LeakIX - Host 139.196.20.188

Host 139.196.20.188

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 139.196.20.188
Port: 3306

First seen 2024-01-09 07:00
Last seen 2024-02-01 17:48
Open for 23 days

Severity: critical
Fingerprint: cf350410ecceb5fd58152fcbc1f48c3b5eac3eb68a9d0b2692f4c2ccb3bd4f35

Databases: 29, row count: 141528, size: 3.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 0 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 47 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1826 records
Found table mysql.time_zone_transition with 124862 records
Found table mysql.time_zone_transition_type with 9864 records
Found table mysql.user with 3 records

Found on 2024-02-01 17:48

3.8 MBytes 141528 rows

Severity: critical
Fingerprint: cf350410ecceb5fd6526490c8f7a90e4727b52132942efc538c139433bee8e4d

Databases: 29, row count: 141527, size: 3.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 0 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 47 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1826 records
Found table mysql.time_zone_transition with 124862 records
Found table mysql.time_zone_transition_type with 9864 records
Found table mysql.user with 2 records

Found on 2024-01-16 23:34

3.8 MBytes 141527 rows

Severity: critical
Fingerprint: cf350410ecceb5fd6526490cbb833076d2c5a925e5a4e3dfc35d550d97b04bef

Databases: 29, row count: 141527, size: 3.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 0 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 47 records
Found table mysql.help_keyword with 825 records
Found table mysql.help_relation with 1660 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 3 records
Found table mysql.innodb_table_stats with 1 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1826 records
Found table mysql.time_zone_transition with 124862 records
Found table mysql.time_zone_transition_type with 9864 records
Found table mysql.user with 2 records

Found on 2024-01-09 07:00

3.8 MBytes 141527 rows

Create report

Open service 139.196.20.188:9000

2024-10-29 10:22

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Location: http://139.196.20.188:41526
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Amz-Id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8
X-Amz-Request-Id: 1802E5535BE990C8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Date: Tue, 29 Oct 2024 10:22:33 GMT
Content-Length: 63
Connection: close


<a href="http://139.196.20.188:41526">Temporary Redirect</a>.

Found 3 days ago by HttpPlugin

Create report

Data leak

Size

3.8 MB

Collections

Rows

141528

Domain summary

No record