Search results for +plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +ip:"43.136.0.0/13" +l9fp:"831cb76b8e05df46d43a7e658d3e88d58d3e88d58d3e88d58d3e88d58d3e88d5"

Found 2 results for
+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +ip:"43.136.0.0/13" +l9fp:"831cb76b8e05df46d43a7e658d3e88d58d3e88d58d3e88d58d3e88d58d3e88d5"

Looking for more results ? Register a free account

Countries

China 2

Sources

ElasticSearchOpenPlugin 2

Network

Shenzhen Tencent Computer Systems Company Limited 2

IP Ranges

43.136.0.0/13 2

43.143.200.250 high

China Shenzhen Tencent Computer Systems Company Limited 2023-11-08 17:47 2024-06-01 22:16
831cb76b8e05df46d43a7e658d3e88d58d3e88d58d3e88d58d3e88d58d3e88d5
http://43.143.200.250:9200

ASN: 45090
25 events in 206 days
Leak size: 5.1 kB
Open ports: 9200

Indices: 1, document count: 1, size: 5.1 kB
Found index read_me with 1 documents (5.1 kB)

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.0057 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://43.143.200.250:9200 list

Found by ElasticSearchOpenPlugin

Create report

43.138.74.137 high

China Shenzhen Tencent Computer Systems Company Limited 2023-05-19 01:53 2024-05-12 18:55
831cb76b8e05df46d43a7e658d3e88d58d3e88d58d3e88d58d3e88d58d3e88d5
http://43.138.74.137:9200

ASN: 45090
31 events in 359 days
Leak size: 5.1 kB
Open ports: 9200

Indices: 1, document count: 1, size: 5.1 kB
Found index read_me with 1 documents (5.1 kB)

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.0057 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://43.138.74.137:9200 list

Found by ElasticSearchOpenPlugin