3 ms·
Whois service error discloses an obsolete login name
I submitted an IP query on a "whois" service:
https://whoisip.ovh/
I did that because that IP address tried to POST an invalid URI on my personal blog.
I received an error message disclosing the name used to connect to their SQL database!
Fortunately the name seems to be invalid.
With other IPs it seems to work perfectly.
There is no form to report this anomaly on this page.
[SqlException (0x80131904): Login failed for user 'REMOVED BY MYSELF'.]
I suspect that it didn't parsed the IP correctly as the first block has only two digits (it was an IP from Russia).
- outsomnia 5y agoShouldn't you tell OVH rather than HN? They do have a security.txt https://www.ovh.com/.well-known/security.txt https://www.ovh.com/.well-known/security.txt
- JPLeRouzic 5y agoThanks for the email, I just wrote them.
- oriettaxx 5y agogettin a login name is not that dangerous: I would guess 99% of linux server have a login name ('root') why do you say "obsolete"?
- JPLeRouzic 5y agoYou are right, I have no hard reason to use "obsolete". I just guessed that as it gave an error while accessing the database, it should be obsolete. But it could have been misspelled as well.
- Nextgrid 5y agoJust trying to load the website throws the same error for me. Also is this actually an OVH website? The other day I saw a ".ovh" domain which was a personal site so it looks like anyone could buy these domains?
- JPLeRouzic 5y ago> is this actually an OVH website? My bad, you are right it might not belong to OVH. I changed the title to remove "OVH".