Search results for +plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +asn:"9123" +events.leak.severity:"critical"

Found 19 results for
+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +asn:"9123" +events.leak.severity:"critical"

Looking for more results ? Register a free account

Countries

Russia 19

Sources

ElasticSearchOpenPlugin 19

Network

TimeWeb Ltd. 19

IP Ranges

185.200.240.0/22 2
89.223.120.0/21 2
89.223.64.0/21 2
176.57.208.0/22 1
185.104.114.0/24 1
193.164.149.0/24 1
193.164.150.0/24 1
217.25.88.0/23 1
37.77.104.0/22 1
78.40.218.0/23 1

193.164.149.3 critical

Russia TimeWeb Ltd. 2023-09-02 05:42 2024-06-01 22:24
831cb76b8e05df466d47859da07eec4e91b97e7491b97e7491b97e7491b97e74
http://193.164.149.3:9200

ASN: 9123
39 events in 273 days
Leak size: 519.7 kB
Open ports: 9200

Indices: 2, document count: 8086, size: 519.7 kB
Found index shop with 8085 documents (514.4 kB)
Found index read-me with 1 documents (5.3 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://193.164.149.3:9200 list

Found by ElasticSearchOpenPlugin

Create report

94.228.116.45 critical

Russia TimeWeb Ltd. 2023-02-15 21:27 2024-06-01 21:39
831cb76b8e05df46462178bfe430723abbf1c8296af099eed24c4475dd20b859
http://94.228.116.45:9200

ASN: 9123
71 events in 472 days
Leak size: 41.8 MB
Open ports: 9200

Indices: 5, document count: 74410, size: 41.8 MB
Found index app_institutions with 782 documents (570.7 kB)
Found index app_events with 1 documen...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://94.228.116.45:9200 list

Found by ElasticSearchOpenPlugin

Create report

185.200.240.244 critical

Russia TimeWeb Ltd. 2021-06-26 18:26 2024-06-01 21:37
831cb76b8e05df468ce88ef0fbeceaa4992ccf551d87cfc9247215b8734ff447
http://185.200.240.244:9200

ASN: 9123
81 events in 1071 days
Leak size: 5.2 MB
Open ports: 9200

Indices: 7, document count: 9147, size: 5.2 MB
Found index catalog-sections with 526 documents (172.7 kB)
Found index discounts-elements with 0 d...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://185.200.240.244:9200 list

Found by ElasticSearchOpenPlugin

Create report

89.223.71.65 critical

Russia TimeWeb Ltd. 2023-01-13 01:18 2024-05-12 18:09
831cb76b8e05df46e8cc81f3750718b5d28421e50399dc08920397ed920397ed
http://89.223.71.65:5601

ASN: 9123
33 events in 485 days
Leak size: 34.0 MB
Open ports: 5601

Indices: 3, document count: 6039, size: 34.0 MB
Through Kibana endpoint
Found index .geoip_databases with 34 documents (33.4 MB)
Found index read...

Analysis helper :

                
estk --url=http://89.223.71.65:5601 list

Found by ElasticSearchOpenPlugin

Create report

89.223.71.65 critical

Russia TimeWeb Ltd. 2022-03-30 12:01 2024-05-12 18:08
831cb76b8e05df46e8cc81f3a468727f5beb78f67c9398af7c9398af7c9398af
http://89.223.71.65:9200

ASN: 9123
53 events in 774 days
Leak size: 34.0 MB
Open ports: 9200

Indices: 3, document count: 6039, size: 34.0 MB
Found index .geoip_databases with 34 documents (33.4 MB)
Found index read_me with 1 documents (4....

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+43u61@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 53U61"}

Analysis helper :

                
estk --url=http://89.223.71.65:9200 list

Found by ElasticSearchOpenPlugin

Create report

94.228.124.241 critical

Russia TimeWeb Ltd. 2023-02-02 10:27 2024-02-01 16:26
831cb76b8e05df4634737a2ad981fd5694d84052e9d54e0a6458318164583181
http://94.228.124.241:9200

ASN: 9123
45 events in 364 days
Leak size: 260.2 MB
Open ports: 9200

Indices: 4, document count: 254736, size: 260.2 MB
Found index graylog_0 with 254735 documents (260.2 MB)
Found index gl-events_0 with 0 document...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://94.228.124.241:9200 list

Found by ElasticSearchOpenPlugin

Create report

78.40.219.104 critical

Russia TimeWeb Ltd. 2023-02-17 00:21 2024-01-11 04:01
831cb76b8e05df4650274af554753629f6e89698f6e89698f6e89698f6e89698
http://78.40.219.104:9200

ASN: 9123
31 events in 328 days
Leak size: 449.1 kB
Open ports: 9200

Indices: 2, document count: 1063, size: 449.1 kB
Found index price with 1062 documents (444.8 kB)
Found index read-me with 1 documents (4.3 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `h7pEfd` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://78.40.219.104:9200 list

Found by ElasticSearchOpenPlugin

Create report

90.156.227.8 critical

Russia TimeWeb Ltd. 2023-02-20 18:08 2024-01-09 16:13
831cb76b8e05df4615a1b7a454cf88b53f3b27c7fe9612c295a56fb095a56fb0
http://90.156.227.8:9200

ASN: 9123
26 events in 322 days
Leak size: 6.2 MB
Open ports: 9200

Indices: 4, document count: 2504, size: 6.2 MB
Found index pro_backend_news-test-1.0.0 with 2449 documents (5.8 MB)
Found index pro_backend_selec...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `eNO2CN` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://90.156.227.8:9200 list

Found by ElasticSearchOpenPlugin

Create report

176.57.211.113 critical

Russia TimeWeb Ltd. 2023-08-18 19:39 2023-11-05 20:52
831cb76b8e05df463faf83be1470db62a9d0512e975a9cd1975a9cd1975a9cd1
http://176.57.211.113:9200

ASN: 9123
25 events in 79 days
Leak size: 65.9 MB
Open ports: 9200

Indices: 3, document count: 4042, size: 65.9 MB
Found index .geoip_databases with 42 documents (42.3 MB)
Found index read-me with 1 documents (4....

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `NztgbT` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://176.57.211.113:9200 list

Found by ElasticSearchOpenPlugin

Create report

92.53.107.228 critical

Russia TimeWeb Ltd. 2021-06-26 03:10 2023-10-26 14:47
831cb76b8e05df4660b4a2215dc56c85d597f652d597f652d597f652d597f652
http://92.53.107.228:9200

ASN: 9123
42 events in 852 days
Leak size: 317.4 kB
Open ports: 9200

Indices: 2, document count: 1372, size: 317.4 kB
Found index read_me with 1 documents (5.5 kB)
Found index websearch with 1371 documents (311.8 k...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 14UCEfQG5vs7kZAbFrcZ7K4BCiEa48mdFu . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://92.53.107.228:9200 list

Found by ElasticSearchOpenPlugin

Create report

185.104.114.149 critical

Russia TimeWeb Ltd. 2021-10-13 00:54 2023-10-10 23:40
831cb76b8e05df46c7e8f05a29a83df7edbddc6603465b0dbe571d8fede5bfaa
http://185.104.114.149:9200

ASN: 9123
47 events in 727 days
Leak size: 1.2 MB
Open ports: 9200

Indices: 12, document count: 1026, size: 1.2 MB
Found index ztp with 1 documents (8.4 kB)
Found index api with 1 documents (7.7 kB)
Found index o...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://185.104.114.149:9200 list

Found by ElasticSearchOpenPlugin

Create report

37.77.105.245 critical

Russia TimeWeb Ltd. 2021-11-17 08:32 2023-10-10 23:38
831cb76b8e05df4652baf998d002be3a09ba87573ffb61c6e5d73306f56fba7e
http://37.77.105.245:9200

ASN: 9123
38 events in 692 days
Leak size: 1.4 MB
Open ports: 9200

Indices: 12, document count: 1026, size: 1.4 MB
Found index mansions with 194 documents (398.2 kB)
Found index ztp with 1 documents (8.4 kB)
Foun...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://37.77.105.245:9200 list

Found by ElasticSearchOpenPlugin

Create report

89.223.124.45 critical

Russia TimeWeb Ltd. 2021-09-20 16:16 2023-09-10 09:35
831cb76b8e05df4678d0569b612b3e089f5c97efb4191eba245c849aa0625339
http://89.223.124.45:9200

ASN: 9123
32 events in 719 days
Leak size: 1.1 MB
Open ports: 9200

Indices: 12, document count: 1026, size: 1.1 MB
Found index ztp with 1 documents (8.4 kB)
Found index api with 1 documents (7.7 kB)
Found index o...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://89.223.124.45:9200 list

Found by ElasticSearchOpenPlugin

Create report

193.164.150.244 critical

Russia TimeWeb Ltd. 2021-09-10 00:34 2023-09-10 09:27
831cb76b8e05df46c7e8f05a0783af75c47b92e2f163a1e5384576e7806cea74
http://193.164.150.244:9200

ASN: 9123
47 events in 730 days
Leak size: 1.2 MB
Open ports: 9200

Indices: 12, document count: 1026, size: 1.2 MB
Found index object with 197 documents (290.0 kB)
Found index ztp with 1 documents (8.4 kB)
Found ...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://193.164.150.244:9200 list

Found by ElasticSearchOpenPlugin

Create report

85.193.87.112 critical

Russia TimeWeb Ltd. 2023-05-08 02:13 2023-08-16 10:22
831cb76b8e05df463f2bbcbab4e25686d493231a689934ba689934ba689934ba
http://85.193.87.112:9200

ASN: 9123
7 events in 100 days
Leak size: 447.0 MB
Open ports: 9200

Indices: 3, document count: 106709, size: 447.0 MB
Found index .geoip_databases with 42 documents (42.3 MB)
Found index read-me with 1 documents ...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `NztgbT` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://85.193.87.112:9200 list

Found by ElasticSearchOpenPlugin

Create report

185.200.241.245 critical

Russia TimeWeb Ltd. 2021-09-12 06:46 2023-07-27 00:16
831cb76b8e05df469d219cf6b48ebf67d2780e1c7c4eb51b205c6a212b7af037
http://185.200.241.245:9200

ASN: 9123
19 events in 682 days
Leak size: 1.2 MB
Open ports: 9200

Indices: 12, document count: 1031, size: 1.2 MB
Found index mansions with 196 documents (327.9 kB)
Found index ztp with 1 documents (8.4 kB)
Foun...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://185.200.241.245:9200 list

Found by ElasticSearchOpenPlugin

Create report

94.228.120.199 critical

Russia TimeWeb Ltd. 2023-02-04 09:51 2023-07-26 22:51
831cb76b8e05df4613a3a4d230534c5b68a4c93aa6e70535541d0438efe80dfe
http://94.228.120.199:9200

ASN: 9123
8 events in 172 days
Leak size: 60.4 MB
Open ports: 9200

Indices: 7, document count: 32960, size: 60.4 MB
Found index .geoip_databases with 42 documents (42.2 MB)
Found index cleverence-server-cloudinst...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.008 BTC to 1Kv1RDK6BGdejeavuTnjNk6zkG9bHj54rD In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://cutt.ly/rambler5)After paying send mail to us: rambler+58mqn@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 58MQN"}

Analysis helper :

                
estk --url=http://94.228.120.199:9200 list

Found by ElasticSearchOpenPlugin

Indices: 37, document count: 195314, size: 174.8 MB
Through Kibana endpoint
Found index cleverence-server-cloudinstance-1b123776e805-2022-11 with...

Analysis helper :

                
estk --url=http://217.25.89.131:5601 list

Found by ElasticSearchOpenPlugin

Indices: 4, document count: 46203, size: 159.1 MB
Through Kibana endpoint
Found index .geoip_databases with 41 documents (44.0 MB)
Found index re...

Analysis helper :

                
estk --url=http://89.223.125.5:5601 list

Found by ElasticSearchOpenPlugin