Host 114.7.193.54
Indonesia
-
MySQL is publicly available
MySQL is currently open without authentication.
Additionally a ransom note has been found in the dataset which indicates it has been compromised
This results in all the database data made available publicly.
First seen 2022-10-18 17:45
Last seen 2022-11-11 03:05
Open for 23 days-
Severity: high
Fingerprint: cf350410ecceb5fd9dcc8fcdf342d578d9daba3009c5cdb483ed81aa5c91acd4Databases: 32, row count: 976, size: 1.9 MB Found table mysql.columns_priv with 0 records Found table mysql.column_stats with 0 records Found table mysql.db with 4 records Found table mysql.event with 0 records Found table mysql.func with 0 records Found table mysql.general_log with 2 records Found table mysql.global_priv with 5 records Found table mysql.gtid_slave_pos with 0 records Found table mysql.help_category with 48 records Found table mysql.help_keyword with 37 records Found table mysql.help_relation with 114 records Found table mysql.help_topic with 752 records Found table mysql.index_stats with 0 records Found table mysql.innodb_index_stats with 7 records Found table mysql.innodb_table_stats with 2 records Found table mysql.plugin with 0 records Found table mysql.proc with 0 records Found table mysql.procs_priv with 0 records Found table mysql.proxies_priv with 1 records Found table mysql.roles_mapping with 0 records Found table mysql.servers with 0 records Found table mysql.slow_log with 2 records Found table mysql.tables_priv with 0 records Found table mysql.table_stats with 0 records Found table mysql.time_zone with 0 records Found table mysql.time_zone_leap_second with 0 records Found table mysql.time_zone_name with 0 records Found table mysql.time_zone_transition with 0 records Found table mysql.time_zone_transition_type with 0 records Found table mysql.transaction_registry with 0 records Found table mysql.user with 0 records Found table z_readme_to_recover.recover_your_data with 2 records
Found on 2022-10-18 17:451.9 MBytes 976 rows
-
-
Open SMB file sharing detected
Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.
This may also include IPC services and lead to remote code execution.
First seen 2022-09-07 11:37
Last seen 2022-10-15 18:37
Open for 38 days-
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13eb25d195ea821ba6c5f572d52Found open SMB shares with Guest login ADMIN$ C$ D$ IPC$ New folder
Found on 2022-09-07 11:37
-