LeakIX - Host 167.172.188.143

Host 167.172.188.143

Germany

DIGITALOCEAN-ASN

debian-linux-gnu x86_64

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 167.172.188.143
Port: 22

First seen 2025-04-12 06:09
Last seen 2026-02-08 16:46
Open for 302 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb563aa8aa9f94cd0d0f94cd0d0f94cd0d0f94cd0d0
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-02-08 16:46
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2026-01-22 18:04
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237c61090c0161090c0161090c0161090c01
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.11
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2025-04-24 00:22
Create report

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 167.172.188.143
Port: 3306

First seen 2021-07-22 04:23
Last seen 2022-10-14 04:06
Open for 448 days

Severity: critical
Fingerprint: cf350410ecceb5fd0b919349a0ed8a71df466a52cda66cecc9ed0a0b4095d9a0

Databases: 32, row count: 138648, size: 7.9 MB
Found table mysql.innodb_table_stats with 5 records
Found table mysql.general_log with 0 records
Found table mysql.servers with 0 records
Found table mysql.time_zone with 1820 records
Found table mysql.help_topic with 735 records
Found table mysql.table_stats with 0 records
Found table mysql.user with 0 records
Found table mysql.func with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.help_category with 44 records
Found table mysql.index_stats with 0 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.columns_priv with 0 records
Found table mysql.roles_mapping with 0 records
Found table mysql.time_zone_transition_type with 9861 records
Found table mysql.time_zone_name with 1820 records
Found table mysql.proxies_priv with 2 records
Found table mysql.column_stats with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.transaction_registry with 0 records
Found table mysql.help_relation with 36 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.global_priv with 7 records
Found table mysql.help_keyword with 16 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 2 records
Found table mysql.gtid_slave_pos with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.time_zone_transition with 124286 records
Found table mysql.tables_priv with 1 records
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records

Found on 2022-10-14 04:06

7.9 MBytes 138648 rows

Severity: critical
Fingerprint: cf350410ecceb5fdd7c62fa3c3f04fc89d5a704bbdac478da4c08e44bee01093

Databases: 32, row count: 138642, size: 7.9 MB
Found table mysql.innodb_table_stats with 2 records
Found table mysql.general_log with 0 records
Found table mysql.servers with 0 records
Found table mysql.time_zone with 1820 records
Found table mysql.help_topic with 735 records
Found table mysql.table_stats with 0 records
Found table mysql.user with 0 records
Found table mysql.func with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.help_category with 44 records
Found table mysql.index_stats with 0 records
Found table mysql.innodb_index_stats with 7 records
Found table mysql.columns_priv with 0 records
Found table mysql.roles_mapping with 0 records
Found table mysql.time_zone_transition_type with 9861 records
Found table mysql.time_zone_name with 1820 records
Found table mysql.proxies_priv with 2 records
Found table mysql.column_stats with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.transaction_registry with 0 records
Found table mysql.help_relation with 36 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.global_priv with 7 records
Found table mysql.help_keyword with 16 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 2 records
Found table mysql.gtid_slave_pos with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.time_zone_transition with 124286 records
Found table mysql.tables_priv with 1 records
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records

Found on 2022-02-12 15:09

7.9 MBytes 138642 rows

Severity: critical
Fingerprint: cf350410ecceb5fd8e7fcfb134f4f4d2d86021e5b9af5d1b0ad325929df8131f

Databases: 32, row count: 138640, size: 7.9 MB
Found table mysql.innodb_table_stats with 2 records
Found table mysql.general_log with 0 records
Found table mysql.servers with 0 records
Found table mysql.time_zone with 1820 records
Found table mysql.help_topic with 735 records
Found table mysql.table_stats with 0 records
Found table mysql.user with 0 records
Found table mysql.func with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.help_category with 44 records
Found table mysql.index_stats with 0 records
Found table mysql.innodb_index_stats with 7 records
Found table mysql.columns_priv with 0 records
Found table mysql.roles_mapping with 0 records
Found table mysql.time_zone_transition_type with 9861 records
Found table mysql.time_zone_name with 1820 records
Found table mysql.proxies_priv with 2 records
Found table mysql.column_stats with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.transaction_registry with 0 records
Found table mysql.help_relation with 36 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.global_priv with 5 records
Found table mysql.help_keyword with 16 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 2 records
Found table mysql.gtid_slave_pos with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.time_zone_transition with 124286 records
Found table mysql.tables_priv with 1 records
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records

Found on 2021-09-29 02:20

7.9 MBytes 138640 rows

Severity: critical
Fingerprint: cf350410ecceb5fd02adad1d00ac6a9e7986270b80629ecd3f0d06847094b967

Databases: 32, row count: 138644, size: 7.9 MB
Found table mysql.innodb_table_stats with 2 records
Found table mysql.general_log with 2 records
Found table mysql.servers with 0 records
Found table mysql.time_zone with 1820 records
Found table mysql.help_topic with 735 records
Found table mysql.table_stats with 0 records
Found table mysql.user with 0 records
Found table mysql.func with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.help_category with 44 records
Found table mysql.index_stats with 0 records
Found table mysql.innodb_index_stats with 7 records
Found table mysql.columns_priv with 0 records
Found table mysql.roles_mapping with 0 records
Found table mysql.time_zone_transition_type with 9861 records
Found table mysql.time_zone_name with 1820 records
Found table mysql.proxies_priv with 2 records
Found table mysql.column_stats with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.transaction_registry with 0 records
Found table mysql.help_relation with 36 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.global_priv with 5 records
Found table mysql.help_keyword with 16 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 2 records
Found table mysql.gtid_slave_pos with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.time_zone_transition with 124286 records
Found table mysql.tables_priv with 1 records
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records

Found on 2021-07-22 04:23

7.9 MBytes 138644 rows

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 167.172.188.143
Domain: back-pcrgargaras-pre.hospiten.com
Port: 8443
URL: https://back-pcrgargaras-pre.hospiten.com:8443/_profiler/empty/search/results

First seen 2022-09-13 06:11
- Fingerprint: 407cf4363b0e62fafca67e0756f5ac8456f5ac8456f5ac8456f5ac8456f5ac84
```
Symfony profiler enabled:
https://back-pcrgargaras-pre.hospiten.com:8443/_profiler/empty/search/results
```
  Found on 2022-09-13 06:11
Create report

Open service 167.172.188.143:22

2026-01-22 18:04
Found 2026-01-22 by SSHOpenPlugin
Create report

Data leak

Size

7.9 MB

Collections

Rows

138648

Domain summary

back-pcrgargaras-pre.hospiten.com 1

1 recorded