LeakIX - Host 101.126.8.141

Host 101.126.8.141

China

Beijing Volcano Engine Technology Co., Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 101.126.8.141
Port: 3306

First seen 2024-05-24 04:12
Last seen 2024-09-19 23:26
Open for 118 days

Severity: critical
Fingerprint: cf350410ecceb5fd31b0c38b7e82377b22606f7626a4401465f56652e91c338e

Databases: 32, row count: 136360, size: 7.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 970 records
Found table mysql.help_relation with 1576 records
Found table mysql.help_topic with 1284 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 49 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1549 records
Found table mysql.time_zone_transition with 119956 records
Found table mysql.time_zone_transition_type with 8813 records
Found table mysql.user with 7 records

Found on 2024-09-19 23:26

7.8 MBytes 136360 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b7609132601091326010913260109132601091326010
```
Databases: 1, row count: 2, size: 16.4 kB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
```
Found on 2024-06-11 22:31

16.4 kBytes 2 rows

Create report

Open service 101.126.8.141:3306

2024-09-15 22:04
```
MySQL detected
```
Found 2024-09-15 by tcpid
Create report
Open service 101.126.8.141:3306

2024-09-13 22:47
```
MySQL detected
```
Found 2024-09-13 by tcpid
Create report
Open service 101.126.8.141:3306

2024-09-11 22:42
```
MySQL detected
```
Found 2024-09-11 by tcpid
Create report
Open service 101.126.8.141:22

2024-09-10 08:42
Found 2024-09-10 by SSHOpenPlugin
Create report
Open service 101.126.8.141:3306

2024-09-10 00:24
```
MySQL detected
```
Found 2024-09-10 by tcpid
Create report
Open service 101.126.8.141:3306

2024-09-09 17:00
```
MySQL detected
```
Found 2024-09-09 by tcpid
Create report
Open service 101.126.8.141:3306

2024-09-07 22:36
```
MySQL detected
```
Found 2024-09-07 by tcpid
Create report
Open service 101.126.8.141:3306

2024-08-17 21:05
```
MySQL detected
```
Found 2024-08-17 by tcpid
Create report
Open service 101.126.8.141:3306

2024-08-15 19:54
```
MySQL detected
```
Found 2024-08-15 by tcpid
Create report
Open service 101.126.8.141:3306

2024-08-13 20:50
```
MySQL detected
```
Found 2024-08-13 by tcpid
Create report
Open service 101.126.8.141:3306

2024-08-11 22:31
```
MySQL detected
```
Found 2024-08-11 by tcpid
Create report
Open service 101.126.8.141:3306

2024-08-09 21:33
```
MySQL detected
```
Found 2024-08-09 by tcpid
Create report

Data leak

Size

7.8 MB

Collections

Rows

136360

Domain summary

No record