Domain cdp-api.nw18.com
Germany
Software information
istio-envoy
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-20 12:11
Last seen 2026-01-10 00:33
Open for 81 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-10 00:33
-
-
Open service 2.16.206.139:443 · cdp-api.nw18.com
2026-01-10 00:33
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 36 Server: istio-envoy Date: Sat, 10 Jan 2026 00:33:13 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2.16.206.139:443 · cdp-api.nw18.com
2026-01-02 20:11
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 41 Server: istio-envoy Date: Fri, 02 Jan 2026 20:11:10 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.16.206.139:443 · cdp-api.nw18.com
2025-12-22 20:34
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 3 Server: istio-envoy Date: Mon, 22 Dec 2025 20:34:09 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-22 by HttpPluginCreate report