# http://ocs-vertriebsservice.baloise.de:8009 in_scope host_id=dfb9356a61db699d16abd1de89defa54 last_seen=2026-11-14 18:39:33 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:02:11) Unreachable candidate AJP listener. Direct and configured-route TCP connections produce no AJP response, so this origin exposes no HTTP path, application content or identifiable server-side product. ## paths method status size path exchange_id GET 0 / 01a1db5b-abad-7193-8e20-7a8e4a922d3d # http://ocs-vertriebsservice.baloise.de:8080 in_scope host_id=572342e77c72f2ff62bb93739c811a42 last_seen=2026-11-14 05:04:12 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:02:13) Unavailable alternate plain-HTTP listener. Direct requests time out and configured routes return only provider-level failures, with no target response, application content or identifiable server-side product. ## paths method status size path exchange_id GET / 01a1d871-3f8c-726c-bc1c-e4ee8846acfd # https://ocs-vertriebsservice.baloise.de in_scope host_id=5606ee0f626d059b4a2a60e24c4df3af last_seen=2026-11-14 23:31:43 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 13:43:31) Apache HTTP Server and Airlock Gateway front end for OCS Vertriebsservice. Root and application-shaped names such as `/OCS`, `/ocs`, `/services`, Swagger/OpenAPI, actuator, administration, OAuth, Java-management and historical `/v1/*` paths all enter the same 123-byte HTTP 303 gateway handoff to `/error_path/404.html?al_req_id=...`; the wider root namespace behaves the same way. These are catch-all responses rather than distinct OCS backend handlers. No anonymous OCS API, authentication application or management interface is mapped on this origin. The real gateway-owned content is below `/error_path/`. Branded Baloise documents are installed at `/error_path/400.html`, `/403.html`, `/404.html`, `/500.html`, `/503.html` and `/maintenance.html`. They return their corresponding HTTP status and approximately 9.7–10.2 KB HTML, except the maintenance document, which returns HTTP 200 and includes German, French, Italian, Dutch and English text. The pages use inline CSS and an embedded data-URI logo. `/error_path/img` redirects to `/error_path/img/`, where `/error_path/img/favicon.ico` is the only discovered standalone asset. The text frontend export contains only the 10,113-byte `/error_path/maintenance.html`; it publishes no JavaScript bundle, external stylesheet or source map. Alternate production TLS listeners expose the same Apache/Airlock gateway boundary through CloudFront origin-facing addresses while direct worker connections time out. Plain HTTP ports 8009 and 8080 expose no target application response. Direct access and all cloud routes except Vercel return the identical maintenance document; no source-address allowlist is indicated. ## tech technology version checked_at Airlock Gateway 2026-11-13 11:43:07 Apache HTTP Server 2026-11-13 11:43:09 ## paths (50 of 62; toadcli paths) method status size path exchange_id GET 303 123 / 01a1dc67-0f32-7a24-835d-b7f7cc84b9c2 GET 303 123 /.well-known/oauth-authorization-server 01a1b838-7c8b-76d0-a3f4-cb67f6934463 GET 303 123 /OCS 01a0f9e7-111b-748c-a255-5e91185e1fe6 GET 303 123 /OCS/ 01a0f9e7-197c-7070-8cb9-232f047b5a4c GET 303 123 /SASWIPClientAccess/remote/ServiceRegistry 01a1c5fc-ef42-741d-a57a-243bc4aa669d GET 303 123 /actuator 01a0f9e6-99f3-7527-9abc-26ba1e09093e GET 303 123 /actuator/env 01a0f9f1-e215-7114-b422-8f709beaaf49 GET 303 123 /actuator/gateway/routes 01a0f9f1-eacb-742e-9232-d08d7415177a GET 303 123 /admin/ 01a0f9f1-d975-770e-b839-bdcc1f498718 GET 303 123 /airlock/alec_security_check 01a1da6c-3271-7f4e-97ac-023302fae605 GET 303 123 /airlock/rest/ 01a1da1b-9646-7e05-bda4-de09f73750fd GET 303 123 /airlock/rest/configuration/configurations 01a1da1b-971d-70c9-9a30-6590f2fec2d8 GET 303 123 /airlock/rest/configuration/status 01a1da1b-9658-75aa-9f5a-e6498f8b6fd2 GET 303 123 /airlock/rest/v3/api-docs 01a1da1b-963a-756a-8567-ad36206a477a GET 421 362 /api/jsonws 01a1c4ff-6930-7457-9cc1-0064eaaacce6 GET 400 266 /api/spring/portal 01a1cb06-5f62-7348-86b4-4b624a76b91e GET 303 123 /auth-login/rest/public/maintenance-messages 01a1c345-b93d-7652-8311-fd79831b0527 GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-966a-7c2b-836c-e87d09e2318e GET 303 123 /auth/rest/public/saml2/sp/sso/metaAlias/source-derived-probe 01a1daaf-2937-77ec-adf2-9e8d15168985 GET 303 123 /auth/ui/app 01a0fa04-82a5-75af-91b5-bce27c6bf16e GET 303 123 /axis2/ 01a0f9f1-8c5a-715b-895f-a97c18af0552 GET 303 123 /axis2/services/listServices 01a1adcb-72a4-7160-a050-bb23447b4624 GET 303 123 /baloise-venta/a4j_3_2_1-SNAPSHOTorg/richfaces/renderkit/html/css/basic_classes.xcss/DATB/eAELXT5DOhSIAQ.sA18_.c1 01a1dbd3-2f2b-76a8-8d38-cabb5b7d48e2 GET 421 362 /bc/ws/gw/webservice/bc/MaintenanceToolsAPI 01a1cad1-f4f3-70a4-8e74-c6a4c121eb98 GET 400 10158 /cgi-bin/.%2E/.%2E/.%2E/.%2E/etc/passwd 01a1c298-6070-7731-ace4-bba4e10bf4f2 GET 303 123 /console/ 01a0f9f1-b7c3-73b5-a45d-579d5d972902 GET 303 123 /de 01a1cec2-e26a-723b-aad5-93a5b3e55eaa GET 303 123 /en 01a1cec2-fc33-72f0-9f8f-1cd83bfb19b1 GET 400 10158 /error_path/400.html 01a1d404-b438-7648-909c-83d4a047e5ea GET 403 10159 /error_path/403.html 01a1d404-b8fe-770b-8bea-cf6e8d85e033 GET 500 10158 /error_path/500.html 01a1d404-c0fe-73fb-8f3a-75fecefa31e8 GET 503 10159 /error_path/503.html 01a1d404-c427-76b2-ac70-6b7742f3a235 GET 301 303 /error_path/img 01a1d234-e3c1-752f-9c11-714f1f5d930b GET 200 15406 /error_path/img/favicon.ico 01a1d234-25be-700f-8b91-71de4ad97596 GET 200 10113 /error_path/maintenance.html 01a1d4b7-c9bb-71a8-8eaf-2c12b7ab7af4 GET 303 123 /fr 01a1cec2-ea31-772d-860e-459ea738b93f GET 303 123 /health 01a0f9e7-4d54-725d-80cb-c0636df0a42a GET 303 123 /host-manager/html 01a0f9f1-c8b3-777a-b13c-a119d30c9b67 GET 303 123 /invoker/JMXInvokerServlet 01a0f9f1-a72e-7058-82b5-de64c488a484 GET 303 123 /it 01a1cec2-f151-702b-ac6c-66315034d92a GET 303 123 /jmx-console/ 01a0f9f1-9e0c-758d-b8fe-da4597117a20 GET 303 123 /jolokia 01a0f9e6-a282-74cd-aa00-1fa9bc21f2ac GET 303 123 /manager/html 01a0f9f1-c02b-705e-82ba-c28438f21afd GET 303 123 /nl 01a1cec2-f831-770e-af66-779b1eea225f GET 303 123 /ocs 01a1cc13-ac0f-7345-b8e2-b6772a11275e GET 303 123 /ocs/ 01a0f9e7-07cf-72ca-a337-42ba90753192 GET 303 123 /ocs/actuator 01a0f9e7-44df-7149-bace-4b04fc2955be GET 303 123 /ocs/api 01a0f9e7-33d0-766b-9abf-396682eb3928 GET 303 123 /ocs/rest 01a0f9e7-3c5d-731b-9e64-1cb2747eff2e GET 303 123 /ocs/services 01a0f9e7-2b18-708d-a02e-a711d17f24f1 # https://ocs-vertriebsservice.baloise.de:4401 in_scope host_id=08e26d69eb81c42ea3dbca80a749ed28 last_seen=2026-11-14 12:50:03 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-14 23:14:28) CloudFront-origin-facing alternate TLS listener for the OCS Vertriebsservice Apache/Airlock Gateway. Root and application-shaped names enter the same 303 gateway 404 catch-all as the canonical origin; no distinct application handlers are exposed here. ## tech technology version checked_at Airlock Gateway 2026-11-14 23:17:43 Apache HTTP Server 2026-11-14 23:17:38 ## paths method status size path exchange_id GET 504 936 / 01a1da1c-0b33-7c96-9a90-6f47fdcf12b5 GET 504 936 /airlock/alec_security_check 01a1da1c-0b2b-7f36-9d6e-2b0a42cc9be9 GET 504 936 /airlock/rest/ 01a1da1c-0b70-7285-bb55-4590505067ce GET 504 936 /airlock/rest/configuration/configurations 01a1da1c-0b30-7d6a-a372-5e07c51a6a85 GET 504 936 /airlock/rest/configuration/status 01a1da1c-0b81-772d-96df-327e740eee22 GET 504 936 /airlock/rest/v3/api-docs 01a1da1c-0b57-70a6-896c-fbc632288673 GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-977d-7265-a648-dbadf1963308 # https://ocs-vertriebsservice.baloise.de:7443 in_scope whitelisting_bypass=cloudfront host_id=ae589f5c3f9aa5cf4057f62a512edf48 last_seen=2026-11-14 12:50:03 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:02:14) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-10 05:15:50 Apache HTTP Server 2026-11-10 05:15:49 ## paths method status size path exchange_id GET 504 936 / 01a1da1c-0b89-7783-b391-74efec5d74c6 GET 504 936 /airlock/alec_security_check 01a1da1c-0bc0-76a5-b701-d35ba9efd565 GET 504 936 /airlock/rest/ 01a1da1c-0bbc-7da3-9ca1-7b36e8e0e9c9 GET 504 936 /airlock/rest/configuration/configurations 01a1da1c-0b2b-7aa2-9ade-5e96b3c974d3 GET 504 936 /airlock/rest/configuration/status 01a1da1c-0aa3-7394-9918-a1f11317ca16 GET 504 936 /airlock/rest/v3/api-docs 01a1da1c-0b40-79e0-b420-7a537470636e GET 303 123 /api/jsonws 01a1c3de-2f43-7172-ab78-3b8fd7aabccb GET 504 936 /auth-servicecontainer/startTask/ 01a1da1c-0c53-77ba-a6ad-d0e44e9af587 GET 303 123 /auth/ui/app 01a1c3de-3191-757d-a571-9333d55cacf1 GET 200 10113 /error_path/maintenance.html 01a1d87d-338e-7948-ae85-b7b21a2818c4 GET 404 9655 /error_path/404.html 01a1c3de-33c5-7598-9fc9-3dbb809971c8 # https://ocs-vertriebsservice.baloise.de:7980 in_scope whitelisting_bypass=cloudfront host_id=96e99e5db29356291b193169ead038ab last_seen=2026-11-14 12:50:03 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) ## summary (2026-11-13 00:02:16) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-10 05:15:51 Apache HTTP Server 2026-11-10 05:15:50 ## paths method status size path exchange_id GET 504 936 / 01a1da1c-0c3e-72a2-84f4-c628df8ffb65 GET 504 936 /airlock/alec_security_check 01a1da1c-0cab-7904-8c77-1f0c2d9d31e8 GET 504 936 /airlock/rest/ 01a1da1c-0c89-71cc-aaeb-7a4b5971a3d3 GET 504 936 /airlock/rest/configuration/configurations 01a1da1c-0c3c-7a27-b4da-3d0a75423499 GET 504 936 /airlock/rest/configuration/status 01a1da1c-0c8a-7557-b50a-c9f66cf9a90a GET 504 936 /airlock/rest/v3/api-docs 01a1da1c-0c76-7387-9eec-a2679fd6dcf5 GET 303 123 /api/jsonws 01a1c3de-395d-7548-85de-c91a19c28430 GET 504 936 /auth-servicecontainer/startTask/ 01a1da1c-0cf4-761d-9832-9af647913cb5 GET 303 123 /auth/ui/app 01a1c3de-3bbd-77b8-ade0-767cbfda836d GET 200 10113 /error_path/maintenance.html 01a1d87e-f37f-7120-b7ef-a91bd6b72528 GET 404 9655 /error_path/404.html 01a1c3de-3ea6-7627-94ac-c4bf1f101a95 # https://ocs-vertriebsservice.baloise.de:8080 in_scope whitelisting_bypass=cloudfront host_id=07ce8d09b738228abd4a78057aa3d2dc last_seen=2026-11-14 12:50:16 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) egress: direct requests mostly go unanswered here (0 of 5 served in three days); served through cloudfront (8 of 10) ## summary (2026-11-13 00:02:17) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 23:44:48 Apache HTTP Server 2026-11-09 23:45:01 ## paths method status size path exchange_id GET 504 936 / 01a1da1c-39a4-7a81-961c-befa2d8bc3c7 GET 303 123 /airlock/alec_security_check 01a1da1b-c63e-717c-aaf1-74da6d8feb67 GET 303 123 /airlock/rest/ 01a1da1b-c62a-79d4-b05f-0f3edd440876 GET 303 123 /airlock/rest/configuration/configurations 01a1da1b-c610-78e5-bbfb-e586c8c46523 GET 303 123 /airlock/rest/configuration/status 01a1da1b-c679-75a2-b884-ef8ddd718c58 GET 504 936 /airlock/rest/v3/api-docs 01a1da1c-3a99-7850-add7-7665f6c1b928 GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-c7e1-7860-b2d7-8f55b9c1cc20 GET 200 10113 /error_path/maintenance.html 01a1d87e-771a-788f-9baf-a4775bb3775b GET 0 /error_path/404.html 01a1c2b3-02e2-718d-9b8e-11cc225d9c45 # https://ocs-vertriebsservice.baloise.de:8343 in_scope whitelisting_bypass=cloudfront host_id=bc6e416e5d0a553f214e89703479ab2c last_seen=2026-11-14 12:50:16 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) egress: direct requests mostly go unanswered here (0 of 5 served in three days); served through cloudfront (10 of 10) ## summary (2026-11-13 00:02:23) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-10 05:15:51 Apache HTTP Server 2026-11-10 05:15:51 ## paths method status size path exchange_id GET 303 123 / 01a1da1b-c76f-7eb9-b6e9-7e22d365d4a9 GET 303 123 /airlock/alec_security_check 01a1da1b-c8b0-7272-b05a-95450b409ddd GET 303 123 /airlock/rest/ 01a1da1b-c88b-78bd-923b-e50be9354f47 GET 303 123 /airlock/rest/configuration/configurations 01a1da1b-c845-7c37-b826-1cd15ce9fe33 GET 303 123 /airlock/rest/configuration/status 01a1da1b-c8b9-7315-945a-c5d605587d01 GET 303 123 /airlock/rest/v3/api-docs 01a1da1b-c7fa-7169-90ff-451e67b6930c GET 303 123 /api/jsonws 01a1c3de-4204-70e5-a818-3228dbdf78d2 GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-c978-76b5-98ba-ea32c20c53cf GET 303 123 /auth/ui/app 01a1c3de-43c9-744d-aec2-8909de17e382 GET 200 10113 /error_path/maintenance.html 01a1d87e-213f-720c-b7ef-45702d06639b GET 404 9655 /error_path/404.html 01a1c3de-457c-77df-b9ae-6b895ed5b364 # https://ocs-vertriebsservice.baloise.de:8443 in_scope whitelisting_bypass=cloudfront host_id=22885e100c247064ad64494894b65ce4 last_seen=2026-11-14 12:50:16 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) egress: direct requests mostly go unanswered here (0 of 5 served in three days); served through cloudfront (10 of 10) ## summary (2026-11-13 00:02:25) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 02:39:46 Apache HTTP Server 2026-11-09 02:39:46 ## paths method status size path exchange_id GET 303 123 / 01a1da1b-c8e6-7afe-b47f-6c8368f86434 GET 303 123 /airlock/alec_security_check 01a1da1b-c916-7d5f-bf81-3f2c1e39528a GET 303 123 /airlock/rest/ 01a1da1b-c9df-7666-9120-5ca9537cab23 GET 303 123 /airlock/rest/configuration/configurations 01a1da1b-c9a5-74a9-a87f-07f2abe22307 GET 303 123 /airlock/rest/configuration/status 01a1da1b-ca0b-76ee-af9a-32dda3a4f398 GET 303 123 /airlock/rest/v3/api-docs 01a1da1b-c8f5-7ff9-9488-beb7ea3eea8d GET 303 123 /api/jsonws 01a1c4fe-a10e-76c3-85d4-43414460602e GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-c85d-7a94-8c87-e3eeef4cc308 GET 502 932 /auth/ui/app 01a1c408-bdfd-743a-a635-da70a68ebaa7 GET 502 932 /bc/ws/gw/webservice/bc/MaintenanceToolsAPI 01a1cad2-6dcb-77f6-8410-0e0fac6a4534 GET 200 10113 /error_path/maintenance.html 01a1d87e-7e46-7fe4-85a6-42c5baeae56a GET 404 9655 /error_path/404.html 01a1c080-573d-73f1-b8b6-66d12bfa05b6 # https://ocs-vertriebsservice.baloise.de:9443 in_scope whitelisting_bypass=cloudfront host_id=2011f2c7b818d11d283f76b577924018 last_seen=2026-11-14 12:50:17 dns: 193.134.75.150 (AS48857 BASLER-AS - Helvetia Swiss Insurance Company Ltd., CH) egress: direct requests mostly go unanswered here (0 of 5 served in three days); served through cloudfront (10 of 10) ## summary (2026-11-13 00:02:26) CloudFront-origin-only alternate TLS listener for the canonical OCS Apache/Airlock Gateway boundary. Root and application-shaped paths enter the same gateway-owned handoff to `/error_path/404.html`; the terminal 404 document and maintenance page are the same as port 443. No separate OCS backend, authentication application or management interface is exposed. Direct worker connections time out, while CloudFront origin-facing addresses reach the listener. The route graph is identical to the canonical origin and is represented there. ## tech technology version checked_at Airlock Gateway 2026-11-09 02:39:48 Apache HTTP Server 2026-11-09 02:39:47 ## paths method status size path exchange_id GET 303 123 / 01a1da1b-c9e4-74dd-ba63-90aec06eba0e GET 303 123 /airlock/alec_security_check 01a1da1b-caae-704c-8efa-74164957d47e GET 303 123 /airlock/rest/ 01a1da1b-cae6-7b0b-9d5c-7cbdc539b915 GET 303 123 /airlock/rest/configuration/configurations 01a1da1b-ca73-7981-aff6-ace59d21e781 GET 303 123 /airlock/rest/configuration/status 01a1da1b-cb6f-7c0d-84c2-bfcff4c2a88c GET 303 123 /airlock/rest/v3/api-docs 01a1da1b-c97a-7372-846d-8a5d1ffb1fc6 GET 303 123 /auth-servicecontainer/startTask/ 01a1da1b-cb50-716a-8648-fdc93b61fcff GET 200 10113 /error_path/maintenance.html 01a1d87d-a842-7a83-a909-7fd6e0c2b846 GET 404 9655 /error_path/404.html 01a1c080-58ce-77fc-83cb-5f3c85f27693