+dataset.ransom_notes:btc -country:"Russia"
Databases: 39, row count: 136244, size: 7.9 MB
Found table RECOVER_YOUR_DATA.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv with...
Ransom notes :
All your data is backed up. You must pay 0.0100 BTC to bc1qfnu6j2n54k58uduufzuthhy7qn3sx7zalyuytz In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/yotuqu)
Found by MysqlOpenPlugin
Databases: 39, row count: 138188, size: 7.9 MB
Found table README_TO_RECOVER_A.RECOVER_YOUR_DATA with 2 records
Found table mysql.columns_priv wi...
Ransom notes :
All your data is backed up. You must pay 0.03 BTC to 14B8iRn9k76fTmgvax4ZPyJDWqM67nrA8v In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data2)
Found by MysqlOpenPlugin
Databases: 93, row count: 395590, size: 37.5 MB
Found table mysql.columns_priv with 0 records
Found table mysql.component with 0 records
Found ta...
Ransom notes :
1All your data is backed up. You must pay 0.03 BTC to bc1qqxv8jeqflhphladvhjk5kftlv8n0g086x4tcyd In 48 hours, your data will be publicly disclosed and deleted. Your DBCODE = 2YE9T (more information: go to https://is.gd/XYePcT)
Found by MysqlOpenPlugin
Databases: 49, row count: 5084, size: 2.4 MB
Found table mysql.columns_priv with 0 records
Found table mysql.column_stats with 0 records
Found ta...
Ransom notes :
All your data is backed up. You must pay 0.0127 BTC to 1KYGjQ5AnfaAU7mQLFVENptRewE1Sn7th7 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2fix.info/mysql)
Found by MysqlOpenPlugin
Indices: 36, document count: 2498622, size: 1.3 GB
Found index opnsense_329 with 92933 documents (49.7 MB)
Found index read_me with 1 documents (...
Ransom notes :
{"text":"Your DB has been back up. The only way of recovery is you must send 0.0057 BTC to 127ZBzXyLJFc7ShMmzkYFDhSiXXSnR8Jfr. Once paid please email databaserestore32@onionmail.org with code: `omoRmq` and we will recover your database. please read https://cutmyurl.com/3caF8EkT for more information"}
Analysis helper :
estk --url=http://93.88.227.18:9200 list
Found by ElasticSearchOpenPlugin
Indices: 14, document count: 41, size: 43.6 MB
Found index read_me with 1 documents (4.5 kB)
Found index collateral-appraisal with 0 documents (2...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0054 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+525rs@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 525RS"}
Analysis helper :
estk --url=http://34.128.98.49:9200 list
Found by ElasticSearchOpenPlugin
Indices: 4, document count: 14082, size: 60.9 MB
Found index folio_authority_diku with 0 documents (1.1 kB)
Found index folio_instance_diku with ...
Analysis helper :
estk --url=http://189.206.56.23:9200 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 41, size: 39.1 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0045 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5mxfn@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5MXFN"}
Analysis helper :
estk --url=http://192.200.100.19:9200 list
Found by ElasticSearchOpenPlugin
Indices: 22, document count: 449209, size: 272.3 MB
Found index .monitoring-es-7-2025.04.14 with 156478 documents (87.9 MB)
Found index .monitori...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0052 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5icv5@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5ICV5"}
Analysis helper :
estk --url=http://178.160.249.47:9200 list
Found by ElasticSearchOpenPlugin
Indices: 1, document count: 1, size: 4.3 kB
Found index read-me with 1 documents (4.3 kB)
Ransom notes :
{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qmheh2ukafmsa8y0hxj64lalddzxwj0sfaas7uu. Once paid please email dar0kmdb@tutanota.com with code: `aLEfI8` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
Analysis helper :
estk --url=http://197.189.199.2:9205 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0054 BTC to bc1q7stxy9axrwmpu77kme55523a723spvcurnyt9x In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5k5bp@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5K5BP"}
Analysis helper :
estk --url=http://37.58.58.161:9200 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 2, size: 12.7 kB
Found index .kibana_1 with 1 documents (7.6 kB)
Found index read-me with 1 documents (5.1 kB)
Ransom notes :
{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y8N85w` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
Analysis helper :
estk --url=http://103.209.146.163:9200 list
Found by ElasticSearchOpenPlugin
Indices: 1, document count: 1, size: 5.4 kB
Found index read_me with 1 documents (5.4 kB)
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0039 BTC to bc1q8r9zejh0ch22frh4pfdx2tlwf864sv42756yem In 48 hours, your data will be publicly disclosed and deleted. (more information: go to https://is.gd/rudata5)After paying send mail to us: dzen+5y3k0@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5Y3K0"}
Analysis helper :
estk --url=http://209.208.27.25:9200 list
Found by ElasticSearchOpenPlugin
Indices: 1, document count: 1, size: 4.6 kB
Found index read_me with 1 documents (4.6 kB)
Ransom notes :
{"message":"All your data is backed up. You must pay 0.005 BTC to 16w2xEN9pcjFgECWH1LDVps4xV9m3nUMBN In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data5)After paying send mail to us: rambler+42irw@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 52IRW"}
Analysis helper :
estk --url=http://139.99.69.89:9200 list
Found by ElasticSearchOpenPlugin
Indices: 3, document count: 42, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index website with 1 documents (4.0 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+54pej@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 54PEJ"}
Analysis helper :
estk --url=http://31.32.223.10:9200 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qfnu6j2n54k58uduufzuthhy7qn3sx7zalyuytz In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5vmti@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5VMTI"}
Analysis helper :
estk --url=http://129.154.242.134:9200 list
Found by ElasticSearchOpenPlugin
Indices: 3, document count: 64, size: 39.3 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index wiki with 23 documents (107.1 ...
Ransom notes :
{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qmheh2ukafmsa8y0hxj64lalddzxwj0sfaas7uu. Once paid please email dar0kmdb@tutanota.com with code: `aLEfI8` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
Analysis helper :
estk --url=http://65.109.26.35:9201 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 41, size: 39.1 MB
Found index .geoip_databases with 40 documents (39.1 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0056 BTC to bc1q50kkrj2zr2l0nm8u8ygscphtxw02xjmkn3smv4 In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5z00e@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5Z00E"}
Analysis helper :
estk --url=http://95.211.96.182:9200 list
Found by ElasticSearchOpenPlugin
Indices: 5, document count: 1091, size: 848.5 kB
Found index payments_production with 9 documents (47.4 kB)
Found index orders_production_2024010...
Ransom notes :
{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `WCR6wZ` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
Analysis helper :
estk --url=http://202.158.11.50:9200 list
Found by ElasticSearchOpenPlugin
Indices: 2, document count: 41, size: 43.6 MB
Found index .geoip_databases with 40 documents (43.6 MB)
Found index read_me with 1 documents (4.5 ...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0053 BTC to bc1qwvthsvr7qgkmn36qn4ju2qe6mur37s453w43nl In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://2info.win/ela)After paying send mail to us: rambler+5f1dv@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 5F1DV"}
Analysis helper :
estk --url=http://101.34.249.99:9200 list
Found by ElasticSearchOpenPlugin