LeakIX - Host 103.94.169.44

Host 103.94.169.44

Indonesia

PT Bali Towerindo Sentra, Tbk

Ubuntu

Software information

Apache Apache 2.4.41

tcp/443 tcp/80

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 103.94.169.44
Port: 9092

First seen 2022-12-04 21:30
Last seen 2024-05-08 13:36
Open for 520 days

Fingerprint: 43224224eeda9da960defeaa6afada7955fe2be4114623a090c57cd0153c78e8

NoAuth
Found topic live_update
Found topic my_topic
Found topic user_active_log
Found topic __consumer_offsets
Found topic molecool.internet-packages
Found topic clicks

Found on 2024-05-08 13:36

Fingerprint: 43224224eeda9da960defeaa0efe442af86c5f761ee652ba37cbfe29e49a8b90

NoAuth
Found topic __consumer_offsets
Found topic molecool.internet-packages
Found topic clicks
Found topic live_update
Found topic my_topic
Found topic user_active_log

Found on 2024-04-30 20:00

Fingerprint: 43224224eeda9da960defeaa963d8c2f59dff2d5bcb92c050d36b9f1e6863d24

NoAuth
Found topic my_topic
Found topic user_active_log
Found topic __consumer_offsets
Found topic molecool.internet-packages
Found topic clicks
Found topic live_update

Found on 2024-04-23 02:57

Fingerprint: 43224224eeda9da960defeaa6afada79ffe4f8c7d2e0761fdec4cf97684e3c4f

NoAuth
Found topic live_update
Found topic user_active_log
Found topic __consumer_offsets
Found topic molecool.internet-packages
Found topic clicks

Found on 2024-04-10 14:52

Fingerprint: 43224224eeda9da960defeaa0efe442af86c5f761ee652ba37cbfe2979902297

NoAuth
Found topic __consumer_offsets
Found topic molecool.internet-packages
Found topic clicks
Found topic live_update
Found topic user_active_log

Found on 2024-03-08 04:46

Fingerprint: 43224224eeda9da960defeaa12cd5a4ea79c8d3aab6cd2c66492d8366492d836

NoAuth
Found topic clicks
Found topic user_active_log
Found topic molecool.internet-packages
Found topic __consumer_offsets

Found on 2024-02-01 16:55

Fingerprint: 43224224eeda9da960defeaa0efe442a3ca9362732ab20ffa5fb730adfdd43f1

NoAuth
Found topic __consumer_offsets
Found topic noc.test
Found topic molecool.internet-packages
Found topic intra.test
Found topic test-events

Found on 2024-01-17 03:05

Fingerprint: 43224224eeda9da960defeaa1578b8a7ba43cf7f095e4d8aca155f717b5d12b1

NoAuth
Found topic noc.test
Found topic molecool.internet-packages
Found topic intra.test
Found topic test-events
Found topic __consumer_offsets

Found on 2024-01-09 05:43

Fingerprint: 43224224eeda9da960defeaa364655d1573f0b918585fda0ecc8e698a9b0c171

NoAuth
Found topic test-events
Found topic __consumer_offsets
Found topic noc.test
Found topic molecool.internet-packages
Found topic intra.test

Found on 2024-01-06 22:09

Fingerprint: 43224224eeda9da960defeaa8fe885f663ea0d3b458c4712912961425b49f68f

NoAuth
Found topic molecool.internet-packages
Found topic intra.test
Found topic test-events
Found topic __consumer_offsets
Found topic noc.test

Found on 2023-10-26 13:24

Fingerprint: 43224224eeda9da960defeaa3d2c4c973da85166b32e9cd64dfab81b8af0e883

NoAuth
Found topic intra.test
Found topic test-events
Found topic __consumer_offsets
Found topic noc.test
Found topic molecool.internet-packages

Found on 2022-12-23 00:54

Create report

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 103.94.169.44
Port: 445

First seen 2022-09-23 02:54
Last seen 2023-05-04 03:39
Open for 223 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c33bf58e5cbf5c7086bf5c7086bf5c7086bf5c7086
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
bts
IPC$
```
  Found on 2022-09-23 02:54
Create report

Open service 103.94.169.44:443 · aaattendance.com

2024-04-26 05:22

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 05:22:25 GMT
Server: Apache/2.4.41 (Ubuntu)
Strict-Transport-Security: max-age=31536000; includeSubDomains
Location: https://aaattendance.id/
Cache-Control: max-age=86400
Expires: Sat, 27 Apr 2024 05:22:25 GMT
Content-Length: 291
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://aaattendance.id/">here</a>.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at aaattendance.com Port 443</address>
</body></html>

Found 2024-04-26 by HttpPlugin

Create report

Open service 103.94.169.44:80 · aaattendance.com

2024-04-26 05:22

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 05:22:21 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://aaattendance.id/
Content-Length: 290
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://aaattendance.id/">here</a>.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at aaattendance.com Port 80</address>
</body></html>

Found 2024-04-26 by HttpPlugin

Create report

Open service 103.94.169.44:80 · aaattendance.id

2024-04-26 05:08

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 05:08:16 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://aaattendance.id/
Content-Length: 289
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://aaattendance.id/">here</a>.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at aaattendance.id Port 80</address>
</body></html>

Found 2024-04-26 by HttpPlugin

Create report

Open service 103.94.169.44:443 · aaattendance.id

2024-04-26 05:08

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 05:08:24 GMT
Server: Apache/2.4.41 (Ubuntu)
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: no-cache, private
Set-Cookie: october_session=eyJpdiI6IjczZTQwYVh0MkVsWjQ2a0p5ZjFZc2c9PSIsInZhbHVlIjoicFZcL3ZBNDJLUkRQY0xjeEZnUUp4U1prdnJMUFdPb3pSa2NZKytFV2dndVdEdW5UYzFCcVBveEdpYm8zaVhRVFEiLCJtYWMiOiI3YjUxZDYzNjE3ZDAwYjI1YmM4YjM2YTAxYjIxZjExYzJhMWQ1NTg3Yjc0MGRjNWE3ZWUwNTA3ZWFhZjJkMTI1In0%3D; expires=Fri, 26-Apr-2024 07:08:24 GMT; Max-Age=7200; path=/; httponly
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: AAAttendance

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">

    <title>AAAttendance</title>
    
    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
    <link rel="manifest" href="/site.webmanifest">
    <meta name="msapplication-TileColor" content="#da532c">
    <meta name="theme-color" content="#ffffff">
    
    <!-- Global site tag (gtag.js) - Google Analytics -->
    <script async src="https://www.googletagmanager.com/gtag/js?id=G-HWCLNEP592"></script>
    <script>
      window.dataLayer = window.dataLayer || [];
      function gtag(){dataLayer.push(arguments);}
      gtag('js', new Date());
    
      gtag('config', 'G-HWCLNEP592');
    </script>

    <!-- Bootstrap Core CSS -->
    <link href="https://aaattendance.id/themes/vojtasvoboda-newage/assets/vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">

    <!-- Custom Fonts -->
    <link href="https://aaattendance.id/themes/vojtasvoboda-newage/assets/vendor/fontawesome-free/css/all.min.css" rel="stylesheet">
    <link href="https://aaattendance.id/themes/vojtasvoboda-newage/assets/vendor/simple-line-icons/css/simple-line-icons.css" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css?family=Lato" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css?family=Catamaran:100,200,300,400,500,600,700,800,900" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css?family=Muli" rel="stylesheet">

    <!-- Plugin CSS -->
    <link href="https://aaattendance.id/themes/vojtasvoboda-newage/assets/device-mockups/device-mockups.min.css" rel="stylesheet">

    <!-- Theme CSS -->
    <link href="https://aaattendance.id/themes/vojtasvoboda-newage/assets/css/new-age.min.css" rel="stylesheet">
    
</head>

<body id="page-top">

<nav id="mainNav" class="navbar navbar-expand-lg navbar-light fixed-top">
    <div class="container">
        <a class="navbar-brand logo-image js-scroll-trigger" href="https://aaattendance.id/"><img src="https://aaattendance.id/themes/vojtasvoboda-newage/assets/img/logo.svg" alt=""> AAAttendance</a>
        <button class="navbar-toggler navbar-toggler-right" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">
            Menu
            <i class="fas fa-bars"></i>
        </button>
        <div class="collapse navbar-collapse" id="navbarResponsive">
            <ul class="navbar-nav ml-auto">
                <li class="nav-item">
    <a class="nav-link js-scroll-trigger" href="#features">
        Features
    </a>
</li>
<li class="nav-item">
    <a class="nav-link js-scroll-trigger" href="#download">
        Download
    </a>
</li>
<li class="nav-item">
    <a class="nav-link js-scroll-trigger" href="#contact">
        Contact
    </a>
</li>
<!--<li class="nav-item">
    <a class="nav-link js-scroll-trigger" href="/privacy-policy">
        Privacy
    </a>
</li>
<li class="nav-item">
    <a class="nav-link js-scroll-trigger" href="/terms-and-conditions">
        Terms
    </a>
</li> -->            </ul>
        </div>
    </div>
</nav>
    <header class="masthead">
    <div class="container h-100">
        <div class="row h-100">
            <div class="col-lg-7 my-auto">
                <div class="header-content mx-auto">
                    <h1 class="mb-5">AAAttendance</h1>
                    <a> memantau kinerja karyawan bermobilitas tinggi secara real-time dan memberikan berbagai fitur untuk memudahkan personalia perusahaan dengan pengolahan data absensi kehadiran, menyimpan data karyawan, mengatur jadwal kerja karyawan, hingga manajemen izin karyawan. </a>
                                    </div>
            </div>
            <div class="col-lg-5 my-auto">
                <div class="device-containe

Found 2024-04-26 by HttpPlugin

Create report

Open service 103.94.169.44:80

2024-04-24 11:53

HTTP/1.1 302 Found
Date: Wed, 24 Apr 2024 11:53:22 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://aaattendance.id/
Content-Length: 287
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://aaattendance.id/">here</a>.</p>
<hr>
<address>Apache/2.4.41 (Ubuntu) Server at 103.94.169.44 Port 80</address>
</body></html>

Found 2024-04-24 by HttpPlugin

Create report

www.aaattendance.comaaattendance.com

Fingerprint:

e5a311c438b77a56b87e9c3996b36e0600c43787d2425c4f15b45a0b35835e3c

CN:

www.aaattendance.com

Key:

RSA-2048

Issuer:

AlphaSSL CA - SHA256 - G4

Not before:

2023-06-08 11:48

Not after:

2024-07-09 11:48

*.aaattendance.idaaattendance.id

Fingerprint:

68ad03142202ca8755a061c1120238d684d008d2fbdf64bf41afd96bf04ac4bf

CN:

*.aaattendance.id

Key:

RSA-2048

Issuer:

AlphaSSL CA - SHA256 - G4

Not before:

2023-06-08 11:49

Not after:

2024-07-09 11:49

Domain summary

aaattendance.com 1 aaattendance.id 1

2 recorded

Host 103.94.169.44

Indonesia

Software information

Kafka instance is public

Open SMB file sharing detected

Create report

Create report

Create report

Create report

Create report

www.aaattendance.comaaattendance.com

*.aaattendance.idaaattendance.id

Domain summary