LeakIX - Host 47.103.12.2

Host 47.103.12.2

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.103.12.2
Port: 3306

First seen 2023-12-15 01:14
Last seen 2024-06-14 04:24
Open for 182 days

Severity: critical
Fingerprint: cf350410ecceb5fdb7069e3eff88373fd3a4d9ca1db4545ff78023d33754b7fe

Databases: 38, row count: 4111, size: 2.4 MB
Found table A____Z____RECOVER____DATA.README with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 84 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 1082 records
Found table mysql.help_relation with 2392 records
Found table mysql.help_topic with 468 records
Found table mysql.innodb_index_stats with 6 records
Found table mysql.innodb_table_stats with 2 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 1 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 5 records

Found on 2024-06-14 04:24

2.4 MBytes 4111 rows

Severity: high
Fingerprint: cf350410ecceb5fd64db118e15656aaf15656aaf15656aaf15656aaf15656aaf
```
Databases: 1, row count: 0, size: 16.4 kB
Found table A____Z____RECOVER____DATA.README with 0 records
```
Found on 2024-06-13 00:02

16.4 kBytes

Create report

Open service 47.103.12.2:3306

2024-06-19 20:35
```
MySQL detected
```
Found 15 hours ago by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-17 21:55
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-14 04:24
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-13 00:02
```
MySQL detected
```
Found 2024-06-13 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-11 20:49
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-09 21:48
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-07 22:09
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-05 21:59
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 47.103.12.2:3306

2024-06-03 21:47
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report

Data leak

Size

2.4 MB

Collections

Rows

4111

Domain summary

No record