Host 94.200.189.229
United Arab Emirates
Software information
Apache 2.2.22
tcp/80
PHP 5.3.13
tcp/80
-
MySQL is publicly available
MySQL is currently open without authentication.
Additionally a ransom note has been found in the dataset which indicates it has been compromised
This results in all the database data made available publicly.
First seen 2023-11-08 21:50
Last seen 2023-11-16 16:17
Open for 7 days-
Severity: critical
Fingerprint: cf350410ecceb5fde2a495bf5196054a0184a4c8a84abde6b9c5d36277bda534Databases: 25, row count: 2054, size: 586.0 kB Found table mysql.columns_priv with 0 records Found table mysql.db with 2 records Found table mysql.event with 0 records Found table mysql.func with 0 records Found table mysql.general_log with 2 records Found table mysql.help_category with 38 records Found table mysql.help_keyword with 465 records Found table mysql.help_relation with 1029 records Found table mysql.help_topic with 508 records Found table mysql.host with 0 records Found table mysql.ndb_binlog_index with 0 records Found table mysql.plugin with 0 records Found table mysql.proc with 0 records Found table mysql.procs_priv with 0 records Found table mysql.proxies_priv with 1 records Found table mysql.servers with 0 records Found table mysql.slow_log with 2 records Found table mysql.tables_priv with 0 records Found table mysql.time_zone with 0 records Found table mysql.time_zone_leap_second with 0 records Found table mysql.time_zone_name with 0 records Found table mysql.time_zone_transition with 0 records Found table mysql.time_zone_transition_type with 0 records Found table mysql.user with 5 records Found table readme_to_recover_a.recover_your_data with 2 records
Found on 2023-11-16 16:17586.0 kBytes 2054 rows
-
-
Open service 94.200.189.229:445
2024-05-27 21:02
SMB NTLMSSP handshake results: Found Windows 10.0 build 17763 NbComputerName: K2293748 NbDomainName: K2293748 DNSComputerName: K2293748 DNSDomainName: K2293748
Found 22 hours ago by SmbPluginCreate report
-
Open service 94.200.189.229:80
2024-05-25 15:20
HTTP/1.1 200 OK Date: Sat, 25 May 2024 15:20:13 GMT Server: Apache/2.2.22 (Win32) PHP/5.3.13 Content-Length: 1119 Connection: close Content-Type: text/html;charset=UTF-8 Page title: Index of / <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <html> <head> <title>Index of /</title> </head> <body> <h1>Index of /</h1> <table><tr><th><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=D">Name</a></th><th><a href="?C=M;O=A">Last modified</a></th><th><a href="?C=S;O=A">Size</a></th><th><a href="?C=D;O=A">Description</a></th></tr><tr><th colspan="5"><hr></th></tr> <tr><td valign="top"><img src="/icons/unknown.gif" alt="[ ]"></td><td><a href="3ac01de154ee75b5f841ad2a612a141e.php">3ac01de154ee75b5f841..></a></td><td align="right">10-Nov-2023 22:23 </td><td align="right">128 </td><td> </td></tr> <tr><td valign="top"><img src="/icons/unknown.gif" alt="[ ]"></td><td><a href="empty">empty</a> </td><td align="right">16-Jul-2014 12:56 </td><td align="right"> 0 </td><td> </td></tr> <tr><td valign="top"><img src="/icons/folder.gif" alt="[DIR]"></td><td><a href="music/">music/</a> </td><td align="right">11-Aug-2021 13:34 </td><td align="right"> - </td><td> </td></tr> <tr><th colspan="5"><hr></th></tr> </table> </body></html>
Found 2024-05-25 by HttpPluginCreate report