-
44.201.56.94 · access_log-20260308.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 83c23e1d655bd70c782f988c2ca200b67b2b3631 SHA256: 3f6d96b83b8c601af37b9560fed7b3a0a22626e10fdb220a6d75f8eab84b3c14 application/x-gzip 359.87KB
2026-03-07 23:50:52 +0000 UTC
-
44.201.56.94 · access_log-20260308.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 83c23e1d655bd70c782f988c2ca200b67b2b3631 SHA256: 3f6d96b83b8c601af37b9560fed7b3a0a22626e10fdb220a6d75f8eab84b3c14 application/x-gzip 359.87KB
2026-03-07 23:50:52 +0000 UTC
-
44.201.56.94 · access_log-20260308.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 83c23e1d655bd70c782f988c2ca200b67b2b3631 SHA256: 3f6d96b83b8c601af37b9560fed7b3a0a22626e10fdb220a6d75f8eab84b3c14 application/x-gzip 359.87KB
2026-03-07 23:50:52 +0000 UTC
-
44.201.56.94 · access_log-20260308.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 83c23e1d655bd70c782f988c2ca200b67b2b3631 SHA256: 3f6d96b83b8c601af37b9560fed7b3a0a22626e10fdb220a6d75f8eab84b3c14 application/x-gzip 359.87KB
2026-03-07 23:50:52 +0000 UTC
-
44.201.56.94 · access_log-20260308.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: 83c23e1d655bd70c782f988c2ca200b67b2b3631 SHA256: 3f6d96b83b8c601af37b9560fed7b3a0a22626e10fdb220a6d75f8eab84b3c14 application/x-gzip 359.87KB
2026-03-07 23:50:52 +0000 UTC