LeakIX - Host 45.91.125.14

Host 45.91.125.14

France

Boris Tassou

Software information

Grafana 11.1.3

tcp/443

nginx nginx 1.26.2

tcp/443 tcp/80

Grafana instance publicly available

Grafana instance is open to the public and could leak the following information :

System/internal statistics
Database backend credentials

IP: 45.91.125.14
Port: 443
URL: https://45.91.125.14/api/datasources

First seen 2021-11-18 09:49
Last seen 2024-09-27 22:57
Open for 1044 days

Fingerprint: afdaacf60309de55fbe6b9b4edbfb410edbfb410edbfb410edbfb410edbfb410

Read-only access:
Title: Linux Hosts Metrics | Base | path: db/linux-hosts-metrics-base | type: dash-db

Found on 2024-09-27 22:57

Fingerprint: afdaacf60a09e95b794bffe19a791dc667f7566290e5c23282c7bbf582c7bbf5

Unrestricted access:
Title: External | path: db/external | type: dash-db
Title: Linux Hosts Metrics | Base | path: db/linux-hosts-metrics-base | type: dash-db
Datasources:
Name: Prometheus | type: prometheus | dsn: http://localhost:9090//

Found on 2022-08-05 10:38

Fingerprint: afdaacf60309de55fbe6b9b4daa9e659461824d77b5820ddad3838dbad3838db

Read-only access:
Title: External | path: db/external | type: dash-db
Title: Linux Hosts Metrics | Base | path: db/linux-hosts-metrics-base | type: dash-db
Title: S.M.A.R.T disk monitoring for Prometheus Dashboard | path: db/s-m-a-r-t-disk-monitoring-for-prometheus-dashboard | type: dash-db
Title: SMART info | path: db/smart-info | type: dash-db

Found on 2022-04-08 13:22

Fingerprint: afdaacf60309de55fbe6b9b4daa9e659daa9e659daa9e659daa9e659daa9e659
```
Read-only access:
Title: External | path: db/external | type: dash-db
```
Found on 2021-11-18 09:49

Create report

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 45.91.125.14
Port: 22

First seen 2024-07-03 17:02
Last seen 2024-09-27 21:38
Open for 86 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb52209347e26e8a05726e8a05726e8a05726e8a057
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.7
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-09-27 21:38
Create report
Grafana instance publicly available
Grafana instance is open to the public and could leak the following information :

System/internal statistics

Database backend credentials
IP: 45.91.125.14
Domain: metro.swordarmor.fr
Port: 443
URL: https://metro.swordarmor.fr/api/datasources

First seen 2021-11-05 21:56
Last seen 2024-09-26 19:37
Open for 1055 days
- Fingerprint: afdaacf60309de55fbe6b9b4edbfb410edbfb410edbfb410edbfb410edbfb410
```
Read-only access:
Title: Linux Hosts Metrics | Base | path: db/linux-hosts-metrics-base | type: dash-db
```
  Found on 2024-09-26 19:37
- Fingerprint: afdaacf60309de55fbe6b9b4daa9e659daa9e659daa9e659daa9e659daa9e659
```
Read-only access:
Title: External | path: db/external | type: dash-db
```
  Found on 2021-11-05 21:56
Create report

Open service 45.91.125.14:443

2024-09-27 22:57

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Fri, 27 Sep 2024 22:57:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 6 hours ago by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-27 22:57
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 6 hours ago by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:22

2024-09-27 21:38
Found 7 hours ago by SSHOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-26 19:37

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Thu, 26 Sep 2024 19:37:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found one day ago by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-26 19:37
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found one day ago by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-25 22:37

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Wed, 25 Sep 2024 22:37:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2 days ago by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-25 22:37
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2 days ago by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:22

2024-09-25 21:58
Found 2 days ago by SSHOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-24 23:58

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Tue, 24 Sep 2024 23:58:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-24 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-24 23:58
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-24 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:22

2024-09-23 22:45
Found 2024-09-23 by SSHOpenPlugin
Create report
Open service 45.91.125.14:443

2024-09-23 22:05
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-23 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-23 22:05

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 23 Sep 2024 22:06:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-23 by HttpPlugin

Create report

Open service 45.91.125.14:22

2024-09-15 23:01
Found 2024-09-15 by SSHOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-15 22:12

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sun, 15 Sep 2024 22:12:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-15 by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-15 22:12
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-15 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-14 09:03

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sat, 14 Sep 2024 09:03:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-14 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-14 09:03
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-14 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:22

2024-09-13 23:10
Found 2024-09-13 by SSHOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-13 22:13

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Fri, 13 Sep 2024 22:13:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-13 by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-13 22:13
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-13 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-12 11:57
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-12 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-12 11:57

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Thu, 12 Sep 2024 11:57:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-12 by HttpPlugin

Create report

Open service 45.91.125.14:22

2024-09-11 22:35
Found 2024-09-11 by SSHOpenPlugin
Create report
Open service 45.91.125.14:443

2024-09-11 20:01
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-11 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-11 20:01

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Wed, 11 Sep 2024 20:01:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-11 by HttpPlugin

Create report

Open service 45.91.125.14:22

2024-09-11 02:54
Found 2024-09-11 by SSHOpenPlugin
Create report

Open service 45.91.125.14:80

2024-09-10 22:58

HTTP/1.1 301 Moved Permanently
Server: nginx/1.26.2
Date: Tue, 10 Sep 2024 22:59:04 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://metro.swordarmor.fr/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.26.2</center>
</body>
</html>

Found 2024-09-10 by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-10 22:06
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-10 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-10 22:06

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Tue, 10 Sep 2024 22:06:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-10 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-10 15:18

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Tue, 10 Sep 2024 15:18:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-10 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-10 15:18
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-10 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:443

2024-09-09 23:51
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-09 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-09 23:51

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Mon, 09 Sep 2024 23:51:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-09 by HttpPlugin

Create report

Open service 45.91.125.14:22

2024-09-09 21:47
Found 2024-09-09 by SSHOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-08 11:55

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sun, 08 Sep 2024 11:55:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-08 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-08 11:55
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-08 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:22

2024-09-07 21:38
Found 2024-09-07 by SSHOpenPlugin
Create report

Open service 45.91.125.14:443

2024-09-07 21:33

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sat, 07 Sep 2024 21:33:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-07 by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-09-07 21:33
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-07 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-06 12:38

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Fri, 06 Sep 2024 12:38:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-09-06 by HttpPlugin

Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-09-06 12:38
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-09-06 by GrafanaOpenPlugin
Create report
Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-08-18 06:03
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-08-18 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443 · metro.swordarmor.fr

2024-08-18 06:03

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sun, 18 Aug 2024 06:03:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-08-18 by HttpPlugin

Create report

Open service 45.91.125.14:443

2024-08-17 23:15
```
Grafana dashboard version 11.1.3
Edition: Open Source
```
Found 2024-08-17 by GrafanaOpenPlugin
Create report

Open service 45.91.125.14:443

2024-08-17 23:15

HTTP/1.1 200 OK
Server: nginx/1.26.2
Date: Sat, 17 Aug 2024 23:15:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Found 2024-08-17 by HttpPlugin

Create report

Open service 45.91.125.14:22

2024-08-17 22:11
Found 2024-08-17 by SSHOpenPlugin
Create report

metro.swordarmor.fr

Fingerprint:

42aafaf0d3e2b001056104dd19808972d38db9b487a7555258c6188cfc41718d

CN:

metro.swordarmor.fr

Key:

RSA-4096

Issuer:

R10

Not before:

2024-08-21 21:01

Not after:

2024-11-19 21:01

metro.swordarmor.fr

Fingerprint:

f0afe224c863f6dcd92e1dd837ddde6353e83280c9e94b5d0ffef58b6becbe6f

CN:

metro.swordarmor.fr

Key:

RSA-4096

Issuer:

R10

Not before:

2024-06-23 21:00

Not after:

2024-09-21 21:00

Domain summary

metro.swordarmor.fr 17

1 recorded

Host 45.91.125.14

France

Software information

Grafana instance publicly available

SSH is potenitally vulnerable

Grafana instance publicly available

metro.swordarmor.fr

metro.swordarmor.fr

Domain summary