LeakIX - Host 27.159.148.51

Host 27.159.148.51

China

Chinanet

Win64 x86_64

Software information

Python 3.8.6

tcp/8088

Werkzeug 1.0.1

tcp/8088

nginx nginx 1.22.1

tcp/8085

MySQL is publicly available

MySQL is currently open without authentication.

This results in all the database data made available publicly.

IP: 27.159.148.51
Port: 3306

First seen 2024-03-01 09:25
Last seen 2024-03-07 18:20
Open for 6 days

Severity: critical
Fingerprint: cf350410ecceb5fd5af219fae6fb7079376b7f0804f1a4ba3bea271f038068e7

Databases: 39, row count: 4628, size: 2.4 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 49 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1142 records
Found table mysql.help_relation with 2389 records
Found table mysql.help_topic with 957 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 4 records
Found table readme_to_recover_a.recover_your_data with 2 records

Found on 2024-03-07 18:20

2.4 MBytes 4628 rows

Create report

Open service 27.159.148.51:8088

2024-09-11 18:26

HTTP/1.0 404 NOT FOUND
Content-Type: text/html; charset=utf-8
Content-Length: 232
Server: Werkzeug/1.0.1 Python/3.8.6
Date: Wed, 11 Sep 2024 18:26:06 GMT

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Found 2024-09-11 by HttpPlugin

Create report

Open service 27.159.148.51:8085

2024-09-10 15:25

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 10 Sep 2024 15:25:05 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Wed, 19 Oct 2022 08:02:20 GMT
Connection: close
ETag: "634faf0c-267"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
html { color-scheme: light dark; }
body { width: 35em; margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif; }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2024-09-10 by HttpPlugin

Create report

Open service 27.159.148.51:3306

2024-09-10 10:16
```
MySQL detected
```
Found 2024-09-10 by tcpid
Create report

Open service 27.159.148.51:21

2024-09-09 19:38

220 Microsoft FTP Service
500 Command not understood.
500 Command not understood.
500 Command not understood.
500 Command not understood.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
500 Command not understood.
500 Command not understood.
500 Command not understood.

Found 2024-09-09 by FtpPlugin

Create report

Data leak

Size

2.4 MB

Collections

Rows

4628

Domain summary

No record