LeakIX - Host 54.254.78.97

Host 54.254.78.97

Singapore

AMAZON-02

Linux x86_64

Software information

nginx nginx 1.24.0

tcp/8111

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 54.254.78.97
Port: 3306

First seen 2022-04-16 07:58
Last seen 2022-05-21 01:24
Open for 34 days

Severity: critical
Fingerprint: cf350410ecceb5fd99f3b4221da65c633b0a18ee0657581b1bd67bba3ebd2d6f

Databases: 38, row count: 142891, size: 7.9 MB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found table mysql.db with 3 records
Found table mysql.default_roles with 0 records
Found table mysql.engine_cost with 2 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.global_grants with 71 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 53 records
Found table mysql.help_keyword with 885 records
Found table mysql.help_relation with 1938 records
Found table mysql.help_topic with 676 records
Found table mysql.innodb_index_stats with 9 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.password_history with 0 records
Found table mysql.plugin with 0 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.replication_asynchronous_connection_failover with 0 records
Found table mysql.replication_asynchronous_connection_failover_managed with 0 records
Found table mysql.replication_group_configuration_version with 1 records
Found table mysql.replication_group_member_actions with 2 records
Found table mysql.role_edges with 0 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1311 records
Found table mysql.time_zone_transition with 125689 records
Found table mysql.time_zone_transition_type with 10153 records
Found table mysql.user with 6 records

Found on 2022-05-21 01:24

7.9 MBytes 142891 rows

Severity: high
Fingerprint: cf350410ecceb5fdebd6b760d92c9051d92c9051d92c9051d92c9051d92c9051
```
Databases: 1, row count: 2, size: 16.4 kB
Found table Z_README_TO_RECOVER.RECOVER_YOUR_DATA with 2 records
```
Found on 2022-04-16 07:58

16.4 kBytes 2 rows

Create report

Open service 54.254.78.97:8111

2024-06-21 01:46

HTTP/1.1 500 Internal Server Error
Server: nginx/1.24.0
Date: Fri, 21 Jun 2024 01:46:18 GMT
Content-Type: text/html
Content-Length: 579
Connection: close

Page title: 500 Internal Server Error

<html>
<head><title>500 Internal Server Error</title></head>
<body>
<center><h1>500 Internal Server Error</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 4 hours ago by HttpPlugin

Create report

Open service 54.254.78.97:8111

2024-06-13 21:27

HTTP/1.1 500 Internal Server Error
Server: nginx/1.24.0
Date: Thu, 13 Jun 2024 21:27:52 GMT
Content-Type: text/html
Content-Length: 579
Connection: close

Page title: 500 Internal Server Error

<html>
<head><title>500 Internal Server Error</title></head>
<body>
<center><h1>500 Internal Server Error</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-06-13 by HttpPlugin

Create report

Open service 54.254.78.97:8111

2024-06-13 09:51

HTTP/1.1 500 Internal Server Error
Server: nginx/1.24.0
Date: Thu, 13 Jun 2024 09:51:20 GMT
Content-Type: text/html
Content-Length: 579
Connection: close

Page title: 500 Internal Server Error

<html>
<head><title>500 Internal Server Error</title></head>
<body>
<center><h1>500 Internal Server Error</h1></center>
<hr><center>nginx/1.24.0</center>
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->

Found 2024-06-13 by HttpPlugin

Create report

www.UCCPBX.comwww.PBX.com

Fingerprint:

1cd9ecf2f9e01e3fa0d17105b2998b80ec04f5193b60180da5e390d55fe10586

CN:

UCCPBX

Key:

RSA-4096

Issuer:

PBX

Not before:

2021-08-13 07:56

Not after:

2121-07-20 07:56

Data leak

Size

7.9 MB

Collections

Rows

142891

Domain summary

No record