LeakIX - Host 47.104.227.184

Host 47.104.227.184

China

Hangzhou Alibaba Advertising Co.,Ltd.

linux-glibc2.5 x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.104.227.184
Port: 3306

First seen 2023-07-17 17:27
Last seen 2024-06-19 20:30
Open for 338 days

Severity: critical
Fingerprint: cf350410ecceb5fdb061f38ced439f74926c622ae85105296d3e303a5a759330

Databases: 34, row count: 3116, size: 2.4 MB
Found table A____Z____RECOVER____DATA.README with 1 records
Found table mysql.ckishi32 with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 5 records
Found table mysql.eamdcv with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 726 records
Found table mysql.help_relation with 1509 records
Found table mysql.help_topic with 743 records
Found table mysql.innodb_index_stats with 16 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 1 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 9 records

Found on 2024-06-19 20:30

2.4 MBytes 3116 rows

Severity: critical
Fingerprint: cf350410ecceb5fdb061f38c446aa4e59b67dd0988602904c3cf13250193fd8a

Databases: 34, row count: 3116, size: 2.4 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.ckishi32 with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 5 records
Found table mysql.eamdcv with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 726 records
Found table mysql.help_relation with 1509 records
Found table mysql.help_topic with 743 records
Found table mysql.innodb_index_stats with 16 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 1 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 8 records

Found on 2023-10-10 22:59

2.4 MBytes 3116 rows

Severity: critical
Fingerprint: cf350410ecceb5fd33b51d9f2fdc7bf2aaa411888a288427dc45398576d2d56a

Databases: 34, row count: 3115, size: 2.4 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.ckishi32 with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 4 records
Found table mysql.eamdcv with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 726 records
Found table mysql.help_relation with 1509 records
Found table mysql.help_topic with 743 records
Found table mysql.innodb_index_stats with 16 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 1 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 8 records

Found on 2023-10-07 08:45

2.4 MBytes 3115 rows

Severity: critical
Fingerprint: cf350410ecceb5fd33b51d9f8caabf9bb9f6f0ef3f52bbfab2f50fae6d78e319

Databases: 34, row count: 3115, size: 2.4 MB
No or default MySQL authentication found.Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.ckishi32 with 0 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 4 records
Found table mysql.eamdcv with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 726 records
Found table mysql.help_relation with 1509 records
Found table mysql.help_topic with 743 records
Found table mysql.innodb_index_stats with 16 records
Found table mysql.innodb_table_stats with 5 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 1 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 8 records

Found on 2023-07-17 17:27

2.4 MBytes 3115 rows

Create report

Open service 47.104.227.184:3306

2024-06-19 20:30
```
MySQL detected
```
Found 15 hours ago by tcpid
Create report
Open service 47.104.227.184:3306

2024-06-17 20:20
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 47.104.227.184:3306

2024-06-14 23:45
```
MySQL detected
```
Found 2024-06-14 by tcpid
Create report

Open service 47.104.227.184:80

2024-06-12 21:58

HTTP/1.1 302 
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://47.104.227.184/
Content-Length: 0
Date: Wed, 12 Jun 2024 21:58:22 GMT
Connection: close

Found 2024-06-12 by HttpPlugin

Create report

Open service 47.104.227.184:3306

2024-06-11 20:50
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 47.104.227.184:3306

2024-06-09 21:15
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 47.104.227.184:3306

2024-06-07 20:13
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 47.104.227.184:3306

2024-06-03 20:44
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report

Data leak

Size

2.4 MB

Collections

Rows

3116

Domain summary

No record