LeakIX - Host 167.172.17.247

Host 167.172.17.247

United States

DIGITALOCEAN-ASN

Linux x86_64

Software information

Apache Apache 2.4.51

tcp/8081

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 167.172.17.247
Port: 3306

First seen 2022-01-04 06:39
Last seen 2024-04-30 19:15
Open for 847 days

Severity: critical
Fingerprint: cf350410ecceb5fd3ff66bd1a2e4b50c1e50272bd8e7cc4539a44a7acdd6629a

Databases: 45, row count: 143730, size: 8.2 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table default.failed_jobs with 0 records
Found table default.migrations with 6 records
Found table default.password_resets with 0 records
Found table default.personal_access_tokens with 53 records
Found table default.plans with 5 records
Found table default.test_users with 4 records
Found table default.users with 17 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 89 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 1230 records
Found table mysql.help_topic with 1141 records
Found table mysql.innodb_index_stats with 52 records
Found table mysql.innodb_table_stats with 10 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1981 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 8 records

Found on 2024-04-30 19:15

8.2 MBytes 143730 rows

Severity: critical
Fingerprint: cf350410ecceb5fdca2911d7c1139cbab5dd2889dc5b0f1768816f604ff98b64

Databases: 45, row count: 143730, size: 8.4 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table default.failed_jobs with 0 records
Found table default.migrations with 6 records
Found table default.password_resets with 0 records
Found table default.personal_access_tokens with 53 records
Found table default.plans with 5 records
Found table default.test_users with 4 records
Found table default.users with 17 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 89 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 1230 records
Found table mysql.help_topic with 1141 records
Found table mysql.innodb_index_stats with 52 records
Found table mysql.innodb_table_stats with 10 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1981 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 8 records

Found on 2023-10-26 14:04

8.4 MBytes 143730 rows

Severity: critical
Fingerprint: cf350410ecceb5fdca2911d7edb84f93184ec2d8d6987d64f6bc562b78d633bf

Databases: 45, row count: 143730, size: 8.4 MB
No or default MySQL authentication found.Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table default.failed_jobs with 0 records
Found table default.migrations with 6 records
Found table default.password_resets with 0 records
Found table default.personal_access_tokens with 53 records
Found table default.plans with 5 records
Found table default.test_users with 4 records
Found table default.users with 17 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 89 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 1230 records
Found table mysql.help_topic with 1141 records
Found table mysql.innodb_index_stats with 52 records
Found table mysql.innodb_table_stats with 10 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1981 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 8 records

Found on 2023-07-17 22:52

8.4 MBytes 143730 rows

Severity: critical
Fingerprint: cf350410ecceb5fd9f09900a8297667b273ff390e6de6e4331f205543f161e51

Databases: 45, row count: 142101, size: 8.0 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table default.failed_jobs with 0 records
Found table default.migrations with 5 records
Found table default.password_resets with 0 records
Found table default.personal_access_tokens with 48 records
Found table default.plans with 5 records
Found table default.test_users with 4 records
Found table default.users with 17 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 66 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 1471 records
Found table mysql.help_topic with 818 records
Found table mysql.innodb_index_stats with 52 records
Found table mysql.innodb_table_stats with 10 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1885 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1922 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 8884 records
Found table mysql.user with 7 records

Found on 2022-07-26 02:55

8.0 MBytes 142101 rows

Severity: high
Fingerprint: cf350410ecceb5fd1b0468a647fe9c65869da8f50457a0ea068befefc6eac043

Databases: 43, row count: 141674, size: 8.0 MB
Found table default.failed_jobs with 0 records
Found table default.migrations with 0 records
Found table default.password_resets with 0 records
Found table default.personal_access_tokens with 0 records
Found table default.plans with 5 records
Found table default.users with 10 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 55 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 1232 records
Found table mysql.help_topic with 610 records
Found table mysql.innodb_index_stats with 42 records
Found table mysql.innodb_table_stats with 8 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1532 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1697 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 9572 records
Found table mysql.user with 6 records

Found on 2022-01-04 06:39

8.0 MBytes 141674 rows

Create report

Open service 167.172.17.247:3306

2024-04-30 19:15
```
MySQL detected
```
Found 2024-04-30 by tcpid
Create report
Open service 167.172.17.247:3306

2024-04-28 18:18
```
MySQL detected
```
Found 2024-04-28 by tcpid
Create report
Open service 167.172.17.247:3306

2024-04-25 09:45
```
MySQL detected
```
Found 2024-04-25 by tcpid
Create report

Open service 167.172.17.247:8081

2024-04-25 09:32

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 09:32:26 GMT
Server: Apache/2.4.51 (Debian)
X-Powered-By: PHP/7.4.27
Set-Cookie: phpMyAdmin=9b5cb0a1836a8f90b1ce56217da0e5d9; path=/; HttpOnly
Expires: Thu, 25 Apr 2024 09:32:27 +0000
Cache-Control: no-store, no-cache, must-revalidate,  pre-check=0, post-check=0, max-age=0
Last-Modified: Thu, 25 Apr 2024 09:32:27 +0000
Set-Cookie: phpMyAdmin=9b5cb0a1836a8f90b1ce56217da0e5d9; path=/; HttpOnly
Set-Cookie: pma_lang=en; expires=Sat, 25-May-2024 09:32:26 GMT; Max-Age=2592000; path=/; HttpOnly; SameSite=Strict
Set-Cookie: phpMyAdmin=f9f728d2573b27406f54304252d60e4d; path=/; HttpOnly
X-ob_mode: 1
X-Frame-Options: DENY
Referrer-Policy: no-referrer
Content-Security-Policy: default-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' ;style-src 'self' 'unsafe-inline' ;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-Content-Security-Policy: default-src 'self' ;options inline-script eval-script;referrer no-referrer;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-WebKit-CSP: default-src 'self' ;script-src 'self'  'unsafe-inline' 'unsafe-eval';referrer no-referrer;style-src 'self' 'unsafe-inline' ;img-src 'self' data:  *.tile.openstreetmap.org;object-src 'none';
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Page title: phpMyAdmin

<!doctype html>
<html lang="en" dir="ltr">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <meta name="referrer" content="no-referrer">
  <meta name="robots" content="noindex,nofollow">
  <meta http-equiv="X-UA-Compatible" content="IE=Edge">
  <style id="cfs-style">html{display: none;}</style>
  <link rel="icon" href="favicon.ico" type="image/x-icon">
  <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
      <link rel="stylesheet" type="text/css" href="./themes/pmahomme/jquery/jquery-ui.css">
    <link rel="stylesheet" type="text/css" href="js/vendor/codemirror/lib/codemirror.css?v=5.1.1">
    <link rel="stylesheet" type="text/css" href="js/vendor/codemirror/addon/hint/show-hint.css?v=5.1.1">
    <link rel="stylesheet" type="text/css" href="js/vendor/codemirror/addon/lint/lint.css?v=5.1.1">
    <link rel="stylesheet" type="text/css" href="./themes/pmahomme/css/theme.css?v=5.1.1&nocache=1102190709ltr&server=1">
    <link rel="stylesheet" type="text/css" href="./themes/pmahomme/css/printview.css?v=5.1.1" media="print" id="printcss">
    <title>phpMyAdmin</title>
    <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery.min.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery-migrate.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/sprintf.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/ajax.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/keyhandler.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/bootstrap/bootstrap.bundle.min.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery-ui.min.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/js.cookie.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery.mousewheel.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery.validate.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery-ui-timepicker-addon.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery.ba-hashchange-2.0.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/jquery/jquery.debounce-1.0.6.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/menu_resizer.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/cross_framing_protection.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/rte.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/vendor/tracekit.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/error_report.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/messages.php?l=en&v=5.1.1&lang=en"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/config.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/doclinks.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/functions.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/navigation.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/indexes.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/common.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/page_settings.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dist/drag_drop_import.js?v=5.1.1"></script>
  <script data-cfasync="false" type="text/javascript" src="js/dis

Found 2024-04-25 by HttpPlugin

Create report

Open service 167.172.17.247:22

2024-04-25 04:24
Found 2024-04-25 by SSHOpenPlugin
Create report
Open service 167.172.17.247:22

2024-04-24 03:44
Found 2024-04-24 by SSHOpenPlugin
Create report

Open service 167.172.17.247:80

2024-04-23 09:37

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2024 09:37:36 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2024-04-23 by HttpPlugin

Create report

Open service 167.172.17.247:3306

2024-04-22 21:50
```
MySQL detected
```
Found 2024-04-22 by tcpid
Create report
Open service 167.172.17.247:3306

2024-04-18 18:27
```
MySQL detected
```
Found 2024-04-18 by tcpid
Create report

0188d8f46da6f3ed3083a05e43fcf563.5956103697b1e7580e1048a5789db163.traefik.default

Fingerprint:

b704d7a45c166b2d6a945a028c07199b3e62aee96ca096c925953695bfc316b4

CN:

TRAEFIK DEFAULT CERT

Key:

RSA-2048

Issuer:

TRAEFIK DEFAULT CERT

Not before:

2023-05-02 18:21

Not after:

2024-05-01 18:21

Data leak

Size

8.2 MB

Collections

Rows

143730

Domain summary

No record