LeakIX - Host 45.119.80.116

Host 45.119.80.116

Vietnam

Long Van System Solution JSC

Linux x86_64

Software information

nginx nginx

tcp/443 tcp/80

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 45.119.80.116
Port: 3306

First seen 2023-09-03 11:05
Last seen 2024-03-21 10:33
Open for 199 days

Severity: critical
Fingerprint: cf350410ecceb5fd080ebcd68e7f0aaaccb74ea9e5a3d5614b610e3772eea3a2

Databases: 25, row count: 2274, size: 631.6 kB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 538 records
Found table mysql.help_relation with 1165 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 8 records

Found on 2024-03-21 10:33

631.6 kBytes 2274 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b7609132601091326010913260109132601091326010
```
Databases: 1, row count: 2, size: 16.4 kB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
```
Found on 2024-03-06 21:01

16.4 kBytes 2 rows

Severity: critical
Fingerprint: cf350410ecceb5fdb68c5249cb0b43653d0e3520ed98b9629e4f9590ee813dfc

Databases: 25, row count: 2273, size: 631.6 kB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 538 records
Found table mysql.help_relation with 1165 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 7 records

Found on 2024-01-10 09:04

631.6 kBytes 2273 rows

Severity: critical
Fingerprint: cf350410ecceb5fdb68c52498216e8700405b99f22ad2b93d10cf2595a756893

Databases: 25, row count: 2273, size: 631.6 kB
No or default MySQL authentication found.Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 538 records
Found table mysql.help_relation with 1165 records
Found table mysql.help_topic with 513 records
Found table mysql.host with 0 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 2 records
Found table mysql.servers with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 0 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 7 records

Found on 2023-09-03 11:05

631.6 kBytes 2273 rows

Create report

Open service 45.119.80.116:22

2024-09-12 03:00
Found 2024-09-12 by SSHOpenPlugin
Create report
Open service 45.119.80.116:3306

2024-09-11 06:50
```
MySQL detected
```
Found 2024-09-11 by tcpid
Create report

Open service 45.119.80.116:80

2024-09-11 06:39

HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 11 Sep 2024 06:39:59 GMT
Content-Type: text/html
Content-Length: 548
Connection: close

Page title: 404 Not Found

<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-09-11 by HttpPlugin

Create report

Open service 45.119.80.116:8083

2024-09-10 07:01

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Date: Tue, 10 Sep 2024 07:01:27 GMT
Connection: close

Page title: Apache Tomcat/9.0.34




<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8" />
        <title>Apache Tomcat/9.0.34</title>
        <link href="favicon.ico" rel="icon" type="image/x-icon" />
        <link href="favicon.ico" rel="shortcut icon" type="image/x-icon" />
        <link href="tomcat.css" rel="stylesheet" type="text/css" />
    </head>

    <body>
        <div id="wrapper">
            <div id="navigation" class="curved container">
                <span id="nav-home"><a href="https://tomcat.apache.org/">Home</a></span>
                <span id="nav-hosts"><a href="/docs/">Documentation</a></span>
                <span id="nav-config"><a href="/docs/config/">Configuration</a></span>
                <span id="nav-examples"><a href="/examples/">Examples</a></span>
                <span id="nav-wiki"><a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a></span>
                <span id="nav-lists"><a href="https://tomcat.apache.org/lists.html">Mailing Lists</a></span>
                <span id="nav-help"><a href="https://tomcat.apache.org/findhelp.html">Find Help</a></span>
                <br class="separator" />
            </div>
            <div id="asf-box">
                <h1>Apache Tomcat/9.0.34</h1>
            </div>
            <div id="upper" class="curved container">
                <div id="congrats" class="curved container">
                    <h2>If you're seeing this, you've successfully installed Tomcat. Congratulations!</h2>
                </div>
                <div id="notice">
                    <img src="tomcat.png" alt="[tomcat logo]" />
                    <div id="tasks">
                        <h3>Recommended Reading:</h3>
                        <h4><a href="/docs/security-howto.html">Security Considerations How-To</a></h4>
                        <h4><a href="/docs/manager-howto.html">Manager Application How-To</a></h4>
                        <h4><a href="/docs/cluster-howto.html">Clustering/Session Replication How-To</a></h4>
                    </div>
                </div>
                <div id="actions">
                    <div class="button">
                        <a class="container shadow" href="/manager/status"><span>Server Status</span></a>
                    </div>
                    <div class="button">
                        <a class="container shadow" href="/manager/html"><span>Manager App</span></a>
                    </div>
                    <div class="button">
                        <a class="container shadow" href="/host-manager/html"><span>Host Manager</span></a>
                    </div>
                </div>
                <br class="separator" />
            </div>
            <div id="middle" class="curved container">
                <h3>Developer Quick Start</h3>
                <div class="col25">
                    <div class="container">
                        <p><a href="/docs/setup.html">Tomcat Setup</a></p>
                        <p><a href="/docs/appdev/">First Web Application</a></p>
                    </div>
                </div>
                <div class="col25">
                    <div class="container">
                        <p><a href="/docs/realm-howto.html">Realms &amp; AAA</a></p>
                        <p><a href="/docs/jndi-datasource-examples-howto.html">JDBC DataSources</a></p>
                    </div>
                </div>
                <div class="col25">
                    <div class="container">
                        <p><a href="/examples/">Examples</a></p>
                    </div>
                </div>
                <div class="col25">
                    <div class="container">
                        <p><a href="https://wiki.apache.org/tomcat/Specifications">Servlet Specifications</a></p>
                        <p><a href="https://wiki.apache.org/tomcat/TomcatVersions">Tomcat Versions</a></p>
                    </div>
                </div>
                <br class="separator" />
            </div>
            <div id="lower">
                <div id="low-manage" class="">

Found 2024-09-10 by HttpPlugin

Create report

Open service 45.119.80.116:443

2024-09-09 21:58

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 09 Sep 2024 21:58:31 GMT
Content-Type: text/html
Content-Length: 58300
Last-Modified: Sat, 06 Apr 2024 15:07:34 GMT
Connection: close
Vary: Accept-Encoding
ETag: "66116536-e3bc"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

Page title: Sorry, the website has been stopped

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8" />
		<meta name="viewport" content="width=device-width, initial-scale=1.0" />
		<title>Sorry, the website has been stopped</title>
		<style>
			* {
				margin: 0;
				padding: 0;
				box-sizing: border-box;
			}
			html {
				height: 100%;
			}
			body {
				height: 100%;
				font-size: 14px;
			}
			.container {
				display: flex;
				flex-direction: column;
				align-items: center;
				height: 100%;
				padding-top: 12%;
			}
			.logo img {
				display: block;
				width: 100px;
			}
			.logo img + img {
				margin-top: 12px;
			}
			.title {
				margin-top: 24px;
				font-size: 52px;
				color: #333;
			}
			.desc {
				margin-top: 24px;
				font-size: 16px;
				color: #777;
				text-align: center;
				line-height: 24px;
			}
			.footer {
				/* position: absolute;
				left: 0;
				bottom: 32px;
				width: 100%; */
				margin-top: 24px;
				text-align: center;
				font-size: 12px;
			}
			.footer .btlink {
				color: #20a53a;
				text-decoration: none;
			}
		</style>
	</head>
	<body>
		<div class="container">
			<div class="logo">
				<img
					src="data:image/png;base64,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

Found 2024-09-09 by HttpPlugin

Create report

okamiapi.okamicenter.com

Fingerprint:

ed9fac5d3ee99f7dbabed1dc91c4144c4bfcc78e20146705f4fd586c94794de6

CN:

okamiapi.okamicenter.com

Key:

RSA-2048

Issuer:

R10

Not before:

2024-07-26 03:10

Not after:

2024-10-24 03:10

Data leak

Size

631.6 kB

Collections

Rows

2274

Domain summary

No record