LeakIX - Host 47.109.128.152

Host 47.109.128.152

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.109.128.152
Port: 3306

First seen 2024-04-23 15:12
Last seen 2024-06-19 21:28
Open for 57 days

Severity: critical
Fingerprint: cf350410ecceb5fdc56e4fdc92cd7dd4bce885836860562e48131c1c4dcd4ebd

Databases: 39, row count: 138154, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 2 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 111 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 802 records
Found table mysql.help_relation with 993 records
Found table mysql.help_topic with 852 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1826 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1880 records
Found table mysql.time_zone_transition with 122161 records
Found table mysql.time_zone_transition_type with 9437 records
Found table mysql.user with 5 records

Found on 2024-06-19 21:28

7.9 MBytes 138154 rows

Create report

Open service 47.109.128.152:3306

2024-06-19 21:28
```
MySQL detected
```
Found 14 hours ago by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-17 21:45
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-15 04:31
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 47.109.128.152:22

2024-06-13 03:28
Found 2024-06-13 by SSHOpenPlugin
Create report
Open service 47.109.128.152:3306

2024-06-11 20:51
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-09 21:43
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-07 22:20
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-05 22:08
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-03 22:29
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report
Open service 47.109.128.152:3306

2024-06-02 22:10
```
MySQL detected
```
Found 2024-06-02 by tcpid
Create report

Open service 47.109.128.152:8088

2024-06-02 16:59

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Sun, 02 Jun 2024 17:00:00 GMT
Content-Length: 1601
Connection: close

Page title: 服务商微管家

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" type="image/x-icon" href="data:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAADAklEQVRYhe2WQWgUZxiGn/ffuFlrLkoIMbOsWQxWikcvPRVFqKaKyQhejKcipfRUPPQUiAcpHrx5kSL1IK0HXQ2SKqXUSo/VHkREZFNjM7OVZSkeQtls43wesqmandmMzUYP7Xub/3/ne56BYf6B/3qUtpi/lh+yhu1GtgtsyKAX1Le4a1VBDVTGdFNZ/RgcCMqrFhj6bihbn/9rLDI7jvFeWtnm5PtOOp3rfudCebjceG0B74o3Zhadxuh7LXAroSq54+FoeCGVwLZrA71zf/MVZiOrAreQdLVnHcceHqjUEgUGpwb7G/XGTbDtHYW/wD3I5rK7Zj6aedIiUJws9s0vzN9aO/gLie6u7g8eHXxUBXBLy41n81+3g0t6CkQpCFGzmxDbvshajIOlF86GY8Go4ZTZF/qVjcJtkXS3jeRd4baEfmWjU2afUOzbb2bD3hVvDMBN2IQjslOJvuJS4Ac3AMJDYWDGeGLXGA8PhQFA4Ac3TFxK6mL25YRNOHdu8uwewwaSi69eZtp8OVr2LLbW5Fv+3OTZPS6KOJJcA8Fhr+TtByhOFQsRnEzqRnCyOFUsAHglb7/gcLvZUaQj8kqbfzFjZ7ti02QO6Gn3VEvGwBxGz4ojxe0ug8KKcCDNwGYPSNc1KLjUg9ck6nHAzFvDQ+AkpTo21yJmzDikW29LQNJ1h3FeqP7m6SzkyH3jQj/8E7j45vlcnPanqw4gp/VfAE9WuKeDdNXW5zZ8Ds3DaNqfrnZJR9P/Ia4GDk7uk/JwufaPAMDvfuUHTJ+R7sj993DTsWA0KL209GrylzePGPrWsFxn2arj9Gk4Gp5f5tSafCm/N7Jn1zvIv71O2aOP/ccPlm+4uHbkonsdwYr7zunjbZvefT8ODtAVe1+k3fbSsSdUQfxq2A6MwbZM6SHYT85xeXbkj+8BAiqJ/VgBwz5sDnsKOtFf6D9zZ+edBYCtpa19ddV3mKxXpk1ERJJqjqhqmcxvswdnk2lxwnGLA6WBn2Xc25BlfPl//P/pdJ4DItcX43LWrMQAAAAASUVORK5CYII=" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>服务商微管家</title>
    <script type="module" crossorigin src="/wxcomponent/assets/index.fb1feb2e.js"></script>
    <link rel="stylesheet" href="/wxcomponent/assets/index.6fc73633.css">
  </head>
  <body>
    <div id="root"></div>
    
  </body>
</html>

Found 2024-06-02 by HttpPlugin

Create report

Data leak

Size

7.9 MB

Collections

Rows

138154

Domain summary

No record