MySQL is currently open without authentication.
Additionally a ransom note has been found in the dataset which indicates it has been compromised
This results in all the database data made available publicly.
Severity: critical
Fingerprint: cf350410ecceb5fd1c95839458f56b9d1e69dd08fc76216f9f6f2575848c9268
Databases: 32, row count: 142723, size: 7.9 MB Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records Found table mysql.columns_priv with 0 records Found table mysql.db with 3 records Found table mysql.engine_cost with 2 records Found table mysql.event with 0 records Found table mysql.func with 0 records Found table mysql.general_log with 2 records Found table mysql.gtid_executed with 0 records Found table mysql.help_category with 50 records Found table mysql.help_keyword with 821 records Found table mysql.help_relation with 2154 records Found table mysql.help_topic with 503 records Found table mysql.innodb_index_stats with 10 records Found table mysql.innodb_table_stats with 3 records Found table mysql.ndb_binlog_index with 0 records Found table mysql.plugin with 0 records Found table mysql.proc with 48 records Found table mysql.procs_priv with 0 records Found table mysql.proxies_priv with 1 records Found table mysql.server_cost with 6 records Found table mysql.servers with 0 records Found table mysql.slave_master_info with 0 records Found table mysql.slave_relay_log_info with 0 records Found table mysql.slave_worker_info with 0 records Found table mysql.slow_log with 2 records Found table mysql.tables_priv with 2 records Found table mysql.time_zone with 1815 records Found table mysql.time_zone_leap_second with 0 records Found table mysql.time_zone_name with 2087 records Found table mysql.time_zone_transition with 125689 records Found table mysql.time_zone_transition_type with 9518 records Found table mysql.user with 5 records
Open service 13.36.126.50:80 · kubecost-t0.docplanner.io
2024-03-26 14:40
HTTP/1.1 301 Moved Permanently Date: Tue, 26 Mar 2024 14:40:27 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://kubecost-t0.docplanner.io X-Request-Id: 9c1cf27c91c39b95fe6c76b42d49f816 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 13.36.126.50:443 · kubecost-t0.docplanner.io
2024-03-26 14:40
HTTP/1.1 503 Service Temporarily Unavailable Date: Tue, 26 Mar 2024 14:40:28 GMT Content-Type: text/html Content-Length: 592 Connection: close Strict-Transport-Security: max-age=15724800 X-Request-Id: cd402e4b2da18a2e27506d0aa67c510d Page title: 503 Service Temporarily Unavailable <html> <head><title>503 Service Temporarily Unavailable</title></head> <body> <center><h1>503 Service Temporarily Unavailable</h1></center> <hr><center>nginx</center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->