LeakIX - Host 183.56.234.75

Host 183.56.234.75

China

CHINANET Guangdong province network

Win64 AMD64

Software information

Apache Apache

tcp/443 tcp/80 tcp/81 tcp/82

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 183.56.234.75
Port: 3307

First seen 2023-12-14 14:39
Last seen 2024-06-13 06:00
Open for 181 days

Severity: critical
Fingerprint: cf350410ecceb5fd35c930a22487af313a32680693711bec8ee5d10050f6db8f

Databases: 25, row count: 2267, size: 627.3 kB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 538 records
Found table mysql.help_relation with 1165 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records
Found table readme_to_recover_a.recover_your_data with 2 records

Found on 2024-06-13 06:00

627.3 kBytes 2267 rows

Severity: critical
Fingerprint: cf350410ecceb5fd35c930a22487af313a32680693711bec8ee5d100526c951d

Databases: 25, row count: 2267, size: 627.3 kB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 1 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 538 records
Found table mysql.help_relation with 1165 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records
Found table recover_your_data.recover_your_data with 2 records

Found on 2024-05-31 21:54

627.3 kBytes 2267 rows

Create report

Open service 183.56.234.75:443

2024-06-14 20:09

HTTP/1.1 200 OK
Date: Fri, 14 Jun 2024 20:09:42 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 31 May 2022 08:19:50 GMT
ETag: "878-5e04a6fbe0ea0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Page title: Redmine packaged by Bitnami

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Redmine packaged by Bitnami</title>
    <link href="bitnami.css" media="all" rel="Stylesheet" type="text/css" />
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8">
    <meta http-equiv="content-style-type" content="text/css">
    <meta http-equiv="expires" content="0">
  </head>
  <body>
    <div class="container">
      <div id="header">
        <table class="tableHeader">
          <tr>
            <td><img src="img/bitnami.png" alt="Bitnami"></td>
          </tr>
        </table>
      </div>
      <div id="lowerContainer">
        <h1>Awesome! Redmine is now installed.</h1><br/>
        <h1><a id="bitnami-link" href="redmine/">Access Redmine</a></h1>
      </div>
    </div>
      <table class="tableParagraph">
        <tr>
          <td class="container">
            <p>You just installed Redmine using Bitnami - the fastest, easiest and most secure way to deploy your favorite app.</p>
            <br/>
            <table>
              <td>
                <a href="redmine/"><img align="left" src="img/redmine.png" alt="Redmine packaged by Bitnami"></a>
              </td>
              <td>&nbsp;</td>
              <td>
                <ul>
                  <li>Visit the Bitnami Redmine <a id="wiki-application-link" href="https://docs.bitnami.com/installer/apps/redmine/">documentation page</a> for more information on managing your installation.<br/></li>
                  <li>Access the built-in management tool <a href="phpmyadmin/">phpMyAdmin</a>. For security reasons it is only accessible when using 127.0.0.1 as the hostname.<br/></li>
                  <li>Find answers to common questions or pose a new question on our <a href="https://community.bitnami.com/">community forum</a>.<br/></li>
                </ul>
              </td>
            </table>
            <p>Thanks for using Bitnami!</p>
          </td>
        </tr>
      </table>
  </body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 183.56.234.75:80

2024-06-14 19:01

HTTP/1.1 200 OK
Date: Fri, 14 Jun 2024 19:01:55 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 27 Jul 2022 10:26:18 GMT
ETag: "878-5e4c6d8fcd727"
Accept-Ranges: bytes
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Page title: Redmine packaged by Bitnami

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Redmine packaged by Bitnami</title>
    <link href="bitnami.css" media="all" rel="Stylesheet" type="text/css" />
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8">
    <meta http-equiv="content-style-type" content="text/css">
    <meta http-equiv="expires" content="0">
  </head>
  <body>
    <div class="container">
      <div id="header">
        <table class="tableHeader">
          <tr>
            <td><img src="img/bitnami.png" alt="Bitnami"></td>
          </tr>
        </table>
      </div>
      <div id="lowerContainer">
        <h1>Awesome! Redmine is now installed.</h1><br/>
        <h1><a id="bitnami-link" href="redmine/">Access Redmine</a></h1>
      </div>
    </div>
      <table class="tableParagraph">
        <tr>
          <td class="container">
            <p>You just installed Redmine using Bitnami - the fastest, easiest and most secure way to deploy your favorite app.</p>
            <br/>
            <table>
              <td>
                <a href="redmine/"><img align="left" src="img/redmine.png" alt="Redmine packaged by Bitnami"></a>
              </td>
              <td>&nbsp;</td>
              <td>
                <ul>
                  <li>Visit the Bitnami Redmine <a id="wiki-application-link" href="https://docs.bitnami.com/installer/apps/redmine/">documentation page</a> for more information on managing your installation.<br/></li>
                  <li>Access the built-in management tool <a href="phpmyadmin/">phpMyAdmin</a>. For security reasons it is only accessible when using 127.0.0.1 as the hostname.<br/></li>
                  <li>Find answers to common questions or pose a new question on our <a href="https://github.com/bitnami/vms">community forum</a>.<br/></li>
                </ul>
              </td>
            </table>
            <p>Thanks for using Bitnami!</p>
          </td>
        </tr>
      </table>
  </body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 183.56.234.75:81

2024-06-13 18:58

HTTP/1.1 200 OK
Date: Thu, 13 Jun 2024 18:59:00 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 31 May 2022 08:19:50 GMT
ETag: "878-5e04a6fbe0ea0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Page title: Redmine packaged by Bitnami

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Redmine packaged by Bitnami</title>
    <link href="bitnami.css" media="all" rel="Stylesheet" type="text/css" />
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8">
    <meta http-equiv="content-style-type" content="text/css">
    <meta http-equiv="expires" content="0">
  </head>
  <body>
    <div class="container">
      <div id="header">
        <table class="tableHeader">
          <tr>
            <td><img src="img/bitnami.png" alt="Bitnami"></td>
          </tr>
        </table>
      </div>
      <div id="lowerContainer">
        <h1>Awesome! Redmine is now installed.</h1><br/>
        <h1><a id="bitnami-link" href="redmine/">Access Redmine</a></h1>
      </div>
    </div>
      <table class="tableParagraph">
        <tr>
          <td class="container">
            <p>You just installed Redmine using Bitnami - the fastest, easiest and most secure way to deploy your favorite app.</p>
            <br/>
            <table>
              <td>
                <a href="redmine/"><img align="left" src="img/redmine.png" alt="Redmine packaged by Bitnami"></a>
              </td>
              <td>&nbsp;</td>
              <td>
                <ul>
                  <li>Visit the Bitnami Redmine <a id="wiki-application-link" href="https://docs.bitnami.com/installer/apps/redmine/">documentation page</a> for more information on managing your installation.<br/></li>
                  <li>Access the built-in management tool <a href="phpmyadmin/">phpMyAdmin</a>. For security reasons it is only accessible when using 127.0.0.1 as the hostname.<br/></li>
                  <li>Find answers to common questions or pose a new question on our <a href="https://community.bitnami.com/">community forum</a>.<br/></li>
                </ul>
              </td>
            </table>
            <p>Thanks for using Bitnami!</p>
          </td>
        </tr>
      </table>
  </body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 183.56.234.75:81

2024-06-13 08:07

HTTP/1.1 200 OK
Date: Thu, 13 Jun 2024 08:07:47 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 31 May 2022 08:19:50 GMT
ETag: "878-5e04a6fbe0ea0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Page title: Redmine packaged by Bitnami

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Redmine packaged by Bitnami</title>
    <link href="bitnami.css" media="all" rel="Stylesheet" type="text/css" />
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8">
    <meta http-equiv="content-style-type" content="text/css">
    <meta http-equiv="expires" content="0">
  </head>
  <body>
    <div class="container">
      <div id="header">
        <table class="tableHeader">
          <tr>
            <td><img src="img/bitnami.png" alt="Bitnami"></td>
          </tr>
        </table>
      </div>
      <div id="lowerContainer">
        <h1>Awesome! Redmine is now installed.</h1><br/>
        <h1><a id="bitnami-link" href="redmine/">Access Redmine</a></h1>
      </div>
    </div>
      <table class="tableParagraph">
        <tr>
          <td class="container">
            <p>You just installed Redmine using Bitnami - the fastest, easiest and most secure way to deploy your favorite app.</p>
            <br/>
            <table>
              <td>
                <a href="redmine/"><img align="left" src="img/redmine.png" alt="Redmine packaged by Bitnami"></a>
              </td>
              <td>&nbsp;</td>
              <td>
                <ul>
                  <li>Visit the Bitnami Redmine <a id="wiki-application-link" href="https://docs.bitnami.com/installer/apps/redmine/">documentation page</a> for more information on managing your installation.<br/></li>
                  <li>Access the built-in management tool <a href="phpmyadmin/">phpMyAdmin</a>. For security reasons it is only accessible when using 127.0.0.1 as the hostname.<br/></li>
                  <li>Find answers to common questions or pose a new question on our <a href="https://community.bitnami.com/">community forum</a>.<br/></li>
                </ul>
              </td>
            </table>
            <p>Thanks for using Bitnami!</p>
          </td>
        </tr>
      </table>
  </body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 183.56.234.75:3307

2024-06-13 06:00
```
MySQL detected
```
Found 3 days ago by tcpid
Create report

Open service 183.56.234.75:82

2024-06-12 20:43

HTTP/1.1 200 OK
Date: Wed, 12 Jun 2024 20:43:35 GMT
Server: Apache
Set-Cookie: zentaosid=d429be6f43bed4ad491c69cd13133d4f; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 3 days ago by HttpPlugin

Create report

Open service 183.56.234.75:3307

2024-06-09 21:25
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 183.56.234.75:3307

2024-06-07 20:08
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 183.56.234.75:3307

2024-06-03 20:40
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report

Open service 183.56.234.75:82

2024-06-02 09:00

HTTP/1.1 200 OK
Date: Sun, 02 Jun 2024 09:00:04 GMT
Server: Apache
Set-Cookie: zentaosid=41f92eeb417b20210142a094869c82e8; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

Found 2024-06-02 by HttpPlugin

Create report

Open service 183.56.234.75:80

2024-06-02 06:22

HTTP/1.1 200 OK
Date: Sun, 02 Jun 2024 06:21:42 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 27 Jul 2022 10:26:18 GMT
ETag: "878-5e4c6d8fcd727"
Accept-Ranges: bytes
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Page title: Redmine packaged by Bitnami

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <title>Redmine packaged by Bitnami</title>
    <link href="bitnami.css" media="all" rel="Stylesheet" type="text/css" />
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8">
    <meta http-equiv="content-style-type" content="text/css">
    <meta http-equiv="expires" content="0">
  </head>
  <body>
    <div class="container">
      <div id="header">
        <table class="tableHeader">
          <tr>
            <td><img src="img/bitnami.png" alt="Bitnami"></td>
          </tr>
        </table>
      </div>
      <div id="lowerContainer">
        <h1>Awesome! Redmine is now installed.</h1><br/>
        <h1><a id="bitnami-link" href="redmine/">Access Redmine</a></h1>
      </div>
    </div>
      <table class="tableParagraph">
        <tr>
          <td class="container">
            <p>You just installed Redmine using Bitnami - the fastest, easiest and most secure way to deploy your favorite app.</p>
            <br/>
            <table>
              <td>
                <a href="redmine/"><img align="left" src="img/redmine.png" alt="Redmine packaged by Bitnami"></a>
              </td>
              <td>&nbsp;</td>
              <td>
                <ul>
                  <li>Visit the Bitnami Redmine <a id="wiki-application-link" href="https://docs.bitnami.com/installer/apps/redmine/">documentation page</a> for more information on managing your installation.<br/></li>
                  <li>Access the built-in management tool <a href="phpmyadmin/">phpMyAdmin</a>. For security reasons it is only accessible when using 127.0.0.1 as the hostname.<br/></li>
                  <li>Find answers to common questions or pose a new question on our <a href="https://github.com/bitnami/vms">community forum</a>.<br/></li>
                </ul>
              </td>
            </table>
            <p>Thanks for using Bitnami!</p>
          </td>
        </tr>
      </table>
  </body>
</html>

Found 2024-06-02 by HttpPlugin

Create report

Open service 183.56.234.75:3307

2024-05-31 21:54
```
MySQL detected
```
Found 2024-05-31 by tcpid
Create report
Open service 183.56.234.75:3307

2024-05-29 21:13
```
MySQL detected
```
Found 2024-05-29 by tcpid
Create report
Open service 183.56.234.75:3307

2024-05-28 22:36
```
MySQL detected
```
Found 2024-05-28 by tcpid
Create report
Open service 183.56.234.75:3307

2024-05-27 21:47
```
MySQL detected
```
Found 2024-05-27 by tcpid
Create report

Fingerprint:

eead57cfec9a19250582c861463c3d9b9ee7d325a642ca5b93b7b39b8a1e66a3

CN:

www.example.com

Key:

RSA-2048

Issuer:

www.example.com

Not before:

2022-05-31 08:13

Not after:

2032-05-28 08:13

Data leak

Size

627.3 kB

Collections

Rows

2267

Domain summary

No record