LeakIX - Host 198.27.82.49

Host 198.27.82.49

Canada

OVH SAS

Software information

Jetty(9.2.2.v20140723)

tcp/8080

Jetty(9.4.11.v20180605)

tcp/443

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 198.27.82.49
Port: 9092

First seen 2022-08-06 17:43
Last seen 2024-06-19 21:58
Open for 683 days
- Fingerprint: 43224224eeda9da960defeaa0efe442aa91fd29ba91fd29ba91fd29ba91fd29b
```
NoAuth
Found topic __consumer_offsets
Found topic EventStream
```
  Found on 2024-06-19 21:58
- Fingerprint: 43224224eeda9da960defeaa852a8e1b3d660e633d660e633d660e633d660e63
```
NoAuth
Found topic EventStream
Found topic __consumer_offsets
```
  Found on 2024-06-15 13:38
Create report

Open service 198.27.82.49:8080

2024-06-20 19:54

HTTP/1.1 200 OK
Date: Thu, 20 Jun 2024 19:54:58 GMT
Content-Type: text/html
Last-Modified: Wed, 01 Mar 2023 12:21:40 GMT
Accept-Ranges: bytes
Connection: close
Server: Jetty(9.2.2.v20140723)

Page title: SLS Administration Login

<!--

    Copyright 2014-2016 CyberVision, Inc.

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

         http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.

-->

<!doctype html>
<!-- The DOCTYPE declaration above will set the     -->
<!-- browser's rendering engine into                -->
<!-- "Standards Mode". Replacing this declaration   -->
<!-- with a "Quirks Mode" doctype is not supported. -->

<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <title>SLS Administration Login</title>
    <link rel="icon" type="image/png" href="favicon.png" />
    <script type="text/javascript" src="login/login.nocache.js"></script> 
  </head>

  <!--                                           -->
  <!-- The body can have arbitrary html, or      -->
  <!-- you can leave the body empty if you want  -->
  <!-- to create a completely dynamic UI.        -->
  <!--                                           -->
  <body>

    <!-- OPTIONAL: include this if you want history support -->
    <iframe src="javascript:''" id="__gwt_historyFrame" tabIndex='-1' style="position:absolute;width:0;height:0;border:0"></iframe>
    
    <!-- PRINTING support -->
    <iframe id="__printingFrame" style="width:0;height:0;border:0"></iframe> 
    
    <!-- RECOMMENDED if your web app will not function without JavaScript enabled -->
    <noscript>
      <div style="width: 22em; position: absolute; left: 50%; margin-left: -11em; color: red; background-color: white; border: 1px solid red; padding: 4px; font-family: sans-serif">
        Your web browser must have JavaScript enabled
        in order for this application to display correctly.
      </div>
    </noscript>
 
  </body>
</html>

Found 9 hours ago by HttpPlugin

Create report

Open service 198.27.82.49:443

2024-06-20 08:04

HTTP/1.1 302 Found
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET, PUT, DELETE, OPTIONS
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: X-Requested-With, Content-Type,Authorization, Origin, Accept,Access-Control-Request-Method, Access-Control-Request-Headers,version
Content-Language: en-US
Location: https://198.27.82.49/nebulink/fota/login
Server: Jetty(9.4.11.v20180605)

Found 21 hours ago by HttpPlugin

Create report

Open service 198.27.82.49:22

2024-06-14 23:26
Found 2024-06-14 by SSHOpenPlugin
Create report

Open service 198.27.82.49:8080

2024-06-13 10:40

HTTP/1.1 200 OK
Date: Thu, 13 Jun 2024 10:40:51 GMT
Content-Type: text/html
Last-Modified: Wed, 01 Mar 2023 12:21:40 GMT
Accept-Ranges: bytes
Connection: close
Server: Jetty(9.2.2.v20140723)

Page title: SLS Administration Login

<!--

    Copyright 2014-2016 CyberVision, Inc.

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

         http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.

-->

<!doctype html>
<!-- The DOCTYPE declaration above will set the     -->
<!-- browser's rendering engine into                -->
<!-- "Standards Mode". Replacing this declaration   -->
<!-- with a "Quirks Mode" doctype is not supported. -->

<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <title>SLS Administration Login</title>
    <link rel="icon" type="image/png" href="favicon.png" />
    <script type="text/javascript" src="login/login.nocache.js"></script> 
  </head>

  <!--                                           -->
  <!-- The body can have arbitrary html, or      -->
  <!-- you can leave the body empty if you want  -->
  <!-- to create a completely dynamic UI.        -->
  <!--                                           -->
  <body>

    <!-- OPTIONAL: include this if you want history support -->
    <iframe src="javascript:''" id="__gwt_historyFrame" tabIndex='-1' style="position:absolute;width:0;height:0;border:0"></iframe>
    
    <!-- PRINTING support -->
    <iframe id="__printingFrame" style="width:0;height:0;border:0"></iframe> 
    
    <!-- RECOMMENDED if your web app will not function without JavaScript enabled -->
    <noscript>
      <div style="width: 22em; position: absolute; left: 50%; margin-left: -11em; color: red; background-color: white; border: 1px solid red; padding: 4px; font-family: sans-serif">
        Your web browser must have JavaScript enabled
        in order for this application to display correctly.
      </div>
    </noscript>
 
  </body>
</html>

Found 2024-06-13 by HttpPlugin

Create report

Open service 198.27.82.49:8080

2024-06-02 09:24

HTTP/1.1 200 OK
Date: Sun, 02 Jun 2024 09:24:00 GMT
Content-Type: text/html
Last-Modified: Wed, 01 Mar 2023 12:21:40 GMT
Accept-Ranges: bytes
Connection: close
Server: Jetty(9.2.2.v20140723)

Page title: SLS Administration Login

<!--

    Copyright 2014-2016 CyberVision, Inc.

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

         http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.

-->

<!doctype html>
<!-- The DOCTYPE declaration above will set the     -->
<!-- browser's rendering engine into                -->
<!-- "Standards Mode". Replacing this declaration   -->
<!-- with a "Quirks Mode" doctype is not supported. -->

<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <title>SLS Administration Login</title>
    <link rel="icon" type="image/png" href="favicon.png" />
    <script type="text/javascript" src="login/login.nocache.js"></script> 
  </head>

  <!--                                           -->
  <!-- The body can have arbitrary html, or      -->
  <!-- you can leave the body empty if you want  -->
  <!-- to create a completely dynamic UI.        -->
  <!--                                           -->
  <body>

    <!-- OPTIONAL: include this if you want history support -->
    <iframe src="javascript:''" id="__gwt_historyFrame" tabIndex='-1' style="position:absolute;width:0;height:0;border:0"></iframe>
    
    <!-- PRINTING support -->
    <iframe id="__printingFrame" style="width:0;height:0;border:0"></iframe> 
    
    <!-- RECOMMENDED if your web app will not function without JavaScript enabled -->
    <noscript>
      <div style="width: 22em; position: absolute; left: 50%; margin-left: -11em; color: red; background-color: white; border: 1px solid red; padding: 4px; font-family: sans-serif">
        Your web browser must have JavaScript enabled
        in order for this application to display correctly.
      </div>
    </noscript>
 
  </body>
</html>

Found 2024-06-02 by HttpPlugin

Create report

.nebulae.io.slscorp.com*.yalgaar.ioslscorp.com

Fingerprint:

a43c48775fa95dd0b23759a079ef86df9e8cb8f5e5d6f46ae2dee9da848356e0

CN:

*.nebulae.io

Key:

RSA-2048

Issuer:

SSL.com RSA SSL subCA

Not before:

2023-12-21 06:34

Not after:

2024-12-21 06:34

Domain summary

No record

Host 198.27.82.49

Canada

Software information

Kafka instance is public

Create report

Create report

Create report

Create report

Create report

*.nebulae.io*.slscorp.com*.yalgaar.ioslscorp.com

Domain summary

.nebulae.io.slscorp.com*.yalgaar.ioslscorp.com