LeakIX - Host 47.103.192.15

Host 47.103.192.15

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.103.192.15
Port: 3306

First seen 2023-09-16 19:02
Last seen 2024-06-03 00:45
Open for 260 days

Severity: critical
Fingerprint: cf350410ecceb5fd38069fbb08f7cc854e98fb40fdd47542f1f42f98042fe12e

Databases: 32, row count: 143811, size: 7.9 MB
Found table A____Z____RECOVER____DATA.README with 1 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 1003 records
Found table mysql.help_relation with 2283 records
Found table mysql.help_topic with 1022 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1885 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1932 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 9862 records
Found table mysql.user with 6 records

Found on 2024-06-03 00:45

7.9 MBytes 143811 rows

Severity: critical
Fingerprint: cf350410ecceb5fd46e4da48dbe4169852282577676275db84e82ba130cae111

Databases: 32, row count: 143812, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 1003 records
Found table mysql.help_relation with 2283 records
Found table mysql.help_topic with 1022 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1885 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1932 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 9862 records
Found table mysql.user with 6 records

Found on 2023-10-10 22:32

7.9 MBytes 143812 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b7609132601091326010913260109132601091326010
```
Databases: 1, row count: 2, size: 16.4 kB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
```
Found on 2023-09-28 19:02

16.4 kBytes 2 rows

Create report

Open service 47.103.192.15:3306

2024-06-03 00:45
```
MySQL detected
```
Found 12 hours ago by tcpid
Create report
Open service 47.103.192.15:3306

2024-06-01 21:39
```
MySQL detected
```
Found 2 days ago by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-31 20:29
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-29 20:34
```
MySQL detected
```
Found 2024-05-29 by tcpid
Create report
Open service 47.103.192.15:22

2024-05-29 00:34
Found 2024-05-29 by SSHOpenPlugin
Create report
Open service 47.103.192.15:3306

2024-05-28 23:15
```
MySQL detected
```
Found 2024-05-28 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-27 21:11
```
MySQL detected
```
Found 2024-05-27 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-26 20:45
```
MySQL detected
```
Found 2024-05-26 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-25 23:18
```
MySQL detected
```
Found 2024-05-25 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-24 23:03
```
MySQL detected
```
Found 2024-05-24 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-23 22:49
```
MySQL detected
```
Found 2024-05-23 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-22 22:05
```
MySQL detected
```
Found 2024-05-22 by tcpid
Create report
Open service 47.103.192.15:3306

2024-05-22 20:44
```
MySQL detected
```
Found 2024-05-22 by tcpid
Create report

Data leak

Size

7.9 MB

Collections

Rows

143812

Domain summary

No record