By searching for results, you agree with our Terms of service
Found 68710 results for
+dataset.ransom_notes:btc -country:"Russia"

Looking for more results ? Register a free account

Countries

  • China 33444
  • United States 10621
  • Germany 3526
  • India 2435
  • France 2226
  • Singapore 2093
  • South Korea 1830
  • Hong Kong 1474
  • United Kingdom 881
  • Japan 846

Sources

  • ElasticSearchOpenPlugin 42675
  • MysqlOpenPlugin 26035

Network

  • Hangzhou Alibaba Advertising Co.,Ltd. 15315
  • Shenzhen Tencent Computer Systems Company Limited 10513
  • AMAZON-02 5981
  • GOOGLE-CLOUD-PLATFORM 3245
  • DIGITALOCEAN-ASN 2189
  • OVH SAS 2179
  • Huawei Cloud Service data center 2079
  • AMAZON-AES 2058
  • Hetzner Online GmbH 1512
  • MICROSOFT-CORP-MSN-AS-BLOCK 1411

IP Ranges

  • 47.96.0.0/12 3381
  • 124.220.0.0/14 1353
  • 43.136.0.0/13 1201
  • 47.92.0.0/14 922
  • 39.104.0.0/14 920
  • 101.42.0.0/15 728
  • 121.40.0.0/14 711
  • 47.112.0.0/13 706
  • 134.236.0.0/16 682
  • 120.24.0.0/14 660

ASN: 35916
153 events in 307 days
Leak size: 7.9 MB
Open ports: 3307
Databases: 39, row count: 136244, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with...
Ransom notes :

All your data is backed up. You must pay 0.0100 BTC to bc1qfnu6j2n54k58uduufzuthhy7qn3sx7zalyuytz In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/yotuqu)
            

ASN: 31898
211 events in 593 days
Leak size: 7.9 MB
Open ports: 3307
Databases: 39, row count: 138188, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv wi...
Ransom notes :

All your data is backed up. You must pay 0.03 BTC to 14B8iRn9k76fTmgvax4ZPyJDWqM67nrA8v In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data2)
            

ASN: 16276
58 events in 119 days
Leak size: 37.5 MB
Open ports: 8080
Databases: 93, row count: 395590, size: 37.5 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found ta...
Ransom notes :

1All your data is backed up. You must pay 0.03 BTC to bc1qqxv8jeqflhphladvhjk5kftlv8n0g086x4tcyd In 48 hours, your data will be publicly disclosed and deleted. Your DBCODE = 2YE9T (more information: go to https://is.gd/XYePcT)
            

ASN: 62904
58 events in 119 days
Leak size: 2.4 MB
Open ports: 3307
Databases: 49, row count: 5084, size: 2.4 MB
Found table mysql.columns_priv with 0 records
Found table mysql.column_stats with 0 records
Found ta...
Ransom notes :

All your data is backed up. You must pay 0.0127 BTC to 1KYGjQ5AnfaAU7mQLFVENptRewE1Sn7th7 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2fix.info/mysql)
            

ASN: 44973
197 events in 575 days
Leak size: 1.3 GB
Open ports: 9200
Indices: 36, document count: 2498622, size: 1.3 GB
Found index opnsense_329 with 92933 documents (49.7 MB)
Found index read_me with 1 documents (...
Ransom notes :

{"text":"Your DB has been back up. The only way of recovery is you must send 0.0057 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}
            
Analysis helper :
                
estk --url=http://93.88.227.18:9200 list
            

ASN: 396982
162 events in 462 days
Leak size: 43.6 MB
Open ports: 9200
Indices: 14, document count: 41, size: 43.6 MB
Found index read_me with 1 documents (4.5 kB)
Found index collateral-appraisal with 0 documents (2...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0054 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+525rs@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 525RS"}
            
Analysis helper :
                
estk --url=http://34.128.98.49:9200 list
            

ASN: 11172
73 events in 951 days
Leak size: 60.9 MB
Open ports: 9200
Indices: 4, document count: 14082, size: 60.9 MB
Found index folio_authority_diku with 0 documents (1.1 kB)
Found index folio_instance_diku with ...
Analysis helper :
                
estk --url=http://189.206.56.23:9200 list
            

ASN: 53850
173 events in 508 days
Leak size: 39.1 MB
Open ports: 9200
Indices: 2, document count: 41, size: 39.1 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0045 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5mxfn@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5MXFN"}
            
Analysis helper :
                
estk --url=http://192.200.100.19:9200 list
            

ASN: 12297
223 events in 788 days
Leak size: 272.3 MB
Open ports: 9200
Indices: 22, document count: 449209, size: 272.3 MB
Found index .monitoring-es-7-2025.04.14 with 156478 documents (87.9 MB)
Found index .monitori...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0052 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5icv5@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5ICV5"}
            
Analysis helper :
                
estk --url=http://178.160.249.47:9200 list
            

ASN: 37153
198 events in 795 days
Leak size: 4.3 kB
Open ports: 9205
Indices: 1, document count: 1, size: 4.3 kB
Found index read-me with 1 documents (4.3 kB)
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qmheh2ukafmsa8y0hxj64lalddzxwj0sfaas7uu. Once paid please email dar0kmdb@tutanota.com with code: `aLEfI8` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://197.189.199.2:9205 list
            

ASN: 28753
222 events in 735 days
Leak size: 43.6 MB
Open ports: 9200
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0054 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5k5bp@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5K5BP"}
            
Analysis helper :
                
estk --url=http://37.58.58.161:9200 list
            

ASN: 134926
236 events in 1382 days
Leak size: 12.7 kB
Open ports: 9200
Indices: 2, document count: 2, size: 12.7 kB
Found index .kibana_1 with 1 documents (7.6 kB)
Found index read-me with 1 documents (5.1 kB)
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://103.209.146.163:9200 list
            

ASN: 6364
71 events in 150 days
Leak size: 5.4 kB
Open ports: 9200
Indices: 1, document count: 1, size: 5.4 kB
Found index read_me with 1 documents (5.4 kB)
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0039 BTC to bc1q8r9zejh0ch22frh4pfdx2tlwf864sv42756yem In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/rudata5)After paying send mail to us: dzen+5y3k0@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5Y3K0"}
            
Analysis helper :
                
estk --url=http://209.208.27.25:9200 list
            

ASN: 16276
213 events in 657 days
Leak size: 4.6 kB
Open ports: 9200
Indices: 1, document count: 1, size: 4.6 kB
Found index read_me with 1 documents (4.6 kB)
Ransom notes :

{"message":"All your data is backed up. You must pay 0.005 BTC to 16w2xEN9pcjFgECWH1LDVps4xV9m3nUMBN In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data5)After paying send mail to us: rambler+42irw@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 52IRW"}
            
Analysis helper :
                
estk --url=http://139.99.69.89:9200 list
            

ASN: 5410
82 events in 169 days
Leak size: 43.6 MB
Open ports: 9200
Indices: 3, document count: 42, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index website with 1 documents (4.0 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+54pej@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 54PEJ"}
            
Analysis helper :
                
estk --url=http://31.32.223.10:9200 list
            

ASN: 31898
85 events in 168 days
Leak size: 43.6 MB
Open ports: 9200
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qfnu6j2n54k58uduufzuthhy7qn3sx7zalyuytz In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5vmti@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5VMTI"}
            
Analysis helper :
                
estk --url=http://129.154.242.134:9200 list
            

ASN: 24940
96 events in 628 days
Leak size: 39.3 MB
Open ports: 9201
Indices: 3, document count: 64, size: 39.3 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index wiki with 23 documents (107.1 ...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qmheh2ukafmsa8y0hxj64lalddzxwj0sfaas7uu. Once paid please email dar0kmdb@tutanota.com with code: `aLEfI8` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://65.109.26.35:9201 list
            

ASN: 60781
19 events in 49 days
Leak size: 39.1 MB
Open ports: 9200
Indices: 2, document count: 41, size: 39.1 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0056 BTC to bc1q50kkrj2zr2l0nm8u8ygscphtxw02xjmkn3smv4 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5z00e@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5Z00E"}
            
Analysis helper :
                
estk --url=http://95.211.96.182:9200 list
            

ASN: 4787
184 events in 735 days
Leak size: 848.5 kB
Open ports: 9200
Indices: 5, document count: 1091, size: 848.5 kB
Found index payments_production with 9 documents (47.4 kB)
Found index orders_production_2024010...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://202.158.11.50:9200 list
            

ASN: 45090
49 events in 147 days
Leak size: 43.6 MB
Open ports: 9200
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5f1dv@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5F1DV"}
            
Analysis helper :
                
estk --url=http://101.34.249.99:9200 list