LeakIX - Host 164.90.234.238

Host 164.90.234.238

Germany

DIGITALOCEAN-ASN

Linux x86_64

Software information

nginx nginx 1.24.0

tcp/443 tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 164.90.234.238
Port: 3307

First seen 2024-04-24 22:58
Last seen 2024-05-12 18:30
Open for 17 days

Severity: critical
Fingerprint: cf350410ecceb5fdee7a43abc64b33db02fec55653bd9f33fe3af5372748be44

Databases: 39, row count: 141416, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 103 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 878 records
Found table mysql.help_relation with 3199 records
Found table mysql.help_topic with 621 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1759 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-05-12 18:30

7.9 MBytes 141416 rows

Severity: critical
Fingerprint: cf350410ecceb5fddc2217a7149a93cd5c176178e7ee01292d4560e12c7b6846

Databases: 39, row count: 138935, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 90 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1010 records
Found table mysql.help_relation with 1122 records
Found table mysql.help_topic with 757 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1348 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-05-08 13:28

7.9 MBytes 138935 rows

Severity: high
Fingerprint: cf350410ecceb5fd85ce8b3bb93a36b1c0dce0ed18d72e5b2bfc09cbc1469ff8

Databases: 46, row count: 141320, size: 8.0 MB
Found table ecommerce.category with 0 records
Found table ecommerce.color_attribute with 0 records
Found table ecommerce.description with 0 records
Found table ecommerce.description_text_desc with 0 records
Found table ecommerce.product with 0 records
Found table ecommerce.product_category with 0 records
Found table ecommerce.product_gallery with 0 records
Found table ecommerce.user with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 90 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 934 records
Found table mysql.help_relation with 3201 records
Found table mysql.help_topic with 663 records
Found table mysql.innodb_index_stats with 58 records
Found table mysql.innodb_table_stats with 10 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1443 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2153 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-04-28 18:26

8.0 MBytes 141320 rows

Create report

Open service 164.90.234.238:443

2024-09-10 14:52

HTTP/1.1 404 
Server: nginx/1.24.0 (Ubuntu)
Date: Tue, 10 Sep 2024 14:52:53 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY


{"timestamp":1725979973681,"status":404,"error":"Not Found","path":"/"}

Found 2024-09-10 by HttpPlugin

Create report

Open service 164.90.234.238:22

2024-09-10 14:43
Found 2024-09-10 by SSHOpenPlugin
Create report

Open service 164.90.234.238:8080

2024-09-10 14:32

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Tue, 10 Sep 2024 14:32:14 GMT
Connection: close


{"timestamp":1725978734172,"status":404,"error":"Not Found","path":"/"}

Found 2024-09-10 by HttpPlugin

Create report

Open service 164.90.234.238:80

2024-09-10 01:28

HTTP/1.1 404 Not Found
Server: nginx/1.24.0 (Ubuntu)
Date: Tue, 10 Sep 2024 01:28:05 GMT
Content-Type: text/html
Content-Length: 564
Connection: close

Page title: 404 Not Found

<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-09-10 by HttpPlugin

Create report

Open service 164.90.234.238:443 · admin.serdarcakir.online

2024-09-09 23:57

HTTP/1.1 307 Temporary Redirect
Server: nginx/1.24.0 (Ubuntu)
Date: Mon, 09 Sep 2024 23:57:46 GMT
Transfer-Encoding: chunked
Connection: close
location: /api/auth/signin?callbackUrl=%2F


/api/auth/signin?callbackUrl=%2F

Found 2024-09-09 by HttpPlugin

Create report

Open service 164.90.234.238:80 · admin.serdarcakir.online

2024-09-09 23:57

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0 (Ubuntu)
Date: Mon, 09 Sep 2024 23:57:43 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://admin.serdarcakir.online/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.24.0 (Ubuntu)</center>
</body>
</html>

Found 2024-09-09 by HttpPlugin

Create report

api.serdarcakir.online

Fingerprint:

13a16d57a0f254d79d37ae3b9f5a2a912072970e28d62192baa0fe96328fec5f

CN:

api.serdarcakir.online

Key:

ECDSA-256

Issuer:

Not before:

2024-08-02 19:56

Not after:

2024-10-31 19:56

admin.serdarcakir.online

Fingerprint:

8e08301f416c5b293ac29c336b98122160431cb32c6c718d65a824880ee57f47

CN:

admin.serdarcakir.online

Key:

ECDSA-256

Issuer:

Not before:

2024-09-09 22:58

Not after:

2024-12-08 22:58

Data leak

Size

7.9 MB

Collections

Rows

141416

Domain summary

admin.serdarcakir.online 1

1 recorded