Search results for +plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +country:"The Netherlands" +net:"LeaseWeb Netherlands B.V."

Found 5 results for
+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +country:"The Netherlands" +net:"LeaseWeb Netherlands B.V."

Looking for more results ? Register a free account

Countries

The Netherlands 5

Sources

ElasticSearchOpenPlugin 5

Network

LeaseWeb Netherlands B.V. 5

IP Ranges

178.162.128.0/18 1
37.48.64.0/18 1
45.154.84.0/22 1
62.212.64.0/19 1
94.75.224.0/19 1

37.48.83.206 high

The Netherlands LeaseWeb Netherlands B.V. 2024-01-10 12:49 2024-06-01 22:19
831cb76b8e05df46ebbffc864439f2c56b5abc7c411131344111313441113134
http://37.48.83.206:9200

ASN: 60781
21 events in 143 days
Leak size: 16.8 kB
Open ports: 9200

Indices: 3, document count: 3, size: 16.8 kB
Found index .kibana with 1 documents (5.3 kB)
Found index read-me with 1 documents (4.3 kB)
Found in...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://37.48.83.206:9200 list

Found by ElasticSearchOpenPlugin

Create report

62.212.93.178 high

The Netherlands LeaseWeb Netherlands B.V. 2022-11-04 19:08 2024-05-12 19:01
2ad2ad16d2ad2ad0002ad2ad2ad2adeba60d50ffaa5de7324d57798d467e39
831cb76b8e05df46eeef459d8af24d98e3fb4a0a60a586c32511983f1a76a9ab
https://62.212.93.178

ASN: 60781
63 events in 554 days
Leak size: 466.7 MB
Open ports: 443

Certificate domains:

eslogs.hibridmedia.com

Indices: 93, document count: 1558365, size: 466.7 MB
Found index filebeat-7.17.18-2024.03.18 with 3392 documents (2.4 MB)
Found index filebeat-7....

Analysis helper :

                
estk --url=https://62.212.93.178 list

Found by ElasticSearchOpenPlugin

Create report

94.75.236.160 high

The Netherlands LeaseWeb Netherlands B.V. 2023-05-05 07:36 2024-05-12 18:23
831cb76b8e05df467a7d6d55b64e2577dbf9a4cfa97bde0fc56cfaa0362074b6
http://94.75.236.160:5601

ASN: 60781
58 events in 373 days
Leak size: 61.9 GB
Open ports: 5601

Indices: 31, document count: 197990346, size: 61.9 GB
Through Kibana endpoint
Found index useractionv1-2024.03.09 with 143430 documents (51.8 MB)...

Analysis helper :

                
estk --url=http://94.75.236.160:5601 list

Found by ElasticSearchOpenPlugin

Indices: 2, document count: 1, size: 9.5 kB
Found index .geoip_databases with 0 documents (5.0 kB)
Found index read_me with 1 documents (4.5 kB)

Ransom notes :


{"message":"All your data is backed up. You must pay 0.006 BTC to 16w2xEN9pcjFgECWH1LDVps4xV9m3nUMBN In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data5)After paying send mail to us: rambler+4kvxb@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5KVXB"}

Analysis helper :

                
estk --url=http://178.162.170.25:9200 list

Found by ElasticSearchOpenPlugin

Indices: 6, document count: 100, size: 44.5 MB
Through Kibana endpoint
Found index .geoip_databases with 41 documents (41.0 MB)
Found index .apm-...

Analysis helper :

                
estk --url=http://45.154.86.229:5601 list

Found by ElasticSearchOpenPlugin