+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" +ip:"120.76.0.0/14" +l9fp:"831cb76b8e05df46fec16fd6aba401fe343d1f40343d1f40343d1f40343d1f40"
Indices: 2, document count: 190, size: 254.3 kB
Found index read_me with 1 documents (4.6 kB)
Found index info_index_v1 with 189 documents (249.7...
Ransom notes :
{"message":"All your data is backed up. You must pay 0.0057 BTC to 1tpwVPxbRNtQuzKonhzdEsJL8n562uwAr In 48 hours, your data will be publicly disclosed and deleted. (more information: go to http://iplis.ru/data05)After paying send mail to us: rambler+468gu@onionmail.org and we will provide a link for you to download your data. Your DBCODE is: 568GU"}
Analysis helper :
estk --url=http://120.76.205.30:9200 list
Found by ElasticSearchOpenPlugin