LeakIX - Host 121.5.157.103

Host 121.5.157.103

China

Shenzhen Tencent Computer Systems Company Limited

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 121.5.157.103
Port: 3306

First seen 2023-10-07 18:29
Last seen 2024-03-21 10:07
Open for 165 days

Severity: critical
Fingerprint: cf350410ecceb5fdc47f4f7af07485e3003b3aa62c2064778014f98f5725f778

Databases: 70, row count: 139205, size: 8.7 MB
Found table A____Z____RECOVER____DATA.README with 0 records
Found table RuoYi_Dev.QRTZ_BLOB_TRIGGERS with 0 records
Found table RuoYi_Dev.QRTZ_CALENDARS with 0 records
Found table RuoYi_Dev.QRTZ_CRON_TRIGGERS with 0 records
Found table RuoYi_Dev.QRTZ_FIRED_TRIGGERS with 0 records
Found table RuoYi_Dev.QRTZ_JOB_DETAILS with 0 records
Found table RuoYi_Dev.QRTZ_LOCKS with 0 records
Found table RuoYi_Dev.QRTZ_PAUSED_TRIGGER_GRPS with 0 records
Found table RuoYi_Dev.QRTZ_SCHEDULER_STATE with 0 records
Found table RuoYi_Dev.QRTZ_SIMPLE_TRIGGERS with 0 records
Found table RuoYi_Dev.QRTZ_SIMPROP_TRIGGERS with 0 records
Found table RuoYi_Dev.QRTZ_TRIGGERS with 0 records
Found table RuoYi_Dev.gen_table with 1 records
Found table RuoYi_Dev.gen_table_column with 10 records
Found table RuoYi_Dev.scux_suppermarket_item with 2 records
Found table RuoYi_Dev.sys_config with 6 records
Found table RuoYi_Dev.sys_dept with 12 records
Found table RuoYi_Dev.sys_dict_data with 29 records
Found table RuoYi_Dev.sys_dict_type with 10 records
Found table RuoYi_Dev.sys_job with 3 records
Found table RuoYi_Dev.sys_job_log with 0 records
Found table RuoYi_Dev.sys_logininfor with 40 records
Found table RuoYi_Dev.sys_menu with 92 records
Found table RuoYi_Dev.sys_notice with 2 records
Found table RuoYi_Dev.sys_oper_log with 62 records
Found table RuoYi_Dev.sys_post with 5 records
Found table RuoYi_Dev.sys_role with 3 records
Found table RuoYi_Dev.sys_role_dept with 3 records
Found table RuoYi_Dev.sys_role_menu with 112 records
Found table RuoYi_Dev.sys_user with 3 records
Found table RuoYi_Dev.sys_user_post with 3 records
Found table RuoYi_Dev.sys_user_role with 3 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 156 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 683 records
Found table mysql.help_relation with 1253 records
Found table mysql.help_topic with 792 records
Found table mysql.innodb_index_stats with 804 records
Found table mysql.innodb_table_stats with 98 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1436 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1694 records
Found table mysql.time_zone_transition with 121279 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 7 records

Found on 2024-03-21 10:07

8.7 MBytes 139205 rows

Severity: high
Fingerprint: cf350410ecceb5fd64db118e15656aaf15656aaf15656aaf15656aaf15656aaf
```
Databases: 1, row count: 0, size: 16.4 kB
Found table A____Z____RECOVER____DATA.README with 0 records
```
Found on 2024-03-03 05:38

16.4 kBytes

Severity: critical
Fingerprint: cf350410ecceb5fde8f565636fa6323889897997cb9e179a29c2f3582ff14604

Databases: 39, row count: 138804, size: 8.1 MB
Found table A____Z____RECOVER____DATA.README with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 156 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 683 records
Found table mysql.help_relation with 1253 records
Found table mysql.help_topic with 792 records
Found table mysql.innodb_index_stats with 804 records
Found table mysql.innodb_table_stats with 98 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1436 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1694 records
Found table mysql.time_zone_transition with 121279 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 7 records

Found on 2024-01-25 03:27

8.1 MBytes 138804 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b760d92c9051d92c9051d92c9051d92c9051d92c9051
```
Databases: 1, row count: 2, size: 16.4 kB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
```
Found on 2023-10-07 18:29

16.4 kBytes 2 rows

Create report

Open service 121.5.157.103:3306

2024-04-28 18:19
```
MySQL detected
```
Found 2 hours ago by tcpid
Create report

Open service 121.5.157.103:8081

2024-04-25 11:11

HTTP/1.1 302 
Location: http://121.5.157.103/home
Content-Language: en-US
Content-Length: 0
Date: Thu, 25 Apr 2024 11:11:47 GMT
Connection: close

Found 2024-04-25 by HttpPlugin

Create report

Open service 121.5.157.103:8081

2024-04-23 15:33

HTTP/1.1 302 
Location: http://121.5.157.103/home
Content-Language: en-US
Content-Length: 0
Date: Tue, 23 Apr 2024 15:33:56 GMT
Connection: close

Found 2024-04-23 by HttpPlugin

Create report

Open service 121.5.157.103:3306

2024-04-18 18:46
```
MySQL detected
```
Found 2024-04-18 by tcpid
Create report
Open service 121.5.157.103:3306

2024-04-10 14:26
```
MySQL detected
```
Found 2024-04-10 by tcpid
Create report
Open service 121.5.157.103:3306

2024-03-21 10:07
```
MySQL detected
```
Found 2024-03-21 by tcpid
Create report

Data leak

Size

8.7 MB

Collections

Rows

139205

Domain summary

No record