LeakIX - Host 2.59.38.31

Host 2.59.38.31

The Netherlands

DataWeb Global Group B.V.

Linux x86_64

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 2.59.38.31
Port: 22

First seen 2024-07-03 19:33
Last seen 2024-07-09 22:59
Open for 6 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb583e3d39d05f5693405f5693405f5693405f56934
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.3
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-07-09 22:59
Create report

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 2.59.38.31
Port: 3306

First seen 2023-10-09 05:34
Last seen 2023-10-10 23:31
Open for 1 days

Severity: critical
Fingerprint: cf350410ecceb5fda5b68e59a0b37ed582e55b90dd288e87efc71e7d8d416568

Databases: 37, row count: 4088928, size: 475.0 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 3 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 895 records
Found table mysql.help_relation with 2116 records
Found table mysql.help_topic with 898 records
Found table mysql.innodb_index_stats with 69 records
Found table mysql.innodb_table_stats with 8 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1443 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1359 records
Found table mysql.time_zone_transition with 119956 records
Found table mysql.time_zone_transition_type with 9401 records
Found table mysql.user with 6 records
Found table symfony.doctrine_migration_versions with 7 records
Found table symfony.sender_gateway_capacity with 466518 records
Found table symfony.sender_message with 1525286 records
Found table symfony.sender_quarantine with 170516 records
Found table symfony.smtp_response with 1790332 records

Found on 2023-10-10 23:31

475.0 MBytes 4088928 rows

Severity: critical
Fingerprint: cf350410ecceb5fd5b69bc39686513f520326ab0f86b8ce7752b58ddd4d15c13

Databases: 37, row count: 1700614, size: 190.0 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 3 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 1003 records
Found table mysql.help_relation with 2049 records
Found table mysql.help_topic with 568 records
Found table mysql.innodb_index_stats with 69 records
Found table mysql.innodb_table_stats with 8 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1443 records
Found table mysql.time_zone_transition with 119956 records
Found table mysql.time_zone_transition_type with 9401 records
Found table mysql.user with 6 records
Found table symfony.doctrine_migration_versions with 7 records
Found table symfony.sender_gateway_capacity with 310471 records
Found table symfony.sender_message with 481021 records
Found table symfony.sender_quarantine with 124683 records
Found table symfony.smtp_response with 647996 records

Found on 2023-10-09 05:34

190.0 MBytes 1700614 rows

Create report

Open service 2.59.38.31:22

2024-09-12 04:02
Found 2024-09-12 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-09-07 20:00
Found 2024-09-07 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-17 20:05
Found 2024-08-17 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-15 20:18
Found 2024-08-15 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-13 20:08
Found 2024-08-13 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-11 20:12
Found 2024-08-11 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-09 20:33
Found 2024-08-09 by SSHOpenPlugin
Create report
Open service 2.59.38.31:22

2024-08-07 20:32
Found 2024-08-07 by SSHOpenPlugin
Create report

Data leak

Size

475.0 MB

Collections

Rows

4088928

Domain summary

No record

Host 2.59.38.31

The Netherlands

SSH is potenitally vulnerable

MySQL is publicly available

Data leak

Domain summary