LeakIX - Host 39.104.72.101

Host 39.104.72.101

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

Software information

nginx nginx

tcp/81

nginx nginx 1.24.0

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 39.104.72.101
Port: 443
URL: https://39.104.72.101

First seen 2023-09-17 21:37
Last seen 2023-11-05 21:58
Open for 49 days

Severity: high
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a761e3a03c40e7c0695e78d918509afa7f0

Found 51 files trough .DS_Store spidering:

/image
/image/0201.png
/image/0202.png
/image/0203.png
/image/0204.png
/image/0205.png
/image/0206.png
/image/framework.png
/image/logo-palan.png
/image/slogan.png
/image/tencentQRCode.jpg
/index.html
/manual
/manual/about.html
/manual/account.html
/manual/analysis.html
/manual/browser.html
/manual/dashboard.html
/manual/edc.html
/manual/index.html
/manual/queue.html
/manual/search.html
/manual/upload.html
/pdf
/pdf/about_dmap_a_1.pdf
/pdf/about_standard_a_1.pdf
/pdf/account_dmap_a_1.pdf
/pdf/account_standard_a_1.pdf
/pdf/analysis_dmap_a_1.pdf
/pdf/analysis_standard_a_1.pdf
/pdf/browser_dmap_a_1.pdf
/pdf/browser_standard_a_1.pdf
/pdf/dashboard_dmap_a_1.pdf
/pdf/dashboard_standard_a_1.pdf
/pdf/edc_dmap_a_1.pdf
/pdf/edc_standard_a_1.pdf
/pdf/login_dmap_a_1.pdf
/pdf/login_standard_a_1.pdf
/pdf/manual_dmap_1.pdf
/pdf/manual_dmap_1.zip
/pdf/manual_shuyi v1.0.pdf
/pdf/manual_standard_1 v1.3.pdf
/pdf/manual_standard_1 v1.3.zip
/pdf/queue_dmap_a_1.pdf
/pdf/queue_standard_a_1.pdf
/pdf/search_dmap_a_1.pdf
/pdf/search_standard_a_1.pdf
/pdf/upload_dmap_a_1.pdf
/pdf/upload_standard_a_1.pdf
/pdf/~$平台使用手册 v1.3.docx
/pdf/科研平台使用手册 v1.3.docx

Found on 2023-11-05 21:58

Severity: high
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81ac55ba7b5b603777b64888c0931abd07

Found 41 files trough .DS_Store spidering:

/image
/index.html
/manual
/manual/about.html
/manual/account.html
/manual/analysis.html
/manual/browser.html
/manual/dashboard.html
/manual/edc.html
/manual/index.html
/manual/queue.html
/manual/search.html
/manual/upload.html
/pdf
/pdf/about_dmap_a_1.pdf
/pdf/about_standard_a_1.pdf
/pdf/account_dmap_a_1.pdf
/pdf/account_standard_a_1.pdf
/pdf/analysis_dmap_a_1.pdf
/pdf/analysis_standard_a_1.pdf
/pdf/browser_dmap_a_1.pdf
/pdf/browser_standard_a_1.pdf
/pdf/dashboard_dmap_a_1.pdf
/pdf/dashboard_standard_a_1.pdf
/pdf/edc_dmap_a_1.pdf
/pdf/edc_standard_a_1.pdf
/pdf/login_dmap_a_1.pdf
/pdf/login_standard_a_1.pdf
/pdf/manual_dmap_1.pdf
/pdf/manual_dmap_1.zip
/pdf/manual_shuyi v1.0.pdf
/pdf/manual_standard_1 v1.3.pdf
/pdf/manual_standard_1 v1.3.zip
/pdf/queue_dmap_a_1.pdf
/pdf/queue_standard_a_1.pdf
/pdf/search_dmap_a_1.pdf
/pdf/search_standard_a_1.pdf
/pdf/upload_dmap_a_1.pdf
/pdf/upload_standard_a_1.pdf
/pdf/~$平台使用手册 v1.3.docx
/pdf/科研平台使用手册 v1.3.docx

Found on 2023-10-03 13:31

Create report

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 39.104.72.101
Port: 3306

First seen 2022-11-03 20:54

Severity: high
Fingerprint: cf350410ecceb5fd5cbedc1278e9aba1af1eaa095b2d0d0fcc5545dd3e2b292c

Databases: 31, row count: 3247, size: 2.4 MB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 821 records
Found table mysql.help_relation with 1937 records
Found table mysql.help_topic with 361 records
Found table mysql.innodb_index_stats with 7 records
Found table mysql.innodb_table_stats with 2 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 1 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records

Found on 2022-11-03 20:54

2.4 MBytes 3247 rows

Create report

Open service 39.104.72.101:81

2024-04-25 10:55

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 10:55:54 GMT
Content-Type: text/html
Content-Length: 16527
Connection: close
Last-Modified: Mon, 13 Nov 2023 06:37:59 GMT
ETag: "6551c447-408f"
Accept-Ranges: bytes


<!DOCTYPE html><html><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge,chrome=1"><meta http-equiv=Expires content=0><meta http-equiv=Pragma content=no-cache><meta http-equiv=Cache-control content=no-cache><meta http-equiv=Cache content=no-cache><meta name=viewport content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"><title></title><link rel=stylesheet href=/ui/theme/element-ui.css><link href=/ui/assets/css/chunk-libs.d2ec3352.css rel=stylesheet><link href=/ui/assets/css/app.7d98e5c2.css rel=stylesheet></head><body><noscript><strong>We're sorry but doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><script>window.onload = function() {
        if (location.pathname === '/') {
           location.pathname = '/ui/'
        }
        const pathname = window.location.pathname
        if (pathname.startsWith('/core')) {
            return
        }
        if(pathname.indexOf('/ui') === -1) {
          window.location.href = window.location.origin + '/ui/#' + pathname
        }
      }</script><div id=app></div><script src=/ui/assets/js/chunk-elementUI.147b3606.js></script><script src=/ui/assets/js/chunk-libs.e9b14042.js></script><script>(function(c){function e(e){for(var n,u,a=e[0],f=e[1],b=e[2],t=0,r=[];t<a.length;t++)u=a[t],h[u]&&r.push(h[u][0]),h[u]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(c[n]=f[n]);o&&o(e);while(r.length)r.shift()();return k.push.apply(k,b||[]),d()}function d(){for(var c,e=0;e<k.length;e++){for(var d=k[e],n=!0,u=1;u<d.length;u++){var a=d[u];0!==h[a]&&(n=!1)}n&&(k.splice(e--,1),c=f(f.s=d[0]))}return c}var n={},u={runtime:0},h={runtime:0},k=[];function a(c){return f.p+"assets/js/"+({"chunk-commons":"chunk-commons"}[c]||c)+"."+{"chunk-040ff046":"30159eae","chunk-1f4c06b5":"d24baf66","chunk-200202f3":"e4b4e369","chunk-26aed086":"32c70588","chunk-dcc0feda":"f58b33db","chunk-fc6d40c4":"152d5f7c","chunk-2d0a2d17":"e9432894","chunk-2d0a4b6f":"d1a628a6","chunk-2d0a5120":"ad4f3171","chunk-2d0b1661":"5515b555","chunk-2d0b19b3":"78a6a8ee","chunk-2d0b9f58":"113d8ce5","chunk-2d0be660":"ece30952","chunk-2d0c1917":"efb39952","chunk-2d0c8da7":"e495c7bf","chunk-2d0cf120":"35ae00cb","chunk-2d0d6753":"79b481a4","chunk-2d0d6b91":"47045b1f","chunk-2d0da2e9":"200d06b8","chunk-2d0da3e0":"0a80f285","chunk-2d0dd415":"d6b3ea1e","chunk-2d0e143e":"9574b063","chunk-2d0e4bee":"d46ce4e8","chunk-2d0e576f":"079592a8","chunk-2d0e9440":"2b64b1f7","chunk-2d0f060e":"2c5b0931","chunk-2d0f0b73":"08a4a4eb","chunk-2d209162":"6faa016b","chunk-2d2136d5":"545af517","chunk-2d213ab5":"d72f4576","chunk-2d217164":"af13ed2a","chunk-2d21d824":"9ac2f4dc","chunk-2d221a24":"42c77e3b","chunk-2d224e77":"25a27cd0","chunk-2d2257da":"bbd0e827","chunk-2d225c50":"28dd23ad","chunk-2d226002":"d45e6abc","chunk-2d22d7ba":"db9d9758","chunk-2d22d821":"9901abfd","chunk-2d22db6b":"804d3af3","chunk-445cfa49":"bb81a425","chunk-45e79a56":"4e254765","chunk-84f6da6a":"88869d35","chunk-9761fe84":"3755e13d","chunk-a412f75a":"8fdd907e","chunk-aa73f152":"4278b4dc","chunk-commons":"5962ba7f","chunk-27991721":"ebf23730","chunk-0223801c":"928b05d4","chunk-05590f88":"56941f28","chunk-1563b158":"800bd3db","chunk-3481c902":"4df0ac28","chunk-f083a554":"3d7dfe6a","chunk-5da6625c":"11e76d25","chunk-2aff09aa":"e5610fec","chunk-2d0c885f":"d18493aa","chunk-2b05742d":"a49ab5f8","chunk-2d0a3359":"96bae416","chunk-2d0bdf3c":"e8d4fe8f","chunk-2d0c1aea":"a4391cdc","chunk-2d0c20fa":"cb82c512","chunk-2d0c46d1":"bcb10931","chunk-2d0c4be8":"b14c98db","chunk-2d0c53b2":"bf230975","chunk-2d0ced5d":"dc3204f8","chunk-2d0d2ea9":"c413c37b","chunk-2d0d3a73":"34dc5c72","chunk-2d0de3b1":"782b3597","chunk-2d0dee59":"87f8b983","chunk-2d0df446":"13dc7b38","chunk-2d0e1811":"f13abcf9","chunk-2d20864d":"23abdd61","chunk-2d2093c0":"e56d3417","chunk-2d20fd45":"87677bda","chunk-2d21762d":"aa6cab7f","chunk-2d21ab59":"091e140b","chunk-2d21d885":"d078a747","chunk-2d224b11":"f3b533da","chunk-2d2295ca":"cb9fbb78","chunk-2d230cb3":"8186b1da","chunk-2d231253":"acf622c4","chunk-3ca909f8":"5bae22da","chunk-4367c372":

Found 9 hours ago by HttpPlugin

Create report

Open service 39.104.72.101:80

2024-04-24 23:29

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 23:29:22 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Tue, 11 Apr 2023 17:22:34 GMT
Connection: close
ETag: "6435975a-267"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
html { color-scheme: light dark; }
body { width: 35em; margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif; }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 20 hours ago by HttpPlugin

Create report

Data leak

Size

2.4 MB

Collections

Rows

3247

Domain summary

No record