LeakIX - Host 139.159.207.128

Host 139.159.207.128

China

Huawei Cloud Service data center

CentOS Linux 8 3.10.0-1160.92.1.el7.x86_64

MongoDB is publicly available

MongoDB is currently open without authentication.

This results in all the database data made available publicly.

IP: 139.159.207.128
Port: 27017
URL: http://139.159.207.128:27017

First seen 2024-06-15 07:11
Last seen 2024-09-19 23:38
Open for 96 days

Severity: medium
Fingerprint: 436d217a47ab42585cffcc132b79d60b55f34697cc7b45b51771c93ac90256c4

Collections: 4, document count: 4, size: 997 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-09-19 23:38

997 Bytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258013e01fec10f134058c25a5a59f7600886fd52af123e278b

Collections: 4, document count: 6, size: 1.2 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-09-01 20:41

1.2 kBytes 6 rows

Severity: medium
Fingerprint: 436d217a47ab42582e8c344b6d7413a3fbb53befedfe7bfdf6f7ee723b192ceb

Collections: 3, document count: 4, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (379 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)

Found on 2024-08-07 20:03

1.0 kBytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258889d5306e27f4948d2836962d0a29c203afa77f7f3c19cfb

Collections: 4, document count: 4, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (379 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-08-05 20:38

1.0 kBytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258889d5306e27f4948d2836962d0a29c203afa77f7f00559af

Collections: 4, document count: 4, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (380 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-08-02 01:16

1.0 kBytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258889d5306e27f4948d2836962d0a29c203afa77f78dacff02

Collections: 4, document count: 4, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (378 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-07-23 23:06

1.0 kBytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258889d5306e27f4948d2836962d0a29c203afa77f719913ec6

Collections: 4, document count: 4, size: 1.0 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-07-01 20:47

1.0 kBytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258013e01fec10f134058c25a5a59f7600886fd52af1be069ea

Collections: 4, document count: 6, size: 1.2 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.users  with 1 documents (522 B)
Found collection admin.system.version  with 2 documents (104 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-06-29 21:43

1.2 kBytes 6 rows

Severity: medium
Fingerprint: 436d217a47ab425838de02fdd402dd35104bdbf17e58a7db6726d09c24734238

Collections: 3, document count: 1, size: 371 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.users 
Found collection admin.system.version

Found on 2024-06-15 07:11

371 Bytes 1 rows

Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

Additionaly a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 139.159.207.128
Port: 9200
URL: http://139.159.207.128:9200

First seen 2023-12-16 00:06
Last seen 2024-03-08 03:58
Open for 83 days

Severity: high
Fingerprint: 831cb76b8e05df4695f7bfa1eb9474076bfa1c3afad1d7707558d682e247efae

Indices: 7, document count: 7, size: 35.8 kB
Found index wcm with 0 documents (208 B)
Found index casa with 0 documents (208 B)
Found index test with 2 documents (7.7 kB)
Found index cgi-bin with 1 documents (6.4 kB)
Found index minio with 2 documents (12.1 kB)
Found index api with 1 documents (4.8 kB)
Found index read-me with 1 documents (4.3 kB)

Found on 2024-03-08 03:58

35.8 kBytes 7 rows

Severity: high
Fingerprint: 831cb76b8e05df46cae9690c22b984c722b984c722b984c722b984c722b984c7
```
Indices: 1, document count: 1, size: 4.3 kB
Found index read-me with 1 documents (4.3 kB)
```
Found on 2024-02-01 16:28

4.3 kBytes 1 rows

Severity: medium
Fingerprint: 831cb76b8e05df467d606900e2cbbf9b89a6ad5aafa8ff46c97f02681cfa5aaf

Indices: 7, document count: 10, size: 62.7 kB
Found index test with 1 documents (4.0 kB)
Found index web with 1 documents (8.6 kB)
Found index service_transport with 1 documents (5.5 kB)
Found index service with 1 documents (20.6 kB)
Found index ztp with 1 documents (7.5 kB)
Found index suite-auth with 4 documents (10.7 kB)
Found index user with 1 documents (5.8 kB)

Found on 2023-12-16 00:06

62.7 kBytes 10 rows

Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

This results in all the database data made available publicly.

IP: 139.159.207.128
Port: 5601
URL: http://139.159.207.128:5601

First seen 2023-11-24 21:21
Last seen 2024-02-01 17:37
Open for 68 days

Severity: high
Fingerprint: 831cb76b8e05df46cae9690c195c178cedbfa047edbfa047edbfa047edbfa047
```
Indices: 1, document count: 1, size: 4.3 kB
Through Kibana endpoint
Found index read-me with 1 documents (4.3 kB)
```
Found on 2024-02-01 17:37

4.3 kBytes 1 rows

Severity: medium
Fingerprint: 831cb76b8e05df467d606900bb6b23f026b4cc6ba92b0c49f4c02af82838ffe9

Indices: 7, document count: 10, size: 62.7 kB
Through Kibana endpoint
Found index test with 1 documents (4.0 kB)
Found index service_transport with 1 documents (5.5 kB)
Found index web with 1 documents (8.6 kB)
Found index service with 1 documents (20.6 kB)
Found index ztp with 1 documents (7.5 kB)
Found index suite-auth with 4 documents (10.7 kB)
Found index user with 1 documents (5.8 kB)

Found on 2023-12-11 12:00

62.7 kBytes 10 rows

Severity: medium
Fingerprint: 831cb76b8e05df46edabf216974213a6f9de16614a9556bab9485199e67a162d

Indices: 20, document count: 33, size: 153.2 kB
Through Kibana endpoint
Found index casa with 0 documents (208 B)
Found index jeecg-boot with 1 documents (5.2 kB)
Found index test with 1 documents (4.0 kB)
Found index service_transport with 1 documents (5.5 kB)
Found index apisix with 1 documents (8.5 kB)
Found index minio with 2 documents (11.4 kB)
Found index suite-auth with 4 documents (10.7 kB)
Found index login with 1 documents (4.9 kB)
Found index directdata with 1 documents (6.8 kB)
Found index read_me_to_restore_base with 1 documents (4.3 kB)
Found index plugin with 1 documents (4.6 kB)
Found index web with 1 documents (8.6 kB)
Found index cgi-bin with 1 documents (6.4 kB)
Found index service with 1 documents (20.6 kB)
Found index ztp with 1 documents (7.5 kB)
Found index api with 7 documents (16.7 kB)
Found index ipms with 1 documents (5.2 kB)
Found index user with 1 documents (5.8 kB)
Found index oauth with 6 documents (15.9 kB)
Found index mics with 0 documents (208 B)

Found on 2023-11-24 21:21

153.2 kBytes 33 rows

Create report

Open service 139.159.207.128:27017

2024-09-15 23:47

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-15 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-09-13 23:33

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-13 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-09-12 02:22

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-12 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-09-11 20:48

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-11 by HttpPlugin

Create report

Open service 139.159.207.128:22

2024-09-11 08:50
Found 2024-09-11 by SSHOpenPlugin
Create report

Open service 139.159.207.128:27017

2024-09-09 22:38

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-09 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-09-07 20:55

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-07 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-17 20:53

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-17 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-15 20:42

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-15 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-13 23:14

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-13 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-11 23:23

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-11 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-09 20:16

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-09 by HttpPlugin

Create report

Open service 139.159.207.128:27017

2024-08-07 20:03

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-07 by HttpPlugin

Create report

Data leak

Size

153.2 kB

Collections

Rows

Domain summary

No record