Domain dev-cdp-api.nw18.com
Germany
Software information
istio-envoy
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-11-11 06:45
Last seen 2026-01-10 16:54
Open for 60 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-10 16:54
-
-
Open service 2.23.176.37:443 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 4 Server: istio-envoy Date: Sat, 10 Jan 2026 16:55:01 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2a02:26f0:3500:12::1730:17bd:443 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 4 Server: istio-envoy Date: Sat, 10 Jan 2026 16:55:00 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2a02:26f0:3500:12::1730:17a4:443 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 4 Server: istio-envoy Date: Sat, 10 Jan 2026 16:55:00 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2.23.176.33:443 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 4 Server: istio-envoy Date: Sat, 10 Jan 2026 16:55:01 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2.23.176.33:80 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://dev-cdp-api.nw18.com:443/ Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 16:55:40 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: *
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2a02:26f0:3500:12::1730:17a4:80 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://dev-cdp-api.nw18.com:443/ Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 16:55:40 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: *
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2.23.176.37:80 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://dev-cdp-api.nw18.com:443/ Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 16:55:39 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: *
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2a02:26f0:3500:12::1730:17bd:80 · dev-cdp-api.nw18.com
2026-01-10 16:54
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://dev-cdp-api.nw18.com:443/ Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 16:55:37 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: *
Found 2026-01-10 by HttpPluginCreate report
-
Open service 2.16.206.146:443 · dev-cdp-api.nw18.com
2026-01-09 23:41
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 4 Server: istio-envoy Date: Fri, 09 Jan 2026 23:41:35 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 2.16.206.146:443 · dev-cdp-api.nw18.com
2026-01-02 21:26
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 3 Server: istio-envoy Date: Fri, 02 Jan 2026 21:26:29 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.16.206.146:443 · dev-cdp-api.nw18.com
2025-12-23 04:55
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 3 Server: istio-envoy Date: Tue, 23 Dec 2025 04:55:26 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-23 by HttpPluginCreate report
-
Open service 2.16.206.146:443 · dev-cdp-api.nw18.com
2025-12-21 09:52
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 3 Server: istio-envoy Date: Sun, 21 Dec 2025 09:52:46 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 2.16.206.146:443 · dev-cdp-api.nw18.com
2025-12-19 00:34
HTTP/1.1 404 Not Found x-powered-by: Express Content-Security-Policy: default-src 'none' x-content-type-options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 139 x-envoy-upstream-service-time: 3 Server: istio-envoy Date: Fri, 19 Dec 2025 00:34:56 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: * Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-19 by HttpPluginCreate report