LeakIX - Host 13.201.33.92

Host 13.201.33.92

India

AMAZON-02

Linux x86_64

Software information

nginx nginx 1.18.0

tcp/443 tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 13.201.33.92
Port: 3306

First seen 2024-04-25 00:04
Last seen 2024-06-19 20:18
Open for 55 days

Severity: critical
Fingerprint: cf350410ecceb5fd975223defc651bb25c81f44161ff1fe995a107ef5e64af79

Databases: 32, row count: 136516, size: 7.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 821 records
Found table mysql.help_relation with 1984 records
Found table mysql.help_topic with 495 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1649 records
Found table mysql.time_zone_transition with 119956 records
Found table mysql.time_zone_transition_type with 9401 records
Found table mysql.user with 6 records

Found on 2024-06-19 20:18

7.8 MBytes 136516 rows

Severity: critical
Fingerprint: cf350410ecceb5fd3fbfc6f54022a569a13b3de4faf8e8761d2ca66c24bcadc6

Databases: 32, row count: 136559, size: 7.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 821 records
Found table mysql.help_relation with 1984 records
Found table mysql.help_topic with 680 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2095 records
Found table mysql.time_zone_transition with 119956 records
Found table mysql.time_zone_transition_type with 8813 records
Found table mysql.user with 6 records

Found on 2024-05-28 22:15

7.8 MBytes 136559 rows

Create report

Open service 13.201.33.92:3306

2024-06-19 20:18
```
MySQL detected
```
Found 15 hours ago by tcpid
Create report
Open service 13.201.33.92:3306

2024-06-15 23:22
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 13.201.33.92:3306

2024-06-15 03:52
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report

Open service 13.201.33.92:80

2024-06-14 22:31

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 14 Jun 2024 22:31:53 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 22 Nov 2023 07:29:01 GMT
Connection: close
ETag: "655dadbd-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 13.201.33.92:443

2024-06-14 08:01

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 14 Jun 2024 08:01:12 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 22 Nov 2023 07:29:01 GMT
Connection: close
ETag: "655dadbd-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-14 by HttpPlugin

Create report

Open service 13.201.33.92:443

2024-06-13 14:56

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 13 Jun 2024 14:56:54 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Wed, 22 Nov 2023 07:29:01 GMT
Connection: close
ETag: "655dadbd-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-06-13 by HttpPlugin

Create report

Open service 13.201.33.92:3306

2024-06-11 20:55
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 13.201.33.92:3306

2024-06-09 20:22
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 13.201.33.92:3306

2024-06-07 20:24
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report

devserver.altavantconsulting.com

Fingerprint:

02f81c6d66288201da77fdc3140398083af7f3d580df469108becc0961981d38

CN:

devserver.altavantconsulting.com

Key:

RSA-2048

Issuer:

Not before:

2024-04-23 01:34

Not after:

2024-07-22 01:34

Data leak

Size

7.8 MB

Collections

Rows

136559

Domain summary

No record