LeakIX - Host 65.108.65.27

Host 65.108.65.27

Finland

Hetzner Online GmbH

Software information

nginx nginx

tcp/443 tcp/80

MongoDB is publicly available

MongoDB is currently open without authentication.

This results in all the database data made available publicly.

IP: 65.108.65.27
Port: 27017
URL: http://65.108.65.27:27017

First seen 2024-04-24 15:02
Last seen 2024-06-19 22:56
Open for 56 days

Severity: medium
Fingerprint: 436d217a47ab4258e1b0a9c4160fed261eb74370735f10ea047f1df52574a724

Collections: 3, document count: 1, size: 381 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (381 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-06-19 22:56

381 Bytes 1 rows

Severity: medium
Fingerprint: 436d217a47ab4258ecd90dafa1bd99b7fbdd2d6bcfc11441a922c91e4b1c2292

Collections: 3, document count: 1, size: 373 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-06-17 22:31

373 Bytes 1 rows

Severity: medium
Fingerprint: 436d217a47ab42584154dac44cbe5826e047f4709e4b21ea561c56f568ca8151

Collections: 4, document count: 2, size: 2.7 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 0 documents (0 B)
Found collection telegram.messages  with 1 documents (2.4 kB)

Found on 2024-06-14 01:45

2.7 kBytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258656ea274475e61f6fd363b40b928417a7b264505e8981318

Collections: 4, document count: 2, size: 14.6 kB
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 0 documents (0 B)
Found collection telegram.messages  with 1 documents (14.2 kB)

Found on 2024-06-03 21:44

14.6 kBytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab4258c12a5f88a062593aa70e425c984a873ee15b8501a83b9c78

Collections: 3, document count: 2, size: 472 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 1 documents (99 B)

Found on 2024-06-01 21:21

472 Bytes 2 rows

Severity: medium
Fingerprint: 436d217a47ab42585eeb4dd9e761a321f27b0495cb057e375849d00096f9e634

Collections: 3, document count: 3, size: 571 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (373 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 2 documents (198 B)

Found on 2024-05-29 23:21

571 Bytes 3 rows

Severity: medium
Fingerprint: 436d217a47ab425838de02fdd402dd35104bdbf17e58a7db6726d09c5dc097b2

Collections: 3, document count: 1, size: 371 B
HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.
Found collection READ__ME_TO_RECOVER_YOUR_DATA.README  with 1 documents (371 B)
Found collection admin.system.version  with 0 documents (0 B)
Found collection config.system.sessions  with 0 documents (0 B)

Found on 2024-04-28 17:53

371 Bytes 1 rows

Create report

Open service 65.108.65.27:8086

2024-06-20 04:41

HTTP/1.1 302 Found
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Content-Type: text/html; charset=utf-8
Location: http://65.108.65.27/login?back_url=http%3A%2F%2F65.108.65.27%2F
Cache-Control: no-cache
X-Request-Id: 4b5238d3-217b-4e06-a4f1-c18d034c2418
X-Runtime: 0.001594
Connection: close
Content-Length: 129


<html><body>You are being <a href="http://65.108.65.27/login?back_url=http%3A%2F%2F65.108.65.27%2F">redirected</a>.</body></html>

Found 7 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:80 · sd.scale.ru

2024-06-20 04:05

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 04:05:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (3b7479f97cef2f961723c2eef49e4edc)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Bitrix-Ajax-Status: Authorize
Set-Cookie: PHPSESSID=0HXc2DTXEr5inLR8dN5M7WIXFcPqPZz4; path=/; domain=sd.scale.ru; HttpOnly
Vary: Accept-Encoding

Page title: Авторизация

<!DOCTYPE html>
<html lang="ru">
    <head>
        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
        <script type="text/javascript" src="/js/jQuery.js"></script>
        <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM" crossorigin="anonymous"></script>
        <script src="/js/bootstrap-autocomplete.min.js"></script>

                <meta charset="UTF-8" />
        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
        <title>Авторизация</title>
        <script>

</script>                                                                        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<link href="/local/templates/service/components/bitrix/system.auth.authorize/.default/style.css?1626436084893" type="text/css"  rel="stylesheet" />
<link href="/css/style.css?168570781320862" type="text/css"  data-template-style="true"  rel="stylesheet" />
<script type="text/javascript" src="/js/app.js?16572931673406"></script>
<script type="text/javascript" src="/js/app-object.js?16540895036465"></script>
<script type="text/javascript" src="/js/app-partner.js?16824337247648"></script>
<script type="text/javascript" src="/js/app-manager.js?16572137981534"></script>
<script type="text/javascript" src="/js/app-order-add.js?16324794401326"></script>
<script type="text/javascript" src="/js/app-index.js?1647443319877"></script>
<script type="text/javascript" src="/js/app-ticket.js?16885907801834"></script>
<script type="text/javascript">var _ba = _ba || []; _ba.push(["aid", "3b7479f97cef2f961723c2eef49e4edc"]); _ba.push(["host", "sd.scale.ru"]); (function() {var ba = document.createElement("script"); ba.type = "text/javascript"; ba.async = true;ba.src = (document.location.protocol == "https:" ? "https://" : "http://") + "bitrix.info/ba.js";var s = document.getElementsByTagName("script")[0];s.parentNode.insertBefore(ba, s);})();</script>


        <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" />
        <link rel="apple-touch-icon" sizes="180x180" href="/img/favicons/apple-touch-icon.png">
        <link rel="icon" type="image/png" sizes="32x32" href="/img/favicons/favicon-32x32.png">
        <link rel="icon" type="image/png" sizes="16x16" href="/img/favicons/favicon-16x16.png">
        <link rel="manifest" href="/img/favicons/site.webmanifest">
        <link rel="mask-icon" href="/img/favicons/safari-pinned-tab.svg" color="#5bbad5">
        <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.7.2/font/bootstrap-icons.css">
        <link rel="stylesheet" href="https://unpkg.com/bootstrap-table@1.20.2/dist/bootstrap-table.min.css">
        <script src="https://unpkg.com/bootstrap-table@1.20.2/dist/bootstrap-table.min.js"></script>

    </head>

<body>
    <div class="wrapper">


<div class="bx-auth">
    	<div class="bx-auth-note">Пожалуйста, авторизуйтесь:</div>

	<form name="form_auth" method="post" target="_top" action="/?login=yes">

		<input type="hidden" name="AUTH_FORM" value="Y" />
		<input type="hidden" name="TYPE" value="AUTH" />
				<input type="hidden" name="backurl" value="/" />
				
		<table class="bx-auth-table">
			<tr>
				<td class="bx-auth-label">Логин:</td>
				<td><input class="bx-auth-input form-control" type="text" name="USER_LOGIN" maxlength="255" value="" /></td>
			</tr>
			<tr>
				<td class="bx-auth-label">Пароль:</td>
				<td><input class="bx-auth-input form-control" type="password" name="USER_PASSWORD" maxlength="255" autocomplete="off" />
				</td>
			</tr>
						<tr>
				<td></td>
				<td class="authorize-submit-cell"><input type="submit" class="btn btn-primary" name="Login" value="Войти" /></td>
			</tr>
		</table>

		<noindex>
			<p>
				<a href="/?forgot

Found 8 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:443 · sd.scale.ru

2024-06-20 04:05

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 04:05:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (3b7479f97cef2f961723c2eef49e4edc)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Bitrix-Ajax-Status: Authorize
Set-Cookie: PHPSESSID=oYOgxGAT0M05KlYyJm52lH1ts3ufiJN3; path=/; domain=sd.scale.ru; HttpOnly
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;

Page title: Авторизация

<!DOCTYPE html>
<html lang="ru">
    <head>
        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
        <script type="text/javascript" src="/js/jQuery.js"></script>
        <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM" crossorigin="anonymous"></script>
        <script src="/js/bootstrap-autocomplete.min.js"></script>

                <meta charset="UTF-8" />
        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
        <title>Авторизация</title>
        <script>

</script>                                                                        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<link href="/local/templates/service/components/bitrix/system.auth.authorize/.default/style.css?1626436084893" type="text/css"  rel="stylesheet" />
<link href="/css/style.css?168570781320862" type="text/css"  data-template-style="true"  rel="stylesheet" />
<script type="text/javascript" src="/js/app.js?16572931673406"></script>
<script type="text/javascript" src="/js/app-object.js?16540895036465"></script>
<script type="text/javascript" src="/js/app-partner.js?16824337247648"></script>
<script type="text/javascript" src="/js/app-manager.js?16572137981534"></script>
<script type="text/javascript" src="/js/app-order-add.js?16324794401326"></script>
<script type="text/javascript" src="/js/app-index.js?1647443319877"></script>
<script type="text/javascript" src="/js/app-ticket.js?16885907801834"></script>
<script type="text/javascript">var _ba = _ba || []; _ba.push(["aid", "3b7479f97cef2f961723c2eef49e4edc"]); _ba.push(["host", "sd.scale.ru"]); (function() {var ba = document.createElement("script"); ba.type = "text/javascript"; ba.async = true;ba.src = (document.location.protocol == "https:" ? "https://" : "http://") + "bitrix.info/ba.js";var s = document.getElementsByTagName("script")[0];s.parentNode.insertBefore(ba, s);})();</script>


        <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" />
        <link rel="apple-touch-icon" sizes="180x180" href="/img/favicons/apple-touch-icon.png">
        <link rel="icon" type="image/png" sizes="32x32" href="/img/favicons/favicon-32x32.png">
        <link rel="icon" type="image/png" sizes="16x16" href="/img/favicons/favicon-16x16.png">
        <link rel="manifest" href="/img/favicons/site.webmanifest">
        <link rel="mask-icon" href="/img/favicons/safari-pinned-tab.svg" color="#5bbad5">
        <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.7.2/font/bootstrap-icons.css">
        <link rel="stylesheet" href="https://unpkg.com/bootstrap-table@1.20.2/dist/bootstrap-table.min.css">
        <script src="https://unpkg.com/bootstrap-table@1.20.2/dist/bootstrap-table.min.js"></script>

    </head>

<body>
    <div class="wrapper">


<div class="bx-auth">
    	<div class="bx-auth-note">Пожалуйста, авторизуйтесь:</div>

	<form name="form_auth" method="post" target="_top" action="/?login=yes">

		<input type="hidden" name="AUTH_FORM" value="Y" />
		<input type="hidden" name="TYPE" value="AUTH" />
				<input type="hidden" name="backurl" value="/" />
				
		<table class="bx-auth-table">
			<tr>
				<td class="bx-auth-label">Логин:</td>
				<td><input class="bx-auth-input form-control" type="text" name="USER_LOGIN" maxlength="255" value="" /></td>
			</tr>
			<tr>
				<td class="bx-auth-label">Пароль:</td>
				<td><input class="bx-auth-input form-control" type="password" name="USER_PASSWORD" maxlength="255" autocomplete="off" />
				</td>
			</tr>
						<tr>
				<td></td>
				<td class="authorize-submit-cell"><input type="submit" class="btn btn-primary" name="Login" value="Войти" /></td>
			</tr>
		</table>

		<noindex>
			<p>
				<a href="/?forgot

Found 8 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:443 · www.amgtrade.ru

2024-06-20 04:05

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 04:05:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (318db3d6abebd4fb67682e3b6a569ae0)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=dmgcXMO4zzKMYFWRrGVCwsjS0CZRqJDi; path=/; HttpOnly
Set-Cookie: BITRIX_SM_SALE_UID=5ea52ffb07c6225f3b0eae4fa11b7ff0; expires=Sun, 15-Jun-2025 04:05:18 GMT; Max-Age=31104000; path=/
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;

Found 8 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:80 · www.amgtrade.ru

2024-06-20 04:05

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 04:05:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (318db3d6abebd4fb67682e3b6a569ae0)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=OjMPmM7dr4abUEo10BsFAr6Sv9ZbwTR6; path=/; HttpOnly
Set-Cookie: BITRIX_SM_SALE_UID=09117194f7a26ff86b851911ebbf4c31; expires=Sun, 15-Jun-2025 04:05:14 GMT; Max-Age=31104000; path=/
Vary: Accept-Encoding

Found 8 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:22

2024-06-20 03:15
Found 8 hours ago by SSHOpenPlugin
Create report

Open service 65.108.65.27:27017

2024-06-19 22:56

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 13 hours ago by HttpPlugin

Create report

Open service 65.108.65.27:80 · amgtrade.ru

2024-06-18 01:58

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 18 Jun 2024 01:58:57 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://amgtrade.ru/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 65.108.65.27:443 · amgtrade.ru

2024-06-18 01:58

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 18 Jun 2024 01:58:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
P3P: policyref="/bitrix/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"
X-Powered-CMS: Bitrix Site Manager (318db3d6abebd4fb67682e3b6a569ae0)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=UUzsVL8v7MtcUyroMB7bCWe5d9eNzjyb; path=/; HttpOnly
Set-Cookie: BITRIX_SM_SALE_UID=5b62cbdacb0ae7a4180ee92ecee4ff73; expires=Fri, 13-Jun-2025 01:58:57 GMT; Max-Age=31104000; path=/
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000;

Found 2 days ago by HttpPlugin

Create report

Open service 65.108.65.27:27017

2024-06-17 22:31

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 3 days ago by HttpPlugin