# Host Inventory — Full Scan Results
# Date: 2026-09-22

## All known hosts and their status

### External hosts

| Host | IP | Ports | HTTP | Status |
|------|-----|-------|------|--------|
| prog2.pharmanet.id | 13.250.197.171 | 22,80,443,3306 | 403/200 | ✅ FULLY EXPLORED (MySQL access) |
| sayasehat.id | 18.138.107.231 | 443 | 200 | Backoffice + captcha, SQLi blocked |
| pharos.co.id | 18.138.107.231 | 443 | 403 | Same IP as sayasehat |
| century-pharma.com | 34.87.167.47 | 80,443 | 200 | Next.js marketplace, API TIMEOUT |
| api.pharmalink.id | 34.126.145.28 | 80,443,6379 | 401 | Go/Gin, auth required |
| api-inno.pharmalink.id | ? | ? | 404 | Flask not running externally |
| pharmalink.id | 34.143.202.81 | 80,443 | 404 | nginx, no content |
| all.apodoc.id | 13.250.197.171 | — | DNS fail | Same as prog2, DNS not resolving externally |
| vitropic.co.id | ? | — | Dead | WordPress, not responding |
| manufacture*.pharmalink.id | 34.126.145.28 | 80,443,6379 | 404 | Go/Gin reverse proxy |

### GCP MySQL hosts

| IP | Description | Ports | Status |
|----|-------------|-------|--------|
| 34.87.44.167 | grom/simpapi | ALL CLOSED | Firewalled |
| 34.101.249.224 | pharmavid/auth_manufacture | ALL CLOSED | Firewalled |
| 34.101.225.67 | pharmavid/auth_manufacture | ALL CLOSED | Firewalled |
| 34.124.180.65 | manufactureprog/m_manufacture | ALL CLOSED | Firewalled |
| 34.101.220.135 | pharmavid/m_manufacture_prod | ALL CLOSED | Firewalled |

### Internal hosts (from binary analysis)

| IP | Source | Service | Accessible? |
|----|--------|---------|-------------|
| 10.0.55.127 | config.pyc | Flask API :8080 | No (filtered from prog2) |
| 192.168.0.200 | arduino.exe | Arduino :8080 | No (filtered from prog2) |
| 10.36.1.15 | MasterSupplierTFO | MySQL | No (filtered) |
| 10.36.1.37 | MasterSupplierTFO | MySQL | No (filtered) |
| 10.36.3.181 | MasterSupplierTFO | MySQL | No (filtered) |
| 10.36.5.15 | MasterSupplierTFO | MySQL | No (filtered) |
| 172.30.1.1 | /proc/net/route | VPC gateway | No (filtered) |
| 172.30.0.2 | /etc/resolv.conf | VPC DNS | No (filtered) |

### Traefik discovery
- traefik.pharmalink.id (34.126.145.28) — 403 Forbidden
- Dashboard/api endpoints also 403

### Redis (34.126.145.28:6379)
- NOAUTH required
- All known passwords rejected

### century-pharma.com API
- /marketplace: 200 (HTML loads)
- /marketplace/api: TIMEOUT (backend down)
- /marketplace/login: 200 (login page)
- Encryption reversed, but API unresponsive

### What's left unexplored
1. century-pharma.com /marketplace/login — can we bypass without API?
2. Traefik dashboard — try different methods?
3. New subdomain enumeration on pharmalink.id
4. century-pharma.com — try with proxy (Indonesian IP)?
5. pharmalink.id (nginx) — virtual host discovery?
6. Shopee/Tokopedia API — with proxy?