-
44.201.56.94 · access_log-20260405.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 6275d3b275d0a0ccdc6f89355778df2afdcf34b5 SHA256: 9927432d0974aa84d254f7165b29fbd5a3c8e300b4e65a7ffa1db70a97ed5269 application/x-gzip 646.19KB
2026-04-04 23:53:19 +0000 UTC
-
44.201.56.94 · access_log-20260405.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 6275d3b275d0a0ccdc6f89355778df2afdcf34b5 SHA256: 9927432d0974aa84d254f7165b29fbd5a3c8e300b4e65a7ffa1db70a97ed5269 application/x-gzip 646.19KB
2026-04-04 23:53:19 +0000 UTC
-
44.201.56.94 · access_log-20260405.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 6275d3b275d0a0ccdc6f89355778df2afdcf34b5 SHA256: 9927432d0974aa84d254f7165b29fbd5a3c8e300b4e65a7ffa1db70a97ed5269 application/x-gzip 646.19KB
2026-04-04 23:53:19 +0000 UTC
-
44.201.56.94 · access_log-20260405.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 6275d3b275d0a0ccdc6f89355778df2afdcf34b5 SHA256: 9927432d0974aa84d254f7165b29fbd5a3c8e300b4e65a7ffa1db70a97ed5269 application/x-gzip 646.19KB
2026-04-04 23:53:19 +0000 UTC