LeakIX - Host 193.111.31.173

Host 193.111.31.173

Germany

xTom Japan Co., Ltd.

Software information

nginx nginx

tcp/443 tcp/80

MongoDB is publicly available

MongoDB is currently open without authentication.

This results in all the database data made available publicly.

IP: 193.111.31.173
Port: 27017
URL: http://193.111.31.173:27017

First seen 2024-06-16 02:28
Last seen 2024-09-19 23:42
Open for 95 days

Severity: medium
Fingerprint: 436d217a47ab4258f0714f86f8e68ac8020fa5e250d608a0a4a818777311fa04

Collections: 3, document count: 2, size: 430 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-09-19 23:42

430 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258d1fca7d57d823f0dfc73466962d2e8232531c254686789cd

Collections: 3, document count: 4, size: 628 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-09-05 20:14

628 Bytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258e084be0e164157f0e806268a435e6bb8fc3c905f9b11d4f4

Collections: 3, document count: 2, size: 438 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (379 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-08-07 19:52

438 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258068738f79ff80ddffa51e633ad83fab9e0edf80638d633bb

Collections: 3, document count: 2, size: 439 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (380 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-08-01 20:36

439 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab425871d9e9db5d919e93d6ef751f0ab6066dcb5062a2b2a9f0ca

Collections: 3, document count: 2, size: 440 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-07-01 22:44

440 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab42585365412e9f6b47906dae8c6aff25a6985b6cf7bfb4492b51

Collections: 3, document count: 4, size: 638 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-06-27 22:08

638 Bytes 4 rows

Severity: medium
Fingerprint: 436d217a47ab4258e351092676fcaae8112181c2ab02ec00e2760ed7da24a4ea

Collections: 3, document count: 4, size: 630 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 1 documents (59 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-06-16 02:28

630 Bytes 4 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 193.111.31.173
Port: 80
URL: http://193.111.31.173

First seen 2024-06-01 11:09
Last seen 2024-09-19 21:54
Open for 110 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
  Found on 2024-09-19 21:54
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 193.111.31.173
Port: 22

First seen 2024-07-03 21:16
Last seen 2024-09-19 20:20
Open for 77 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb57a94b6fdfe628d14fe628d14fe628d14fe628d14
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-09-19 20:20
Create report

Open service 193.111.31.173:27017

2024-09-15 23:46

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-15 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-09-15 22:00

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Sep 2024 22:00:14 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-15 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-09-15 21:44
Found 2024-09-15 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-09-13 23:18

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-13 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-09-13 22:47
Found 2024-09-13 by SSHOpenPlugin
Create report

Open service 193.111.31.173:80

2024-09-13 21:51

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Sep 2024 21:51:49 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-13 by HttpPlugin

Create report

Open service 193.111.31.173:443

2024-09-12 02:24

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 12 Sep 2024 02:24:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache


{"code":100,"message":"Twikoo 云函数运行正常，请参考 https://twikoo.js.org/frontend.html 完成前端的配置","version":"1.6.29"}

Found 2024-09-12 by HttpPlugin

Create report

Open service 193.111.31.173:27017

2024-09-11 23:23

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-11 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-09-11 23:17
Found 2024-09-11 by SSHOpenPlugin
Create report

Open service 193.111.31.173:80

2024-09-11 22:07

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 11 Sep 2024 22:07:15 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-11 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-09-11 20:02

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 11 Sep 2024 20:02:42 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-11 by HttpPlugin

Create report

Open service 193.111.31.173:3306

2024-09-11 11:54
```
MySQL detected
```
Found 2024-09-11 by tcpid
Create report
Open service 193.111.31.173:22

2024-09-10 11:42
Found 2024-09-10 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-09-10 10:02

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-10 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-09-09 23:08

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Sep 2024 23:08:09 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-09 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-09-09 23:01
Found 2024-09-09 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-09-09 20:40

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-09-09 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-09-07 22:26

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Sep 2024 22:26:27 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-09-07 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-09-07 20:38
Found 2024-09-07 by SSHOpenPlugin
Create report
Open service 193.111.31.173:27017

2024-09-07 20:32
Found 2024-09-07 by HttpPlugin
Create report

Open service 193.111.31.173:27017

2024-08-17 23:16

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-17 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-08-17 22:55

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Aug 2024 22:55:34 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-17 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-08-17 22:43
Found 2024-08-17 by SSHOpenPlugin
Create report
Open service 193.111.31.173:22

2024-08-15 23:15
Found 2024-08-15 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-08-15 22:44

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-15 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-08-15 20:45

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Aug 2024 20:45:50 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-15 by HttpPlugin

Create report

Open service 193.111.31.173:27017

2024-08-13 23:14

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-13 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-08-13 22:51
Found 2024-08-13 by SSHOpenPlugin
Create report

Open service 193.111.31.173:80

2024-08-13 22:43

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Aug 2024 22:43:16 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-13 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-08-11 23:31

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Aug 2024 23:31:41 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-11 by HttpPlugin

Create report

Open service 193.111.31.173:27017

2024-08-11 23:23

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-11 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-08-11 22:58
Found 2024-08-11 by SSHOpenPlugin
Create report

Open service 193.111.31.173:80

2024-08-09 23:39

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Aug 2024 23:39:56 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-09 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-08-09 22:55
Found 2024-08-09 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-08-09 20:18

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-09 by HttpPlugin

Create report

Open service 193.111.31.173:80

2024-08-07 23:51

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Aug 2024 23:51:20 GMT
Content-Type: text/html
Content-Length: 435
Last-Modified: Wed, 17 Apr 2024 03:04:11 GMT
Connection: close
ETag: "661f3c2b-1b3"
Accept-Ranges: bytes

Page title: Airbnb

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Airbnb</title>
    <script type="module" crossorigin src="/assets/index-CRlWCYKB.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BXlyLS1K.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2024-08-07 by HttpPlugin

Create report

Open service 193.111.31.173:22

2024-08-07 20:59
Found 2024-08-07 by SSHOpenPlugin
Create report

Open service 193.111.31.173:27017

2024-08-07 19:52

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-08-07 by HttpPlugin

Create report

comment.tcps.cc

Fingerprint:

ee745b22539e6befde70f681d1a7843dc5da9f3588b82649e7fe465c8b0a458f

CN:

comment.tcps.cc

Key:

RSA-2048

Issuer:

TrustAsia RSA DV TLS CA G2

Not before:

2024-01-05 00:00

Not after:

2025-01-04 23:59

Data leak

Size

628 B

Collections

Rows

Domain summary

No record

Host 193.111.31.173

Germany

Software information

MongoDB is publicly available

MacOS file listing through .DS_Store file

SSH is potenitally vulnerable

comment.tcps.cc

Data leak

Domain summary