LeakIX - Host 15.161.1.169

Host 15.161.1.169

Italy

AMAZON-02

Amazon Linux 2 5.15.0-1011-aws

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

Additionaly a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 15.161.1.169
Port: 9200
URL: http://15.161.1.169:9200

First seen 2022-06-27 12:08
Last seen 2022-09-14 19:28
Open for 79 days
- Severity: high
  Fingerprint: 831cb76b8e05df46d09a1a199259796592597965925979659259796592597965
```
Indices: 1, document count: 1, size: 4.8 kB
Found index read_me with 1 documents (4.8 kB)
```
  Found on 2022-09-14 19:28
  
  4.8 kBytes 1 rows
- Severity: medium
  Fingerprint: 831cb76b8e05df4652326586d411796fd411796fd411796fd411796fd411796f
```
Indices: 1, document count: 816, size: 2.9 MB
Found index magento2_product_1_v3 with 816 documents (2.9 MB)
```
  Found on 2022-08-07 15:03
  
  2.9 MBytes 816 rows
- Severity: critical
  Fingerprint: 831cb76b8e05df4668f462feafb1fd18af81bc3e88dbb402279d8ac9c03c25f9
```
Indices: 8, document count: 4822, size: 1.6 MB
Found index magento2_product_1_v4 with 1157 documents (334.6 kB)
Found index read_me with 1 documents (4.8 kB)
Found index magento2_product_5_v4 with 65 documents (90.0 kB)
Found index magento2_product_3_v4 with 1156 documents (337.9 kB)
Found index magento2_product_2_v4 with 1157 documents (335.6 kB)
Found index magento2_product_4_v4 with 1156 documents (334.6 kB)
Found index magento2_product_7_v4 with 65 documents (110.5 kB)
Found index magento2_product_6_v4 with 65 documents (99.2 kB)
```
  Found on 2022-06-27 12:08
  
  1.6 MBytes 4822 rows
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 15.161.1.169
Port: 80
URL: http://15.161.1.169

First seen 2022-06-26 05:00
Last seen 2022-08-03 09:16
Open for 38 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e922db07b0a831b06f7db5f0fe996977e
```
Found 6 files trough .DS_Store spidering:

/media
/media/catalog
/media/home
/media/img
/media/theme
/static
```
  Found on 2022-06-26 05:00
Create report

Data leak

Size

1.6 MB

Collections

Rows

4822

Domain summary

No record

Host 15.161.1.169

Italy

ElasticSearch is publicly available

MacOS file listing through .DS_Store file

Data leak

Domain summary