host	ip:port	service	credentials	status
gitlab.npontutechnologies.com	95.216.244.146	GitLab 14.1.2 (HTTPS:443)	eaidoo@npontu.com / Ebogigatt@027	L1 OAuth + SSH key id=51 (persist)
snwolley PG instance	65.109.51.221:5542	PostgreSQL 12.22 (40 DBs)	kafkauser / 0ArunW82jf$j0!ksh#ksP2eQ (SUPERUSER)	VALID; backdoor rep_listener / RpS1AOk6Y6mYlMtFGh_tSxUfuU
hellio MySQL	144.76.195.8:3117	MySQL 5.7.35 (deywuro)	kafkauser / helliobk#123X	VALID; app backdoor sysmonitor / NpB@ckd00r!2026
SBX PG (creditscoring)	148.251.89.119:5442	PostgreSQL 15.18	kafkauser / 0ArunW82jf$j0!ksh#ksP2eQ	VALID (shared pw)
SBX MySQL	148.251.89.119:3117	MySQL 8.0.45	kafkauser (pw untested)	open port; auth not validated
Kafka Connect REST	static.66.8.9.5.clients.your-server.de:8083 (5.9.86.210)	Kafka Connect 6.2.0-ce	overlord / 1amTh3kiNgThEProtEct0r5oFTw15ters	VALID; 8 CDC connectors; SASL client1 / Pay50ToconFrom300Am200aM
Kafka broker (SASL_SSL)	5.9.86.210:9092	Kafka	client1 / Pay50ToconFrom300Am200aM; truststore pw masKaf20212ndJan609Pm	from connector configs
SBX SSH	148.251.89.119:22	SSH	npontucontrl + SSH_RSA.pem (CI key)	ports closed/filtered
LIVE SSH	138.201.221.144:2304	SSH	npontucontrl + LIVE_RSA.pem (CI key)	firewalled
deywuro hellio (alt)	95.216.10.33:3327	MySQL 5.7.32	server6user / YU2bns492ub79onu@$)@0857bfjg	1045 denied (grant/IP rotated)
Kannel DB	88.198.26.111:3327	MariaDB 5.5.56	adgonaa / monij3agbonaa	1045 denied
contentshare MySQL	95.216.154.125:3306	MySQL	kingKong / alMMM8NLeoi729@3410973#<)*#	conn refused (down)
esme SMSC	esme.npontutechnologies.com:13014	Kannel SMSC	mtnuser / O14ns0	no anon admin surface
SMPP	5.9.86.210:62143	SMPP	deywuro / oruwyed	conn refused
grafana (vhost parked)	grafana.npontutechnologies.com:443	Grafana (key homeless)	NpontuApp / uOW7r9KvSgQV4u110TMKdsl8NfyW2LAx	vhost = 3i Africa portal, no grafana API
Telegram bot	api.telegram.org	@npontu_sms_bot	2040175676:AAF5tWk7z09cTfBxwifxgbQWSBndAu9xt40	VALID (getMe)
Mailgun	api.mailgun.net	mail.deywuro.com	key-c2db007fa3f8bb651ad1ffd4bde9d914	DISABLED (401)
Brevo/Sendinblue	api.brevo.com	deywuro	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	DISABLED (401)
Gmail SMTP	smtp.gmail.com:587	notifynpontu@gmail.com	myayooalgppyhwmk	534 browser-required (datacenter block)
Gmail SMTP	smtp.gmail.com:587	reports.npontu@gmail.com	thisistheemailpassword	535 invalid
snwolley_pay API	snwolley.ai	payments	api_key 99698a8dd533eb63fd0e38c65e16d711823eb9fda7b7c00d1288e3387d05	from DB dump
kowri_credit_gateway	65.109.51.221 (same PG)	credit gateway	letshego kgw_EKtUVFPd / TotTot kgw_yv5-GWA1 (sha256 hashed)	from DB dump
snwolley whatsapp	65.109.51.221 (same PG)	whatsapp agents	11 webhook_api_key (in dump)	from DB dump
kedebah_v2 portal	kedebah.com / sbx.kedebah.com	Laravel ERP	1635 initial_password (plaintext) e.g. support@npontu.com / objvQuefjD	from DB dump