LeakIX - Host 3.70.187.245

Host 3.70.187.245

Germany

AMAZON-02

Software information

nginx nginx 1.24.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.70.187.245
Domain: api-prod-dropper.avrean.net
Port: 443
URL: https://api-prod-dropper.avrean.net

First seen 2025-11-13 03:38
Last seen 2026-01-12 06:24
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-12 06:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.70.187.245
Domain: api.dropper.ai
Port: 443
URL: https://api.dropper.ai

First seen 2025-11-12 06:32
Last seen 2026-01-11 12:53
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-11 12:53
Create report

Open service 3.70.187.245:80 · api-prod-dropper.avrean.net

2026-01-12 06:24

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Mon, 12 Jan 2026 06:25:01 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://api-prod-dropper.avrean.net/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:443 · api-prod-dropper.avrean.net

2026-01-12 06:24

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Mon, 12 Jan 2026 06:25:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:80 · api.dropper.ai

2026-01-11 12:53

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Sun, 11 Jan 2026 12:53:13 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://api.dropper.ai/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:443 · api.dropper.ai

2026-01-11 12:53

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Sun, 11 Jan 2026 12:53:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:80 · dashboard.dropper.ai

2026-01-11 12:53

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Sun, 11 Jan 2026 12:53:14 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://dashboard.dropper.ai/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:443 · dashboard.dropper.ai

2026-01-11 12:53

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Sun, 11 Jan 2026 12:53:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
X-Powered-By: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate

Page title: Dropper Dashboard

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/c22ccc5eb58b83e1-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/dbe9b4d298fa9654.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-705937a2f44f5885.js"/><script src="/_next/static/chunks/ba506871-7c12ce977f30440b.js" async=""></script><script src="/_next/static/chunks/6338-47e4fe2ca9b4e5c5.js" async=""></script><script src="/_next/static/chunks/main-app-aefeca81024869e7.js" async=""></script><script src="/_next/static/chunks/5381-cc0851253bbe979d.js" async=""></script><script src="/_next/static/chunks/3359-7d33a3fed1d1dd6d.js" async=""></script><script src="/_next/static/chunks/2331-b0666a05d7629850.js" async=""></script><script src="/_next/static/chunks/9295-e4a7fc3f27e19853.js" async=""></script><script src="/_next/static/chunks/app/layout-d19b7f709b29d588.js" async=""></script><script src="/_next/static/chunks/5610-14c72c342cbd25cb.js" async=""></script><script src="/_next/static/chunks/2124-8cf0301a9d1ced97.js" async=""></script><script src="/_next/static/chunks/4728-9561a08f123cfcca.js" async=""></script><script src="/_next/static/chunks/3492-ec37f73d61ff59a1.js" async=""></script><script src="/_next/static/chunks/3470-38638789a0e80cda.js" async=""></script><script src="/_next/static/chunks/8485-86d08c07ebc64bbe.js" async=""></script><script src="/_next/static/chunks/6138-6321f727ad2d1e9c.js" async=""></script><script src="/_next/static/chunks/app/(dashboard)/layout-45bd70dee84ed2a9.js" async=""></script><script src="/_next/static/chunks/app/page-2b25d8b3ffbdc250.js" async=""></script><title>Dropper Dashboard</title><meta name="description" content="Count The World! Un modo semplice e intuitivo per interagire con i tuoi spazi"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="32x32"/><meta name="next-size-adjust"/><script src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js" noModule=""></script></head><body class="__className_b539cb text bg-background text-primary"><div class="lg:block hidden"><main class="flex center min-h-screen flex-col text-center gap-2"><div></div><h1 class="title text-secondary">Benvenuto in Dropper</h1><p>Accedi o registrati per iniziare ad usare la dashboard</p><a href="/login"><button class="inline-flex items-center justify-center select-none whitespace-nowrap rounded-[8px] text-sm font-medium ring-offset-white transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-slate-950 focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 dark:ring-offset-slate-950 dark:focus-visible:ring-slate-300 bg-primary text-white hover:bg-primary/90 dark:bg-white dark:text-primary dark:hover:bg-white/90 h-10 px-4 py-2">Accedi</button></a></main></div><div class="lg:hidden flex center min-h-screen"><div class="text-center center flex flex-col gap-2 container"><img alt="Dropper" loading="lazy" width="100" height="100" decoding="async" data-nimg="1" class="mb-4" style="color:transparent" srcSet="/_next/image?url=%2Fimg%2Flogo.png&amp;w=128&amp;q=75 1x, /_next/image?url=%2Fimg%2Flogo.png&amp;w=256&amp;q=75 2x" src="/_next/image?url=%2Fimg%2Flogo.png&amp;w=256&amp;q=75"/><h3 class="title">Dispositivo non supportato</h3><p>Si è pregati di utilizzare un dispositivo di larghezza maggiore per usare la nostra dashboard</p></div></div><div role="region" aria-label="Notifications (F8)" tabindex="-1" style="pointer-events:none"><ol tabindex="-1" class="fixed top-0 z-[100] flex max-h-screen w-full flex-col-reverse p-4 sm:bottom-0 sm:right-0 sm:top-auto sm:flex-col md:max-w-[420px]"></ol></div><script src="/_next/static/chunks/webpack-705937a2f44f5885.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0]);self.__next_f.push([2,null])</script><script>self.__next_f.push([1,"1:HL[\"/_next/static/media/c22ccc5eb58b83e1-s.p.woff2\",\"font\",{\"crossO

Found 2 days ago by HttpPlugin

Create report

Open service 3.70.187.245:443 · api.dropper.ai

2026-01-09 23:24

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Fri, 09 Jan 2026 23:24:03 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 3.70.187.245:443 · api-prod-dropper.avrean.net

2026-01-08 19:19

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Thu, 08 Jan 2026 19:19:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 3.70.187.245:443 · api.dropper.ai

2025-12-30 10:40

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Tue, 30 Dec 2025 10:40:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 3.70.187.245:443 · api.dropper.ai

2025-12-23 08:11

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Tue, 23 Dec 2025 08:11:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 3.70.187.245:443 · api.dropper.ai

2025-12-21 01:20

HTTP/1.1 404 Not Found
Server: nginx/1.24.0
Date: Sun, 21 Dec 2025 01:20:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

api-prod-dropper.avrean.netapi.dropper.ai

Fingerprint:

bae1c26ddd176b09c031b006364a978767c77d7dd52812b5fe6312b1c1d1b373

CN:

api-prod-dropper.avrean.net

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-12 05:26

Not after:

2026-04-12 05:26

api-prod-dropper.avrean.netapi.dropper.ai

Fingerprint:

07ad2f9d8f2cc8569d40b8109cacb32338942e01d86ecbb2c7e97029ce3c7418

CN:

api-prod-dropper.avrean.net

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-13 02:39

Not after:

2026-02-11 02:39

api.dropper.aidashboard.dropper.ai

Fingerprint:

e5a45452334b74fa4e06f3f5c0adb30e6d287c68e90369f1bb703b728ac87cea

CN:

dashboard.dropper.ai

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-11 11:54

Not after:

2026-04-11 11:54

Domain summary

api-prod-dropper.avrean.net 3 api.dropper.ai 6 dashboard.dropper.ai 1

3 recorded

Host 3.70.187.245

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api-prod-dropper.avrean.netapi.dropper.ai

api-prod-dropper.avrean.netapi.dropper.ai

api.dropper.aidashboard.dropper.ai

Domain summary