By searching for results, you agree with our Terms of service
Found 68173 results for
+dataset.ransom_notes:btc

Looking for more results ? Register a free account

Countries

  • China 32985
  • United States 10348
  • Germany 3353
  • India 2358
  • France 2132
  • Singapore 2036
  • South Korea 1779
  • Hong Kong 1425
  • Russia 1141
  • United Kingdom 854

Sources

  • ElasticSearchOpenPlugin 42081
  • MysqlOpenPlugin 26092

Network

  • Hangzhou Alibaba Advertising Co.,Ltd. 15155
  • Shenzhen Tencent Computer Systems Company Limited 10449
  • AMAZON-02 5967
  • GOOGLE-CLOUD-PLATFORM 3155
  • DIGITALOCEAN-ASN 2092
  • OVH SAS 2075
  • AMAZON-AES 2053
  • Huawei Cloud Service data center 1968
  • Hetzner Online GmbH 1414
  • MICROSOFT-CORP-MSN-AS-BLOCK 1334

IP Ranges

  • 47.96.0.0/12 3352
  • 124.220.0.0/14 1346
  • 43.136.0.0/13 1193
  • 47.92.0.0/14 913
  • 39.104.0.0/14 908
  • 101.42.0.0/15 724
  • 121.40.0.0/14 704
  • 47.112.0.0/13 699
  • 134.236.0.0/16 682
  • 120.24.0.0/14 654

ASN: 31898
73 events in 329 days
Leak size: 1.2 GB
Open ports: 9202
Indices: 26, document count: 2086341, size: 1.2 GB
Found index .monitoring-es-7-2024.11.28 with 277355 documents (157.6 MB)
Found index .monitori...
Analysis helper :
                
estk --url=http://141.148.174.218:9202 list
            

ASN: 53055
114 events in 433 days
Leak size: 3.2 MB
Open ports: 9200
Indices: 2, document count: 6979, size: 3.2 MB
Found index 8a97eed77f4dc2d4017f4dc357d50000 with 6978 documents (3.2 MB)
Found index read-me-to-r...
Analysis helper :
                
estk --url=http://186.227.200.252:9200 list
            

ASN: 55990
135 events in 576 days
Leak size: 562.5 GB
Open ports: 9200
Indices: 343, document count: 1132403038, size: 562.5 GB
Found index sw_instance_traffic-20231001 with 4 documents (69.4 kB)
Found index sw_insta...
Ransom notes :

{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `eNO2CN` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}
            
Analysis helper :
                
estk --url=http://121.37.138.114:9200 list
            

ASN: 14061
149 events in 473 days
Leak size: 41.4 MB
Open ports: 9200
Indices: 7, document count: 2877, size: 41.4 MB
Found index .geoip_databases with 37 documents (37.0 MB)
Found index magento2_product_10_v257 wit...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4b6bx@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5B6BX"}
            
Analysis helper :
                
estk --url=http://209.38.248.68:9200 list
            

ASN: 197540
13 events in 806 days
Leak size: 5.4 kB
Open ports: 9200
Indices: 1, document count: 1, size: 5.4 kB
Found index read_me with 1 documents (5.4 kB)
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4cx7n@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5CX7N"}
            
Analysis helper :
                
estk --url=http://202.61.254.223:9200 list
            

ASN: 37963
73 events in 185 days
Leak size: 15.0 MB
Open ports: 8084
Indices: 9, document count: 26, size: 15.0 MB
Found index .kibana-event-log-7.9.2-000001 with 1 documents (5.7 kB)
Found index .apm-custom-link w...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://47.104.163.73:8084 list
            

ASN: 16276
131 events in 443 days
Leak size: 4.2 MB
Open ports: 9200
Indices: 7, document count: 1847, size: 4.2 MB
Found index .opensearch-observability with 0 documents (208 B)
Found index .plugins-ml-config with...
Ransom notes :

{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0,003 BTC. Transfer to this BTC address 19pNR4MGshpXAaWxgPYGYtfn79dppP6FEH . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: mrserg@cock.li and you will receive a link to download your database dump.\n"}
            
Analysis helper :
                
estk --url=http://54.38.133.229:9200 list
            

ASN: 12876
162 events in 851 days
Leak size: 41.2 MB
Open ports: 9200
Indices: 7, document count: 33544, size: 41.2 MB
Found index magento2_product_4_v11 with 8385 documents (10.4 MB)
Found index .geoip_databases wi...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4w7eq@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5W7EQ"}
            
Analysis helper :
                
estk --url=http://163.172.76.161:9200 list
            

ASN: 63949
164 events in 662 days
Leak size: 42.4 MB
Open ports: 9200
Indices: 4, document count: 49, size: 42.4 MB
Found index .geoip_databases with 42 documents (42.3 MB)
Found index read-me with 1 documents (4.8 ...
Ransom notes :

{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `R78P5J` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}
            
Analysis helper :
                
estk --url=http://192.155.81.99:9200 list
            

ASN: 29182
177 events in 1121 days
Leak size: 42.2 MB
Open ports: 9200
Indices: 3, document count: 94, size: 42.2 MB
Found index .geoip_databases with 42 documents (41.4 MB)
Found index bustourma with 51 documents (8...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.01 BTC to 156j7MZZQJvKWZjWLDi8eMoqZtyZXiQgP4 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://cutt.ly/rambler5)After paying send mail to us: rambler+5rrka@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5RRKA"}
            
Analysis helper :
                
estk --url=http://80.87.200.188:9200 list
            

ASN: 8075
120 events in 376 days
Leak size: 472.1 kB
Open ports: 9200
Indices: 4, document count: 1085, size: 472.1 kB
Found index customerindex with 394 documents (154.2 kB)
Found index custom-index with 689 docume...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://20.84.219.130:9200 list
            

ASN: 14061
118 events in 561 days
Leak size: 28.9 kB
Open ports: 9200
Indices: 4, document count: 32, size: 28.9 kB
Found index department_search_index with 13 documents (8.9 kB)
Found index read_me with 1 documents...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4te32@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5TE32"}
            
Analysis helper :
                
estk --url=http://68.183.246.22:9200 list
            

ASN: 9123
13 events in 389 days
Leak size: 15.9 MB
Open ports: 9200
Indices: 2, document count: 20221, size: 15.9 MB
Found index novator.price.service with 19603 documents (11.9 MB)
Found index dom-novator-documen...
Analysis helper :
                
estk --url=http://45.153.70.243:9200 list
            

ASN: 17622
128 events in 657 days
Leak size: 10.9 MB
Open ports: 9210
Indices: 5, document count: 91285, size: 10.9 MB
Found index read-me with 1 documents (5.1 kB)
Found index off_uc_user with 91198 documents (10.2...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://112.94.29.109:9210 list
            

ASN: 60631
114 events in 355 days
Leak size: 3.7 MB
Open ports: 9200
Indices: 2, document count: 3238, size: 3.7 MB
Found index partjoo-product with 3237 documents (3.7 MB)
Found index read_me with 1 documents (4.5...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4fujy@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5FUJY"}
            
Analysis helper :
                
estk --url=http://185.164.72.40:9200 list
            

ASN: 16276
130 events in 442 days
Leak size: 11.2 kB
Open ports: 9200
Indices: 2, document count: 2, size: 11.2 kB
Found index read-me with 1 documents (4.3 kB)
Found index .kibana_1 with 1 documents (7.0 kB)
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://162.19.57.69:9200 list
            

ASN: 48716
21 events in 35 days
Leak size: 5.9 MB
Open ports: 9200
Indices: 19, document count: 2347, size: 5.9 MB
Found index referees_index with 73 documents (33.2 kB)
Found index documents_index with 8 documen...
Ransom notes :

{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}
            
Analysis helper :
                
estk --url=http://78.40.109.194:9200 list
            

ASN: 3215
150 events in 759 days
Leak size: 1.6 GB
Open ports: 9200
Indices: 3, document count: 8417979, size: 1.6 GB
Found index .geoip_databases with 40 documents (43.1 MB)
Found index read_me with 1 documents (...
Ransom notes :

{"message":"All your data is a backed up. You must pay 0.05 BTC to 12KDdVSHvaB46gGTS7pDiBACyWtx5pv5Hs 48 hours for recover it. After 48 hours expiration we will leaked and exposed all your data. In case of refusal to pay, we will contact the General Data Protection Regulation, GDPR and notify them that you store user data in an open form and is not safe. Under the rules of the law, you face a heavy fine or arrest and your base dump will be dropped from our server! You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ After paying write to me in the mail with your DB IP: rambler+3t16d@onionmail.org and/or eladb@mailnesia.com and you will receive a link to download your database dump."}
            
Analysis helper :
                
estk --url=http://80.13.251.225:9200 list
            

ASN: 14061
127 events in 435 days
Leak size: 40.9 MB
Open ports: 9200
Indices: 3, document count: 39, size: 40.9 MB
Found index .geoip_databases with 37 documents (40.9 MB)
Found index internal with 1 documents (6.7...
Ransom notes :

{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4xsl1@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5XSL1"}
            
Analysis helper :
                
estk --url=http://134.122.69.250:9200 list
            

ASN: 45090
39 events in 989 days
Leak size: 85.6 kB
Open ports: 9200
Indices: 8, document count: 13, size: 85.6 kB
Found index internal with 1 documents (6.4 kB)
Found index api with 2 documents (8.7 kB)
Found inde...
Ransom notes :

{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
            
Analysis helper :
                
estk --url=http://49.235.226.151:9200 list