LeakIX - Host 5.161.223.157

Host 5.161.223.157

United States

Hetzner Online GmbH

Software information

nginx nginx 1.23.3

tcp/8000

openresty

tcp/443 tcp/80 tcp/81

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 5.161.223.157
Port: 9092

First seen 2023-10-06 17:23
Last seen 2024-06-19 20:17
Open for 257 days
- Fingerprint: 43224224eeda9da960defeaab94cee3b061fe683061fe683061fe683061fe683
```
NoAuth
Found topic users
Found topic __consumer_offsets
```
  Found on 2024-06-19 20:17
- Fingerprint: 43224224eeda9da960defeaa0efe442af1b276bbf1b276bbf1b276bbf1b276bb
```
NoAuth
Found topic __consumer_offsets
Found topic users
```
  Found on 2024-05-24 22:30
Create report

Open service 5.161.223.157:8089

2024-06-20 07:08

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/problem+json
Transfer-Encoding: chunked
Date: Thu, 20 Jun 2024 07:08:41 GMT
Connection: close


{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource .","instance":"/"}

Found 8 hours ago by HttpPlugin

Create report

Open service 5.161.223.157:22

2024-06-20 03:52
Found 11 hours ago by SSHOpenPlugin
Create report

Open service 5.161.223.157:81

2024-06-15 23:43

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 15 Jun 2024 23:43:22 GMT
Content-Type: text/html
Content-Length: 1655
Last-Modified: Wed, 10 May 2023 04:54:15 GMT
Connection: close
ETag: "645b2377-677"
Accept-Ranges: bytes

Page title: Nginx Proxy Manager

<!doctype html><html lang="en" dir="ltr"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,user-scalable=no,initial-scale=1,maximum-scale=1,minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta http-equiv="Content-Language" content="en"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="mobile-web-app-capable" content="yes"><meta name="HandheldFriendly" content="True"><meta name="MobileOptimized" content="320"><title>Nginx Proxy Manager</title><link rel="apple-touch-icon" sizes="180x180" href="/images/favicons/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/images/favicons/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/images/favicons/favicon-16x16.png"><link rel="manifest" href="/images/favicons/site.webmanifest"><link rel="mask-icon" href="/images/favicons/safari-pinned-tab.svg" color="#5bbad5"><link rel="shortcut icon" href="/images/favicons/favicon.ico"><meta name="msapplication-TileColor" content="#333333"><meta name="msapplication-config" content="/images/favicons/browserconfig.xml"><meta name="theme-color" content="#ffffff"><link href="/css/main.css?v=2.10.3" rel="stylesheet"></head><body><noscript><div class="container no-js-warning"><div class="alert alert-warning text-center"><strong>Warning!</strong> This application requires Javascript and your browser doesn't support it.</div></div></noscript><div id="app" class="page"><span class="loader"></span></div><script src="/js/main.bundle.js?v=2.10.3"></script></body></html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 5.161.223.157:8000

2024-06-15 22:44

HTTP/1.1 200 OK
Server: nginx/1.23.3
Date: Sat, 15 Jun 2024 22:44:16 GMT
Content-Type: text/html
Content-Length: 408
Last-Modified: Mon, 22 Apr 2024 16:19:49 GMT
Connection: close
ETag: "66268e25-198"
Accept-Ranges: bytes

Page title: Niffler the coin keeper

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8"/>
    <link rel="icon" href="./images/favicon.ico"/>
    <meta name="viewport" content="width=device-width, initial-scale=1"/>
    <title>Niffler the coin keeper</title>
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<div id="root">
</div>
<script type="module" src="./bundle.js"></script>
</body>
</html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 5.161.223.157:8080

2024-06-15 18:37

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Location: /containers/
Date: Sat, 15 Jun 2024 18:37:31 GMT
Content-Length: 48
Connection: close


<a href="/containers/">Temporary Redirect</a>.

Found 2024-06-15 by HttpPlugin

Create report

Open service 5.161.223.157:80

2024-06-14 20:02

HTTP/1.1 200 OK
Server: openresty
Date: Fri, 14 Jun 2024 20:02:15 GMT
Content-Type: text/html
Content-Length: 1033
Last-Modified: Wed, 10 May 2023 04:53:26 GMT
Connection: close
ETag: "645b2346-409"
Accept-Ranges: bytes

Page title: Default Site

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <title>Default Site</title>
        <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet">
        <style>
            .jumbotron { margin-top: 50px; }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="jumbotron">
                <h1>Congratulations!</h1>
                <p>You've successfully started the Nginx Proxy Manager.</p>
                <p>If you're seeing this site then you're trying to access a host that isn't set up yet.</p>
                <p>Log in to the Admin panel to get started.</p>
            </div>
            <p class="text-center"><small>Powered by <a href="https://github.com/jc21/nginx-proxy-manager" target="_blank">Nginx Proxy Manager</a></small></p>
        </div>
    </body>
</html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 5.161.223.157:81

2024-06-13 15:14

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 13 Jun 2024 15:14:28 GMT
Content-Type: text/html
Content-Length: 1655
Last-Modified: Wed, 10 May 2023 04:54:15 GMT
Connection: close
ETag: "645b2377-677"
Accept-Ranges: bytes

Page title: Nginx Proxy Manager

<!doctype html><html lang="en" dir="ltr"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,user-scalable=no,initial-scale=1,maximum-scale=1,minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta http-equiv="Content-Language" content="en"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="mobile-web-app-capable" content="yes"><meta name="HandheldFriendly" content="True"><meta name="MobileOptimized" content="320"><title>Nginx Proxy Manager</title><link rel="apple-touch-icon" sizes="180x180" href="/images/favicons/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/images/favicons/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/images/favicons/favicon-16x16.png"><link rel="manifest" href="/images/favicons/site.webmanifest"><link rel="mask-icon" href="/images/favicons/safari-pinned-tab.svg" color="#5bbad5"><link rel="shortcut icon" href="/images/favicons/favicon.ico"><meta name="msapplication-TileColor" content="#333333"><meta name="msapplication-config" content="/images/favicons/browserconfig.xml"><meta name="theme-color" content="#ffffff"><link href="/css/main.css?v=2.10.3" rel="stylesheet"></head><body><noscript><div class="container no-js-warning"><div class="alert alert-warning text-center"><strong>Warning!</strong> This application requires Javascript and your browser doesn't support it.</div></div></noscript><div id="app" class="page"><span class="loader"></span></div><script src="/js/main.bundle.js?v=2.10.3"></script></body></html>

Found 2024-06-13 by HttpPlugin

Create report

Open service 5.161.223.157:443 · auth.niffler.qa.guru

2024-06-10 10:10

HTTP/1.1 302 
Server: openresty
Date: Mon, 10 Jun 2024 10:10:16 GMT
Content-Length: 0
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: XSRF-TOKEN=df96d3fe-57e8-4ee4-a2fa-d9979cab06cb; Path=/
X-XSRF-TOKEN: df96d3fe-57e8-4ee4-a2fa-d9979cab06cb
Set-Cookie: JSESSIONID=7572566D67E82BC5CC29A9A6D6B9C29B; Path=/
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Location: http://auth.niffler.qa.guru/login
X-Served-By: auth.niffler.qa.guru

Found 2024-06-10 by HttpPlugin

Create report

Open service 5.161.223.157:80 · auth.niffler.qa.guru

2024-06-10 10:10

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Mon, 10 Jun 2024 10:10:14 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://auth.niffler.qa.guru/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-10 by HttpPlugin

Create report

Open service 5.161.223.157:443 · api.niffler.qa.guru

2024-06-10 09:10

HTTP/1.1 401 
Server: openresty
Date: Mon, 10 Jun 2024 09:10:28 GMT
Content-Length: 0
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=A69ACA290720D82869B9C6D9E8102926; Path=/; HttpOnly
WWW-Authenticate: Bearer
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY

Found 2024-06-10 by HttpPlugin

Create report

Open service 5.161.223.157:80 · api.niffler.qa.guru

2024-06-10 09:10

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Mon, 10 Jun 2024 09:10:26 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://api.niffler.qa.guru/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-10 by HttpPlugin

Create report

Open service 5.161.223.157:443 · niffler.qa.guru

2024-06-09 19:09

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 09 Jun 2024 19:09:40 GMT
Content-Type: text/html
Content-Length: 408
Connection: close
Last-Modified: Mon, 22 Apr 2024 16:19:49 GMT
ETag: "66268e25-198"
Accept-Ranges: bytes
X-Served-By: niffler.qa.guru

Page title: Niffler the coin keeper

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8"/>
    <link rel="icon" href="./images/favicon.ico"/>
    <meta name="viewport" content="width=device-width, initial-scale=1"/>
    <title>Niffler the coin keeper</title>
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<div id="root">
</div>
<script type="module" src="./bundle.js"></script>
</body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

Open service 5.161.223.157:80 · niffler.qa.guru

2024-06-09 19:09

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Sun, 09 Jun 2024 19:09:38 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://niffler.qa.guru/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

auth.niffler.qa.guru

Fingerprint:

c82c0f3150473a560b065cb88471d2f0461e157f505dc1b1df8012e5bed9e2be

CN:

auth.niffler.qa.guru

Key:

ECDSA-384

Issuer:

Not before:

2024-06-10 09:09

Not after:

2024-09-08 09:09

api.niffler.qa.guru

Fingerprint:

5b1d477ea9acb58516352bd2bb394261825fd6dd57d6a59ec177b10270401470

CN:

api.niffler.qa.guru

Key:

ECDSA-384

Issuer:

Not before:

2024-04-11 08:07

Not after:

2024-07-10 08:07

niffler.qa.guru

Fingerprint:

ba383f27d5dd5ddf8025f424b701c34d27097d3ef9d298fb4b26b6b775d5c153

CN:

niffler.qa.guru

Key:

ECDSA-384

Issuer:

Not before:

2024-06-09 18:08

Not after:

2024-09-07 18:08

Domain summary

auth.niffler.qa.guru 1 api.niffler.qa.guru 1 niffler.qa.guru 1

3 recorded

Host 5.161.223.157

United States

Software information

Kafka instance is public

auth.niffler.qa.guru

api.niffler.qa.guru

niffler.qa.guru

Domain summary