nginx
tcp/443
MySQL is currently open without authentication.
Additionally a ransom note has been found in the dataset which indicates it has been compromised
This results in all the database data made available publicly.
Severity: critical
Fingerprint: cf350410ecceb5fd962edbf143691eecbf00468bf8cfbcdf7bea5c655b8310fe
Databases: 37, row count: 5396, size: 42.0 MB Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records Found table mysql.columns_priv with 0 records Found table mysql.db with 2 records Found table mysql.engine_cost with 2 records Found table mysql.event with 0 records Found table mysql.func with 0 records Found table mysql.general_log with 2 records Found table mysql.gtid_executed with 0 records Found table mysql.help_category with 48 records Found table mysql.help_keyword with 821 records Found table mysql.help_relation with 1809 records Found table mysql.help_topic with 504 records Found table mysql.innodb_index_stats with 25 records Found table mysql.innodb_table_stats with 8 records Found table mysql.ndb_binlog_index with 0 records Found table mysql.plugin with 0 records Found table mysql.proc with 48 records Found table mysql.procs_priv with 0 records Found table mysql.proxies_priv with 1 records Found table mysql.server_cost with 6 records Found table mysql.servers with 0 records Found table mysql.slave_master_info with 0 records Found table mysql.slave_relay_log_info with 0 records Found table mysql.slave_worker_info with 0 records Found table mysql.slow_log with 2 records Found table mysql.tables_priv with 2 records Found table mysql.time_zone with 0 records Found table mysql.time_zone_leap_second with 0 records Found table mysql.time_zone_name with 0 records Found table mysql.time_zone_transition with 0 records Found table mysql.time_zone_transition_type with 0 records Found table mysql.user with 4 records Found table tikshare.tb_admin_user with 0 records Found table tikshare.tb_ads_info with 7 records Found table tikshare.tb_collections_opensea with 2103 records Found table tikshare.tb_nft_info with 0 records Found table tikshare.tb_order_info with 0 records
Open service 47.251.8.193:3306
2024-06-15 01:33
MySQL detected
Open service 47.251.8.193:3306
2024-06-13 14:52
MySQL detected
Open service 47.251.8.193:443
2024-06-13 08:26
HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 13 Jun 2024 08:27:06 GMT Content-Type: text/html Content-Length: 178 Connection: close Location: https://www.swapx.com Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>