LeakIX - Host 1.15.86.196

Host 1.15.86.196

China

Shenzhen Tencent Computer Systems Company Limited

Ubuntu 20.04.4 LTS 3.10.0-1160.71.1.el7.x86_64

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

This results in all the database data made available publicly.

IP: 1.15.86.196
Port: 5601
URL: http://1.15.86.196:5601

First seen 2023-09-20 04:54
Last seen 2023-10-26 14:14
Open for 36 days
- Severity: high
  Fingerprint: 831cb76b8e05df46c048d7568e28fee62b28ee21ddb3a816ddb3a816ddb3a816
```
Indices: 2, document count: 43, size: 45.7 MB
Through Kibana endpoint
Found index .geoip_databases with 42 documents (45.7 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-26 14:14
  
  45.7 MBytes 43 rows
- Severity: high
  Fingerprint: 831cb76b8e05df46f42238206eba4310dc5fd1176e435e6c6e435e6c6e435e6c
```
Indices: 2, document count: 42, size: 44.5 MB
Through Kibana endpoint
Found index .geoip_databases with 41 documents (44.5 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-10 22:54
  
  44.5 MBytes 42 rows
- Severity: high
  Fingerprint: 831cb76b8e05df4699bf730d4ebd915f590d3d33c8d90798c8d90798c8d90798
```
Indices: 2, document count: 44, size: 45.1 MB
Through Kibana endpoint
Found index .geoip_databases with 43 documents (45.1 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-08 06:41
  
  45.1 MBytes 44 rows
- Severity: high
  Fingerprint: 831cb76b8e05df467401713de42b478f030d83119ebfb1869ebfb1869ebfb186
```
Indices: 2, document count: 43, size: 45.6 MB
Through Kibana endpoint
Found index .geoip_databases with 42 documents (45.6 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-03 14:29
  
  45.6 MBytes 43 rows
- Severity: high
  Fingerprint: 831cb76b8e05df469bf9560769fe6d990960b6b2e30c97fee30c97fee30c97fe
```
Indices: 2, document count: 70, size: 73.1 MB
Through Kibana endpoint
Found index .geoip_databases with 69 documents (73.1 MB)
Found index read-me with 1 documents (4.8 kB)
```
  Found on 2023-09-22 21:20
  
  73.1 MBytes 70 rows
- Severity: high
  Fingerprint: 831cb76b8e05df4688425ece815450ce955741075c19def55c19def55c19def5
```
Indices: 2, document count: 62, size: 64.7 MB
Through Kibana endpoint
Found index .geoip_databases with 61 documents (64.7 MB)
Found index read-me with 1 documents (4.8 kB)
```
  Found on 2023-09-20 04:54
  
  64.7 MBytes 62 rows
Create report
ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

Additionaly a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 1.15.86.196
Port: 9200
URL: http://1.15.86.196:9200

First seen 2023-10-07 07:00
Last seen 2023-10-26 13:56
Open for 19 days
- Severity: high
  Fingerprint: 831cb76b8e05df46c048d75675bb3af160047b6660047b6660047b6660047b66
```
Indices: 2, document count: 43, size: 45.7 MB
Found index .geoip_databases with 42 documents (45.7 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-26 13:56
  
  45.7 MBytes 43 rows
- Severity: high
  Fingerprint: 831cb76b8e05df46f4223820cdaabf87e1501b1ce1501b1ce1501b1ce1501b1c
```
Indices: 2, document count: 42, size: 44.5 MB
Found index .geoip_databases with 41 documents (44.5 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-10 21:53
  
  44.5 MBytes 42 rows
- Severity: high
  Fingerprint: 831cb76b8e05df4699bf730d55cc329d296bb232296bb232296bb232296bb232
```
Indices: 2, document count: 44, size: 45.1 MB
Found index .geoip_databases with 43 documents (45.1 MB)
Found index read-me with 1 documents (4.5 kB)
```
  Found on 2023-10-07 07:00
  
  45.1 MBytes 44 rows
Create report

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 1.15.86.196
Port: 3307

First seen 2023-10-06 20:37
Last seen 2023-10-15 20:49
Open for 9 days

Severity: high
Fingerprint: cf350410ecceb5fd129742e9d0f28664870965f637ad6bec8bf75bd2fdd8ea74

Databases: 31, row count: 142742, size: 7.8 MB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 970 records
Found table mysql.help_relation with 1980 records
Found table mysql.help_topic with 778 records
Found table mysql.innodb_index_stats with 7 records
Found table mysql.innodb_table_stats with 2 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1229 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 4 records

Found on 2023-10-15 20:49

7.8 MBytes 142742 rows

Create report

Data leak

Size

7.8 MB

Collections

Rows

142742

Domain summary

No record