Some tips in Jeffrey's talk from CG18 about how to tell versions from unauthenticated https://docplayer.net/80086423-Security-umbraco-jeffrey-schoemaker.html