nginx 1.18.0
tcp/80
Elasticsearch and/or Kibana is currently open without authentication.
This results in all the database data made available publicly.
Severity: high
Fingerprint: 831cb76b8e05df46841a71109a6738b43195bf3ab30c764f7100de877860df61
Indices: 15, document count: 3931, size: 354.7 kB Found index .internal.alerts-transform.health.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.logs.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.uptime.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-ml.anomaly-detection.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.slo.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-default.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.apm.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.metrics.alerts-default-000001 with 0 documents (249 B) Found index .kibana-observability-ai-assistant-conversations-000001 with 0 documents (249 B) Found index .internal.alerts-ml.anomaly-detection-health.alerts-default-000001 with 0 documents (249 B) Found index .internal.alerts-observability.threshold.alerts-default-000001 with 0 documents (249 B) Found index petrovskiy_showcase with 3931 documents (351.2 kB) Found index .internal.alerts-security.alerts-default-000001 with 0 documents (249 B) Found index .kibana-observability-ai-assistant-kb-000001 with 0 documents (249 B) Found index .internal.alerts-stack.alerts-default-000001 with 0 documents (249 B)
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-09-16 04:01
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Sep 2024 04:01:15 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-09-14 03:20
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Sat, 14 Sep 2024 03:20:25 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-09-12 06:55
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Thu, 12 Sep 2024 06:55:04 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-09-10 06:47
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Sep 2024 06:47:46 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-09-08 03:54
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Sun, 08 Sep 2024 03:54:34 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-18 05:35
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Sun, 18 Aug 2024 05:35:36 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-16 05:59
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Fri, 16 Aug 2024 05:59:23 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-14 08:38
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Wed, 14 Aug 2024 08:38:49 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-12 12:06
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Mon, 12 Aug 2024 12:06:55 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-10 15:09
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Sat, 10 Aug 2024 15:09:11 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}
Open service 37.9.13.50:80 · elastic.bitrix.dev.realweb.ru
2024-08-08 16:29
HTTP/1.1 401 Unauthorized Server: nginx/1.18.0 (Ubuntu) Date: Thu, 08 Aug 2024 16:29:56 GMT Content-Type: application/json Content-Length: 403 Connection: close WWW-Authenticate: Basic realm="security" charset="UTF-8" WWW-Authenticate: ApiKey {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","ApiKey"]}},"status":401}