LeakIX - Host 124.222.97.130

Host 124.222.97.130

China

Shenzhen Tencent Computer Systems Company Limited

Ubuntu

Software information

Cowboy

tcp/8083

Grafana 9.3.2

tcp/80

Python 3.9

tcp/8765

nginx nginx 1.18.0

tcp/81 tcp/83 tcp/84 tcp/85

nginx nginx

tcp/443

websockets 12.0

tcp/8765

Grafana instance publicly available
Grafana instance is open to the public and could leak the following information :

System/internal statistics

Database backend credentials
IP: 124.222.97.130
Port: 80
URL: http://124.222.97.130

First seen 2023-05-18 09:28
Last seen 2024-06-19 22:36
Open for 398 days
- Severity: medium
  Fingerprint: afdaacf6f709cb231db2061f3c3f6c073c3f6c073c3f6c073c3f6c073c3f6c07
```
Found vulnerable Grafana version 9.3.2:
Affected by CVE-2023-22462
```
  Found on 2024-06-19 22:36
- Fingerprint: afdaacf60309de55fbe6b9b4e97c90a5e97c90a5e97c90a5e97c90a5e97c90a5
```
Read-only access:
Title: 主页 | path: db/zhu-ye | type: dash-db
```
  Found on 2024-06-19 22:36
- Fingerprint: afdaacf60309de55fbe6b9b4d7528e92d7528e92d7528e92d7528e92d7528e92
```
Read-only access:
Title: 测试页 | path: db/ce-shi-ye | type: dash-db
```
  Found on 2023-11-05 21:12
- Fingerprint: afdaacf60309de55fbe6b9b46712348167123481671234816712348167123481
```
Read-only access:
Title: PocketSat | path: db/pocketsat | type: dash-db
```
  Found on 2023-10-03 13:21
Create report

Open service 124.222.97.130:80

2024-06-19 22:36
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 17 hours ago by GrafanaOpenPlugin
Create report

Open service 124.222.97.130:80

2024-06-19 22:36

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Wed, 19 Jun 2024 22:36:23 GMT
Connection: close
Transfer-Encoding: chunked

Found 17 hours ago by HttpPlugin

Create report

Open service 124.222.97.130:80 · opensat.cn

2024-06-18 12:04

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Tue, 18 Jun 2024 12:04:09 GMT
Connection: close
Transfer-Encoding: chunked

Found 2 days ago by HttpPlugin

Create report

Open service 124.222.97.130:80 · opensat.cn

2024-06-18 12:04
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 2 days ago by GrafanaOpenPlugin
Create report

Open service 124.222.97.130:80 · www.opensat.cn

2024-06-18 10:25

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Tue, 18 Jun 2024 10:25:09 GMT
Connection: close
Transfer-Encoding: chunked

Found 2 days ago by HttpPlugin

Create report

Open service 124.222.97.130:80 · www.opensat.cn

2024-06-18 10:25
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 2 days ago by GrafanaOpenPlugin
Create report

Open service 124.222.97.130:80

2024-06-17 22:49

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Mon, 17 Jun 2024 22:49:40 GMT
Connection: close
Transfer-Encoding: chunked

Found 3 days ago by HttpPlugin

Create report

Open service 124.222.97.130:80

2024-06-17 22:49
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 3 days ago by GrafanaOpenPlugin
Create report
Open service 124.222.97.130:80 · opensat.cn

2024-06-16 10:20
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 2024-06-16 by GrafanaOpenPlugin
Create report

Open service 124.222.97.130:80 · opensat.cn

2024-06-16 10:20

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Sun, 16 Jun 2024 10:20:53 GMT
Connection: close
Transfer-Encoding: chunked

Found 2024-06-16 by HttpPlugin

Create report

Open service 124.222.97.130:80 · www.opensat.cn

2024-06-16 10:06

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Sun, 16 Jun 2024 10:06:53 GMT
Connection: close
Transfer-Encoding: chunked

Found 2024-06-16 by HttpPlugin

Create report

Open service 124.222.97.130:80

2024-06-15 23:29
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 2024-06-15 by GrafanaOpenPlugin
Create report

Open service 124.222.97.130:80

2024-06-15 23:29

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Sat, 15 Jun 2024 23:29:07 GMT
Connection: close
Transfer-Encoding: chunked

Found 2024-06-15 by HttpPlugin

Create report

Open service 124.222.97.130:8086

2024-06-15 20:36

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Content-Length: 515
Content-Type: text/html; charset=utf-8
Etag: "5152821413"
Last-Modified: Wed, 28 Dec 2022 21:04:13 GMT
X-Influxdb-Build: OSS
X-Influxdb-Version: v2.6.1
Date: Sat, 15 Jun 2024 20:36:25 GMT
Connection: close

Page title: InfluxDB

<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="description" content="InfluxDB is a time series platform, purpose-built by InfluxData for storing metrics and events, provides real-time visibility into stacks, sensors, and systems."><title>InfluxDB</title><base href="/"><link rel="shortcut icon" href="/favicon.ico"></head><body><div id="react-root" data-basepath=""></div><script src="/4ba86f89e6.js"></script></body></html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 124.222.97.130:80

2024-06-15 18:06

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Date: Sat, 15 Jun 2024 18:06:51 GMT
Connection: close
Transfer-Encoding: chunked

Found 2024-06-15 by HttpPlugin

Create report

Open service 124.222.97.130:80

2024-06-15 18:06
```
Grafana dashboard version 9.3.2
Edition: Open Source
```
Found 2024-06-15 by GrafanaOpenPlugin
Create report
Open service 124.222.97.130:22

2024-06-15 08:13
Found 2024-06-15 by SSHOpenPlugin
Create report

Open service 124.222.97.130:81

2024-06-15 07:49

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 15 Jun 2024 07:49:53 GMT
Content-Type: text/html
Content-Length: 1346
Last-Modified: Tue, 28 May 2024 03:35:46 GMT
Connection: close
ETag: "66555112-542"
Accept-Ranges: bytes

Page title: Satellite Orbit Visualization

<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="Description" content="Satellite orbit visualization with CesiumJS"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="msapplication-config" content="none"><meta name="theme-color" content="#ffffff"><title>Satellite Orbit Visualization</title><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"><link rel="manifest" href="/site.webmanifest"><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5"><script defer="defer" src="js/cesium.51c06a1b.js"></script><script defer="defer" src="js/vendors.7b953903.js"></script><script defer="defer" src="js/57.a71e060b.js"></script><script defer="defer" src="js/index.023e453b.js"></script><link href="js/cesium.51c06a1b.css" rel="stylesheet"><link href="js/vendors.7b953903.css" rel="stylesheet"><link href="js/57.a71e060b.css" rel="stylesheet"></head><body><noscript><h1>JavaScript is not enabled, please check your browser settings.</h1></noscript><div id="cesiumContainer"></div><div id="app" v-cloak></div></body></html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 124.222.97.130:8765

2024-06-14 23:34

HTTP/1.1 426 Upgrade Required
Upgrade: websocket
Date: Fri, 14 Jun 2024 23:34:57 GMT
Server: Python/3.9 websockets/12.0
Content-Length: 165
Content-Type: text/plain
Connection: close


Failed to open a WebSocket connection: invalid Connection header: close.

You cannot access a WebSocket server directly with a browser. You need a WebSocket client.

Found 2024-06-14 by HttpPlugin

Create report

Open service 124.222.97.130:443

2024-06-14 23:14

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 14 Jun 2024 23:14:39 GMT
Content-Type: text/html
Content-Length: 1346
Last-Modified: Tue, 28 May 2024 03:35:46 GMT
Connection: close
ETag: "66555112-542"
Accept-Ranges: bytes

Page title: Satellite Orbit Visualization

<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="Description" content="Satellite orbit visualization with CesiumJS"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="msapplication-config" content="none"><meta name="theme-color" content="#ffffff"><title>Satellite Orbit Visualization</title><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"><link rel="manifest" href="/site.webmanifest"><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5"><script defer="defer" src="js/cesium.51c06a1b.js"></script><script defer="defer" src="js/vendors.7b953903.js"></script><script defer="defer" src="js/57.a71e060b.js"></script><script defer="defer" src="js/index.023e453b.js"></script><link href="js/cesium.51c06a1b.css" rel="stylesheet"><link href="js/vendors.7b953903.css" rel="stylesheet"><link href="js/57.a71e060b.css" rel="stylesheet"></head><body><noscript><h1>JavaScript is not enabled, please check your browser settings.</h1></noscript><div id="cesiumContainer"></div><div id="app" v-cloak></div></body></html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 124.222.97.130:84

2024-06-14 21:36

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 14 Jun 2024 21:36:21 GMT
Content-Type: text/html
Content-Length: 672
Last-Modified: Fri, 02 Feb 2024 09:31:56 GMT
Connection: close
ETag: "65bcb68c-2a0"
Accept-Ranges: bytes

Page title: instructions

<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>instructions</title><script defer="defer" src="/js/chunk-vendors.570e24b1.js"></script><script defer="defer" src="/js/app.25b02583.js"></script><link href="/css/chunk-vendors.542884e8.css" rel="stylesheet"><link href="/css/app.1521be25.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but instructions doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 124.222.97.130:83

2024-06-14 20:03

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 14 Jun 2024 20:03:11 GMT
Content-Type: text/html
Content-Length: 16039
Last-Modified: Tue, 19 Dec 2023 09:33:45 GMT
Connection: close
ETag: "65816379-3ea7"
Accept-Ranges: bytes


<!-- <!DOCTYPE html><html><head><style>#thermcam {border-collapse: collapse;}#thermcam td {width: 2px;height: 2px;}#thermcam2 td {width: 30px;height: 30px;font-size: 8px;}</style><script>var Socket;var streamframestimer;var sizesensor = [108, 108];var minTsensor = 0.0;var maxTsensor = 80.0;var minT = 15.0;var maxT = 40.0; var currentFrame = [${AMG8833}];var currentFrameSize = [8, 8];var realSizeSensor = [sizesensor[0] - Math.floor(sizesensor[0] / currentFrameSize[0]) + 1, sizesensor[1] - Math.floor(sizesensor[1] / currentFrameSize[1]) + 1]var minTframe = maxTsensor;var maxTframe = minTsensor;var minTframelocation = [0, 0];var maxTframelocation = [0, 0];var camColors = ['1500BF', '0900BF', '0003C0', '0010C0', '001DC1', '002AC2','0037C2', '0044C3', '0052C3', '005FC4', '006DC5', '007AC5','0088C6', '0095C6', '00A3C7', '00B1C8', '00BFC8', '00C9C4','00C9B8', '00CAAB', '00CB9E', '00CB90', '00CC83', '00CC76','00CD68', '00CE5B', '00CE4D', '00CF40', '00CF32', '00D024','00D116', '00D109', '05D200', '13D200', '21D300', '2FD400','3DD400', '4CD500', '5AD500', '69D600', '78D700', '86D700','95D800', 'A4D800', 'B3D900', 'C2DA00', 'D1DA00', 'DBD500','DBC700', 'DCB900', 'DDAA00', 'DD9C00', 'DE8E00', 'DE7F00','DF7100', 'E06200', 'E05300', 'E14400', 'E13500', 'E22600','E31700', 'E30800', 'E40006', 'E50015',];function mapto(val, minin, maxin, minout, maxout) {if (val >= maxin) {return maxout;} else if (val <= minin) {return minout;} else {return ((((maxout - minout) / (maxin - minin)) * val) + (minout - ((maxout - minout) / (maxin - minin)) * minin));}}function adjusttemrange(range, adjustment) {if (range == 'min') {if (adjustment == 0) {minT = minTframe;} else {minT += adjustment;}}if (range == 'max') {if (adjustment == 0) {maxT = maxTframe;} else {maxT += adjustment;}}if (minT < minTsensor) {minT = minTsensor;}if (maxT > maxTsensor) {maxT = maxTsensor;}if (minT >= maxT) {minT = maxT - 1.0;}fillthermcamtable(currentFrame);document.getElementById('minT').innerHTML = minT.toFixed(2) + 'C';document.getElementById('maxT').innerHTML = maxT.toFixed(2) + 'C';}function ctof(tempc) {return (tempc * (9 / 5)) + 32;}function buildthermcamtable() {var thermcamTable = document.getElementById('thermcam');for (i = 0; i < realSizeSensor[0]; i++) {var row = thermcamTable.insertRow(i);for (j = 0; j < realSizeSensor[1]; j++) {var cell = row.insertCell(j);cell.id = 'tccell' + ((i * sizesensor[0]) + j);}}}function fillthermcamtable(pixelarray) {minTframe = maxTsensor;maxTframe = minTsensor;for (i = 0; i < realSizeSensor[0]; i++) {for (j = 0; j < realSizeSensor[1]; j++) {var idx = ((i * sizesensor[0]) + j);var cell = document.getElementById('tccell' + idx);var camcolorvalue = Math.round(mapto(pixelarray[idx], minT, maxT, 0, 63));cell.style.backgroundColor = '#' + camColors[camcolorvalue];cell.className = 'camcolorvalue' + camcolorvalue;if (pixelarray[idx] < minTframe) {minTframe = pixelarray[idx];minTframelocation = [j, i];}if (pixelarray[idx] > maxTframe) {maxTframe = pixelarray[idx];maxTframelocation = [j, i];}}}document.getElementById('minTframedata').innerHTML = minTframe.toFixed(2) + 'C ' + ctof(minTframe).toFixed(2) + 'F (' + minTframelocation[0] + ',' + minTframelocation[1] + ')';document.getElementById('maxTframedata').innerHTML = maxTframe.toFixed(2) + 'C ' + ctof(maxTframe).toFixed(2) + 'F (' + maxTframelocation[0] + ',' + maxTframelocation[1] + ')';}function interpolate(value00, value10, value01, value11, x, y) {return value00 * (1 - x) * (1 - y) +value10 * x * (1 - y) +value01 * (1 - x) * y +value11 * x * y;}function expandHeatmap(original, originalSize, newSize) {const expanded = new Array(newSize * newSize).fill(0);const step = originalSize / newSize;for (let y = 0; y < newSize; y++) {for (let x = 0; x < newSize; x++) {const origX = x * step;const origY = y * step;const ix = Math.floor(origX);const iy = Math.floor(origY);const dx = origX - ix;const dy = origY - iy;const value00 = original[iy * originalSize + ix];const value10 = original[iy * originalSize + Math.min(ix + 1, originalSize - 1)];const value01 = original[Math.min(iy + 1, originalSize - 1)

Found 2024-06-14 by HttpPlugin