Search results for +plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +country:"Australia" +asn:"20473"

Found 7 results for
+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +country:"Australia" +asn:"20473"

Looking for more results ? Register a free account

Countries

Australia 7

Sources

ElasticSearchOpenPlugin 7

Network

AS-CHOOPA 7

IP Ranges

149.28.128.0/17 4
139.180.128.0/18 2
207.148.64.0/18 1

149.28.180.135 high

Australia AS-CHOOPA 2023-04-11 07:22 2024-06-01 21:49
831cb76b8e05df4668d0a8c033af22f3ae297afaae297afaae297afaae297afa
http://149.28.180.135:9200

ASN: 20473
34 events in 417 days
Leak size: 32.1 MB
Open ports: 9200

Indices: 2, document count: 34, size: 32.1 MB
Found index .geoip_databases with 33 documents (32.1 MB)
Found index read_me with 1 documents (4.5 ...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4h5pe@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5H5PE"}

Analysis helper :

                
estk --url=http://149.28.180.135:9200 list

Found by ElasticSearchOpenPlugin

Create report

149.28.175.147 high

Australia AS-CHOOPA 2021-06-17 13:03 2024-06-01 21:26
831cb76b8e05df46a8f5c43462bfd3fd56a42b5f56a42b5f56a42b5f56a42b5f
http://149.28.175.147:9200

ASN: 20473
91 events in 1080 days
Leak size: 1.6 kB
Open ports: 9200

Indices: 2, document count: 0, size: 1.6 kB
Found index read-me with 0 documents (810 B)
Found index .kibana_1 with 0 documents (810 B)

Analysis helper :

                
estk --url=http://149.28.175.147:9200 list

Found by ElasticSearchOpenPlugin

Create report

207.148.81.169 medium

Australia AS-CHOOPA 2024-01-16 18:14 2024-02-01 19:15
831cb76b8e05df46bd5ebb108c802c404b661b12781bc85ec8bf396cf4d3e580
http://207.148.81.169:5601

ASN: 20473
3 events in 16 days
Leak size: 170.1 MB
Open ports: 5601

Indices: 10, document count: 434, size: 170.1 MB
Through Kibana endpoint
Found index .geoip_databases with 43 documents (42.4 MB)
Found index cou...

Analysis helper :

                
estk --url=http://207.148.81.169:5601 list

Found by ElasticSearchOpenPlugin

Create report

139.180.178.34 high

Australia AS-CHOOPA 2023-08-19 05:10 2024-01-10 04:47
831cb76b8e05df46d9ce83df1943d1531943d1531943d1531943d1531943d153
http://139.180.178.34:9200

ASN: 20473
39 events in 143 days
Leak size: 5.3 kB
Open ports: 9200

Indices: 1, document count: 1, size: 5.3 kB
Found index read-me with 1 documents (5.3 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qmheh2ukafmsa8y0hxj64lalddzxwj0sfaas7uu. Once paid please email dar0kmdb@tutanota.com with code: `aLEfI8` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://139.180.178.34:9200 list

Found by ElasticSearchOpenPlugin

Create report

149.28.161.180 medium

Australia AS-CHOOPA 2022-02-16 16:52 2023-06-10 06:29
831cb76b8e05df463ba6ba47bafd64f93c945b0a00f602c00031260773ba33e3
http://149.28.161.180:9200

ASN: 20473
16 events in 478 days
Leak size: 23.3 MB
Open ports: 9200

Indices: 79, document count: 253, size: 23.3 MB
Found index hackedbymemorie_z799t with 0 documents (208 B)
Found index memoie.taplink.ws__1dmlg4 ...

Analysis helper :

                
estk --url=http://149.28.161.180:9200 list

Found by ElasticSearchOpenPlugin

Indices: 10, document count: 46, size: 113.2 MB
Through Kibana endpoint
Found index .kibana-event-log-7.11.1-000007 with 2 documents (11.3 kB)
Fo...

Analysis helper :

                
estk --url=http://149.28.161.180:5601 list

Found by ElasticSearchOpenPlugin

Indices: 7, document count: 12, size: 66.0 kB
Found index test2 with 1 documents (3.6 kB)
Found index .kibana_1 with 4 documents (18.1 kB)
Found ...

Analysis helper :

                
estk --url=http://139.180.165.183:9200 list

Found by ElasticSearchOpenPlugin