LeakIX - Host 128.199.244.114

Host 128.199.244.114

Singapore

DIGITALOCEAN-ASN

Software information

nginx nginx 1.21.3

tcp/8082 tcp/8083 tcp/8088

uvicorn

tcp/8000

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 128.199.244.114
Port: 9092

First seen 2024-06-21 23:10
Last seen 2024-09-19 23:36
Open for 90 days
- Fingerprint: 43224224eeda9da960defeaa67585a10e114f705fd4d2c35df0bc6efa0019660
```
NoAuth
Found topic ads_inhouse_log
Found topic affiliate_log4
Found topic __consumer_offsets
Found topic cross_sale_log
Found topic cross_sale_order_log
```
  Found on 2024-09-19 23:36
- Fingerprint: 43224224eeda9da960defeaadbc4191f038aa06f7652c2979b81a89d9b81a89d
```
NoAuth
Found topic affiliate_log4
Found topic ads_inhouse_log
Found topic __consumer_offsets
Found topic cross_sale_log
```
  Found on 2024-09-17 23:30
- Fingerprint: 43224224eeda9da960defeaaf56438e052ce0495d37cfc6dc026c78dc026c78d
```
NoAuth
Found topic cross_sale_log
Found topic affiliate_log4
Found topic ads_inhouse_log
Found topic __consumer_offsets
```
  Found on 2024-09-15 23:44
- Fingerprint: 43224224eeda9da960defeaa0efe442a8824ca60a60b4215be98b0edbe98b0ed
```
NoAuth
Found topic __consumer_offsets
Found topic cross_sale_log
Found topic affiliate_log4
Found topic ads_inhouse_log
```
  Found on 2024-09-13 22:48
- Fingerprint: 43224224eeda9da960defeaa67585a10f107d580f919f03af83ce66ff83ce66f
```
NoAuth
Found topic ads_inhouse_log
Found topic __consumer_offsets
Found topic cross_sale_log
Found topic affiliate_log4
```
  Found on 2024-08-23 20:37
- Fingerprint: 43224224eeda9da960defeaadbc4191fa783e525588c9955588c9955588c9955
```
NoAuth
Found topic affiliate_log4
Found topic cross_sale_log
Found topic __consumer_offsets
```
  Found on 2024-07-25 22:50
- Fingerprint: 43224224eeda9da960defeaa0efe442a6e84aa9ffac122a5fac122a5fac122a5
```
NoAuth
Found topic __consumer_offsets
Found topic affiliate_log4
Found topic cross_sale_log
```
  Found on 2024-07-23 21:51
- Fingerprint: 43224224eeda9da960defeaa0efe442a8824ca608824ca608824ca608824ca60
```
NoAuth
Found topic __consumer_offsets
Found topic cross_sale_log
```
  Found on 2024-07-09 23:14
- Fingerprint: 43224224eeda9da960defeaaf56438e038939a1038939a1038939a1038939a10
```
NoAuth
Found topic cross_sale_log
Found topic __consumer_offsets
```
  Found on 2024-07-07 21:29
Create report

Open service 128.199.244.114:8083

2024-09-12 03:38

HTTP/1.1 302 Found
Server: nginx/1.21.3
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Date: Thu, 12 Sep 2024 03:38:12 GMT
Location: https://128.199.244.114/dashboard
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNvY3Bob21QOGNKMHMrRVV5TmtIXC9RPT0iLCJ2YWx1ZSI6InY4M0JPVnJEcnFmWFlMSzRNNUdOVUVsRnZkMVJuMkVxZHdLY1JlYUVxYVZpR3lmWmZiQTJkYlEzVnNPWm4xSXUiLCJtYWMiOiIyYWRkMzQxMWMxOGMwNjI0ODI5M2I4YTA1NDgyOGJjZjI0Y2YwMDU1MzEyYzYzYzk4ZTM3MjZhMjY4YmZmZWRlIn0%3D; expires=Sun, 15-Mar-2026 17:32:12 GMT; Max-Age=47483640; path=/
Set-Cookie: eup_session=eyJpdiI6IlwvREFiK1lGQlhaTXFaUENMRkxiQUdnPT0iLCJ2YWx1ZSI6ImFnczZRTUhtWmhmTXRnTFBkbnNCVm9tN2hzcm9HQlY5dENIUFNiZEIrV0xWekhteWFJaFAzcWhLdFEwbFJncmsiLCJtYWMiOiI0MGU2YjdkZmQ5MTg5N2ExNzE3OGQxMGI3ZTFhYmMyNmZlYzI3ZGEzZWM4ODJlMzdhZDZiY2MzYWM1ZGNmYTE0In0%3D; expires=Sun, 15-Mar-2026 17:32:12 GMT; Max-Age=47483640; path=/; httponly

Page title: Redirecting to https://128.199.244.114/dashboard

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://128.199.244.114/dashboard'" />

        <title>Redirecting to https://128.199.244.114/dashboard</title>
    </head>
    <body>
        Redirecting to <a href="https://128.199.244.114/dashboard">https://128.199.244.114/dashboard</a>.
    </body>
</html>

Found 2024-09-12 by HttpPlugin

Create report

Open service 128.199.244.114:8000

2024-09-11 23:42

HTTP/1.1 404 Not Found
date: Wed, 11 Sep 2024 23:42:45 GMT
server: uvicorn
content-length: 22
content-type: application/json
connection: close


{"detail":"Not Found"}

Found 2024-09-11 by HttpPlugin

Create report

Open service 128.199.244.114:27017

2024-09-11 21:01

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-11 by HttpPlugin

Create report

Open service 128.199.244.114:80

2024-09-11 07:54

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Wed, 11 Sep 2024 07:54:47 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2024-09-11 by HttpPlugin

Create report

Open service 128.199.244.114:8088

2024-09-11 07:03

HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 11 Sep 2024 07:03:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2059
Connection: close
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
set-cookie: _csrf=mf-SwpaYP49Y8j2LPvB4EnAs; Path=/
ETag: W/"80b-vDHMp4SqbQIpjfzAEOK38eyLgqo"
Vary: Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization

Page title: Mailtrain
        
    

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    <meta name="description" content="Self hosted email newsletter app">
    <link rel="shortcut icon" href="https://mail.eupgroup.net/static/favicon.ico" type="image/x-icon" />
    <link rel="icon" href="https://mail.eupgroup.net/static/favicon.ico">

    <title>Mailtrain
        
    </title>

    <link rel="stylesheet" href="https://mail.eupgroup.net/client/mailtrain.css">

    <script src="https://mail.eupgroup.net/static-npm/jquery.min.js"></script>
    <script src="https://mail.eupgroup.net/static-npm/popper.min.js"></script>
    <script src="https://mail.eupgroup.net/static-npm/bootstrap.min.js"></script>
    <script src="https://mail.eupgroup.net/static-npm/coreui.min.js"></script>

    <script>
        if (!window.location.href.startsWith('https://mail.eupgroup.net/')) {
            console.warn('Warning: Misconfigured urlBases. If the website does not work, check the settings of www.trustedUrlBase, www.sandboxUrlBase and www.publicUrlBase in server config file.');
        }
    </script>

    <script>
        window.csrfToken = 'uoQI6gXF-rSKqKuOR7v3BE90NVFiB1M5MiuA';
        window.mailtrainConfig = {"authMethod":"local","isAuthMethodLocal":true,"externalPasswordResetLink":null,"defaultLanguage":"en-US","enabledLanguages":["en-US","es-ES","pt-BR","de-DE","fr-FR","fk-FK"],"isAuthenticated":false,"trustedUrlBase":"https://mail.eupgroup.net/","trustedUrlBaseDir":"/","sandboxUrlBase":"https://mail-sandbox.eupgroup.net/","sandboxUrlBaseDir":"/","publicUrlBase":"https://mail-public.eupgroup.net/","publicUrlBaseDir":"/","appType":0};
    </script>

        <script src="https://mail.eupgroup.net/client/root.js"></script>
</head>

<body class="mailtrain ">
    <div id="root"></div>
<script>
    document.addEventListener('DOMContentLoaded', function() {
        MailtrainReactBody.default();
    });
</script>


</body>

</html>

Found 2024-09-11 by HttpPlugin

Create report

Open service 128.199.244.114:3308

2024-09-11 04:58
```
MySQL detected
```
Found 2024-09-11 by tcpid
Create report
Open service 128.199.244.114:3307

2024-09-10 17:56
```
MySQL detected
```
Found 2024-09-10 by tcpid
Create report

Open service 128.199.244.114:8082

2024-09-10 14:47

HTTP/1.1 404 Not Found
Server: nginx/1.21.3
Date: Tue, 10 Sep 2024 14:47:31 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 63
Connection: close
X-Powered-By: Express
RateLimit-Policy: 100;w=60
RateLimit: limit=100, remaining=65, reset=17
ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys"


{"statusCode":404,"message":"Cannot GET /","error":"Not Found"}

Found 2024-09-10 by HttpPlugin

Create report

Open service 128.199.244.114:22

2024-09-10 04:46
Found 2024-09-10 by SSHOpenPlugin
Create report

Open service 128.199.244.114:444

2024-09-10 00:21

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Tue, 10 Sep 2024 00:21:37 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2024-09-10 by HttpPlugin

Create report

cb19c55e23b5de9650fee6677b8c4f2f.60340506b6ae6543f93f2d0133722d68.traefik.default

Fingerprint:

0d161e0b36b4a8bfb5ee54d2a77192d32f69c7c07f29ba6c0b4f11f1beff7d16

CN:

TRAEFIK DEFAULT CERT

Key:

RSA-2048

Issuer:

TRAEFIK DEFAULT CERT

Not before:

2024-09-11 07:54

Not after:

2025-09-11 07:54

f07fd0291f3f2f69defdcacfa7b2a60b.4f8851142b9489ac456a4ef43b302a88.traefik.default

Fingerprint:

ab6838268340c9547ae5da484bf58e6842e1e43ad0328029c08ec88da70abd24

CN:

TRAEFIK DEFAULT CERT

Key:

RSA-2048

Issuer:

TRAEFIK DEFAULT CERT

Not before:

2024-09-10 00:21

Not after:

2025-09-10 00:21

Domain summary

No record

Host 128.199.244.114

Singapore

Software information

Kafka instance is public

cb19c55e23b5de9650fee6677b8c4f2f.60340506b6ae6543f93f2d0133722d68.traefik.default

f07fd0291f3f2f69defdcacfa7b2a60b.4f8851142b9489ac456a4ef43b302a88.traefik.default

Domain summary