LeakIX - Host 101.43.192.158

Host 101.43.192.158

China

Shenzhen Tencent Computer Systems Company Limited

CentOS Linux 7 (Core) 3.10.0-1160.49.1.el7.x86_64

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 101.43.192.158
Port: 3306

First seen 2023-10-07 16:25
Last seen 2023-10-10 23:02
Open for 3 days

Severity: high
Fingerprint: cf350410ecceb5fd3efe5259346343944c12a3fb70df88b17d48745750384038

Databases: 24, row count: 2021, size: 565.2 kB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 3 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 453 records
Found table mysql.help_relation with 1009 records
Found table mysql.help_topic with 510 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 2 records
Found table test.table_name with 0 records

Found on 2023-10-10 23:02

565.2 kBytes 2021 rows

Severity: high
Fingerprint: cf350410ecceb5fdcb1b67d13001745cf299c15e6df8eb341bbead48808beb84

Databases: 23, row count: 2019, size: 564.7 kB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 453 records
Found table mysql.help_relation with 1009 records
Found table mysql.help_topic with 510 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 1 records

Found on 2023-10-07 16:25

564.7 kBytes 2019 rows

Create report

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 101.43.192.158
Port: 9092

First seen 2023-05-17 16:34
Last seen 2023-05-27 01:26
Open for 9 days
- Fingerprint: 43224224eeda9da960defeaa64a21d793e7a25acbdc2d0b92fe0a5ee3a9875a8
```
NoAuth
Found topic my-topic
Found topic test1001
Found topic test1005
Found topic test1003
Found topic test1002
Found topic test1004
```
  Found on 2023-05-27 01:26
- Fingerprint: 43224224eeda9da960defeaa523e8b887e8c599c0319a7ffe27d21d25f2ef828
```
NoAuth
Found topic test1002
Found topic test1004
Found topic my-topic
Found topic test1001
Found topic test1005
Found topic test1003
```
  Found on 2023-05-22 15:18
- Fingerprint: 43224224eeda9da960defeaa523e8b895b3bf6ffa54320d7f25963b8679f54b8
```
NoAuth
Found topic test1003
Found topic test1002
Found topic test1004
Found topic my-topic
Found topic test1001
Found topic test1005
```
  Found on 2023-05-17 16:34
Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

This results in all the database data made available publicly.

IP: 101.43.192.158
Port: 5601
URL: http://101.43.192.158:5601

First seen 2022-03-26 16:46
Last seen 2022-08-05 17:40
Open for 132 days

Severity: high
Fingerprint: 831cb76b8e05df46d509562af94a8d4a877442f5aeed8380aeed8380aeed8380

Indices: 2, document count: 4, size: 17.9 kB
Through Kibana endpoint
Found index read_me with 1 documents (4.5 kB)
Found index .kibana with 3 documents (13.4 kB)

Found on 2022-08-05 17:40

17.9 kBytes 4 rows

Severity: high
Fingerprint: 831cb76b8e05df46442fa796180528260bd96e7118af17fc18af17fc18af17fc

Indices: 2, document count: 2, size: 8.7 kB
Through Kibana endpoint
Found index read_me with 1 documents (4.5 kB)
Found index .kibana with 1 documents (4.2 kB)

Found on 2022-07-13 07:16

8.7 kBytes 2 rows

Severity: medium
Fingerprint: 831cb76b8e05df463f7d2f403c78ea308ca46c5336cf43c7d8c4a6011aedaa9f

Indices: 8, document count: 75, size: 228.7 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index test with 2 documents (9.2 kB)
Found index .kibana_task_manager_1 with 2 documents (21.5 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 11 documents (38.8 kB)
Found index .kibana_1 with 32 documents (105.3 kB)

Found on 2022-06-09 09:07

228.7 kBytes 75 rows

Severity: medium
Fingerprint: 831cb76b8e05df4606009504a3a73a744c3886efa11bd2f32cc2a3c5ab254498

Indices: 8, document count: 74, size: 199.3 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index test with 2 documents (9.2 kB)
Found index .kibana_task_manager_1 with 2 documents (21.5 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 11 documents (38.8 kB)
Found index .kibana_1 with 31 documents (76.0 kB)

Found on 2022-05-28 03:11

199.3 kBytes 74 rows

Severity: medium
Fingerprint: 831cb76b8e05df4606009504a3a73a744c3886efa11bd2f38259700276460003

Indices: 8, document count: 74, size: 199.3 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index test with 2 documents (9.2 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index .kibana_task_manager_1 with 2 documents (21.4 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 11 documents (38.8 kB)
Found index .kibana_1 with 31 documents (76.0 kB)

Found on 2022-04-26 18:02

199.3 kBytes 74 rows

Severity: medium
Fingerprint: 831cb76b8e05df4606009504a3a73a744c3886efa11bd2f32cc2a3c5c94dd7c1

Indices: 8, document count: 74, size: 199.3 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index test with 2 documents (9.2 kB)
Found index .kibana_task_manager_1 with 2 documents (21.4 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 11 documents (38.8 kB)
Found index .kibana_1 with 31 documents (76.0 kB)

Found on 2022-04-26 18:02

199.3 kBytes 74 rows

Severity: medium
Fingerprint: 831cb76b8e05df46a56d52ba7752ce9affcc9b5982604e91aa19cadcac9aa8ca

Indices: 8, document count: 69, size: 166.9 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index test with 2 documents (9.2 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index .kibana_task_manager_1 with 2 documents (21.4 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 10 documents (33.5 kB)
Found index .kibana_1 with 27 documents (48.8 kB)

Found on 2022-03-30 07:17

166.9 kBytes 69 rows

Severity: medium
Fingerprint: 831cb76b8e05df46a56d52ba7752ce9affcc9b5982604e912fe889dbcb94f975

Indices: 8, document count: 69, size: 166.9 kB
Through Kibana endpoint
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index test with 2 documents (9.2 kB)
Found index .kibana_task_manager_1 with 2 documents (21.5 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 10 documents (33.5 kB)
Found index .kibana_1 with 27 documents (48.8 kB)

Found on 2022-03-26 16:46

166.9 kBytes 69 rows

Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

Additionaly a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 101.43.192.158
Port: 9200
URL: http://101.43.192.158:9200

First seen 2022-04-24 21:12
Last seen 2022-07-22 06:09
Open for 88 days
- Severity: high
  Fingerprint: 831cb76b8e05df46442fa7967ba72bc1906ffcac906ffcac906ffcac906ffcac
```
Indices: 2, document count: 2, size: 8.7 kB
Found index read_me with 1 documents (4.5 kB)
Found index .kibana with 1 documents (4.2 kB)
```
  Found on 2022-07-22 06:09
  
  8.7 kBytes 2 rows
- Severity: medium
  Fingerprint: 831cb76b8e05df46060095041b4d857f59fa3243681ce432a9dcf15a5aa0ed13
```
Indices: 8, document count: 74, size: 199.3 kB
Found index goods_index_v2 with 18 documents (14.9 kB)
Found index blog_v2 with 9 documents (35.0 kB)
Found index test with 2 documents (9.2 kB)
Found index store_index_v1 with 0 documents (283 B)
Found index .kibana_task_manager_1 with 2 documents (21.4 kB)
Found index fuzzy_index with 1 documents (3.7 kB)
Found index blog with 11 documents (38.8 kB)
Found index .kibana_1 with 31 documents (76.0 kB)
```
  Found on 2022-04-24 21:12
  
  199.3 kBytes 74 rows
Create report

Open service 101.43.192.158:8089

2024-06-14 22:06

HTTP/1.1 200 OK
X-Powered-By: Express
Accept-Ranges: bytes
Content-Type: text/html; charset=UTF-8
Content-Length: 5609
ETag: W/"15e9-JmoneAsznHyr+mUP2kylg/AU/zg"
Date: Fri, 14 Jun 2024 22:06:20 GMT
Connection: close

Page title: 若依管理系统

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
    <meta name="renderer" content="webkit">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
    <link rel="icon" href="/favicon.ico">
    <title>若依管理系统</title>
    <!--[if lt IE 11]><script>window.location.href='/html/ie.html';</script><![endif]-->
	  <style>
    html,
    body,
    #app {
      height: 100%;
      margin: 0px;
      padding: 0px;
    }
    .chromeframe {
      margin: 0.2em 0;
      background: #ccc;
      color: #000;
      padding: 0.2em 0;
    }

    #loader-wrapper {
      position: fixed;
      top: 0;
      left: 0;
      width: 100%;
      height: 100%;
      z-index: 999999;
    }

    #loader {
      display: block;
      position: relative;
      left: 50%;
      top: 50%;
      width: 150px;
      height: 150px;
      margin: -75px 0 0 -75px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 2s linear infinite;
      -ms-animation: spin 2s linear infinite;
      -moz-animation: spin 2s linear infinite;
      -o-animation: spin 2s linear infinite;
      animation: spin 2s linear infinite;
      z-index: 1001;
    }

    #loader:before {
      content: "";
      position: absolute;
      top: 5px;
      left: 5px;
      right: 5px;
      bottom: 5px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 3s linear infinite;
      -moz-animation: spin 3s linear infinite;
      -o-animation: spin 3s linear infinite;
      -ms-animation: spin 3s linear infinite;
      animation: spin 3s linear infinite;
    }

    #loader:after {
      content: "";
      position: absolute;
      top: 15px;
      left: 15px;
      right: 15px;
      bottom: 15px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -moz-animation: spin 1.5s linear infinite;
      -o-animation: spin 1.5s linear infinite;
      -ms-animation: spin 1.5s linear infinite;
      -webkit-animation: spin 1.5s linear infinite;
      animation: spin 1.5s linear infinite;
    }


    @-webkit-keyframes spin {
      0% {
        -webkit-transform: rotate(0deg);
        -ms-transform: rotate(0deg);
        transform: rotate(0deg);
      }
      100% {
        -webkit-transform: rotate(360deg);
        -ms-transform: rotate(360deg);
        transform: rotate(360deg);
      }
    }

    @keyframes spin {
      0% {
        -webkit-transform: rotate(0deg);
        -ms-transform: rotate(0deg);
        transform: rotate(0deg);
      }
      100% {
        -webkit-transform: rotate(360deg);
        -ms-transform: rotate(360deg);
        transform: rotate(360deg);
      }
    }


    #loader-wrapper .loader-section {
      position: fixed;
      top: 0;
      width: 51%;
      height: 100%;
      background: #7171C6;
      z-index: 1000;
      -webkit-transform: translateX(0);
      -ms-transform: translateX(0);
      transform: translateX(0);
    }

    #loader-wrapper .loader-section.section-left {
      left: 0;
    }

    #loader-wrapper .loader-section.section-right {
      right: 0;
    }


    .loaded #loader-wrapper .loader-section.section-left {
      -webkit-transform: translateX(-100%);
      -ms-transform: translateX(-100%);
      transform: translateX(-100%);
      -webkit-transition: all 0.7s 0.3s cubic-bezier(0.645, 0.045, 0.355, 1.000);
      transition: all 0.7s 0.3s cubic-bezier(0.645, 0.045, 0.355, 1.000);
    }

    .loaded #loader-wrapper .loader-section.section-right {
      -webkit-transform: translateX(100%);
      -ms-transform: translateX(100%);
      transform: translateX(100%);
      -webkit-transition: all 0.7s 0.3s cubic-bezier(0.645, 0.045, 0.355, 1.000);
      transition: all 0.7s 0.3s cubic-bez

Found 2024-06-14 by HttpPlugin

Create report

Open service 101.43.192.158:3306

2024-06-14 14:21
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report

Data leak

Size

565.2 kB

Collections

Rows

2021

Domain summary

No record

Host 101.43.192.158

China

MySQL is publicly available

Kafka instance is public

ElasticSearch is publicly available

ElasticSearch is publicly available

Create report

Create report

Data leak

Domain summary