LeakIX - Host registry.dev.workwise.io

Domain registry.dev.workwise.io

Germany

Hetzner Online GmbH

Software information

nginx nginx

tcp/443

nginx nginx 1.25.2

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 88.99.186.8
Domain: registry.dev.workwise.io
Port: 443
URL: https://registry.dev.workwise.io

First seen 2025-11-12 17:22
Last seen 2026-01-12 04:48
Open for 60 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43340c51c6930c093d70a6a2f3e498b2bbcb96cbd6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels/{label_id}
DELETE /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags/{tag_name}
GET /audit-logs
GET /configurations
GET /export/cve/download/{execution_id}
GET /export/cve/execution/{execution_id}
GET /export/cve/executions
GET /health
GET /icons/{digest}
GET /internalconfig
GET /jobservice/jobs/{job_id}/log
GET /jobservice/pools
GET /jobservice/pools/{pool_id}/workers
GET /jobservice/queues
GET /labels
GET /labels/{label_id}
GET /ldap/groups/search
GET /ldap/users/search
GET /p2p/preheat/instances
GET /p2p/preheat/instances/{preheat_instance_name}
GET /p2p/preheat/providers
GET /ping
GET /projects
GET /projects/{project_name_or_id}
GET /projects/{project_name_or_id}/_deletable
GET /projects/{project_name_or_id}/immutabletagrules
GET /projects/{project_name_or_id}/members
GET /projects/{project_name_or_id}/members/{mid}
GET /projects/{project_name_or_id}/metadatas/
GET /projects/{project_name_or_id}/metadatas/{meta_name}
GET /projects/{project_name_or_id}/robots
GET /projects/{project_name_or_id}/robots/{robot_id}
GET /projects/{project_name_or_id}/scanner
GET /projects/{project_name_or_id}/scanner/candidates
GET /projects/{project_name_or_id}/summary
GET /projects/{project_name_or_id}/webhook/events
GET /projects/{project_name_or_id}/webhook/jobs
GET /projects/{project_name_or_id}/webhook/lasttrigger
GET /projects/{project_name_or_id}/webhook/policies
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks
GET /projects/{project_name_or_id}/webhook/policies/{webhook_policy_id}/executions/{execution_id}/tasks/{task_id}/log
GET /projects/{project_name}/logs
GET /projects/{project_name}/preheat/policies
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks
GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks/{task_id}/logs
GET /projects/{project_name}/preheat/providers
GET /projects/{project_name}/repositories
GET /projects/{project_name}/repositories/{repository_name}
GET /projects/{project_name}/repositories/{repository_name}/artifacts
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/accessories
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/vulnerabilities
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/additions/{addition}
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/{report_id}/log
GET /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/tags
GET /quotas
GET /quotas/{id}
GET /registries
GET /registries/{id}
GET /registries/{id}/info
GET /replication/adapterinfos
GET /replication/adapters
GET /replication/executions
GET /replication/executions/{id}
GET /replication/executions/{id}/tasks
GET /replication/executions/{id}/tasks/{task_id}/log
GET /replication/policies
GET /replication/policies/{id}
GET /repositories
GET /retentions/metadatas
GET /retentions/{id}
GET /retentions/{id}/executions
GET /retentions/{id}/executions/{eid}/tasks
GET /retentions/{id}/executions/{eid}/tasks/{tid}
GET /robots
GET /robots/{robot_id}
GET /scanners
GET /scanners/{registration_id}
GET /scanners/{registration_id}/metadata
GET /scans/all/metrics
GET /scans/schedule/metrics
GET /schedules
GET /schedules/{job_type}/paused
GET /search
GET /security/summary
GET /security/vul
GET /statistics
GET /system/CVEAllowlist
GET /system/gc
GET /system/gc/schedule
GET /system/gc/{gc_id}
GET /system/gc/{gc_id}/log
GET /system/purgeaudit
GET /system/purgeaudit/schedule
GET /system/purgeaudit/{purge_id}
GET /system/purgeaudit/{purge_id}/log
GET /system/scanAll/schedule
GET /systeminfo
GET /systeminfo/getcert
GET /systeminfo/volumes
GET /usergroups
GET /usergroups/search
GET /usergroups/{group_id}
GET /users
GET /users/current
GET /users/current/permissions
GET /users/search
GET /users/{user_id}
PATCH /retentions/{id}/executions/{eid}
POST /export/cve
POST /ldap/ping
POST /ldap/users/import
POST /p2p/preheat/instances/ping
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/labels
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan
POST /projects/{project_name}/repositories/{repository_name}/artifacts/{reference}/scan/stop
POST /registries/ping
POST /retentions
POST /scanners/ping
POST /system/oidc/ping
POST /system/scanAll/stop
PUT /jobservice/jobs/{job_id}
PUT /jobservice/queues/{job_type}
PUT /projects/{project_name_or_id}/immutabletagrules/{immutable_rule_id}
PUT /users/{user_id}/cli_secret
PUT /users/{user_id}/password
PUT /users/{user_id}/sysadmin

Found on 2026-01-12 04:48

Create report

Open service 88.99.186.8:443 · registry.dev.workwise.io

2026-01-12 04:48

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Jan 2026 04:48:05 GMT
Content-Type: text/html
Content-Length: 785
Connection: close
Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT
ETag: "6541f5da-311"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'

Page title: Harbor

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8"/>
        <title>Harbor</title>
        <base href="/"/>
        <meta name="viewport" content="width=device-width, initial-scale=1"/>
        <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/>
    <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head>
    <body>
        <harbor-app>
            <div class="spinner spinner-lg app-loading app-loading-fixed">
                Loading...
            </div>
        </harbor-app>
    <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 88.99.186.8:80 · registry.dev.workwise.io

2026-01-12 04:48

HTTP/1.1 308 Permanent Redirect
Server: nginx/1.25.2
Date: Mon, 12 Jan 2026 04:48:05 GMT
Content-Type: text/html
Content-Length: 171
Connection: close
Location: https://registry.dev.workwise.io:443/

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx/1.25.2</center>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 88.99.186.8:443 · registry.dev.workwise.io

2026-01-09 20:28

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 20:28:56 GMT
Content-Type: text/html
Content-Length: 785
Connection: close
Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT
ETag: "6541f5da-311"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'

Page title: Harbor

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8"/>
        <title>Harbor</title>
        <base href="/"/>
        <meta name="viewport" content="width=device-width, initial-scale=1"/>
        <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/>
    <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head>
    <body>
        <harbor-app>
            <div class="spinner spinner-lg app-loading app-loading-fixed">
                Loading...
            </div>
        </harbor-app>
    <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 88.99.186.8:443 · registry.dev.workwise.io

2026-01-02 17:19

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 17:19:51 GMT
Content-Type: text/html
Content-Length: 785
Connection: close
Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT
ETag: "6541f5da-311"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'

Page title: Harbor

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8"/>
        <title>Harbor</title>
        <base href="/"/>
        <meta name="viewport" content="width=device-width, initial-scale=1"/>
        <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/>
    <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head>
    <body>
        <harbor-app>
            <div class="spinner spinner-lg app-loading app-loading-fixed">
                Loading...
            </div>
        </harbor-app>
    <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 88.99.186.8:443 · registry.dev.workwise.io

2025-12-23 01:31

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Dec 2025 01:31:51 GMT
Content-Type: text/html
Content-Length: 785
Connection: close
Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT
ETag: "6541f5da-311"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'

Page title: Harbor

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8"/>
        <title>Harbor</title>
        <base href="/"/>
        <meta name="viewport" content="width=device-width, initial-scale=1"/>
        <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/>
    <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head>
    <body>
        <harbor-app>
            <div class="spinner spinner-lg app-loading app-loading-fixed">
                Loading...
            </div>
        </harbor-app>
    <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 88.99.186.8:443 · registry.dev.workwise.io

2025-12-20 14:56

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Dec 2025 14:56:14 GMT
Content-Type: text/html
Content-Length: 785
Connection: close
Last-Modified: Wed, 01 Nov 2023 06:53:14 GMT
ETag: "6541f5da-311"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'

Page title: Harbor

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8"/>
        <title>Harbor</title>
        <base href="/"/>
        <meta name="viewport" content="width=device-width, initial-scale=1"/>
        <link rel="icon" type="image/x-icon" href="favicon.ico?v=2"/>
    <link rel="stylesheet" href="styles.75cb4562f0127450.css"></head>
    <body>
        <harbor-app>
            <div class="spinner spinner-lg app-loading app-loading-fixed">
                Loading...
            </div>
        </harbor-app>
    <script src="runtime.8c0f1593b67df90d.js" type="module"></script><script src="polyfills.4c1d388f8edda830.js" type="module"></script><script src="scripts.3846d86d42cdb753.js" defer></script><script src="main.74c786f6199709cc.js" type="module"></script></body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

registry.dev.workwise.io

Fingerprint:

3f9639549b648c6bce3711a5d8c72410f269ab56cdc1a5f8d4498c2a92262d03

CN:

registry.dev.workwise.io

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-12 03:48

Not after:

2026-04-12 03:48

registry.dev.workwise.io

Fingerprint:

9a5654373c394e4e097184d59b805b9b7bb282dae488ddb256f514848d533208

CN:

registry.dev.workwise.io

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-12 16:22

Not after:

2026-02-10 16:22

Domain summary

registry.dev.workwise.io 6

1 recorded

IP summary

88.99.186.8 2

1 recorded