Omukuumi · Ops

SOC Overview

OPERATOR: DANNY IRUMVA

SOC analyst overview

8 network assets · 7 cloud assets · 5 intel events

LIVE VISIBILITY

Network visibility

ports monitored: 7
HostIPSegmentOSServicesLast seen
api.rukapay.com196.43.12.21DMZLinuxhttps · http · ssh2026-09-29
etsy.akabanga.bank197.231.4.90EdgeLinuxhttps · smtp2026-09-27
gw.rukapay.com196.43.12.22DMZLinux · nginxhttps2026-09-29
ops.paynish.io172.16.8.12OpsLinuxhttps · grafana2026-09-28
patch.mvoli.co10.20.9.33InternalUbuntussh2026-09-26
pay.rukapay.com10.20.4.11AppLinuxhttps · postgres2026-09-28
sandbox.kigalineon.tech154.72.30.5SandboxLinuxhttps · api2026-09-25
wallet-api.mvoli.co41.210.9.77DMZLinuxhttps · api2026-09-29

Cloud visibility

4 public · 2 restricted
ProviderAssetTypeRegionExposure
AWSkigalineon-lending-appElastic · 1xDeu-central-1PUBLIC
AWSrukapay-db-primaryRDSus-east-2RESTRICTED
AWSrukapay-prod-apiElastic · 2xDus-east-2PUBLIC
Azureakabanga-bank-coreAKSeastusINTERNAL
Cloudflarepaynish-edge-workersWorkers+KVsglobalPUBLIC
GCPmvoli-bigquery-warehouseBigQueryeurope-west1RESTRICTED
GCPmvoli-wallet-svcCloud Runeurope-west1PUBLIC

Threat intelligence feed

  • 1.2.3.4 · tor exit

    Credential-stuffing source hitting /api/login

    high09-29
  • CVE-2026-1840

    Payment gateway SSRF via signed webhook

    critical09-28
  • rukapay.com

    Staging API key in public GitHub repo

    high09-27
  • jwt.kid confusion kit

    Observed against other payment APIs in region

    medium09-26
  • mvoli.co

    New ASN announces mobile-money endpoint range

    low09-25

Network and cloud visibility, assessments, findings, and evidence are all recorded by the CLI and mirrored here under your license. Scope and policy are enforced the same way on every surface.