LeakIX - Host 106.14.97.77

Host 106.14.97.77

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

Software information

nginx nginx 1.20.1

tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 106.14.97.77
Port: 3306

First seen 2024-04-22 20:48
Last seen 2024-06-13 06:55
Open for 51 days

Severity: critical
Fingerprint: cf350410ecceb5fd1b3a325ba04bd0d6962b29b46bc25df23b39a540179b185a

Databases: 32, row count: 141137, size: 7.8 MB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 41 records
Found table mysql.help_keyword with 658 records
Found table mysql.help_relation with 1259 records
Found table mysql.help_topic with 716 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1979 records
Found table mysql.time_zone_transition with 124807 records
Found table mysql.time_zone_transition_type with 9518 records
Found table mysql.user with 5 records
Found table readme_to_recover_a.recover_your_data with 2 records

Found on 2024-06-13 06:55

7.8 MBytes 141137 rows

Create report

Open service 106.14.97.77:22

2024-06-15 10:22
Found 11 hours ago by SSHOpenPlugin
Create report
Open service 106.14.97.77:3306

2024-06-13 06:55
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 106.14.97.77:3306

2024-06-11 21:10
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 106.14.97.77:3306

2024-06-09 20:17
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 106.14.97.77:3306

2024-06-07 21:02
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 106.14.97.77:3306

2024-06-05 20:23
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 106.14.97.77:3306

2024-06-01 23:30
```
MySQL detected
```
Found 2024-06-01 by tcpid
Create report

Open service 106.14.97.77:80

2024-06-01 10:11

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 01 Jun 2024 10:11:38 GMT
Content-Type: text/html
Content-Length: 14214
Last-Modified: Wed, 20 Mar 2024 09:12:09 GMT
Connection: close
ETag: "65faa869-3786"
Accept-Ranges: bytes

Page title: 纯钧报表工具重构版本

<!DOCTYPE html><html><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge,chrome=1"><meta name=renderer content=webkit><meta name=viewport content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"><link rel=icon href=/chunjun/favicon.ico><base id=base href=/chunjun/ ><script src=/chunjun/desreport/jquery/jquery-3.4.1.min.js></script><script src=/chunjun/desreport/config/map_type_list.js></script><script src=/chunjun/desreport/config/chart_type_list.js></script><script src=/chunjun/desreport/corelib/locale/zh-cn.js></script><script src=/chunjun/desreport/corelib/xspreadsheet.js></script><title>纯钧报表工具重构版本</title><style>html,
    body,
   .qiankun-123456789,.qiankun-child {
      height: 100%;
      margin: 0px;
      padding: 0px;
    }
    .chromeframe {
      margin: 0.2em 0;
      background: #ccc;
      color: #000;
      padding: 0.2em 0;
    }

    #loader-wrapper {
      position: fixed;
      top: 0;
      left: 0;
      width: 100%;
      height: 100%;
      z-index: 999999;
    }

    #loader {
      display: block;
      position: relative;
      left: 50%;
      top: 50%;
      width: 150px;
      height: 150px;
      margin: -75px 0 0 -75px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 2s linear infinite;
      -ms-animation: spin 2s linear infinite;
      -moz-animation: spin 2s linear infinite;
      -o-animation: spin 2s linear infinite;
      animation: spin 2s linear infinite;
      z-index: 1001;
    }

    #loader:before {
      content: "";
      position: absolute;
      top: 5px;
      left: 5px;
      right: 5px;
      bottom: 5px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -webkit-animation: spin 3s linear infinite;
      -moz-animation: spin 3s linear infinite;
      -o-animation: spin 3s linear infinite;
      -ms-animation: spin 3s linear infinite;
      animation: spin 3s linear infinite;
    }

    #loader:after {
      content: "";
      position: absolute;
      top: 15px;
      left: 15px;
      right: 15px;
      bottom: 15px;
      border-radius: 50%;
      border: 3px solid transparent;
      border-top-color: #FFF;
      -moz-animation: spin 1.5s linear infinite;
      -o-animation: spin 1.5s linear infinite;
      -ms-animation: spin 1.5s linear infinite;
      -webkit-animation: spin 1.5s linear infinite;
      animation: spin 1.5s linear infinite;
    }


    @-webkit-keyframes spin {
      0% {
        -webkit-transform: rotate(0deg);
        -ms-transform: rotate(0deg);
        transform: rotate(0deg);
      }
      100% {
        -webkit-transform: rotate(360deg);
        -ms-transform: rotate(360deg);
        transform: rotate(360deg);
      }
    }

    @keyframes spin {
      0% {
        -webkit-transform: rotate(0deg);
        -ms-transform: rotate(0deg);
        transform: rotate(0deg);
      }
      100% {
        -webkit-transform: rotate(360deg);
        -ms-transform: rotate(360deg);
        transform: rotate(360deg);
      }
    }


    #loader-wrapper .loader-section {
      position: fixed;
      top: 0;
      width: 51%;
      height: 100%;
      background: #7171C6;
      z-index: 1000;
      -webkit-transform: translateX(0);
      -ms-transform: translateX(0);
      transform: translateX(0);
    }

    #loader-wrapper .loader-section.section-left {
      left: 0;
    }

    #loader-wrapper .loader-section.section-right {
      right: 0;
    }


    .loaded #loader-wrapper .loader-section.section-left {
      -webkit-transform: translateX(-100%);
      -ms-transform: translateX(-100%);
      transform: translateX(-100%);
      -webkit-transition: all 0.7s 0.3s cubic-bezier(0.645, 0.045, 0.355, 1.000);
      transition: all 0.7s 0.3s cubic-bezier(0.645, 0.045, 0.355, 1.000);
    }

    .loaded #loader-wrapper .loader-section.section-right {

Found 2024-06-01 by HttpPlugin

Create report

Open service 106.14.97.77:3306

2024-05-31 21:46
```
MySQL detected
```
Found 2024-05-31 by tcpid
Create report
Open service 106.14.97.77:3306

2024-05-31 05:04
```
MySQL detected
```
Found 2024-05-31 by tcpid
Create report
Open service 106.14.97.77:3306

2024-05-29 21:24
```
MySQL detected
```
Found 2024-05-29 by tcpid
Create report
Open service 106.14.97.77:3306

2024-05-28 21:09
```
MySQL detected
```
Found 2024-05-28 by tcpid
Create report
Open service 106.14.97.77:3306

2024-05-27 23:02
```
MySQL detected
```
Found 2024-05-27 by tcpid
Create report

Data leak

Size

7.8 MB

Collections

Rows

141137

Domain summary

No record