GET /Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /compliances/{client}/{eid}
GET /events
GET /events/byId/{id}
GET /events/{channels}/nowAndNextByChannels
GET /events/{clients}/byDate
GET /events/{clients}/byEventItemId
GET /events/{clients}/live
GET /events/{clients}/nowAndNext
GET /events/{client}/{eventItemId}/{offset}
GET /highlightEditor/echo
GET /highlights
GET /highlights/byId/{id}
GET /highlights/byUrn/{urn}
GET /highlights/{clients}/byEventItemId/{eids}
GET /status
GET /tickers
GET /tickers/byId/{id}
GET /tickers/{clients}/byEventItemId/{eids}
GET /tickers/{clients}/meta/{eids}
GET /v{version}/Config/{key}
GET /v{version}/Image/{client}/{cesimId}
GET /v{version}/Stream/tokenize
GET /v{version}/Stream/{client}/byEventItemIdAndType/{eid}/{type}
GET /v{version}/compliances/{client}/{eid}
GET /v{version}/events
GET /v{version}/events/byId/{id}
GET /v{version}/events/{channels}/nowAndNextByChannels
GET /v{version}/events/{clients}/byDate
GET /v{version}/events/{clients}/byEventItemId
GET /v{version}/events/{clients}/live
GET /v{version}/events/{clients}/nowAndNext
GET /v{version}/events/{client}/{eventItemId}/{offset}
GET /v{version}/highlightEditor/echo
GET /v{version}/highlights
GET /v{version}/highlights/byId/{id}
GET /v{version}/highlights/byUrn/{urn}
GET /v{version}/highlights/{clients}/byEventItemId/{eids}
GET /v{version}/status
GET /v{version}/tickers
GET /v{version}/tickers/byId/{id}
GET /v{version}/tickers/{clients}/byEventItemId/{eids}
GET /v{version}/tickers/{clients}/meta/{eids}
POST /Schedule
POST /editor/byEvent
POST /editor/byEventItemId/{eventItemId}
POST /editor/create
POST /editor/delete/{id}
POST /highlightEditor/deleteById/{id}
POST /highlightEditor/save
POST /highlightEditor/update
POST /tickerEditor/deleteById/{id}
POST /tickerEditor/save
POST /tickerEditor/update
POST /v{version}/Schedule
POST /v{version}/editor/byEvent
POST /v{version}/editor/byEventItemId/{eventItemId}
POST /v{version}/editor/create
POST /v{version}/editor/delete/{id}
POST /v{version}/highlightEditor/deleteById/{id}
POST /v{version}/highlightEditor/save
POST /v{version}/highlightEditor/update
POST /v{version}/tickerEditor/deleteById/{id}
POST /v{version}/tickerEditor/save
POST /v{version}/tickerEditor/update
Open service 95.100.248.149:443 · test.event.api.swisstxt.ch
2026-01-23 14:26
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Fri, 23 Jan 2026 14:26:18 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1769178378377_35120725_1214734647_38_6888_13_96_-";dur=1
Open service 95.100.248.149:443 · test.event.api.swisstxt.ch
2026-01-09 22:49
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Fri, 09 Jan 2026 22:49:59 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=534 Server-Timing: origin; dur=33 Server-Timing: ak_p; desc="1767998999089_35120723_2014113840_56651_9543_13_52_-";dur=1
Open service 95.100.248.149:443 · test.event.api.swisstxt.ch
2026-01-02 15:24
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Fri, 02 Jan 2026 15:24:32 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767367472085_35120723_488849641_45_7766_100_134_-";dur=1
Open service 2.16.206.28:80 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 301 Moved Permanently Location: https://event-api-dev-acaenv.orangeforest-689ccaf3.westeurope.azurecontainerapps.io/ Content-Length: 0 Date: Tue, 23 Dec 2025 23:50:50 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533850428_34655516_2162074728_34_6818_163_0_-";dur=1
Open service 2a02:26f0:480:1100::216:329d:80 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 301 Moved Permanently Location: https://event-api-dev-acaenv.orangeforest-689ccaf3.westeurope.azurecontainerapps.io/ Content-Length: 0 Date: Tue, 23 Dec 2025 23:50:50 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=65 Server-Timing: ak_p; desc="1766533850039_34616477_1645770963_6542_6846_94_0_-";dur=1
Open service 2.16.206.29:443 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Tue, 23 Dec 2025 23:50:47 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533847614_34655517_2454415899_38_9989_152_161_-";dur=1
Open service 2.16.206.28:443 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Tue, 23 Dec 2025 23:50:47 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533847392_34655517_2454415018_35_7794_87_94_-";dur=1
Open service 2a02:26f0:480:1102::216:3272:80 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 301 Moved Permanently Location: https://event-api-dev-acaenv.orangeforest-689ccaf3.westeurope.azurecontainerapps.io/ Content-Length: 0 Date: Tue, 23 Dec 2025 23:50:49 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=10 Server-Timing: ak_p; desc="1766533849573_34639346_1412587188_1034_6074_0_0_-";dur=1
Open service 2.16.206.29:80 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 301 Moved Permanently Location: https://event-api-dev-acaenv.orangeforest-689ccaf3.westeurope.azurecontainerapps.io/ Content-Length: 0 Date: Tue, 23 Dec 2025 23:50:50 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533850053_34655517_2454423278_35_9351_9_0_-";dur=1
Open service 2a02:26f0:480:1102::216:3272:443 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Tue, 23 Dec 2025 23:50:47 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533846995_34616477_1645742982_37_7242_12_28_-";dur=1
Open service 2a02:26f0:480:1100::216:329d:443 · test.event.api.swisstxt.ch
2025-12-23 23:50
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Tue, 23 Dec 2025 23:50:46 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766533846626_34616477_1645739478_37_6321_12_34_-";dur=1
Open service 95.100.248.149:443 · test.event.api.swisstxt.ch
2025-12-23 01:54
HTTP/1.1 404 Not Found Content-Length: 0 Server: Kestrel Date: Tue, 23 Dec 2025 01:54:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1766454877316_35120723_1604604882_31_5861_165_208_-";dur=1