LeakIX - Host 106.15.185.61

Host 106.15.185.61

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 106.15.185.61
Port: 3306

First seen 2023-09-17 04:16
Last seen 2024-06-14 19:11
Open for 271 days

Severity: critical
Fingerprint: cf350410ecceb5fd035e5738187b1ffd24829be865741ef921ebc34caeeb2126

Databases: 39, row count: 141176, size: 7.9 MB
Found table A____Z____RECOVER____DATA.README with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 99 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1219 records
Found table mysql.help_relation with 2394 records
Found table mysql.help_topic with 706 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2160 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 7 records

Found on 2024-06-14 19:11

7.9 MBytes 141176 rows

Severity: critical
Fingerprint: cf350410ecceb5fdd823ed391f3844f5a0749db096a32e5149d9db94ed1fd043

Databases: 39, row count: 141177, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 99 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1219 records
Found table mysql.help_relation with 2394 records
Found table mysql.help_topic with 706 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2160 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 6 records

Found on 2023-10-03 14:00

7.9 MBytes 141177 rows

Severity: high
Fingerprint: cf350410ecceb5fd9d50390d6e63af38bbd2906982f7d07c505a2ec51ebd1a8c

Databases: 41, row count: 138611, size: 7.9 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 99 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 2394 records
Found table mysql.help_topic with 416 records
Found table mysql.innodb_index_stats with 23 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2162 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 8303 records
Found table mysql.user with 6 records
Found table traffic.bus_line with 0 records
Found table traffic.bus_line_stop_rel with 0 records
Found table traffic.bus_stop with 0 records

Found on 2023-09-18 22:23

7.9 MBytes 138611 rows

Severity: high
Fingerprint: cf350410ecceb5fd0499c7241a8825d345b2b01e5bf9aa4ca5ed23d55126af4c

Databases: 41, row count: 138702, size: 7.9 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 70 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 965 records
Found table mysql.help_relation with 1986 records
Found table mysql.help_topic with 564 records
Found table mysql.innodb_index_stats with 23 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1607 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 9416 records
Found table mysql.user with 6 records
Found table traffic.bus_line with 0 records
Found table traffic.bus_line_stop_rel with 0 records
Found table traffic.bus_stop with 0 records

Found on 2023-09-17 04:16

7.9 MBytes 138702 rows

Create report

Open service 106.15.185.61:3306

2024-06-14 19:11
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report

Open service 106.15.185.61:27017

2024-06-12 20:10

HTTP/1.0 200 OK
Connection: close
Content-Type: text/plain
Content-Length: 85


It looks like you are trying to access MongoDB over HTTP on the native driver port.

Found 2024-06-12 by HttpPlugin

Create report

Open service 106.15.185.61:3306

2024-06-11 21:23
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 106.15.185.61:3306

2024-06-09 20:25
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 106.15.185.61:3306

2024-06-05 21:26
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 106.15.185.61:3306

2024-06-03 22:31
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report

Data leak

Size

7.9 MB

Collections

Rows

141177

Domain summary

No record