Search results for +dataset.ransom

Found 68173 results for
+dataset.ransom_notes:btc

Looking for more results ? Register a free account

Countries

China 32985
United States 10348
Germany 3353
India 2358
France 2132
Singapore 2036
South Korea 1779
Hong Kong 1425
Russia 1141
United Kingdom 854

Sources

ElasticSearchOpenPlugin 42081
MysqlOpenPlugin 26092

IP Ranges

47.96.0.0/12 3352
124.220.0.0/14 1346
43.136.0.0/13 1193
47.92.0.0/14 913
39.104.0.0/14 908
101.42.0.0/15 724
121.40.0.0/14 704
47.112.0.0/13 699
134.236.0.0/16 682
120.24.0.0/14 654

58.250.203.227 high

China China Unicom Shenzen network 2023-11-09 21:22 2024-12-04 00:53
831cb76b8e05df464f69915cdd05684a6487649c9c024c124491f7daf75e0460
http://58.250.203.227:9200

ASN: 17623
21 events in 390 days
Leak size: 128.1 kB
Open ports: 9200

Indices: 13, document count: 23, size: 128.1 kB
Found index internal with 1 documents (6.4 kB)
Found index read_me with 1 documents (4.8 kB)
Foun...

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://58.250.203.227:9200 list

Found by ElasticSearchOpenPlugin

Create report

213.136.82.227 high

Germany Contabo GmbH 2021-07-20 05:59 2024-12-04 00:53
831cb76b8e05df46d65b72a2608ceecfb6240daab6240daab6240daab6240daa
http://213.136.82.227:9200

ASN: 51167
182 events in 1232 days
Leak size: 12.6 kB
Open ports: 9200

Indices: 2, document count: 2, size: 12.6 kB
Found index read-me with 1 documents (5.0 kB)
Found index .kibana_1 with 1 documents (7.5 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://213.136.82.227:9200 list

Found by ElasticSearchOpenPlugin

Create report

66.35.87.22 high

United States CORESITE 2023-03-21 09:31 2024-12-04 00:53
831cb76b8e05df46b31ce33b33f241b9b79fd44513dacc995f2a80cb5f2a80cb
http://66.35.87.22:9200

ASN: 2734
156 events in 623 days
Leak size: 347.3 kB
Open ports: 9200

Indices: 4, document count: 441, size: 347.3 kB
Found index internal with 1 documents (6.4 kB)
Found index read_me with 1 documents (4.8 kB)
Foun...

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://66.35.87.22:9200 list

Found by ElasticSearchOpenPlugin

Create report

164.90.234.232 critical

Germany DIGITALOCEAN-ASN 2024-09-12 04:40 2024-12-04 00:53
cf350410ecceb5fd7460a0527429237e4a6ccf5db24a6d24a6fd104b612ffd02

ASN: 14061
43 events in 82 days
Leak size: 7.9 MB
Open ports: 3307

Databases: 39, row count: 133834, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv wi...

Ransom notes :


All your data is backed up. You must pay 0.0067 BTC to 1KRR5XEkckoo2d21d3FyZ9Spr6CnMEit7d In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/fajofo)

Found by MysqlOpenPlugin

Create report

192.241.240.251 critical

United States DIGITALOCEAN-ASN 2023-07-18 08:33 2024-12-04 00:53
cf350410ecceb5fd5a66d158040e93c8a585040a4b0573094d14c94eb9134dd8

ASN: 14061
148 events in 504 days
Leak size: 7.8 MB
Open ports: 3307

Databases: 34, row count: 137375, size: 7.8 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.Temp_udf with 0...

Ransom notes :


All your data is backed up. You must pay 0.03 BTC to 18224LViuRGEhqrUzeRLE9Y9ggogcdkNn5 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data2)

Found by MysqlOpenPlugin

Create report

5.39.59.133 critical

France OVH SAS 2023-02-07 11:33 2024-12-04 00:53
831cb76b8e05df46eb396949d35da26c2ca6f342a98360c777421b53e5b21bcf
http://5.39.59.133:9201

ASN: 16276
54 events in 665 days
Leak size: 53.5 MB
Open ports: 9201

Indices: 12, document count: 5339, size: 53.5 MB
Found index magento2_product_4_v33 with 662 documents (1.7 MB)
Found index .geoip_databases with...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://5.39.59.133:9201 list

Found by ElasticSearchOpenPlugin

Create report

178.160.249.47 critical

Armenia Telecom Armenia CJSC 2023-02-17 12:46 2024-12-04 00:53
831cb76b8e05df467951598e098ab2a863cbb3cf8cf113f4ab9ded55cae4aa2d
http://178.160.249.47:9200

ASN: 12297
162 events in 655 days
Leak size: 574.8 MB
Open ports: 9200

Indices: 11, document count: 910546, size: 574.8 MB
Found index .monitoring-es-7-2024.11.28 with 130048 documents (77.8 MB)
Found index .geoip_da...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+44au@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 54AU"}

Analysis helper :

                
estk --url=http://178.160.249.47:9200 list

Found by ElasticSearchOpenPlugin

Create report

104.168.68.10 high

United States AS-COLOCROSSING 2024-09-11 01:13 2024-12-04 00:53
cf350410ecceb5fd513e747461ee39d4d6983983accedf92f97cb920f75c6689

ASN: 36352
43 events in 83 days
Leak size: 2.7 MB
Open ports: 3307

Databases: 32, row count: 905, size: 2.7 MB
Found table mysql.column_stats with 0 records
Found table mysql.columns_priv with 0 records
Found tab...

Ransom notes :


All your data is backed up. You must pay 0.0138 BTC to 1KYGjQ5AnfaAU7mQLFVENptRewE1Sn7th7 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/fajofo)

Found by MysqlOpenPlugin

Create report

37.27.49.227 high

Finland Hetzner Online GmbH 2024-01-11 00:46 2024-12-04 00:53
831cb76b8e05df46cae9690c22b984c722b984c722b984c722b984c722b984c7
http://37.27.49.227:9200

ASN: 24940
114 events in 328 days
Leak size: 4.3 kB
Open ports: 9200

Indices: 1, document count: 1, size: 4.3 kB
Found index read-me with 1 documents (4.3 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y3EVBa` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://37.27.49.227:9200 list

Found by ElasticSearchOpenPlugin

Create report

199.192.28.113 critical

United States NAMECHEAP-NET 2024-07-17 03:02 2024-12-04 00:53
cf350410ecceb5fd8aa0cd9667fb29664c865317856fbf04398a6a0b42ad47c8

ASN: 22612
71 events in 139 days
Leak size: 8.2 MB
Open ports: 3307

Databases: 32, row count: 128848, size: 8.2 MB
Found table mysql.slow_log with 2 records
Found table mysql.innodb_table_stats with 2 records
Foun...

Ransom notes :


All your data is backed up. You must pay 0.03 BTC to 14B8iRn9k76fTmgvax4ZPyJDWqM67nrA8v In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data2)

Found by MysqlOpenPlugin

Create report

150.158.102.216 critical

China Shenzhen Tencent Computer Systems Company Limited 2022-03-22 04:25 2024-12-04 00:53
831cb76b8e05df46b2337532e1bac2283bcb8a5300de953c00de953c00de953c
http://150.158.102.216:9200

ASN: 45090
94 events in 987 days
Leak size: 698.5 kB
Open ports: 9200

Indices: 3, document count: 1326, size: 698.5 kB
Found index test with 1 documents (3.6 kB)
Found index tray_move with 1324 documents (690.8 kB)
...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://150.158.102.216:9200 list

Found by ElasticSearchOpenPlugin

Create report

49.235.112.28 high

China Shenzhen Tencent Computer Systems Company Limited 2023-07-07 06:55 2024-12-04 00:53
831cb76b8e05df460c47db008dc910c6cc632085cc632085cc632085cc632085
http://49.235.112.28:9200

ASN: 45090
100 events in 515 days
Leak size: 12.1 kB
Open ports: 9200

Indices: 2, document count: 3, size: 12.1 kB
Found index test with 2 documents (7.7 kB)
Found index read-me with 1 documents (4.3 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://49.235.112.28:9200 list

Found by ElasticSearchOpenPlugin

Create report

59.111.48.196 critical

China NetEase Building No.16 Ke Yun Road 2023-12-14 08:18 2024-12-04 00:52
831cb76b8e05df4635e74ab4a9f4d83d8458c2c4cf72ff467df60e93b4a17c87
http://59.111.48.196:9200

ASN: 45062
34 events in 355 days
Leak size: 513.9 MB
Open ports: 9200

Indices: 307, document count: 2168653, size: 513.9 MB
Found index sf-websocket-server-2024.01.15 with 890 documents (217.7 kB)
Found index les-cl...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://59.111.48.196:9200 list

Found by ElasticSearchOpenPlugin

Create report

150.158.7.226 high

China Shenzhen Tencent Computer Systems Company Limited 2022-10-27 04:17 2024-12-04 00:52
831cb76b8e05df4670fabd794b9fb518d09ffe73dc44678edc44678edc44678e
http://150.158.7.226:9200

ASN: 45090
126 events in 768 days
Leak size: 52.4 kB
Open ports: 9200

Indices: 3, document count: 11, size: 52.4 kB
Found index .kibana with 9 documents (44.2 kB)
Found index test with 1 documents (4.0 kB)
Found ind...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://150.158.7.226:9200 list

Found by ElasticSearchOpenPlugin

Create report

104.233.210.142 critical

United States PEGTECHINC 2023-04-12 22:20 2024-12-04 00:52
831cb76b8e05df46cfd58ac12e497e80ae4e2569ae4e2569ae4e2569ae4e2569
http://104.233.210.142:9201

ASN: 54600
158 events in 601 days
Leak size: 528.5 kB
Open ports: 9201

Indices: 2, document count: 1836, size: 528.5 kB
Found index read-me with 1 documents (4.3 kB)
Found index store with 1835 documents (524.2 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://104.233.210.142:9201 list

Found by ElasticSearchOpenPlugin

Create report

185.97.53.58 critical

Slovenia Siel, Informacijske Resitve, D.o.o. 2023-04-13 11:17 2024-12-04 00:52
831cb76b8e05df467b7d08c4a2415cbadf25424d105542d7105542d7105542d7
http://185.97.53.58:9200

ASN: 51790
42 events in 600 days
Leak size: 6.9 MB
Open ports: 9200

Indices: 3, document count: 10875, size: 6.9 MB
Found index iskra_stage_en with 5437 documents (3.1 MB)
Found index iskra_stage_sl with 5437 docu...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `riDAZo` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://185.97.53.58:9200 list

Found by ElasticSearchOpenPlugin

Create report

64.227.144.44 critical

India DIGITALOCEAN-ASN 2024-01-11 00:08 2024-12-04 00:52
831cb76b8e05df46ceef7972898159c9b8598f11b8598f11b8598f11b8598f11
http://64.227.144.44:9200

ASN: 14061
113 events in 328 days
Leak size: 20.1 MB
Open ports: 9200

Indices: 2, document count: 1838, size: 20.1 MB
Found index bible_verses with 1837 documents (20.1 MB)
Found index read-me with 1 documents (5.3 ...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y3EVBa` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://64.227.144.44:9200 list

Found by ElasticSearchOpenPlugin

Create report

101.43.166.176 high

China Shenzhen Tencent Computer Systems Company Limited 2022-11-03 02:10 2024-12-04 00:52
831cb76b8e05df4614dba72e8092afa464cf7770414660cd414660cd414660cd
http://101.43.166.176:9200

ASN: 45090
132 events in 761 days
Leak size: 14.2 kB
Open ports: 9200

Indices: 3, document count: 3, size: 14.2 kB
Found index test with 1 documents (3.6 kB)
Found index read-me with 1 documents (4.0 kB)
Found index...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://101.43.166.176:9200 list

Found by ElasticSearchOpenPlugin

Indices: 3, document count: 4764010, size: 2.2 GB
Found index .geoip_databases with 42 documents (42.3 MB)
Found index filebeat-7.15.1 with 47639...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `PT53hm` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://188.124.54.203:9200 list

Found by ElasticSearchOpenPlugin

Indices: 2, document count: 2, size: 12.4 kB
Found index read_me with 1 documents (5.0 kB)
Found index internal with 1 documents (7.4 kB)

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://185.250.105.187:9200 list

Found by ElasticSearchOpenPlugin

Countries

Sources

Network

IP Ranges