+plugin:ElasticSearchOpenPlugin +asn:"50941"
Indices: 7, document count: 325909, size: 120.5 MB
Found index read_me with 1 documents (4.6 kB)
Found index .monitoring-es-7-2022.09.27 with 213...
Ransom notes :
{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.015 BTC. Transfer to this BTC address 1JUvAusiHxWt7mkdbwupb5RZhxnBqvy5CZ . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}
Analysis helper :
estk --url=http://178.18.206.157:9200 list
Found by ElasticSearchOpenPlugin
Indices: 1, document count: 0, size: 0 B
Found index read_me with documents ()
Analysis helper :
estk --url=http://185.21.7.123:9200 list
Found by ElasticSearchOpenPlugin
Indices: 28, document count: 2934803, size: 1.5 GB
Found index netkasam-web-app--2022-04 with 741 documents (227.0 kB)
Found index .kibana-event-...
Analysis helper :
estk --url=http://185.88.132.90:9200 list
Found by ElasticSearchOpenPlugin
Indices: 3, document count: 10950, size: 7.3 MB
Through Kibana endpoint
Found index read__me with 1 documents (4.8 kB)
Found index mblog with 109...
Analysis helper :
estk --url=http://185.21.6.98:5601 list
Found by ElasticSearchOpenPlugin
Indices: 3, document count: 9914, size: 6.6 MB
Found index read__me with 1 documents (4.8 kB)
Found index mblog with 9898 documents (6.6 MB)
Foun...
Ransom notes :
{"message":"All your data is a backed up. You must pay 0.015 BTC to 1PpLEwVd35mrb7qzZtgNhkcF8JjxrsNEX5 48 hours for recover it. After 48 hours expiration we will leaked and exposed all your data. In case of refusal to pay, we will contact the General Data Protection Regulation, GDPR and notify them that you store user data in an open form and is not safe. Under the rules of the law, you face a heavy fine or arrest and your base dump will be dropped from our server! You can buy bitcoin here, does not take much time to buy https://localbitcoins.com with this guide https://localbitcoins.com/guides/how-to-buy-bitcoins After paying write to me in the mail with your DB IP: allmydataback@mailnesia.com and you will receive a link to download your database dump."}
Analysis helper :
estk --url=http://185.21.6.98:9200 list
Found by ElasticSearchOpenPlugin