LeakIX - Host 39.103.226.105

Host 39.103.226.105

China

Hangzhou Alibaba Advertising Co.,Ltd.

CentOS Linux 7 (Core) 4.18.0-240.22.1.el8_3.x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 39.103.226.105
Port: 3306

First seen 2023-07-18 17:51
Last seen 2024-09-27 22:10
Open for 437 days

Severity: critical
Fingerprint: cf350410ecceb5fd85d6361b65999365cacb2520532b0962c4f0c6b850faa798

Databases: 32, row count: 143433, size: 7.9 MB
Found table A____Z____RECOVER____DATA.README with 1 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 877 records
Found table mysql.help_relation with 1808 records
Found table mysql.help_topic with 633 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 7 records
Found table mysql.time_zone with 1532 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2601 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 6 records

Found on 2024-09-27 22:10

7.9 MBytes 143433 rows

Severity: critical
Fingerprint: cf350410ecceb5fd09814c6a30e7bc1e590a1ffdccb0c6f5a50060eb1532895f

Databases: 32, row count: 143429, size: 7.9 MB
Found table A____Z____RECOVER____DATA.README with 1 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 0 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 877 records
Found table mysql.help_relation with 1808 records
Found table mysql.help_topic with 633 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 0 records
Found table mysql.tables_priv with 7 records
Found table mysql.time_zone with 1532 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2601 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 6 records

Found on 2024-09-23 21:11

7.9 MBytes 143429 rows

Severity: high
Fingerprint: cf350410ecceb5fd293ef71d37aeaf3b37aeaf3b37aeaf3b37aeaf3b37aeaf3b
```
Databases: 1, row count: 1, size: 16.4 kB
Found table A____Z____RECOVER____DATA.README with 1 records
```
Found on 2024-08-01 23:21

16.4 kBytes 1 rows

Severity: critical
Fingerprint: cf350410ecceb5fd85d6361b687007ebd90008e6ea72c604c85305021e71ac99

Databases: 32, row count: 143433, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 877 records
Found table mysql.help_relation with 1808 records
Found table mysql.help_topic with 633 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 7 records
Found table mysql.time_zone with 1532 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2601 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 5 records

Found on 2023-10-10 23:06

7.9 MBytes 143433 rows

Severity: critical
Fingerprint: cf350410ecceb5fdf461721a671b8d666663609cc273c0912a62e73d8b395cfb

Databases: 50, row count: 145910, size: 8.7 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table baoyan.comment with 10 records
Found table baoyan.consultant with 6 records
Found table baoyan.discuss_post with 3 records
Found table baoyan.login_ticket with 0 records
Found table baoyan.message with 0 records
Found table baoyan.sys_log with 1845 records
Found table baoyan.sys_view with 1865 records
Found table baoyan.tb_chat_group with 2 records
Found table baoyan.tb_chat_msg with 6 records
Found table baoyan.tb_friend with 14 records
Found table baoyan.tbl_article_category with 7 records
Found table baoyan.tbl_article_comment with 4 records
Found table baoyan.tbl_article_content with 7 records
Found table baoyan.tbl_article_info with 7 records
Found table baoyan.tbl_article_picture with 7 records
Found table baoyan.tbl_category_info with 5 records
Found table baoyan.tbl_comment with 2 records
Found table baoyan.user with 5 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 746 records
Found table mysql.help_relation with 1268 records
Found table mysql.help_topic with 778 records
Found table mysql.innodb_index_stats with 64 records
Found table mysql.innodb_table_stats with 21 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 7 records
Found table mysql.time_zone with 1815 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2089 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 9518 records
Found table mysql.user with 5 records

Found on 2023-10-06 19:06

8.7 MBytes 145910 rows

Severity: critical
Fingerprint: cf350410ecceb5fd9115af61ff770e58eb5319f256dfd127e2f70ea379001550

Databases: 50, row count: 146752, size: 8.5 MB
No or default MySQL authentication found.Found table README_UKX.README with 1 records
Found table baoyan.comment with 1 records
Found table baoyan.consultant with 6 records
Found table baoyan.discuss_post with 3 records
Found table baoyan.login_ticket with 0 records
Found table baoyan.message with 0 records
Found table baoyan.sys_log with 1178 records
Found table baoyan.sys_view with 1178 records
Found table baoyan.tb_chat_group with 2 records
Found table baoyan.tb_chat_msg with 6 records
Found table baoyan.tb_friend with 14 records
Found table baoyan.tbl_article_category with 7 records
Found table baoyan.tbl_article_comment with 4 records
Found table baoyan.tbl_article_content with 7 records
Found table baoyan.tbl_article_info with 7 records
Found table baoyan.tbl_article_picture with 7 records
Found table baoyan.tbl_category_info with 5 records
Found table baoyan.tbl_comment with 2 records
Found table baoyan.user with 5 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 1045 records
Found table mysql.help_relation with 2392 records
Found table mysql.help_topic with 984 records
Found table mysql.innodb_index_stats with 64 records
Found table mysql.innodb_table_stats with 21 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1885 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1966 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 5 records

Found on 2023-07-18 17:51

8.5 MBytes 146752 rows

Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

This results in all the database data made available publicly.

IP: 39.103.226.105
Port: 5601
URL: http://39.103.226.105:5601

First seen 2023-05-06 03:32
Last seen 2023-05-08 10:05
Open for 2 days

Severity: high
Fingerprint: 831cb76b8e05df46edeca4733e4acc3542722ae0a117bbc407ae1cead56f4882

Indices: 8, document count: 1018, size: 500.7 kB
Through Kibana endpoint
Found index product with 0 documents (283 B)
Found index website with 2 documents (8.9 kB)
Found index bank with 1000 documents (424.3 kB)
Found index .kibana_task_manager_1 with 2 documents (22.3 kB)
Found index custom with 2 documents (6.9 kB)
Found index .apm-agent-configuration with 0 documents (283 B)
Found index .kibana_1 with 10 documents (34.0 kB)
Found index customer with 2 documents (3.7 kB)

Found on 2023-05-08 10:05

500.7 kBytes 1018 rows

Severity: high
Fingerprint: 831cb76b8e05df461c44f3e647b03e76365e958c79e9fb11cbf1c69fe1a300db

Indices: 8, document count: 1017, size: 496.5 kB
Through Kibana endpoint
Found index bank with 1000 documents (424.3 kB)
Found index product with 0 documents (283 B)
Found index website with 2 documents (8.9 kB)
Found index .kibana_task_manager_1 with 2 documents (22.3 kB)
Found index custom with 2 documents (6.9 kB)
Found index .apm-agent-configuration with 0 documents (283 B)
Found index .kibana_1 with 9 documents (29.8 kB)
Found index customer with 2 documents (3.7 kB)

Found on 2023-05-06 03:32

496.5 kBytes 1017 rows

Create report

ElasticSearch is publicly available

Elasticsearch and/or Kibana is currently open without authentication.

This results in all the database data made available publicly.

IP: 39.103.226.105
Port: 9200
URL: http://39.103.226.105:9200

First seen 2022-02-27 14:41
Last seen 2022-02-27 17:27

Severity: high
Fingerprint: 831cb76b8e05df46982bcf1b9090880d1a60de58e68f18ceaaa2d974df161624

Indices: 8, document count: 1016, size: 505.0 kB
Found index website with 2 documents (8.9 kB)
Found index product with 0 documents (283 B)
Found index bank with 1000 documents (424.3 kB)
Found index .kibana_task_manager_1 with 2 documents (31.2 kB)
Found index .apm-agent-configuration with 0 documents (283 B)
Found index custom with 2 documents (6.9 kB)
Found index .kibana_1 with 8 documents (29.4 kB)
Found index customer with 2 documents (3.7 kB)

Found on 2022-02-27 17:27

505.0 kBytes 1016 rows

Severity: high
Fingerprint: 831cb76b8e05df46982bcf1b377131d2364511ba8094ea306f7c66f6ba41d8de

Indices: 8, document count: 1016, size: 505.0 kB
Found index product with 0 documents (283 B)
Found index website with 2 documents (8.9 kB)
Found index bank with 1000 documents (424.3 kB)
Found index .kibana_task_manager_1 with 2 documents (31.2 kB)
Found index custom with 2 documents (6.9 kB)
Found index .apm-agent-configuration with 0 documents (283 B)
Found index .kibana_1 with 8 documents (29.4 kB)
Found index customer with 2 documents (3.7 kB)

Found on 2022-02-27 14:41

505.0 kBytes 1016 rows

Create report

Open service 39.103.226.105:3306

2024-09-27 22:10
```
MySQL detected
```
Found 8 hours ago by tcpid
Create report
Open service 39.103.226.105:3306

2024-09-25 20:54
```
MySQL detected
```
Found 2 days ago by tcpid
Create report
Open service 39.103.226.105:3306

2024-09-23 21:11
```
MySQL detected
```
Found 2024-09-23 by tcpid
Create report
Open service 39.103.226.105:3306

2024-09-15 21:53
```
MySQL detected
```
Found 2024-09-15 by tcpid
Create report
Open service 39.103.226.105:3306

2024-09-07 22:46
```
MySQL detected
```
Found 2024-09-07 by tcpid
Create report
Open service 39.103.226.105:3306

2024-08-17 22:26
```
MySQL detected
```
Found 2024-08-17 by tcpid
Create report

Data leak

Size

8.5 MB

Collections

Rows

146752

Domain summary

No record