SIMULATED
demo fixture: this exact view is what a real scan of your host returns. nothing below is invented.
scan your host → ~8s
what the internet sees when it looks at this host
acme-ml-prod.example.com
41 unauthenticated GETs · 2026-08-04 14:02Z · nothing here was guessed — every line is a reply
gradeF
the host, then everything an attacker reached — edge = the actual request
host — subject of case file
203.0.113.10 · scanned from the public internet
acme-ml-prod.example.com
answers 3 of 41 probes with zero authentication
GET :11434/api/tags → 200 OK · 41ms
CRITICALOllama
model server, wide open
what came back{"models":[{"name":"llama3.1:70b"},{"name":"qwen2.5-coder:32b"}]}
The model list is public — and /api/generate answers too, so anyone can run inference on this GPU.
GET :5678/rest/workflows → 200 OK · 63ms
HIGHn8n
workflow automation, readable
what came back14 workflow names · webhook URLs like /webhook/a3f9…c1
Names and webhook URLs are readable without a session — a webhook path is the secret token.
GET :3000/api/public/health → 401 · wall holding
INFOLangfuse
reachable, but the wall holds
Traces stay behind the login. Present on the internet — one disabled env var from a finding.
→ keep it that way: hardening note
not graded