LeakIX - Host 103.150.125.162

Host 103.150.125.162

Vietnam

Reload Company Limited

Linux x86_64

Software information

nginx nginx 1.14.0

tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 103.150.125.162
Port: 3308

First seen 2024-04-23 09:32
Last seen 2024-06-19 20:41
Open for 57 days

Severity: high
Fingerprint: cf350410ecceb5fd518fca6fdff4387af078bf6fdb941e0efef60313a29c3637

Databases: 38, row count: 140100, size: 7.9 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 97 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 939 records
Found table mysql.help_relation with 2155 records
Found table mysql.help_topic with 1081 records
Found table mysql.innodb_index_stats with 6 records
Found table mysql.innodb_table_stats with 2 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1443 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1607 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 6 records

Found on 2024-06-19 20:41

7.9 MBytes 140100 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 103.150.125.162
Port: 80
URL: http://103.150.125.162

First seen 2021-09-18 12:36
Last seen 2021-10-21 05:22
Open for 32 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab64a56ddbfc66eaa59666b80edff63e64
```
Found 7 files trough .DS_Store spidering:

/favicon.ico
/image
/index.php
/robots.txt
/storage
/vendor
/web.config
```
  Found on 2021-10-10 18:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d808c457e0c9b9943666a417d9fc776aba
```
Found 8 files trough .DS_Store spidering:

/favicon.ico
/image
/index.php
/robots.txt
/storage
/vendor
/vendor/laravel-admin
/web.config
```
  Found on 2021-09-18 12:36
Create report

Open service 103.150.125.162:3308

2024-06-19 20:41
```
MySQL detected
```
Found 15 hours ago by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-17 20:08
```
MySQL detected
```
Found 3 days ago by tcpid
Create report

Open service 103.150.125.162:80

2024-06-15 20:55

HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 15 Jun 2024 20:55:09 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 17 Apr 2018 15:22:36 GMT
Connection: close
ETag: "5ad6113c-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 103.150.125.162:3308

2024-06-15 20:25
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-14 06:56
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report
Open service 103.150.125.162:22

2024-06-13 09:14
Found 2024-06-13 by SSHOpenPlugin
Create report
Open service 103.150.125.162:3308

2024-06-11 21:33
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-09 21:48
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-07 21:31
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-05 21:36
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-03 21:45
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report
Open service 103.150.125.162:3308

2024-06-02 08:52
```
MySQL detected
```
Found 2024-06-02 by tcpid
Create report

Data leak

Size

7.9 MB

Collections

Rows

140100

Domain summary

No record