LeakIX - Host 178.154.222.79

Host 178.154.222.79

Russia

Yandex.Cloud LLC

Linux x86_64

Software information

nginx nginx 1.18.0

tcp/443 tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 178.154.222.79
Port: 3308

First seen 2024-06-21 05:21
Last seen 2024-11-24 00:49
Open for 155 days

Severity: critical
Fingerprint: cf350410ecceb5fd93b6541ef56badc84ffc15e7e6988b0a717b4f08d20b39b4

Databases: 39, row count: 133458, size: 8.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 79 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 847 records
Found table mysql.help_relation with 2232 records
Found table mysql.help_topic with 1097 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1945 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1411 records
Found table mysql.time_zone_transition with 115987 records
Found table mysql.time_zone_transition_type with 9768 records
Found table mysql.user with 5 records

Found on 2024-11-24 00:49

8.8 MBytes 133458 rows

Severity: critical
Fingerprint: cf350410ecceb5fd165a0dc1eeaaa0a7b5a4ad82f78b392752ee394b36294e86

Databases: 39, row count: 132825, size: 8.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 106 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 995 records
Found table mysql.help_relation with 1837 records
Found table mysql.help_topic with 348 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1945 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1747 records
Found table mysql.time_zone_transition with 115987 records
Found table mysql.time_zone_transition_type with 9768 records
Found table mysql.user with 5 records

Found on 2024-11-06 00:36

8.8 MBytes 132825 rows

Severity: critical
Fingerprint: cf350410ecceb5fd194a0b3ab8b81954b0ec8803f6cdecaeaa8b739c78863baa

Databases: 39, row count: 134187, size: 8.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 52 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 918 records
Found table mysql.help_relation with 2232 records
Found table mysql.help_topic with 893 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1945 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1915 records
Found table mysql.time_zone_transition with 115987 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 5 records

Found on 2024-11-03 22:24

8.8 MBytes 134187 rows

Severity: critical
Fingerprint: cf350410ecceb5fd7457f289b5eb7c5f3d6d896a31f6fe3f6d13097328420449

Databases: 39, row count: 133714, size: 8.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 106 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 926 records
Found table mysql.help_relation with 2081 records
Found table mysql.help_topic with 845 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1945 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1579 records
Found table mysql.time_zone_transition with 115987 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 5 records

Found on 2024-10-17 22:07

8.8 MBytes 133714 rows

Severity: critical
Fingerprint: cf350410ecceb5fd468e0a17230a0c3d839567a8e2221739b3e7cff1566fc646

Databases: 39, row count: 134557, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 98 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 850 records
Found table mysql.help_relation with 2257 records
Found table mysql.help_topic with 581 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1831 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1891 records
Found table mysql.time_zone_transition with 116428 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-10-09 23:28

7.9 MBytes 134557 rows

Create report

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 178.154.222.79
Port: 3306

First seen 2024-06-02 14:50

Severity: critical
Fingerprint: cf350410ecceb5fd5b9d02b08ef400aade0bf0a926103a585ac8124af6328902

Databases: 39, row count: 134860, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 90 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 926 records
Found table mysql.help_relation with 2237 records
Found table mysql.help_topic with 579 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1905 records
Found table mysql.time_zone_transition with 116428 records
Found table mysql.time_zone_transition_type with 10529 records
Found table mysql.user with 5 records

Found on 2024-06-02 14:50

7.9 MBytes 134860 rows

Create report

Open service 178.154.222.79:3308

2024-11-20 01:39
```
MySQL detected
```
Found 2024-11-20 by tcpid
Create report
Open service 178.154.222.79:3308

2024-11-18 00:45
```
MySQL detected
```
Found 2024-11-18 by tcpid
Create report
Open service 178.154.222.79:3308

2024-11-16 01:34
```
MySQL detected
```
Found 2024-11-16 by tcpid
Create report
Open service 178.154.222.79:3308

2024-11-01 23:15
```
MySQL detected
```
Found 2024-11-01 by tcpid
Create report
Open service 178.154.222.79:3308

2024-10-31 22:01
```
MySQL detected
```
Found 2024-10-31 by tcpid
Create report
Open service 178.154.222.79:3308

2024-10-29 22:35
```
MySQL detected
```
Found 2024-10-29 by tcpid
Create report

Open service 178.154.222.79:80

2024-10-29 13:00

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 29 Oct 2024 13:00:42 GMT
Content-Type: text/html
Content-Length: 2140
Connection: close
Last-Modified: Sat, 19 Oct 2024 12:48:55 GMT
ETag: "6713aab7-85c"
Accept-Ranges: bytes

Page title: MyFabric | CRM

<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><!--[if IE]><link rel="icon" href="/favicon.ico"><![endif]--><title>MyFabric | CRM</title><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css"><script defer="defer" src="/js/chunk-vendors.f3acd7c9.js"></script><script defer="defer" src="/js/app.77dcae00.js"></script><link href="/css/chunk-vendors.b6b99ba6.css" rel="stylesheet"><link href="/css/app.d0f605a1.css" rel="stylesheet"><link rel="icon" type="image/svg+xml" href="/favicon.ico"><link rel="icon" type="image/png" sizes="32x32" href="/favicon.ico"><link rel="icon" type="image/png" sizes="16x16" href="/favicon.ico"><link rel="manifest" href="/manifest.json"><meta name="theme-color" content="#4DBA87"><meta name="apple-mobile-web-app-capable" content="no"><meta name="apple-mobile-web-app-status-bar-style" content="default"><meta name="apple-mobile-web-app-title" content="crm_3d_wolf"><link rel="apple-touch-icon" href="/favicon.ico"><link rel="mask-icon" href="/favicon.ico" color="#4DBA87"><meta name="msapplication-TileImage" content="/favicon.ico"><meta name="msapplication-TileColor" content="#000000"></head><body><noscript><strong>We're sorry but crm_3d_wolf doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script>(function(d,t) {
            var BASE_URL="https://chatwoot.myfabric.ru";
            var g=d.createElement(t),s=d.getElementsByTagName(t)[0];
            g.src=BASE_URL+"/packs/js/sdk.js";
            g.defer = true;
            g.async = true;
            s.parentNode.insertBefore(g,s);
            g.onload=function(){
                window.chatwootSDK.run({
                    websiteToken: 'tSv3y6FYr2Hb2pEPkzstQGfD',
                    baseUrl: BASE_URL
                })
            }
        })(document,"script");</script></body></html>

Found 2024-10-29 by HttpPlugin

Create report

Open service 178.154.222.79:443

2024-10-28 22:57

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 28 Oct 2024 22:57:42 GMT
Content-Type: text/html
Content-Length: 2140
Connection: close
Last-Modified: Sat, 19 Oct 2024 12:48:55 GMT
ETag: "6713aab7-85c"
Accept-Ranges: bytes

Page title: MyFabric | CRM

<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><!--[if IE]><link rel="icon" href="/favicon.ico"><![endif]--><title>MyFabric | CRM</title><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css"><script defer="defer" src="/js/chunk-vendors.f3acd7c9.js"></script><script defer="defer" src="/js/app.77dcae00.js"></script><link href="/css/chunk-vendors.b6b99ba6.css" rel="stylesheet"><link href="/css/app.d0f605a1.css" rel="stylesheet"><link rel="icon" type="image/svg+xml" href="/favicon.ico"><link rel="icon" type="image/png" sizes="32x32" href="/favicon.ico"><link rel="icon" type="image/png" sizes="16x16" href="/favicon.ico"><link rel="manifest" href="/manifest.json"><meta name="theme-color" content="#4DBA87"><meta name="apple-mobile-web-app-capable" content="no"><meta name="apple-mobile-web-app-status-bar-style" content="default"><meta name="apple-mobile-web-app-title" content="crm_3d_wolf"><link rel="apple-touch-icon" href="/favicon.ico"><link rel="mask-icon" href="/favicon.ico" color="#4DBA87"><meta name="msapplication-TileImage" content="/favicon.ico"><meta name="msapplication-TileColor" content="#000000"></head><body><noscript><strong>We're sorry but crm_3d_wolf doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script>(function(d,t) {
            var BASE_URL="https://chatwoot.myfabric.ru";
            var g=d.createElement(t),s=d.getElementsByTagName(t)[0];
            g.src=BASE_URL+"/packs/js/sdk.js";
            g.defer = true;
            g.async = true;
            s.parentNode.insertBefore(g,s);
            g.onload=function(){
                window.chatwootSDK.run({
                    websiteToken: 'tSv3y6FYr2Hb2pEPkzstQGfD',
                    baseUrl: BASE_URL
                })
            }
        })(document,"script");</script></body></html>

Found 2024-10-28 by HttpPlugin

Create report

Open service 178.154.222.79:3308

2024-10-21 21:43
```
MySQL detected
```
Found 2024-10-21 by tcpid
Create report

Open service 178.154.222.79:80 · crm.technar3d.ru

2024-10-20 11:04

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 20 Oct 2024 11:04:42 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://crm.technar3d.ru/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>