LeakIX - Host 69.75.133.158

Host 69.75.133.158

United States

TWC-20001-PACWEST

Linux 3.16.1 x86_64

Software information

lighttpd 1.4.40

tcp/443

Redis instance is public

The Redis instance is open to the public.

This could result to data leak and code execution.

IP: 69.75.133.158
Port: 6379

First seen 2024-09-09 15:15
Last seen 2024-12-22 00:55
Open for 103 days
- Severity: medium
  Fingerprint: d606b92f1b5fdf181b1f02c91b1f02c91b1f02c91b1f02c91b1f02c91b1f02c9
```
Redis is open with 2 keys in dbs
```
  Found on 2024-12-22 00:55
  
  2 rows
- Severity: medium
  Fingerprint: d606b92f1b5fdf185497e6545497e6545497e6545497e6545497e6545497e654
```
Redis is open with 3 keys in dbs
```
  Found on 2024-12-20 00:27
  
  3 rows
- Severity: medium
  Fingerprint: d606b92f1b5fdf18476e4752476e4752476e4752476e4752476e4752476e4752
```
Redis is open with 1 keys in dbs
```
  Found on 2024-11-30 00:40
  
  1 rows
- Severity: medium
  Fingerprint: d606b92f1b5fdf1897c596ab97c596ab97c596ab97c596ab97c596ab97c596ab
```
Redis is open with 4 keys in dbs
```
  Found on 2024-11-28 00:03
  
  4 rows
Create report

Open service 69.75.133.158:443

2024-11-20 10:03

HTTP/1.1 200 OK
X-Powered-By: PHP/7.0.10
Set-Cookie: PHPSESSID=f9d2088f21ace73a45fef6b7a9a2e12d; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-type: text/html; charset=UTF-8
Content-Length: 14719
Connection: close
Date: Wed, 20 Nov 2024 10:04:04 GMT
Server: lighttpd/1.4.40


<html>
<head>
    <title></title>

    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

    <script type="text/javascript" src="/yui/build/yahoo-dom-event/yahoo-dom-event.js?v=03.05.0000.0003"></script>
    <script type="text/javascript" src="/yui/build/yahoo/yahoo-min.js?v=03.05.0000.0003"></script>
    <script type="text/javascript" src="/yui/build/dom/dom-min.js?v=03.05.0000.0003"></script>

    <link rel="stylesheet" href="css/main.css?v=03.05.0000.0003" type="text/css">
    <link rel="stylesheet" href="css/text1.css?v=03.05.0000.0003" type="text/css">
    <link rel="stylesheet" href="css/common.css?v=03.05.0000.0003" type="text/css">

    <script type="text/javascript" src="js/common.js?v=03.05.0000.0003"></script>
    <script type="text/javascript" src="js/language.js?v=03.05.0000.0003"></script>
    <script type="text/javascript" src="./js/messagebox.js?v=03.05.0000.0003"></script>
    <script type="text/javascript">
    var serverType = "webServer";
    	function focusOnPwd()
    	{
    		try {
	            form=document.forms[0];
	            if(form && form.user)
	                form.user.focus();
		    } catch (e) { errorReport(e); }
    	}
    	
        function validate(form)
        {
            if(form.user.value == ""){
                alert( _nudecodecore(get_trans_str('v_user_check')) );
                form.user.focus();
                return false;
            }
            if(form.pass.value == ""){
                alert( _nudecodecore(get_trans_str('v_passwd_check')) );
                form.pass.focus();
                return false;
            }
            if(serverType == "managemntServer")
            {            
                if(document.getElementById('show_port').value == "")
                {
                    alert( _nudecodecore(get_trans_str('v_setting_js_portrangeerror')) );
                    document.getElementById('show_port').focus();
                    return false;
                }
                else
                {
                    var portNum = document.getElementById('show_port').value;
                    document.getElementById('ms_port').value = portNum;
                }
            }   
            return true;
        }

        var pre_select_lang = "en";
        function setLocalization(s)
        {
            var lang = s.options[s.selectedIndex].value;
            //var current_lang = "en";

            if (lang != pre_select_lang)
            {
            	//setLangCookie(lang);
                initializeLanguagePackByLang(lang);
                changeLang();
                pre_select_lang = lang;
            }
            
            focusOnPwd();
        }
               
        function setServerType() 
        {
            var currentServerType = document.getElementById("server_type").value;
            if(currentServerType != serverType)
            {
                serverType = currentServerType;
                if(serverType == "managemntServer")
                {
                    var Tr = document.getElementById("mainTable").insertRow(3);
                    var Td = Tr.insertCell(0);
                    //Td.id='portTd';
                    Td.setAttribute("id", "portTd");
                    Td.setAttribute("height", "10");
                    document.getElementById('portTd').className='white1';
                    //Td.setAttribute("class", "white1");
                    Td.innerHTML = '<div align="right" class="trans" langID="v_general_port">Port</div>';
                    var Td2 = Tr.insertCell(1);
                    Td2.innerHTML = '<input name="show_port" id="show_port" type="text" value="5250" size="20" maxlength="16">';
                    //document.getElementById('portTd').name='ms_port';
                    //document.mainform.action='client.php';
                }
                else if (serverType == "webServer")
                {
                    remove_data();
                    document.ma

Found 2024-11-20 by HttpPlugin

Create report

Fingerprint:

5519ac811fa1295ff2dcd13890215f4030d20cbbfe8d7e4ae5a0d5a413524c95

CN:

Crystal_Titan

Key:

RSA-2048

Issuer:

www.nuuo.com.tw

Not before:

2014-08-06 09:18

Not after:

2064-07-24 09:18

Data leak

Size

0 B

Collections

Rows

Domain summary

No record