LeakIX - Host 103.125.173.251

Host 103.125.173.251

Indonesia

PT Trinity Teknologi Nusantara

Software information

Apache Apache 2.4.37

tcp/443 tcp/80

OpenSSL OpenSSL 1.1.1k

tcp/443 tcp/80

MongoDB is publicly available

MongoDB is currently open without authentication.

This results in all the database data made available publicly.

IP: 103.125.173.251
Port: 27017
URL: http://103.125.173.251:27017

First seen 2024-04-24 13:27
Last seen 2024-06-19 22:14
Open for 56 days

Severity: medium
Fingerprint: 436d217a47ab425871d9e9db5d919e93d6ef751f0ab6066dcb5062a2b2a9f0ca

Collections: 3, document count: 2, size: 440 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-06-19 22:14

440 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258fc75df94e9b383964ce909204e6f39da5748fae5dae2ada0

Collections: 3, document count: 2, size: 432 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-06-17 21:24

432 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258d7d303ee89ec43d02f508aaaeac8acd86247ce7f6a88d5ef

Collections: 3, document count: 5, size: 729 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 3 documents (297 B)

Found on 2024-06-01 20:49

729 Bytes 5 rows

Severity: medium
Fingerprint: 436d217a47ab42586d7e55609d1b27f208c65b94d108e2a653fe5659c812b7a9

Collections: 2, document count: 1, size: 371 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.version

Found on 2024-05-29 21:59

371 Bytes 1 rows

Severity: medium
Fingerprint: 436d217a47ab4258e351092676fcaae8112181c2ab02ec00e2760ed7da24a4ea

Collections: 3, document count: 4, size: 630 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-05-27 20:29

630 Bytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab42587d0289c7d661dd0fe5e0d4a35ee03b692eca94b6d7a3ca61

Collections: 3, document count: 8, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 6 documents (594 B)

Found on 2024-04-30 19:36

1.0 kBytes 8 rows

Create report

Open service 103.125.173.251:27017

2024-06-19 22:14

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found one day ago by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-17 21:24

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-17 by HttpPlugin

Create report

Open service 103.125.173.251:3306

2024-06-16 00:41
```
MySQL detected
```
Found 2024-06-16 by tcpid
Create report

Open service 103.125.173.251:27017

2024-06-15 20:09

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-15 by HttpPlugin

Create report

Open service 103.125.173.251:22

2024-06-15 18:30
Found 2024-06-15 by SSHOpenPlugin
Create report

Open service 103.125.173.251:80

2024-06-14 04:53

HTTP/1.1 200 OK
Date: Fri, 14 Jun 2024 04:53:24 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
X-Powered-By: PHP/7.4.33
Expires: Fri, 14 Jun 2024 04:53:24 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=fhjb3cp8rrvaovn0sekih08oup; path=/; HttpOnly
Last-Modified: Fri, 14 Jun 2024 04:53:24 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Roundcube Webmail :: Welcome to Roundcube Webmail

<!DOCTYPE html>

<html lang="en">

<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1705745704">
	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1705745714">
	
		<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1705745704">
		
	
	
		<script>
		try {
			if (document.cookie.indexOf('colorMode=dark') > -1
				|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
			) {
				document.documentElement.className += ' dark-mode';
			}
		} catch (e) { }
		</script>
	
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1705745704"><script src="program/js/jquery.min.js?s=1705745709"></script><script src="program/js/common.min.js?s=1705745704"></script><script src="program/js/app.min.js?s=1705745704"></script><script src="program/js/jstz.min.js?s=1705745709"></script><script>
/*
        @licstart  The following is the entire license notice for the 
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10606,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"Kobqsx6gXU8lnP1wP8we79uJ1FOqNqa4"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>

<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1705745704"></script>
</head>
<body class="task-login action-none">
	
		<div id="layout">
	


<h1 class="voice">Roundcube Webmail Login</h1>

<div id="layout-content" class="selected no-navbar" role="main">
	<img src="skins/elastic/images/logo.svg?s=1705745704" id="logo" alt="Logo">
	<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="Kobqsx6gXU8lnP1wP8we79uJ1FOqNqa4">
	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogi

Found 2024-06-14 by HttpPlugin

Create report

Open service 103.125.173.251:443

2024-06-12 20:12

HTTP/1.1 200 OK
Date: Wed, 12 Jun 2024 20:12:18 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
X-Powered-By: PHP/7.4.33
Expires: Wed, 12 Jun 2024 20:12:18 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=9b7g69badph3pq3gsafl8mkmo2; path=/; secure; HttpOnly
Last-Modified: Wed, 12 Jun 2024 20:12:18 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Roundcube Webmail :: Welcome to Roundcube Webmail

<!DOCTYPE html>

<html lang="en">

<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1705745704">
	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1705745714">
	
		<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1705745704">
		
	
	
		<script>
		try {
			if (document.cookie.indexOf('colorMode=dark') > -1
				|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
			) {
				document.documentElement.className += ' dark-mode';
			}
		} catch (e) { }
		</script>
	
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1705745704"><script src="program/js/jquery.min.js?s=1705745709"></script><script src="program/js/common.min.js?s=1705745704"></script><script src="program/js/app.min.js?s=1705745704"></script><script src="program/js/jstz.min.js?s=1705745709"></script><script>
/*
        @licstart  The following is the entire license notice for the 
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10606,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"jfov24MFIT0JciVnkyBljYD038WKvQnM"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>

<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1705745704"></script>
</head>
<body class="task-login action-none">
	
		<div id="layout">
	


<h1 class="voice">Roundcube Webmail Login</h1>

<div id="layout-content" class="selected no-navbar" role="main">
	<img src="skins/elastic/images/logo.svg?s=1705745704" id="logo" alt="Logo">
	<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="jfov24MFIT0JciVnkyBljYD038WKvQnM">
	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogin

Found 2024-06-12 by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-11 22:06

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-11 by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-09 21:11

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-09 by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-07 21:39

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-07 by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-05 20:27

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-05 by HttpPlugin

Create report

Open service 103.125.173.251:27017

2024-06-03 20:14
Found 2024-06-03 by HttpPlugin
Create report

Open service 103.125.173.251:80

2024-06-02 19:01

HTTP/1.1 200 OK
Date: Sun, 02 Jun 2024 19:01:33 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
X-Powered-By: PHP/7.4.33
Expires: Sun, 02 Jun 2024 19:01:33 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=c0dhpc3tkae5s1ad3l6kg5fai9; path=/; HttpOnly
Last-Modified: Sun, 02 Jun 2024 19:01:33 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Roundcube Webmail :: Welcome to Roundcube Webmail

<!DOCTYPE html>

<html lang="en">

<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1705745704">
	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1705745714">
	
		<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1705745704">
		
	
	
		<script>
		try {
			if (document.cookie.indexOf('colorMode=dark') > -1
				|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
			) {
				document.documentElement.className += ' dark-mode';
			}
		} catch (e) { }
		</script>
	
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1705745704"><script src="program/js/jquery.min.js?s=1705745709"></script><script src="program/js/common.min.js?s=1705745704"></script><script src="program/js/app.min.js?s=1705745704"></script><script src="program/js/jstz.min.js?s=1705745709"></script><script>
/*
        @licstart  The following is the entire license notice for the 
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10606,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"83vml2R7R7Vz6BNlVkVTIkls5jg1OQXy"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>

<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1705745704"></script>
</head>
<body class="task-login action-none">
	
		<div id="layout">
	


<h1 class="voice">Roundcube Webmail Login</h1>

<div id="layout-content" class="selected no-navbar" role="main">
	<img src="skins/elastic/images/logo.svg?s=1705745704" id="logo" alt="Logo">
	<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="83vml2R7R7Vz6BNlVkVTIkls5jg1OQXy">
	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogi

Found 2024-06-02 by HttpPlugin

Create report

mail.btslink.id

Fingerprint:

b7d82803a34ffb136d78d1ed5520c3a62640ef839db5de3cd755681ded1fb4ee

CN:

mail.btslink.id

Key:

RSA-2048

Issuer:

Not before:

2024-05-24 16:00

Not after:

2024-08-22 16:00

Data leak

Size

1.0 kB

Collections

Rows

Domain summary

No record