LeakIX - Host 137.184.90.82

Host 137.184.90.82

United States

DIGITALOCEAN-ASN

Linux x86_64

Software information

openresty

tcp/443 tcp/80 tcp/81

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 137.184.90.82
Port: 3306

First seen 2024-04-26 00:57
Last seen 2024-04-30 19:58
Open for 4 days

Severity: critical
Fingerprint: cf350410ecceb5fdeada2e3b5b4bdb11c0e1da1c69a9af757b75c3dd9f1b5cdb

Databases: 39, row count: 138399, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 111 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 822 records
Found table mysql.help_relation with 1612 records
Found table mysql.help_topic with 456 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1882 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 9437 records
Found table mysql.user with 5 records

Found on 2024-04-30 19:58

7.9 MBytes 138399 rows

Severity: critical
Fingerprint: cf350410ecceb5fdd3d39ec7aed420ad77600458107e4ec9ca1b0a411564d445

Databases: 39, row count: 141045, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 77 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1010 records
Found table mysql.help_relation with 3198 records
Found table mysql.help_topic with 673 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1490 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-04-28 18:42

7.9 MBytes 141045 rows

Severity: critical
Fingerprint: cf350410ecceb5fdbe461138ddd416024adb35112609c4b09d717972d2115c60

Databases: 39, row count: 138028, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 75 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 614 records
Found table mysql.help_relation with 674 records
Found table mysql.help_topic with 436 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1621 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-04-26 00:57

7.9 MBytes 138028 rows

Create report

Open service 137.184.90.82:81

2024-09-12 04:45

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 12 Sep 2024 04:45:31 GMT
Content-Type: text/html
Content-Length: 1655
Last-Modified: Mon, 14 Aug 2023 23:14:43 GMT
Connection: close
ETag: "64dab563-677"
Accept-Ranges: bytes

Page title: Nginx Proxy Manager

<!doctype html><html lang="en" dir="ltr"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,user-scalable=no,initial-scale=1,maximum-scale=1,minimum-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta http-equiv="Content-Language" content="en"><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="mobile-web-app-capable" content="yes"><meta name="HandheldFriendly" content="True"><meta name="MobileOptimized" content="320"><title>Nginx Proxy Manager</title><link rel="apple-touch-icon" sizes="180x180" href="/images/favicons/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/images/favicons/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/images/favicons/favicon-16x16.png"><link rel="manifest" href="/images/favicons/site.webmanifest"><link rel="mask-icon" href="/images/favicons/safari-pinned-tab.svg" color="#5bbad5"><link rel="shortcut icon" href="/images/favicons/favicon.ico"><meta name="msapplication-TileColor" content="#333333"><meta name="msapplication-config" content="/images/favicons/browserconfig.xml"><meta name="theme-color" content="#ffffff"><link href="/css/main.css?v=2.10.4" rel="stylesheet"></head><body><noscript><div class="container no-js-warning"><div class="alert alert-warning text-center"><strong>Warning!</strong> This application requires Javascript and your browser doesn't support it.</div></div></noscript><div id="app" class="page"><span class="loader"></span></div><script src="/js/main.bundle.js?v=2.10.4"></script></body></html>

Found 2024-09-12 by HttpPlugin

Create report

Open service 137.184.90.82:443 · alfarooj.almusaeid.net

2024-09-11 16:17

HTTP/1.1 303 SEE OTHER
Server: openresty
Date: Wed, 11 Sep 2024 16:17:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 215
Connection: close
Location: http://alfarooj.almusaeid.net/web
Set-Cookie: session_id=85548ec9032589740379959b4fbc99b066f67cd2; Expires=Tue, 10-Dec-2024 16:17:38 GMT; Max-Age=7776000; HttpOnly; Path=/
Strict-Transport-Security: max-age=63072000;includeSubDomains; preload
X-Served-By: alfarooj.almusaeid.net

Page title: Redirecting...

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to target URL: <a href="/web">/web</a>.  If not click the link.

Found 2024-09-11 by HttpPlugin

Create report

Open service 137.184.90.82:80 · alfarooj.almusaeid.net

2024-09-11 16:17

HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Wed, 11 Sep 2024 16:17:34 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Location: https://alfarooj.almusaeid.net/
Strict-Transport-Security: max-age=63072000;includeSubDomains; preload

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2024-09-11 by HttpPlugin

Create report

Open service 137.184.90.82:22

2024-09-10 21:42
Found 2024-09-10 by SSHOpenPlugin
Create report

Open service 137.184.90.82:443

2024-09-10 11:23

HTTP/1.1 400 Bad Request
Server: openresty
Date: Tue, 10 Sep 2024 11:23:45 GMT
Content-Type: text/html
Content-Length: 654
Connection: close

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-09-10 by HttpPlugin

Create report

Open service 137.184.90.82:80

2024-09-09 19:56

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 09 Sep 2024 19:56:11 GMT
Content-Type: text/html
Content-Length: 1033
Last-Modified: Mon, 14 Aug 2023 23:13:21 GMT
Connection: close
ETag: "64dab511-409"
Accept-Ranges: bytes

Page title: Default Site

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <title>Default Site</title>
        <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet">
        <style>
            .jumbotron { margin-top: 50px; }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="jumbotron">
                <h1>Congratulations!</h1>
                <p>You've successfully started the Nginx Proxy Manager.</p>
                <p>If you're seeing this site then you're trying to access a host that isn't set up yet.</p>
                <p>Log in to the Admin panel to get started.</p>
            </div>
            <p class="text-center"><small>Powered by <a href="https://github.com/jc21/nginx-proxy-manager" target="_blank">Nginx Proxy Manager</a></small></p>
        </div>
    </body>
</html>

Found 2024-09-09 by HttpPlugin

Create report

alfarooj.almusaeid.net

Fingerprint:

faac561ff15e42fc9d18aa847e2643d1a2436a87a13e1c602acbc353d2a9847e

CN:

alfarooj.almusaeid.net

Key:

ECDSA-384

Issuer:

Not before:

2024-07-13 15:15

Not after:

2024-10-11 15:14

Data leak

Size

7.9 MB

Collections

Rows

141045

Domain summary

alfarooj.almusaeid.net 1

1 recorded