LeakIX - Host 47.120.51.32

Host 47.120.51.32

China

Hangzhou Alibaba Advertising Co.,Ltd.

linux-glibc2.12 x86_64

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 47.120.51.32
Port: 3306

First seen 2024-05-28 20:14
Last seen 2024-09-19 23:27
Open for 114 days

Severity: critical
Fingerprint: cf350410ecceb5fd6567dbac8f0520c4651ca3f3650de977b71cce2dfcd0dcb9

Databases: 32, row count: 4106, size: 2.4 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 921 records
Found table mysql.help_relation with 2460 records
Found table mysql.help_topic with 591 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 4 records

Found on 2024-09-19 23:27

2.4 MBytes 4106 rows

Severity: critical
Fingerprint: cf350410ecceb5fd78b4bebff34254d7bba7f5b2bd1fdac04378d47e94b9fec3

Databases: 32, row count: 4105, size: 2.4 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 50 records
Found table mysql.help_keyword with 921 records
Found table mysql.help_relation with 2460 records
Found table mysql.help_topic with 591 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 0 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 0 records
Found table mysql.time_zone_transition with 0 records
Found table mysql.time_zone_transition_type with 0 records
Found table mysql.user with 3 records

Found on 2024-08-31 21:54

2.4 MBytes 4105 rows

Create report

Open service 47.120.51.32:3306

2024-09-15 22:26
```
MySQL detected
```
Found 2024-09-15 by tcpid
Create report
Open service 47.120.51.32:3306

2024-09-13 20:39
```
MySQL detected
```
Found 2024-09-13 by tcpid
Create report

Open service 47.120.51.32:8086

2024-09-12 05:51

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Transfer-Encoding: chunked
Date: Thu, 12 Sep 2024 05:52:00 GMT
Connection: close

Page title: 登录

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>登录</title>
</head>
<style>
    body{
        background-image: url("/img/bg.jpg");
        background-position: center;
        background-size: 100%;
    }
</style>
<style>
    .主体区 {
        padding: 150px;
        display: flex;
        align-items: center;
        flex-direction: column;
    }
    .登录框 {
        width: 350px;
        height: 300px;
        padding-top: 50px;
        padding-bottom: 50px;

        border-radius: 10px;
        background-color: rgba(255, 255, 255, 0.7);
    }

    form {
        height: 100%;

        display: flex;
        align-items: center;
        flex-direction: column;
        justify-content: space-between;
    }

    h2 {
        font-size: 20px;
    }

    span {
        font-size: 20px;
        display: inline-block;
        width: 90px;
        text-align: left;
    }

    .提交 {
        width: 260px;
        height: 30px;

        background: rgba(77,132,226);
        color: white;
        border: none;
    }

    .text {
        width: 165px;
        height: 25px;
        padding-left: 10px;

        border-radius: 5px;
        border: none;
    }
</style>
<body>
<div class="主体区">
<!--    <img th:src="@{../img/bg.jpg}">-->
    <div class="登录框">
        <form action="/login" method="post">
            <h2>账号密码登录</h2>
            <div>
                <span>用户名</span>
                <input type="text" class="text" name ="userName" placeholder="李四">
            </div>
            <div>
                <span>密码</span>
                <input type="password" class="text" name="password" placeholder="123123">
            </div>
            <div>
                <input type="submit" class="提交" value="登录">
            </div>
            <div>
                <input type="button" class="提交" value="注册" onclick="window.location.href='/toUserss'">
            </div>
        </form>
    </div>
</div>
</body>
</html>

Found 2024-09-12 by HttpPlugin

Create report

Open service 47.120.51.32:3306

2024-09-09 23:51
```
MySQL detected
```
Found 2024-09-09 by tcpid
Create report
Open service 47.120.51.32:3306

2024-09-07 21:46
```
MySQL detected
```
Found 2024-09-07 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-17 20:31
```
MySQL detected
```
Found 2024-08-17 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-15 21:17
```
MySQL detected
```
Found 2024-08-15 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-13 21:24
```
MySQL detected
```
Found 2024-08-13 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-11 20:45
```
MySQL detected
```
Found 2024-08-11 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-09 20:08
```
MySQL detected
```
Found 2024-08-09 by tcpid
Create report
Open service 47.120.51.32:3306

2024-08-07 21:21
```
MySQL detected
```
Found 2024-08-07 by tcpid
Create report

Data leak

Size

2.4 MB

Collections

Rows

4106

Domain summary

No record