Search results for +dataset.ransom

Found 68173 results for
+dataset.ransom_notes:btc

Looking for more results ? Register a free account

Countries

China 32985
United States 10348
Germany 3353
India 2358
France 2132
Singapore 2036
South Korea 1779
Hong Kong 1425
Russia 1141
United Kingdom 854

Sources

ElasticSearchOpenPlugin 42081
MysqlOpenPlugin 26092

IP Ranges

47.96.0.0/12 3352
124.220.0.0/14 1346
43.136.0.0/13 1193
47.92.0.0/14 913
39.104.0.0/14 908
101.42.0.0/15 724
121.40.0.0/14 704
47.112.0.0/13 699
134.236.0.0/16 682
120.24.0.0/14 654

192.200.100.19 high

United States GORILLASERVERS 2023-11-24 23:12 2024-12-04 00:50
831cb76b8e05df4646c8792407d5cf9cecbd2f1b1d0f62ca0776b5fd7a088471
http://192.200.100.19:9200

ASN: 53850
121 events in 375 days
Leak size: 38.2 MB
Open ports: 9200

Indices: 10, document count: 1747, size: 38.2 MB
Found index ossvideo with 1664 documents (1.0 MB)
Found index .geoip_databases with 37 documents...

Analysis helper :

                
estk --url=http://192.200.100.19:9200 list

Found by ElasticSearchOpenPlugin

Create report

57.128.192.28 critical

France OVH SAS 2023-10-07 18:21 2024-12-04 00:50
831cb76b8e05df46f324b7607572dc3856a6999556a6999556a6999556a69995
http://57.128.192.28:9200

ASN: 16276
113 events in 423 days
Leak size: 5.7 MB
Open ports: 9200

Indices: 2, document count: 4447, size: 5.7 MB
Found index read_me with 1 documents (5.3 kB)
Found index magento2_product_1_v56 with 4446 documen...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4rc3t@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5RC3T"}

Analysis helper :

                
estk --url=http://57.128.192.28:9200 list

Found by ElasticSearchOpenPlugin

Create report

51.38.41.87 critical

France OVH SAS 2023-05-25 13:20 2024-12-04 00:50
831cb76b8e05df46b354972384acdc0078ce1adfee7d8417c1e6ce1e5f78b413
http://51.38.41.87:9200

ASN: 16276
135 events in 558 days
Leak size: 126.4 MB
Open ports: 9200

Indices: 6, document count: 288418, size: 126.4 MB
Found index .geoip_databases with 35 documents (34.1 MB)
Found index hangszerarzenal_staging_d...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4y5kv@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5Y5KV"}

Analysis helper :

                
estk --url=http://51.38.41.87:9200 list

Found by ElasticSearchOpenPlugin

Create report

120.79.11.98 critical

China Hangzhou Alibaba Advertising Co.,Ltd. 2023-09-26 19:39 2024-12-04 00:50
831cb76b8e05df4658491e3584057b6855f1136eeaca0e710d464dc45586be5f
http://120.79.11.98:9200

ASN: 37963
28 events in 434 days
Leak size: 642.8 kB
Open ports: 9200

Indices: 7, document count: 3583, size: 642.8 kB
Found index casa with 0 documents (208 B)
Found index test with 2 documents (7.7 kB)
Found index...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://120.79.11.98:9200 list

Found by ElasticSearchOpenPlugin

Create report

119.91.158.218 high

China Shenzhen Tencent Computer Systems Company Limited 2023-02-15 22:29 2024-12-04 00:50
831cb76b8e05df46230660d9700e29c77175695c011b60ca011b60ca011b60ca
http://119.91.158.218:9201

ASN: 45090
124 events in 657 days
Leak size: 473.6 MB
Open ports: 9201

Indices: 3, document count: 49, size: 473.6 MB
Found index .geoip_databases with 40 documents (39.5 MB)
Found index read-me with 1 documents (4.5...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `riDAZo` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://119.91.158.218:9201 list

Found by ElasticSearchOpenPlugin

Create report

185.233.104.246 high

Germany netcup GmbH 2022-05-29 01:51 2024-12-04 00:50
831cb76b8e05df46ad6b19aecef6d2c6c1e0f6fdc1e0f6fdc1e0f6fdc1e0f6fd
http://185.233.104.246:9201

ASN: 197540
164 events in 919 days
Leak size: 5.3 kB
Open ports: 9201

Indices: 2, document count: 1, size: 5.3 kB
Found index read-me with 1 documents (5.1 kB)
Found index cas_ss_tenantconfiguration with 0 documents...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `riDAZo` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://185.233.104.246:9201 list

Found by ElasticSearchOpenPlugin

Create report

34.100.214.119 critical

India GOOGLE-CLOUD-PLATFORM 2024-10-29 07:12 2024-12-04 00:49
831cb76b8e05df46db686bd90981fb1696ef47ecaa419007b0d9cf7bbaafdfb6
http://34.100.214.119:9200

ASN: 396982
14 events in 35 days
Leak size: 25.9 MB
Open ports: 9200

Indices: 9, document count: 2238, size: 25.9 MB
Found index story_kannadas with 1009 documents (12.3 MB)
Found index story_banglas with 51 docume...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4d5pv@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5D5PV"}

Analysis helper :

                
estk --url=http://34.100.214.119:9200 list

Found by ElasticSearchOpenPlugin

Create report

103.225.4.81 high

New Zealand PrimoWireless Ltd 2023-02-08 19:19 2024-12-04 00:49
831cb76b8e05df46d65b72a24c70edc6b935a50eb935a50eb935a50eb935a50e
http://103.225.4.81:9201

ASN: 132255
155 events in 664 days
Leak size: 12.6 kB
Open ports: 9201

Indices: 2, document count: 2, size: 12.6 kB
Found index .kibana_1 with 1 documents (7.6 kB)
Found index read-me with 1 documents (5.1 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://103.225.4.81:9201 list

Found by ElasticSearchOpenPlugin

Create report

146.59.56.35 critical

France OVH SAS 2023-10-16 11:52 2024-12-04 00:49
831cb76b8e05df4637818d8a7b493693bc336acf58139bcf1980e1dbcadd1195
http://146.59.56.35:9200

ASN: 16276
122 events in 414 days
Leak size: 4.2 MB
Open ports: 9200

Indices: 7, document count: 1847, size: 4.2 MB
Found index .opensearch-observability with 0 documents (208 B)
Found index .plugins-ml-config with...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0,003 BTC. Transfer to this BTC address 19pNR4MGshpXAaWxgPYGYtfn79dppP6FEH . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: mrserg@cock.li and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://146.59.56.35:9200 list

Found by ElasticSearchOpenPlugin

Create report

54.38.59.206 critical

France OVH SAS 2023-09-20 10:26 2024-12-04 00:49
831cb76b8e05df4637818d8a7b493693bc336acf58139bcf1980e1dbcadd1195
http://54.38.59.206:9200

ASN: 16276
127 events in 440 days
Leak size: 4.2 MB
Open ports: 9200

Indices: 7, document count: 1847, size: 4.2 MB
Found index .opensearch-observability with 0 documents (208 B)
Found index .plugins-ml-config with...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0,003 BTC. Transfer to this BTC address 19pNR4MGshpXAaWxgPYGYtfn79dppP6FEH . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: mrserg@cock.li and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://54.38.59.206:9200 list

Found by ElasticSearchOpenPlugin

Create report

116.125.120.89 critical

South Korea SK Broadband Co Ltd 2021-08-04 10:18 2024-12-04 00:49
831cb76b8e05df4632f287b88250b6b31491f62e0af8cb096febdced2d67cedf
http://116.125.120.89:9200

ASN: 9318
54 events in 1217 days
Leak size: 416.4 MB
Open ports: 9200

Indices: 5, document count: 2769955, size: 416.4 MB
Found index service with 1 documents (19.7 kB)
Found index kdata_ngram with 1384976 documents...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 14b57thKoPjmVVkh6HHLPz8g7fyBJ5SEcr . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://116.125.120.89:9200 list

Found by ElasticSearchOpenPlugin

Create report

46.226.105.199 critical

France GANDI SAS 2023-10-17 12:08 2024-12-04 00:49
831cb76b8e05df462adaf6471f845dddc24039cac02004e1c02004e1c02004e1
http://46.226.105.199:9201

ASN: 203476
120 events in 413 days
Leak size: 25.3 MB
Open ports: 9201

Indices: 3, document count: 3679, size: 25.3 MB
Found index read-me with 1 documents (4.0 kB)
Found index .kibana_1 with 1 documents (6.6 kB)
Fou...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://46.226.105.199:9201 list

Found by ElasticSearchOpenPlugin

Create report

144.126.243.44 high

Singapore DIGITALOCEAN-ASN 2023-10-07 11:28 2024-12-04 00:49
831cb76b8e05df46959a03c32e48d5cb8380d3c6518402e82f5277f61c821b39
http://144.126.243.44:9200

ASN: 14061
125 events in 423 days
Leak size: 22.6 MB
Open ports: 9200

Indices: 9, document count: 8780, size: 22.6 MB
Found index potential_partners_idx with 8074 documents (19.5 MB)
Found index internal with 1 docu...

Analysis helper :

                
estk --url=http://144.126.243.44:9200 list

Found by ElasticSearchOpenPlugin

Create report

178.154.222.79 critical

Russia Yandex.Cloud LLC 2024-06-21 05:21 2024-12-04 00:49
cf350410ecceb5fd93b6541ef56badc84ffc15e7e6988b0a717b4f08d20b39b4

ASN: 200350
87 events in 165 days
Leak size: 8.8 MB
Open ports: 3308

Databases: 39, row count: 133458, size: 8.8 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with...

Ransom notes :


All your data is backed up. You must pay 0.0117 BTC to 1GbLiucJ7fhsM3sYrPKHvZ5mUW2p4AYW7p In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data02)

Found by MysqlOpenPlugin

Create report

137.74.164.145 high

France OVH SAS 2023-01-28 04:40 2024-12-04 00:49
831cb76b8e05df46d65b72a2a30c044911f88c6b11f88c6b11f88c6b11f88c6b
http://137.74.164.145:9200

ASN: 16276
152 events in 675 days
Leak size: 12.6 kB
Open ports: 9200

Indices: 2, document count: 2, size: 12.6 kB
Found index .kibana_1 with 1 documents (7.5 kB)
Found index read-me with 1 documents (5.1 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://137.74.164.145:9200 list

Found by ElasticSearchOpenPlugin

Create report

164.90.160.251 critical

Germany DIGITALOCEAN-ASN 2023-01-27 13:09 2024-12-04 00:49
831cb76b8e05df46b648e1fa4b505d713d4c0007e1b3dfdc554d9903554d9903
http://164.90.160.251:9210

ASN: 14061
161 events in 676 days
Leak size: 10.2 MB
Open ports: 9210

Indices: 4, document count: 4172, size: 10.2 MB
Found index read-me with 1 documents (4.3 kB)
Found index akeneo_connectivity_connection_error_51...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://164.90.160.251:9210 list

Found by ElasticSearchOpenPlugin

Create report

152.136.135.16 critical

China Shenzhen Tencent Computer Systems Company Limited 2023-07-17 20:21 2024-12-04 00:49
cf350410ecceb5fdd4e6f0160ed3f472afc80a81037b05a978c6d42f15b65f12

ASN: 45090
106 events in 505 days
Leak size: 2.4 MB
Open ports: 3306

Databases: 33, row count: 2750, size: 2.4 MB
Found table a____z____recover____data.readme with 1 records
Found table mysql.columns_priv with 0 re...

Ransom notes :


1I have backed up all your databases. To recover them you must pay 0.01 BTC (Bitcoin) to this address: 1L6N9twGfwvXqvmWUf4GyiGsn9fw6LKz6f . Backup List: a____z____recover____data. After your payment email me at sqlrecover471@onionmail.org with your server IP (152.136.135.16) and transaction ID and you will get a download link to your backup. Emails without transaction ID and server IP will be ignored. 1L6N9twGfwvXqvmWUf4GyiGsn9fw6LKz6f 1I have backed up all your databases. To recover them you must pay 0.01 BTC (Bitcoin) to this address: 1L6N9twGfwvXqvmWUf4GyiGsn9fw6LKz6f . Backup List: a____z____recover____data. After your payment email me at sqlrecover471@onionmail.org with your server IP (152.136.135.16) and transaction ID and you will get a download link to your backup. Emails without transaction ID and server IP will be ignored. 1L6N9twGfwvXqvmWUf4GyiGsn9fw6LKz6f

Found by MysqlOpenPlugin

Create report

129.146.62.64 high

United States ORACLE-BMC-31898 2023-02-05 16:22 2024-12-04 00:49
831cb76b8e05df46143a043357336ad11bf1bfbb1bf1bfbb1bf1bfbb1bf1bfbb
http://129.146.62.64:9200

ASN: 31898
152 events in 667 days
Leak size: 10.7 kB
Open ports: 9200

Indices: 2, document count: 2, size: 10.7 kB
Found index read-me with 1 documents (4.0 kB)
Found index .kibana_1 with 1 documents (6.7 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://129.146.62.64:9200 list

Found by ElasticSearchOpenPlugin

Indices: 4, document count: 25276, size: 48.6 MB
Found index .geoip_databases with 37 documents (37.0 MB)
Found index internal with 1 documents (...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+44yo2@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 54YO2"}

Analysis helper :

                
estk --url=http://192.18.145.239:9200 list

Found by ElasticSearchOpenPlugin

Databases: 32, row count: 141009, size: 7.9 MB
Found table README_TO_RECOVER.readme with 2 records
Found table mysql.columns_priv with 0 records
...

Ransom notes :


All your data is backed up. You must pay 0.015 BTC to bc1qdnmc32yzdee4a2ygl34f7u5sr7552c2nh8r27m In 72 hours, your data will be publicly disclosed and deleted. More info: https://iplis.ru/dbrecover

Found by MysqlOpenPlugin

Countries

Sources

Network

IP Ranges