File search engine

95.211.91.87 · well-known.zip

/SMA/25 01 2022/

The Netherlands · LeaseWeb Netherlands B.V.

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: efd6017a17e5f7816e9254c077762045ccd59370
SHA256: c6bfb836f2bfa57d55b5a5321c2145d0ddcbcadb17cb29ebc988881ed14ea210
application/zip
1.77GB
2022-01-31 14:48:17 +0000 UTC
www.espacoeventosefestas.com · agew.com.br-stats.tar.gz

/migrado/

Brazil · Metaweb Internet Ltda

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 0a6d2db95124c6d04d24210762a79f5e31f0972d
SHA256: ee2601726d6328eb412c49966c6f118aea7fb2ca39594d045da493d888686c0c
application/x-tar
2.05MB
2024-08-21 01:48:03 +0000 UTC
nordea-netbank.mails-com.net · Nordea Bank_files.zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 50966bbfc6875fcaabcc6ed751f21fa208f43022
SHA256: 66ab829c918d5d2f275caf6ddc3bd60b60bcabf7ad105f7dd6f956f96f62da6f
application/zip
9.15MB
2025-12-02 17:11:13 +0000 UTC
nordea-netbank.mails-com.net · Nordea Bank_files.zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 50966bbfc6875fcaabcc6ed751f21fa208f43022
SHA256: 66ab829c918d5d2f275caf6ddc3bd60b60bcabf7ad105f7dd6f956f96f62da6f
application/zip
9.15MB
2025-12-02 17:11:13 +0000 UTC
ftp.talentsnapper.in · test.tar.gz

/

India · NTT COMMUNICATIONS INDIA NETWORK SERVICES PRIVATE LIMITED

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b39af61006d54daa128917166c6736d10a4a997e
SHA256: 4fe0d2a7f8dfd0c881cd695e0c06005e7dfe604a74d5ec77a14722e6d6f815ba
application/x-gzip
5.23MB
2025-08-11 11:11:01 +0000 UTC
mail.mvb.xap.mybluehost.me · thefourwebsitesworking.zip

/

United States · UNIFIEDLAYER-AS-1

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 6eef061250885d5b8c281e6ef0078b42c177d29a
SHA256: f75aa718ade9a500f4e81eb04c0eea8b0d3b135ae63785830470d6fed2de873b
application/zip
1.06GB
2025-04-06 21:51:29 +0000 UTC
www.mvb.xap.mybluehost.me · thefourwebsitesworking.zip

/

United States · UNIFIEDLAYER-AS-1

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: ee4413f35992727cbd4e6dcee69cea73841489c4
SHA256: 588ddb427d927eb249992c5365c19b1a22673819199b49b96dfe00290e7a02c2
application/zip
1.06GB
2025-04-06 21:51:29 +0000 UTC
2send.appsuitecandwmail.online · prevent_Redirect(1).zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 658b1eec0868b0ba7f07a349576afb1190583195
SHA256: 1025038e5bb6a6a6ee59f0bacdd79bcc374e4496dd4cb899f8731793968698ef
application/zip
97.04KB
2025-11-21 13:19:17 +0000 UTC
2send.appsuitecandwmail.online · prevent_Redirect(1).zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 658b1eec0868b0ba7f07a349576afb1190583195
SHA256: 1025038e5bb6a6a6ee59f0bacdd79bcc374e4496dd4cb899f8731793968698ef
application/zip
97.04KB
2025-11-21 13:19:17 +0000 UTC
www-tervetuloa-s-pankiin-7885368632-fi.riii.info · prevent_Redirect(1).zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 658b1eec0868b0ba7f07a349576afb1190583195
SHA256: 1025038e5bb6a6a6ee59f0bacdd79bcc374e4496dd4cb899f8731793968698ef
application/zip
97.04KB
2025-11-04 12:55:08 +0000 UTC
www-tervetuloa-s-pankiin-7885368632-fi.riii.info · prevent_Redirect(1).zip

/

· CLOUDFLARENET

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 658b1eec0868b0ba7f07a349576afb1190583195
SHA256: 1025038e5bb6a6a6ee59f0bacdd79bcc374e4496dd4cb899f8731793968698ef
application/zip
97.04KB
2025-11-04 12:55:08 +0000 UTC
v5.hotel-licorne.com · ovh-access_log-20250706.gz

/log/httpd/

France · OVH SAS

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 088b310d17824e083bb47fe482b5abacaf84154a
SHA256: e2cdd16f1041434b9d0a6b7c7bec6d13fe6303918429359fe6a16ea6c831e3c8
application/x-gzip
625.51KB
2025-07-13 01:31:21 +0000 UTC
v5.hotel-licorne.com · ovh-access_log-20250216.gz

/log/httpd/

France · OVH SAS

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: aa7bc03177131bbd21a2cec0489fcefa3a4677d3
SHA256: 895e4c637dc67cbd013ddad1390e8eac8f79d84d504e80b57177714a28e0c3db
application/x-gzip
376.46KB
2025-02-23 02:50:27 +0000 UTC
stickysites.theweb2go.biz · backup_2022-01-06-0243_Emma_Elliott_a3ae86ce2a52-db.gz

/backups/

France · Contabo GmbH

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ef0c2deac439aa104431b0d6c4c84323b53e60e6
SHA256: 3ad4651a14449bdb838d17514d16f8cecb0096f679d81f00f8b93ddff2c8cf15
application/x-gzip
313.24KB
2022-01-06 08:43:09 +0000 UTC
www.stickysites.theweb2go.biz · backup_2022-01-06-0243_Emma_Elliott_a3ae86ce2a52-db.gz

/backups/

France · Contabo GmbH

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ef0c2deac439aa104431b0d6c4c84323b53e60e6
SHA256: 3ad4651a14449bdb838d17514d16f8cecb0096f679d81f00f8b93ddff2c8cf15
application/x-gzip
313.24KB
2022-01-06 08:43:09 +0000 UTC
www.stickysites.theweb2go.biz · backup_2022-01-06-0243_Emma_Elliott_a3ae86ce2a52-db.gz

/backups/

France · Contabo GmbH

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ef0c2deac439aa104431b0d6c4c84323b53e60e6
SHA256: 3ad4651a14449bdb838d17514d16f8cecb0096f679d81f00f8b93ddff2c8cf15
application/x-gzip
313.24KB
2022-01-06 08:43:09 +0000 UTC
stickysites.theweb2go.biz · backup_2022-01-06-0243_Emma_Elliott_a3ae86ce2a52-db.gz

/backups/

France · Contabo GmbH

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: ef0c2deac439aa104431b0d6c4c84323b53e60e6
SHA256: 3ad4651a14449bdb838d17514d16f8cecb0096f679d81f00f8b93ddff2c8cf15
application/x-gzip
313.24KB
2022-01-06 08:43:09 +0000 UTC
chrisdevries.com · error.log-2022-02-25.bz2

/cof-art.com/log/

France · OVH SAS

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b2c2e1b1d012324b387c4f80c0242d4b7a1f5b4b
SHA256: f26ded9492cfa3fda019570aebee22bf99a49f7b41033f3218ae21a0ecf0e95f
application/x-bzip2
20.64KB
2022-02-25 18:19:31 +0000 UTC
chrisdevries.com · access.log-2022-03-09.bz2

/cof-art.com/log/

France · OVH SAS

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b882dab65dcb34c911ae30ff22cfa3fbf0bd7fe1
SHA256: dd25dbef3ebd80b05b37ddae1ca0acd90088b32daf15bd53247b19797b237fa4
application/x-bzip2
18.58KB
2022-03-09 22:58:57 +0000 UTC
chrisdevries.com · access.log-2022-03-08.bz2

/cof-art.com/log/

France · OVH SAS

Yara EXPL_Log4j_CallBackDomain_IOCs_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: cca473580137baf9787203090f2d8edc8de98f6c
SHA256: 701a85e5fd5a207a6259116c8dc2b94a5f180e54b357d4e7204d552a310a2666
application/x-bzip2
27.20KB
2022-03-08 22:51:41 +0000 UTC