-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC
-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC
-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC
-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC
-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC
-
44.201.56.94 · access_log-20260301.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: f962603184b93feb35e6f6f272531db2f7d2479d SHA256: fac78bc5a4a54f04ec8002ec833ff0874f170e1c173f26190b09304d09492838 application/x-gzip 1.78MB
2026-02-28 23:56:14 +0000 UTC