LeakIX - Host 107.175.28.236

Host 107.175.28.236

United States

AS-COLOCROSSING

Linux x86_64

Software information

Bark

tcp/8080

Source distribution 5.6.50-log

tcp/3306

nginx nginx

tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 107.175.28.236
Port: 3306

First seen 2022-09-02 01:28
Last seen 2022-11-15 03:09
Open for 74 days

Severity: critical
Fingerprint: cf350410ecceb5fd4692f86cdc24ec85a3945b404867a9c43e5be99a34c94c5b

Databases: 29, row count: 3157, size: 912.5 kB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 4 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 0 records
Found table mysql.help_category with 45 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 12 records

Found on 2022-10-17 00:22

912.5 kBytes 3157 rows

Severity: critical
Fingerprint: cf350410ecceb5fdc1b1dd330e4c76feeebdf9dd2e4a181bc285c5914059f45b

Databases: 29, row count: 3160, size: 908.7 kB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 4 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 45 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 11 records

Found on 2022-09-02 01:28

908.7 kBytes 3160 rows

Create report

Open service 107.175.28.236:3306

2023-01-04 23:09
Found 2023-01-04 by tcpid
Create report

Open service 107.175.28.236:80

2023-01-13 15:22

Server: nginx
Date: Fri, 13 Jan 2023 15:22:17 GMT
Content-Type: text/html
Content-Length: 138
Last-Modified: Sat, 06 Aug 2022 15:43:53 GMT
Connection: close
ETag: "62ee8c39-8a"
Accept-Ranges: bytes

Page title: 404 Not Found

<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2023-01-13 by HttpPlugin

Create report

Open service 107.175.28.236:3306

2023-01-09 02:22
Found 2023-01-09 by tcpid
Create report
Open service 107.175.28.236:3306

2022-11-15 03:09
```
No or default MySQL authentication found.
```
Found 2022-11-15 by l9explore
Create report
Open service 107.175.28.236:3306

2023-01-21 14:12
Found 2023-01-21 by tcpid
Create report

Open service 107.175.28.236:8080

2022-12-15 01:14

Server: Bark
Date: Thu, 15 Dec 2022 01:14:34 GMT
Content-Type: application/json
Content-Length: 60
Connection: close


{"code":404,"message":"Cannot GET /","timestamp":1671066874}

Found 2022-12-15 by HttpPlugin

Create report

Open service 107.175.28.236:8080

2022-12-10 07:29

Server: Bark
Date: Sat, 10 Dec 2022 07:29:22 GMT
Content-Type: application/json
Content-Length: 60
Connection: close


{"code":404,"message":"Cannot GET /","timestamp":1670657363}

Found 2022-12-10 by HttpPlugin

Create report

Open service 107.175.28.236:3306

2022-12-07 01:04
Found 2022-12-07 by tcpid
Create report

Data leak

Size

908.7 kB

Collections

Rows

3160

Domain summary

No record