LeakIX - Host 23.225.235.189

Host 23.225.235.189

United States

CNSERVERS

Linux i686

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 23.225.235.189
Port: 3306

First seen 2022-09-04 19:48
Last seen 2023-10-17 05:10
Open for 407 days

Severity: critical
Fingerprint: cf350410ecceb5fdac969bdf3bce7db22a2f5a41bda025eb8dfa8e013d06fde4

Databases: 25, row count: 2244, size: 625.9 kB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 0 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 534 records
Found table mysql.help_relation with 1142 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 7 records

Found on 2023-10-17 05:10

625.9 kBytes 2244 rows

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.235.189
Domain: www.aipal.net
Port: 443
URL: https://www.aipal.net

First seen 2023-08-25 17:19
Last seen 2023-09-23 00:32
Open for 28 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c05ce34dad1b78886318d743f096b46b3f

Found 62 files trough .DS_Store spidering:

/.well-known
/2012
/2013
/2015
/2016
/2017
/2018
/2019
/904
/905
/906
/913
/914
/915
/916
/917
/918
/920
/921
/927
/928
/930
/931
/932
/933
/935
/936
/937
/938
/939
/957
/958
/959
/960
/961
/962
/963
/964
/965
/966
/968
/971
/_css
/_js
/_upload
/content
/dana
/jwc
/lgx
/sdx
/sxc
/tcp
/tsg
/tw
/xgdt
/xjx
/xqx
/xsc
/ysx
/zjc
/zwc
/zzrsc

Found on 2023-09-16 12:12

Severity: medium
Fingerprint: 5f32cf5d6962f09ca29b58f1a29b58f1b461f934a78b9104d7b4ed3da4f11166

Found 78 files trough .DS_Store spidering:

/.well-known
/2012
/2012/0419
/2012/0511
/2013
/2015
/2015/1123
/2015/1124
/2015/1129
/2015/1130
/2015/1201
/2015/1204
/2015/1205
/2015/1207
/2016
/2016/0316
/2016/0328
/2016/0401
/2016/0518
/2016/1025
/2016/1101
/2017
/2018
/2019
/904
/905
/906
/913
/914
/915
/916
/917
/918
/920
/921
/927
/928
/930
/931
/932
/933
/935
/936
/937
/938
/939
/957
/958
/959
/960
/961
/962
/963
/964
/965
/966
/968
/971
/_css
/_js
/_upload
/content
/dana
/jwc
/lgx
/sdx
/sxc
/tcp
/tsg
/tw
/xgdt
/xjx
/xqx
/xsc
/ysx
/zjc
/zwc
/zzrsc

Found on 2023-08-26 19:13

Severity: medium
Fingerprint: 5f32cf5d6962f09cac85b122ac85b12230d014b7660236f5994cae44a2100149

Found 99 files trough .DS_Store spidering:

/.well-known
/2012
/2012/0419
/2012/0511
/2013
/2015
/2015/1123
/2015/1124
/2015/1129
/2015/1130
/2015/1201
/2015/1204
/2015/1205
/2015/1207
/2016
/2016/0316
/2016/0328
/2016/0401
/2016/0518
/2016/1025
/2016/1101
/2017
/2017/0112
/2017/0213
/2017/0302
/2017/0331
/2017/0411
/2017/0417
/2017/0419
/2017/0428
/2017/0504
/2017/0509
/2017/0517
/2017/0525
/2017/0531
/2017/0606
/2017/0621
/2017/0626
/2017/0830
/2017/0905
/2017/1011
/2017/1031
/2017/1101
/2018
/2019
/904
/905
/906
/913
/914
/915
/916
/917
/918
/920
/921
/927
/928
/930
/931
/932
/933
/935
/936
/937
/938
/939
/957
/958
/959
/960
/961
/962
/963
/964
/965
/966
/968
/971
/_css
/_js
/_upload
/content
/dana
/jwc
/lgx
/sdx
/sxc
/tcp
/tsg
/tw
/xgdt
/xjx
/xqx
/xsc
/ysx
/zjc
/zwc
/zzrsc

Found on 2023-08-25 17:19

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.235.189
Domain: www.yjtaijifu.com
Port: 443
URL: https://www.yjtaijifu.com

First seen 2023-06-27 01:36
Last seen 2023-09-22 23:49
Open for 87 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9637fe3bcde94f74fba13bd10e00040dc
```
Found 5 files trough .DS_Store spidering:

/.well-known
/SITE_ATTACHE
/SITE_RES
/SITE_RES/css
/SITE_RES/yishu_cqepc_cn
```
  Found on 2023-06-27 01:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.235.189
Domain: yjtaijifu.com
Port: 443
URL: https://yjtaijifu.com

First seen 2023-06-27 01:36
Last seen 2023-09-16 21:02
Open for 81 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9637fe3bcde94f74fba13bd10e00040dc
```
Found 5 files trough .DS_Store spidering:

/.well-known
/SITE_ATTACHE
/SITE_RES
/SITE_RES/css
/SITE_RES/yishu_cqepc_cn
```
  Found on 2023-06-27 01:36
Create report

Open service 23.225.235.189:3306

2024-03-03 09:39
```
MySQL detected
```
Found 2024-03-03 by tcpid
Create report

Data leak

Size

625.9 kB

Collections

Rows

2244

Domain summary

www.aipal.net 3 www.yjtaijifu.com 1 yjtaijifu.com 1

3 recorded