LeakIX - Host 123.56.103.219

Host 123.56.103.219

China

Hangzhou Alibaba Advertising Co.,Ltd.

linux-glibc2.12 x86_64

Software information

Jetty(9.4.43.v20210629)

tcp/8080

SRS 5.0.210(Bee)

tcp/8081

nginx nginx 1.22.1

tcp/80 tcp/8000

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 123.56.103.219
Port: 3306

First seen 2023-08-04 21:46
Last seen 2024-06-14 21:21
Open for 314 days

Severity: critical
Fingerprint: cf350410ecceb5fd5e9545fd167f80b14936e03c956e87fe124509a4b1ecf100

Databases: 32, row count: 1953, size: 2.4 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 571 records
Found table mysql.help_relation with 706 records
Found table mysql.help_topic with 551 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 5 records

Found on 2024-06-14 21:21

2.4 MBytes 1953 rows

Severity: critical
Fingerprint: cf350410ecceb5fd25b6768c2cb43e64ae4bca93e4c8fb5782f8698dcd5e36b8

Databases: 32, row count: 1952, size: 2.4 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 571 records
Found table mysql.help_relation with 706 records
Found table mysql.help_topic with 551 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 4 records

Found on 2023-10-06 18:16

2.4 MBytes 1952 rows

Severity: critical
Fingerprint: cf350410ecceb5fda909a09fc3c291f7b59a9dd257c33c20144467de7e3fbe90

Databases: 32, row count: 1951, size: 2.4 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 571 records
Found table mysql.help_relation with 706 records
Found table mysql.help_topic with 551 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records

Found on 2023-09-18 07:02

2.4 MBytes 1951 rows

Severity: critical
Fingerprint: cf350410ecceb5fda909a09f976c9d16abdd56c54b9d352d239cf8330e4e7429

Databases: 32, row count: 1951, size: 2.4 MB
No or default MySQL authentication found.Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 571 records
Found table mysql.help_relation with 706 records
Found table mysql.help_topic with 551 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records

Found on 2023-08-04 21:46

2.4 MBytes 1951 rows

Create report

Open service 123.56.103.219:3306

2024-06-14 21:21
```
MySQL detected
```
Found 20 hours ago by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-13 10:17
```
MySQL detected
```
Found 2 days ago by tcpid
Create report
Open service 123.56.103.219:22

2024-06-13 01:53
Found 3 days ago by SSHOpenPlugin
Create report
Open service 123.56.103.219:3306

2024-06-11 21:38
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-09 20:14
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-07 21:12
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-05 21:40
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-03 20:41
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report
Open service 123.56.103.219:3306

2024-06-02 05:06
```
MySQL detected
```
Found 2024-06-02 by tcpid
Create report

Open service 123.56.103.219:80

2024-06-01 20:25

HTTP/1.1 404 Not Found
Server: nginx/1.22.1
Date: Sat, 01 Jun 2024 20:25:24 GMT
Content-Type: text/html;charset=iso-8859-1
Content-Length: 504
Connection: close
Cache-Control: must-revalidate,no-cache,no-store

Page title: Error 404 Not Found

<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<title>Error 404 Not Found</title>
</head>
<body><h2>HTTP ERROR 404 Not Found</h2>
<table>
<tr><th>URI:</th><td>/</td></tr>
<tr><th>STATUS:</th><td>404</td></tr>
<tr><th>MESSAGE:</th><td>Not Found</td></tr>
<tr><th>SERVLET:</th><td>org.eclipse.jetty.servlet.ServletHandler$Default404Servlet-78b1cc93</td></tr>
</table>
<hr><a href="https://eclipse.org/jetty">Powered by Jetty:// 9.4.43.v20210629</a><hr/>

</body>
</html>

Found 2024-06-01 by HttpPlugin

Create report

Open service 123.56.103.219:22

2024-06-01 16:12
Found 2024-06-01 by SSHOpenPlugin
Create report

Open service 123.56.103.219:8081

2024-06-01 05:37

HTTP/1.1 200 OK
Connection: Close
Content-Length: 2982
Content-Type: text/html
Server: SRS/5.0.210(Bee)

Page title: SRS


<html>
<head>
    <title>SRS</title>
    <meta charset="utf-8">
    <style>
        .span6 {
            width: 480px;
        }
        .code {
            background-color: rgb(246 248 250);
            padding: 8px;
            overflow: auto;
            font-size: 85%;
            line-height: 1.45;
            border-radius: 6px;
            word-break: normal;
            word-wrap: normal;
            box-sizing: border-box;
            display: block;
            white-space: pre;
        }
    </style>
</head>
<body>
    <div>
        <h3><a href="https://github.com/ossrs/srs">SRS</a> works!</h3>
        <p>
            Click <a id="enConsole" href="#">here</a> to enter SRS console.<br/>
            点击进入<a id="cnConsole" href="#">SRS控制台</a>
        </p>
        <p>
            Publish stream by <a href="https://ffmpeg.org/download.html">FFmpeg</a> or <a href="https://obsproject.com/download">OBS</a>:<br/>
            请使用工具<a href="https://ffmpeg.org/download.html">FFmpeg</a>或者<a href="https://obsproject.com/download">OBS</a>推流到下面地址:
            <pre id="url" class="code span6"></pre>
        </p>
        <p>
            Click <a id="enPlayer" href="#">here</a> to start SRS player.<br/>
            点击进入<a id="cnPlayer" href="#">SRS播放器</a>
        </p>
        <p><a href="https://github.com/ossrs/srs">SRS Team &copy; 2022</a></p>
    </div>
    <script type="text/javascript">
        // Build RTMP url.
        if (true) {
            const rtmpUrl = `rtmp://${window.location.hostname}/live/livestream`;
            document.getElementById('url').innerText = rtmpUrl;
        }

        // Build console url.
        if (true) {
            // The prefix for default website.
            const prefix = `${window.location.protocol}//${window.location.host}`;
            // If not 8080, user should proxy to the default port.
            const query = parseInt(window.location.port) === 8080 ? `?port=1985` : '';
            const enUrl = `${prefix}/console/en_index.html#/summaries${query}`;
            const cnUrl = `${prefix}/console/ng_index.html#/summaries${query}`;
            document.getElementById("enConsole").setAttribute('href', enUrl);
            document.getElementById("cnConsole").setAttribute('href', cnUrl);
        }

        // The player url.
        if (true) {
            const prefix = `players/?schema=${window.location.protocol.replace(':', '')}`;
            const httpPort = window.location.port || (window.location.protocol === 'http:' ? 80 : 443);
            // If not 8080, user should proxy both stream and API to the default port.
            const query = parseInt(window.location.port) === 8080 ? '' : `&port=${httpPort}&api=${httpPort}`;
            document.getElementById("enPlayer").setAttribute('href', `${prefix}${query}`);
            document.getElementById("cnPlayer").setAttribute('href', `${prefix}${query}`);
        }
    </script>
</body>

Found 2024-06-01 by HttpPlugin

Create report

Open service 123.56.103.219:3306

2024-05-31 20:03
```
MySQL detected
```
Found 2024-05-31 by tcpid
Create report

Open service 123.56.103.219:8080

2024-05-31 03:04

HTTP/1.1 404 Not Found
Connection: close
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 504
Server: Jetty(9.4.43.v20210629)

Page title: Error 404 Not Found

<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<title>Error 404 Not Found</title>
</head>
<body><h2>HTTP ERROR 404 Not Found</h2>
<table>
<tr><th>URI:</th><td>/</td></tr>
<tr><th>STATUS:</th><td>404</td></tr>
<tr><th>MESSAGE:</th><td>Not Found</td></tr>
<tr><th>SERVLET:</th><td>org.eclipse.jetty.servlet.ServletHandler$Default404Servlet-78b1cc93</td></tr>
</table>
<hr><a href="https://eclipse.org/jetty">Powered by Jetty:// 9.4.43.v20210629</a><hr/>

</body>
</html>

Found 2024-05-31 by HttpPlugin

Create report

Open service 123.56.103.219:8000

2024-05-30 10:24

HTTP/1.1 502 Bad Gateway
Server: nginx/1.22.1
Date: Thu, 30 May 2024 10:24:47 GMT
Content-Type: text/html
Content-Length: 559
Connection: close

Page title: 502 Bad Gateway

<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-05-30 by HttpPlugin

Create report

Open service 123.56.103.219:8081

2024-05-30 00:12

HTTP/1.1 200 OK
Connection: Close
Content-Length: 2982
Content-Type: text/html
Server: SRS/5.0.210(Bee)

Page title: SRS


<html>
<head>
    <title>SRS</title>
    <meta charset="utf-8">
    <style>
        .span6 {
            width: 480px;
        }
        .code {
            background-color: rgb(246 248 250);
            padding: 8px;
            overflow: auto;
            font-size: 85%;
            line-height: 1.45;
            border-radius: 6px;
            word-break: normal;
            word-wrap: normal;
            box-sizing: border-box;
            display: block;
            white-space: pre;
        }
    </style>
</head>
<body>
    <div>
        <h3><a href="https://github.com/ossrs/srs">SRS</a> works!</h3>
        <p>
            Click <a id="enConsole" href="#">here</a> to enter SRS console.<br/>
            点击进入<a id="cnConsole" href="#">SRS控制台</a>
        </p>
        <p>
            Publish stream by <a href="https://ffmpeg.org/download.html">FFmpeg</a> or <a href="https://obsproject.com/download">OBS</a>:<br/>
            请使用工具<a href="https://ffmpeg.org/download.html">FFmpeg</a>或者<a href="https://obsproject.com/download">OBS</a>推流到下面地址:
            <pre id="url" class="code span6"></pre>
        </p>
        <p>
            Click <a id="enPlayer" href="#">here</a> to start SRS player.<br/>
            点击进入<a id="cnPlayer" href="#">SRS播放器</a>
        </p>
        <p><a href="https://github.com/ossrs/srs">SRS Team &copy; 2022</a></p>
    </div>
    <script type="text/javascript">
        // Build RTMP url.
        if (true) {
            const rtmpUrl = `rtmp://${window.location.hostname}/live/livestream`;
            document.getElementById('url').innerText = rtmpUrl;
        }

        // Build console url.
        if (true) {
            // The prefix for default website.
            const prefix = `${window.location.protocol}//${window.location.host}`;
            // If not 8080, user should proxy to the default port.
            const query = parseInt(window.location.port) === 8080 ? `?port=1985` : '';
            const enUrl = `${prefix}/console/en_index.html#/summaries${query}`;
            const cnUrl = `${prefix}/console/ng_index.html#/summaries${query}`;
            document.getElementById("enConsole").setAttribute('href', enUrl);
            document.getElementById("cnConsole").setAttribute('href', cnUrl);
        }

        // The player url.
        if (true) {
            const prefix = `players/?schema=${window.location.protocol.replace(':', '')}`;
            const httpPort = window.location.port || (window.location.protocol === 'http:' ? 80 : 443);
            // If not 8080, user should proxy both stream and API to the default port.
            const query = parseInt(window.location.port) === 8080 ? '' : `&port=${httpPort}&api=${httpPort}`;
            document.getElementById("enPlayer").setAttribute('href', `${prefix}${query}`);
            document.getElementById("cnPlayer").setAttribute('href', `${prefix}${query}`);
        }
    </script>
</body>

Found 2024-05-30 by HttpPlugin

Create report

Open service 123.56.103.219:3306

2024-05-29 21:29
```
MySQL detected
```
Found 2024-05-29 by tcpid
Create report

Open service 123.56.103.219:8080

2024-05-29 19:33

HTTP/1.1 404 Not Found
Connection: close
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 504
Server: Jetty(9.4.43.v20210629)

Page title: Error 404 Not Found

<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<title>Error 404 Not Found</title>
</head>
<body><h2>HTTP ERROR 404 Not Found</h2>
<table>
<tr><th>URI:</th><td>/</td></tr>
<tr><th>STATUS:</th><td>404</td></tr>
<tr><th>MESSAGE:</th><td>Not Found</td></tr>
<tr><th>SERVLET:</th><td>org.eclipse.jetty.servlet.ServletHandler$Default404Servlet-78b1cc93</td></tr>
</table>
<hr><a href="https://eclipse.org/jetty">Powered by Jetty:// 9.4.43.v20210629</a><hr/>

</body>
</html>

Found 2024-05-29 by HttpPlugin

Create report

Open service 123.56.103.219:3306

2024-05-28 20:45
```
MySQL detected
```
Found 2024-05-28 by tcpid
Create report
Open service 123.56.103.219:22

2024-05-28 14:23
Found 2024-05-28 by SSHOpenPlugin
Create report
Open service 123.56.103.219:3306

2024-05-27 20:10
```
MySQL detected
```
Found 2024-05-27 by tcpid
Create report

Data leak

Size

2.4 MB

Collections

Rows

1953

Domain summary

No record