LeakIX - Host 47.115.207.91

Host 47.115.207.91

China

Hangzhou Alibaba Advertising Co.,Ltd.

Linux x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.115.207.91
Port: 3306

First seen 2024-01-26 06:26
Last seen 2024-06-19 22:38
Open for 145 days

Severity: critical
Fingerprint: cf350410ecceb5fd057fc124a438e87cc095da1bb687846fd10898758de21fd4

Databases: 32, row count: 143625, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 919 records
Found table mysql.help_relation with 2218 records
Found table mysql.help_topic with 603 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1885 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2024 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 4 records

Found on 2024-06-19 22:38

7.9 MBytes 143625 rows

Severity: critical
Fingerprint: cf350410ecceb5fdb353a57033e0934035abb22f062cf123d571c1399a19c81b

Databases: 32, row count: 139844, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 821 records
Found table mysql.help_relation with 1440 records
Found table mysql.help_topic with 588 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 2127 records
Found table mysql.time_zone_transition with 123088 records
Found table mysql.time_zone_transition_type with 9572 records
Found table mysql.user with 4 records

Found on 2024-02-20 03:28

7.9 MBytes 139844 rows

Create report

Open service 47.115.207.91:8003

2024-06-20 01:01

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 431
Date: Thu, 20 Jun 2024 01:01:29 GMT
Connection: close

Page title: HTTP Status 404 – Not Found

<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1></body></html>

Found 11 hours ago by HttpPlugin

Create report

Open service 47.115.207.91:3306

2024-06-19 22:38
```
MySQL detected
```
Found 13 hours ago by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-17 22:10
```
MySQL detected
```
Found 3 days ago by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-15 22:53
```
MySQL detected
```
Found 2024-06-15 by tcpid
Create report
Open service 47.115.207.91:22

2024-06-13 10:51
Found 2024-06-13 by SSHOpenPlugin
Create report

Open service 47.115.207.91:8001

2024-06-13 05:38

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: en
Content-Length: 431
Date: Thu, 13 Jun 2024 05:38:30 GMT
Connection: close

Page title: HTTP Status 404 – Not Found

<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1></body></html>

Found 2024-06-13 by HttpPlugin

Create report

Open service 47.115.207.91:3306

2024-06-11 22:01
```
MySQL detected
```
Found 2024-06-11 by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-09 21:32
```
MySQL detected
```
Found 2024-06-09 by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-07 21:37
```
MySQL detected
```
Found 2024-06-07 by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-05 20:04
```
MySQL detected
```
Found 2024-06-05 by tcpid
Create report
Open service 47.115.207.91:3306

2024-06-03 22:06
```
MySQL detected
```
Found 2024-06-03 by tcpid
Create report

Open service 47.115.207.91:8000

2024-06-02 22:27

HTTP/1.1 404 Not Found
Content-Type: application/json
Content-Length: 132
connection: close


{"timestamp":"2024-06-02T22:27:20.318+00:00","path":"/","status":404,"error":"Not Found","message":null,"requestId":"ca4a6754-7292"}

Found 2024-06-02 by HttpPlugin

Create report

Open service 47.115.207.91:22

2024-06-02 12:28
Found 2024-06-02 by SSHOpenPlugin
Create report

Data leak

Size

7.9 MB

Collections

Rows

143625

Domain summary

No record