LeakIX - Host 124.221.94.222

Host 124.221.94.222

China

Shenzhen Tencent Computer Systems Company Limited

Linux x86_64

Software information

nginx nginx

tcp/81

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 124.221.94.222
Port: 3306

First seen 2023-08-31 07:24
Last seen 2024-06-17 21:40
Open for 291 days

Severity: critical
Fingerprint: cf350410ecceb5fd851c0c4916e489ff675ecc0ae9e4da08dce280a6d396a21d

Databases: 29, row count: 3152, size: 907.7 kB
Found table A____Z____RECOVER____DATA.README with 1 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 0 records
Found table mysql.help_category with 45 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 10 records

Found on 2024-06-17 21:40

907.7 kBytes 3152 rows

Severity: high
Fingerprint: cf350410ecceb5fd293ef71d37aeaf3b37aeaf3b37aeaf3b37aeaf3b37aeaf3b
```
Databases: 1, row count: 1, size: 16.4 kB
Found table A____Z____RECOVER____DATA.README with 1 records
```
Found on 2024-04-18 17:59

16.4 kBytes 1 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b760973388cf973388cf973388cf973388cf973388cf

Databases: 1, row count: 2, size: 16.4 kB
No or default MySQL authentication found.Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records

Found on 2023-08-31 10:57

16.4 kBytes 2 rows

Severity: critical
Fingerprint: cf350410ecceb5fd05305e3689247e5d7d084a48e7471c7a041aad7883eee947

Databases: 29, row count: 3150, size: 907.4 kB
No or default MySQL authentication found.Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 0 records
Found table mysql.help_category with 45 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 7 records

Found on 2023-08-31 07:24

907.4 kBytes 3150 rows

Create report

Open service 124.221.94.222:81

2024-06-20 04:49

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 04:49:32 GMT
Content-Type: text/html
Content-Length: 917
Last-Modified: Fri, 21 Jul 2023 07:23:05 GMT
Connection: close
ETag: "64ba3259-395"
Accept-Ranges: bytes

Page title: 恭喜，站点创建成功！

<!doctype html>
<html>
<head>
    <meta charset="utf-8">
    <title>恭喜，站点创建成功！</title>
    <style>
        .container {
            width: 60%;
            margin: 10% auto 0;
            background-color: #f0f0f0;
            padding: 2% 5%;
            border-radius: 10px
        }

        ul {
            padding-left: 20px;
        }

            ul li {
                line-height: 2.3
            }

        a {
            color: #20a53a
        }
    </style>
</head>
<body>
    <div class="container">
        <h1>恭喜, 站点创建成功！</h1>
        <h3>这是默认index.html，本页面由系统自动生成</h3>
        <ul>
            <li>本页面在FTP根目录下的index.html</li>
            <li>您可以修改、删除或覆盖本页面</li>
            <li>FTP相关信息，请到“面板系统后台 > FTP” 查看</li>
        </ul>
    </div>
</body>
</html>

Found 7 hours ago by HttpPlugin

Create report

Open service 124.221.94.222:3306

2024-06-19 20:17
```
MySQL detected
```
Found 15 hours ago by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-17 21:40
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-15 22:16
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-15 12:08
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-11 21:50
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-09 21:41
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 124.221.94.222:3306

2024-06-07 20:23
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report

Data leak

Size

907.7 kB

Collections

Rows

3152

Domain summary

No record