LeakIX - Host 60.204.251.122

Host 60.204.251.122

China

Huawei Cloud Service data center

Linux x86_64

Kafka instance is public

The Kafka instance is available to the public without authentication.

An attacker could connect to the queue to extract private/confidential information in real-time.

IP: 60.204.251.122
Port: 9092

First seen 2024-09-10 00:18
Last seen 2024-11-11 22:44
Open for 62 days
- Fingerprint: 43224224eeda9da960defeaa4875bc2d47750413d8750acbd8750acbd8750acb
```
NoAuth
Found topic test2
Found topic test1
Found topic __consumer_offsets
```
  Found on 2024-11-11 22:44
- Fingerprint: 43224224eeda9da960defeaa4875bc2e9107862e47bc8f6947bc8f6947bc8f69
```
NoAuth
Found topic test1
Found topic __consumer_offsets
Found topic test2
```
  Found on 2024-11-05 23:26
- Fingerprint: 43224224eeda9da960defeaa0efe442a80db44ad49c6459349c6459349c64593
```
NoAuth
Found topic __consumer_offsets
Found topic test2
Found topic test1
```
  Found on 2024-10-31 23:01
Create report

MySQL is publicly available

MySQL is currently open without authentication.

Additionally a ransom note has been found in the dataset which indicates it has been compromised

This results in all the database data made available publicly.

IP: 60.204.251.122
Port: 3307

First seen 2024-09-11 15:11
Last seen 2024-11-11 21:54
Open for 61 days

Severity: critical
Fingerprint: cf350410ecceb5fdc2bdafed57a1384100db500cc066180e21b4f734a9f51b41

Databases: 32, row count: 137985, size: 7.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 646 records
Found table mysql.help_relation with 706 records
Found table mysql.help_topic with 874 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 2074 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1934 records
Found table mysql.time_zone_transition with 122602 records
Found table mysql.time_zone_transition_type with 9025 records
Found table mysql.user with 4 records

Found on 2024-11-11 21:54

7.8 MBytes 137985 rows

Severity: critical
Fingerprint: cf350410ecceb5fd22e36290e987bf4a89b287c9e8183d41e55571f7a1e4b779

Databases: 32, row count: 137625, size: 7.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.engine_cost with 2 records
Found table mysql.event with 0 records
Found table mysql.func with 0 records
Found table mysql.general_log with 2 records
Found table mysql.gtid_executed with 0 records
Found table mysql.help_category with 40 records
Found table mysql.help_keyword with 643 records
Found table mysql.help_relation with 2173 records
Found table mysql.help_topic with 633 records
Found table mysql.innodb_index_stats with 10 records
Found table mysql.innodb_table_stats with 3 records
Found table mysql.ndb_binlog_index with 0 records
Found table mysql.plugin with 0 records
Found table mysql.proc with 48 records
Found table mysql.procs_priv with 0 records
Found table mysql.proxies_priv with 1 records
Found table mysql.server_cost with 6 records
Found table mysql.servers with 0 records
Found table mysql.slave_master_info with 0 records
Found table mysql.slave_relay_log_info with 0 records
Found table mysql.slave_worker_info with 0 records
Found table mysql.slow_log with 2 records
Found table mysql.tables_priv with 2 records
Found table mysql.time_zone with 1876 records
Found table mysql.time_zone_leap_second with 0 records
Found table mysql.time_zone_name with 1086 records
Found table mysql.time_zone_transition with 122602 records
Found table mysql.time_zone_transition_type with 8488 records
Found table mysql.user with 4 records

Found on 2024-09-17 21:20

7.8 MBytes 137625 rows

Create report

Open service 60.204.251.122:3307

2024-11-01 00:27
```
MySQL detected
```
Found 2024-11-01 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-30 01:20
```
MySQL detected
```
Found 2024-10-30 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-21 23:01
```
MySQL detected
```
Found 2024-10-21 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-19 21:02
```
MySQL detected
```
Found 2024-10-19 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-17 23:53
```
MySQL detected
```
Found 2024-10-17 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-15 23:30
```
MySQL detected
```
Found 2024-10-15 by tcpid
Create report
Open service 60.204.251.122:3307

2024-10-01 22:24
```
MySQL detected
```
Found 2024-10-01 by tcpid
Create report
Open service 60.204.251.122:3307

2024-09-29 21:23
```
MySQL detected
```
Found 2024-09-29 by tcpid
Create report
Open service 60.204.251.122:3307

2024-09-27 22:09
```
MySQL detected
```
Found 2024-09-27 by tcpid
Create report

Data leak

Size

7.8 MB

Collections

Rows

137985

Domain summary

No record

Host 60.204.251.122

China

Kafka instance is public

MySQL is publicly available

Data leak

Domain summary