LeakIX - Host 42.96.46.161

Host 42.96.46.161

Vietnam

CMC Telecom Infrastructure Company

Linux x86_64

Software information

nginx nginx 1.18.0

tcp/80

openresty

tcp/443

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 42.96.46.161
Port: 3308

First seen 2024-04-23 22:41
Last seen 2024-06-17 22:29
Open for 54 days

Severity: high
Fingerprint: cf350410ecceb5fdd122517efc1456c2efab4051b1cc5f70aff900b2077500ff

Databases: 39, row count: 133243, size: 7.9 MB
Found table auth.users with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 98 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 844 records
Found table mysql.help_relation with 2237 records
Found table mysql.help_topic with 618 records
Found table mysql.innodb_index_stats with 18 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1831 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1614 records
Found table mysql.time_zone_transition with 116428 records
Found table mysql.time_zone_transition_type with 9472 records
Found table mysql.user with 5 records

Found on 2024-06-17 22:29

7.9 MBytes 133243 rows

Severity: high
Fingerprint: cf350410ecceb5fdd45d16e6cea2264f5412b1da208a2e0f833b6d430d0d5153

Databases: 39, row count: 139546, size: 7.9 MB
Found table auth.users with 3 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 90 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 990 records
Found table mysql.help_relation with 2219 records
Found table mysql.help_topic with 463 records
Found table mysql.innodb_index_stats with 18 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1835 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 9871 records
Found table mysql.user with 5 records

Found on 2024-05-30 17:20

7.9 MBytes 139546 rows

Severity: high
Fingerprint: cf350410ecceb5fd2c65fb26ea7eed22e67866f4384ede86a06fdf2e14952ba5

Databases: 39, row count: 141260, size: 7.9 MB
Found table mysql.innodb_table_stats with 3 records
Found table mysql.innodb_index_stats with 18 records
Found table mysql.db with 2 records
Found table mysql.user with 5 records
Found table mysql.default_roles with 0 records
Found table mysql.role_edges with 0 records
Found table mysql.global_grants with 90 records
Found table mysql.password_history with 0 records
Found table mysql.func with 0 records
Found table mysql.plugin with 0 records
Found table mysql.help_topic with 1104 records
Found table mysql.help_category with 53 records
Found table mysql.help_relation with 2711 records
Found table mysql.servers with 0 records
Found table mysql.tables_priv with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.help_keyword with 1219 records
Found table mysql.time_zone_name with 1530 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.general_log with 2 records
Found table mysql.slow_log with 2 records
Found table mysql.component with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.gtid_executed with 0 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.engine_cost with 2 records
Found table mysql.proxies_priv with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table auth.users with 2 records

Found on 2024-04-30 19:33

7.9 MBytes 141260 rows

Create report

Open service 42.96.46.161:443

2024-06-20 09:56

HTTP/1.1 400 Bad Request
Server: openresty
Date: Thu, 20 Jun 2024 09:56:37 GMT
Content-Type: text/html
Content-Length: 654
Connection: close

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found about an hour ago by HttpPlugin

Create report

Open service 42.96.46.161:3308

2024-06-17 22:29
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 42.96.46.161:3308

2024-06-15 22:52
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report

Open service 42.96.46.161:27017

2024-06-15 20:33

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-15 by HttpPlugin

Create report

Open service 42.96.46.161:80

2024-06-15 19:41

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 15 Jun 2024 19:41:50 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Sat, 10 Jun 2023 14:13:18 GMT
Connection: close
ETag: "648484fe-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-15 by HttpPlugin

Create report

Open service 42.96.46.161:3308

2024-06-15 10:02
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report

Open service 42.96.46.161:8081

2024-06-14 03:31

HTTP/1.1 500 Internal Server Error
X-Powered-By: Express
Access-Control-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Content-Length: 52
ETag: W/"34-rlKccw1E+/fV8niQk4oFitDfPro"
Date: Fri, 14 Jun 2024 03:31:26 GMT
Connection: close


{"statusCode":500,"message":"Internal server error"}

Found 2024-06-14 by HttpPlugin

Create report

Open service 42.96.46.161:3307

2024-06-13 17:55
```
MySQL detected
```
Found 2024-06-13 by tcpid
Create report
Open service 42.96.46.161:22

2024-06-13 17:28
Found 2024-06-13 by SSHOpenPlugin
Create report

Open service 42.96.46.161:80

2024-06-13 14:59

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 13 Jun 2024 14:59:24 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Sat, 10 Jun 2023 14:13:18 GMT
Connection: close
ETag: "648484fe-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-13 by HttpPlugin

Create report

Open service 42.96.46.161:3308

2024-06-13 02:06
```
MySQL detected
```
Found 2024-06-13 by tcpid
Create report
Open service 42.96.46.161:3308

2024-06-11 21:10
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 42.96.46.161:3308

2024-06-09 20:18
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 42.96.46.161:3308

2024-06-07 21:00
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 42.96.46.161:3308

2024-06-05 20:33
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report

Data leak

Size

7.9 MB

Collections

Rows

141260

Domain summary

No record