+plugin:ElasticSearchOpenPlugin +net:"CHINA UNICOM China169 Backbone" -ip:"113.56.0.0/15" +net:"CHINA UNICOM China169 Backbone" +l9fp:"831cb76b8e05df46119aca18157b4267a46c83790cf33802b93ca57cfa1e6d2c"
Indices: 11, document count: 1, size: 6.4 kB
Found index .ds-datahub_usage_event-000036 with 0 documents (208 B)
Found index .ds-datahub_usage_ev...
Ransom notes :
{"message": "Your DB has been back up. The only way of recovery is you must send 0.01 BTC to bc1qaua9cwrp0g2nqg2txn86e7k376v0xm4m0yfcfq. Once paid please email dar0kmdb@tutanota.com with code: `Y3EVBa` and we will recover your database. please read https://paste.sh/u6JYxXwk#PwdBc7jVzqo9-h12zU5hyPYP for more information"}
Analysis helper :
estk --url=http://122.114.70.139:9200 list
Found by ElasticSearchOpenPlugin