Search results for +dataset.ransom

Found 68173 results for
+dataset.ransom_notes:btc

Looking for more results ? Register a free account

Countries

China 32985
United States 10348
Germany 3353
India 2358
France 2132
Singapore 2036
South Korea 1779
Hong Kong 1425
Russia 1141
United Kingdom 854

Sources

ElasticSearchOpenPlugin 42081
MysqlOpenPlugin 26092

IP Ranges

47.96.0.0/12 3352
124.220.0.0/14 1346
43.136.0.0/13 1193
47.92.0.0/14 913
39.104.0.0/14 908
101.42.0.0/15 724
121.40.0.0/14 704
47.112.0.0/13 699
134.236.0.0/16 682
120.24.0.0/14 654

51.254.116.179 high

France OVH SAS 2023-02-02 05:49 2024-12-04 00:48
831cb76b8e05df46da9f42ea6477e961a044a41c4ed974ddb87250703cc323b0
http://51.254.116.179:9200

ASN: 16276
161 events in 670 days
Leak size: 37.8 MB
Open ports: 9200

Indices: 5, document count: 48, size: 37.8 MB
Found index .geoip_databases with 37 documents (37.0 MB)
Found index unites-culturales with 1 docum...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+4rh@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5RH"}

Analysis helper :

                
estk --url=http://51.254.116.179:9200 list

Found by ElasticSearchOpenPlugin

Create report

139.144.20.48 high

United States Akamai Connected Cloud 2023-04-10 23:02 2024-12-04 00:47
831cb76b8e05df4643abc68f1ac3dc7198e50ab498e50ab498e50ab498e50ab4
http://139.144.20.48:9200

ASN: 63949
158 events in 603 days
Leak size: 4.5 kB
Open ports: 9200

Indices: 2, document count: 1, size: 4.5 kB
Found index .geoip_databases with  documents ()
Found index read_me with 1 documents (4.5 kB)

Ransom notes :


{"message":"All your data is backed up. You must pay 0.005 BTC to 16w2xEN9pcjFgECWH1LDVps4xV9m3nUMBN In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data5)After paying send mail to us: rambler+4tci5@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5TCI5"}

Analysis helper :

                
estk --url=http://139.144.20.48:9200 list

Found by ElasticSearchOpenPlugin

Create report

54.38.206.59 critical

France OVH SAS 2023-09-19 20:09 2024-12-04 00:47
831cb76b8e05df4637818d8a7b493693bc336acf58139bcf1980e1dbcadd1195
http://54.38.206.59:9200

ASN: 16276
129 events in 441 days
Leak size: 4.2 MB
Open ports: 9200

Indices: 7, document count: 1847, size: 4.2 MB
Found index .opensearch-observability with 0 documents (208 B)
Found index .plugins-ml-config with...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0,003 BTC. Transfer to this BTC address 19pNR4MGshpXAaWxgPYGYtfn79dppP6FEH . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: mrserg@cock.li and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://54.38.206.59:9200 list

Found by ElasticSearchOpenPlugin

Create report

146.59.56.58 critical

France OVH SAS 2023-09-20 03:52 2024-12-04 00:47
831cb76b8e05df4637818d8a7b493693bc336acf58139bcf1980e1dbcadd1195
http://146.59.56.58:9200

ASN: 16276
126 events in 440 days
Leak size: 4.2 MB
Open ports: 9200

Indices: 7, document count: 1847, size: 4.2 MB
Found index .opensearch-observability with 0 documents (208 B)
Found index .plugins-ml-config with...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0,003 BTC. Transfer to this BTC address 19pNR4MGshpXAaWxgPYGYtfn79dppP6FEH . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: mrserg@cock.li and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://146.59.56.58:9200 list

Found by ElasticSearchOpenPlugin

Create report

84.38.251.2 critical

Italy Data S.R.L. 2023-10-08 07:43 2024-12-04 00:47
831cb76b8e05df462f1e79b3f9919aefd80e77764181c704d4988d86c8954a1a
http://84.38.251.2:9200

ASN: 207989
121 events in 422 days
Leak size: 2.1 GB
Open ports: 9200

Indices: 6, document count: 12658656, size: 2.1 GB
Found index .plugins-ml-config with 1 documents (4.0 kB)
Found index .opensearch-observability...

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://84.38.251.2:9200 list

Found by ElasticSearchOpenPlugin

Create report

104.37.190.6 critical

United States IS-AS-1 2023-02-11 03:19 2024-12-04 00:47
831cb76b8e05df46748f7a9a752688f6a5f88c197db5d87d0a8e08b82b9884fa
http://104.37.190.6:9200

ASN: 19318
161 events in 661 days
Leak size: 420.6 MB
Open ports: 9200

Indices: 6, document count: 812466, size: 420.6 MB
Found index elastic-logistaeg_external_amasty_xsearch_fulltext_1 with 13 documents (11.1 kB)
F...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `9PDqED` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://104.37.190.6:9200 list

Found by ElasticSearchOpenPlugin

Create report

194.36.144.125 high

Austria netcup GmbH 2023-02-07 00:29 2024-12-04 00:47
831cb76b8e05df4670ee11bc4efcfd7ded15858ec6163eec766e6db6766e6db6
http://194.36.144.125:9200

ASN: 197540
146 events in 666 days
Leak size: 23.8 kB
Open ports: 9200

Indices: 4, document count: 4, size: 23.8 kB
Found index internal with 1 documents (6.7 kB)
Found index workspace with 1 documents (5.0 kB)
Found...

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.0057 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://194.36.144.125:9200 list

Found by ElasticSearchOpenPlugin

Create report

176.12.101.181 critical

Russia MAXnet Systems Ltd. 2023-07-19 06:42 2024-12-04 00:47
cf350410ecceb5fd153402368467754a407f69c9e67773415491c7f7a81eace6

ASN: 8636
145 events in 503 days
Leak size: 7.9 MB
Open ports: 3307

Databases: 32, row count: 143586, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv wi...

Ransom notes :


All your data is backed up. You must pay 0.03 BTC to 18224LViuRGEhqrUzeRLE9Y9ggogcdkNn5 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data2)

Found by MysqlOpenPlugin

Create report

168.119.12.165 critical

Germany Hetzner Online GmbH 2023-10-05 10:06 2024-12-04 00:47
831cb76b8e05df46b7e2c151d90eb7620ff00a60f3c326a032951eaa858e613c
http://168.119.12.165:9200

ASN: 24940
122 events in 425 days
Leak size: 140.9 MB
Open ports: 9200

Indices: 9, document count: 174209, size: 140.9 MB
Found index .kibana with 2 documents (8.9 kB)
Found index context-session-date-2023-09 with 16...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `9PDqED` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://168.119.12.165:9200 list

Found by ElasticSearchOpenPlugin

Create report

58.227.195.166 critical

South Korea SK Broadband Co Ltd 2023-02-01 08:55 2024-12-04 00:47
831cb76b8e05df4677c045d291fd3d1bf13df536f13df536f13df536f13df536
http://58.227.195.166:9204

ASN: 9318
167 events in 671 days
Leak size: 18.3 MB
Open ports: 9204

Indices: 2, document count: 8089, size: 18.3 MB
Found index read_me with 1 documents (5.6 kB)
Found index es_gw with 8088 documents (18.3 MB)

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://58.227.195.166:9204 list

Found by ElasticSearchOpenPlugin

Create report

34.72.147.172 critical

United States GOOGLE-CLOUD-PLATFORM 2022-03-02 03:43 2024-12-04 00:47
cf350410ecceb5fd84c7bc38055009029961fed6cc3488ea67a102eb97615add

ASN: 396982
154 events in 1007 days
Leak size: 5.9 MB
Open ports: 3306

Databases: 47, row count: 44605, size: 5.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.audit_log_rules wi...

Ransom notes :


All your data is backed up. You must pay 0.0083 BTC to bc1qshd40t6r0eu903yva7k6j8s25r9d26vggj6p0w In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/yotuqu)

Found by MysqlOpenPlugin

Create report

23.224.91.228 critical

United States CNSERVERS 2023-01-31 06:57 2024-12-04 00:47
831cb76b8e05df46777c96881472ab8ed9073190ae48869de8b1cc31018d8ef8
http://23.224.91.228:9212

ASN: 40065
160 events in 672 days
Leak size: 100.6 MB
Open ports: 9212

Indices: 5, document count: 24838, size: 100.6 MB
Found index read_me with 1 documents (4.8 kB)
Found index insuser with 550 documents (197.8 kB)...

Ransom notes :


{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 1rsAp5FzhD6huVBjJEnLZxnQXU6EQmUvb . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}

Analysis helper :

                
estk --url=http://23.224.91.228:9212 list

Found by ElasticSearchOpenPlugin

Create report

95.214.53.65 high

Poland MEVSPACE sp. z o.o. 2021-10-02 11:09 2024-12-04 00:46
831cb76b8e05df46ad3ca013fa2d6a78e77c4d72e77c4d72e77c4d72e77c4d72
http://95.214.53.65:9200

ASN: 201814
63 events in 1158 days
Leak size: 14.3 kB
Open ports: 9200

Indices: 2, document count: 2, size: 14.3 kB
Found index internal with 1 documents (9.2 kB)
Found index read_me with 1 documents (5.1 kB)

Ransom notes :


{"text":"Your DB has been back up. The only way of recovery is you must send 0.002 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}

Analysis helper :

                
estk --url=http://95.214.53.65:9200 list

Found by ElasticSearchOpenPlugin

Create report

45.79.102.55 critical

United States Akamai Connected Cloud 2023-08-18 13:04 2024-12-04 00:46
831cb76b8e05df46778ba5194feeee8a342902396404201f5c5f002a9828be6e
http://45.79.102.55:9200

ASN: 63949
143 events in 473 days
Leak size: 13.2 GB
Open ports: 9200

Indices: 58, document count: 40659199, size: 13.2 GB
Found index unifi_syslog_40 with 300448 documents (105.4 MB)
Found index unifi_syslog_41 wit...

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y3EVBa` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://45.79.102.55:9200 list

Found by ElasticSearchOpenPlugin

Create report

104.210.35.150 high

United States MICROSOFT-CORP-MSN-AS-BLOCK 2022-02-17 22:16 2024-12-04 00:46
831cb76b8e05df4671303d97f1a4a7b369ce534969ce534969ce534969ce5349
http://104.210.35.150:9200

ASN: 8075
170 events in 1020 days
Leak size: 45.4 MB
Open ports: 9200

Indices: 2, document count: 43, size: 45.4 MB
Found index .geoip_databases with 42 documents (45.4 MB)
Found index read-me with 1 documents (4.8 ...

Ransom notes :


{"message": "We delete all databases, but download a copy to our server. The only way of recovery is you must send 0.01 BTC to bc1qmaacz9fdvnkujqlf8m547mzzh0l5t0ajn699th. You have until 48 hours to pay or data will be inaccessible. Once paid please email incomings99112@onionmail.com with code: `9PDqED` and we will recover your database. please read https://paste.sh/UY6_vtGL#THGqRdL9oQqUc-28RPDOWSbB for more information"}

Analysis helper :

                
estk --url=http://104.210.35.150:9200 list

Found by ElasticSearchOpenPlugin

Create report

47.100.182.205 high

China Hangzhou Alibaba Advertising Co.,Ltd. 2022-10-16 03:27 2024-12-04 00:46
cf350410ecceb5fda8e310cad4d66c49aaf86ec14c1b0c75f70a9aeb7acbaebc

ASN: 37963
38 events in 779 days
Leak size: 18.6 kB
Open ports: 3306

Databases: 18, row count: 8, size: 18.6 kB
Found table mysql.columns_priv with 0 records
Found table mysql.db with 2 records
Found table mysql.fu...

Ransom notes :


All your data is a backed up. You must pay 0.25 BTC to 1Kz6v4B5CawcnL8jrUvHsvzQv5Yq4fbsSv 48 hours for recover it. After 48 hours expiration we will sell all your data on dark markets and the database dump will be dropped from our server!

Found by MysqlOpenPlugin

Create report

139.224.22.150 high

China Hangzhou Alibaba Advertising Co.,Ltd. 2023-05-04 13:50 2024-12-04 00:46
831cb76b8e05df46f293fdc4a968c29d4726bc59beaf36df8d912ea39365768f
http://139.224.22.150:9200

ASN: 37963
118 events in 579 days
Leak size: 2.7 GB
Open ports: 9200

Indices: 408, document count: 10367443, size: 2.7 GB
Found index prod-ywzz-2024.11.25 with 7037 documents (2.0 MB)
Found index prod-ywzz-2024.11....

Analysis helper :

                
estk --url=http://139.224.22.150:9200 list

Found by ElasticSearchOpenPlugin

Create report

49.12.125.164 high

Germany Hetzner Online GmbH 2023-02-19 23:40 2024-12-04 00:46
831cb76b8e05df4689a016b44f326595b84f3a6a74988fa8838dca790652c31d
http://49.12.125.164:9200

ASN: 24940
57 events in 653 days
Leak size: 67.5 MB
Open ports: 9200

Indices: 17, document count: 18934, size: 67.5 MB
Found index internal with 1 documents (6.7 kB)
Found index .reporting-2024-06-30 with 1 documen...

Analysis helper :

                
estk --url=http://49.12.125.164:9200 list

Found by ElasticSearchOpenPlugin

Indices: 17, document count: 2516, size: 263.3 MB
Found index kayviumsandboxappserverdevkayviumdevcom-post-1 with 0 documents (226 B)
Found index...

Ransom notes :


{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+49k5k@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 59K5K"}

Analysis helper :

                
estk --url=http://138.197.134.146:9200 list

Found by ElasticSearchOpenPlugin

Indices: 2, document count: 2, size: 12.6 kB
Found index .kibana_1 with 1 documents (7.5 kB)
Found index read-me with 1 documents (5.1 kB)

Ransom notes :


{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}

Analysis helper :

                
estk --url=http://66.42.63.233:9200 list

Found by ElasticSearchOpenPlugin

Countries

Sources

Network

IP Ranges