diff options
| author | hrbrmstr <bob@rud.is> | 2026-09-07 06:03:32 -0400 |
|---|---|---|
| committer | hrbrmstr <bob@rud.is> | 2026-09-07 06:23:41 -0400 |
| commit | de4c2e99a969eb10708b02d8f2b6f31495eacce8 (patch) | |
| tree | ff5be97683e9dbf19ec0387f3a03a90282477dd2 /kevlar/2026-09-07/iocs/c2-paths.txt | |
| parent | c283bcc507b0a7946a8660677a04da6f53cc77e1 (diff) | |
Diffstat (limited to 'kevlar/2026-09-07/iocs/c2-paths.txt')
| -rw-r--r-- | kevlar/2026-09-07/iocs/c2-paths.txt | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/iocs/c2-paths.txt b/kevlar/2026-09-07/iocs/c2-paths.txt new file mode 100644 index 0000000..1ed0dfb --- /dev/null +++ b/kevlar/2026-09-07/iocs/c2-paths.txt @@ -0,0 +1,41 @@ +# notable HTTP paths observed, week 2026-08-31 to 2026-09-07 +/remote/login?lang=en -- 30 hit(s), AS198953 +/ -- 11 hit(s), AS14956, AS51852, AS200651 +/.env -- 5 hit(s), AS14956, AS51852 +/login/?login_only=1 -- 3 hit(s), AS51852 +/openid_connect/cpanelid -- 3 hit(s), AS51852 +/eventmanager -- 3 hit(s), AS200651 +/api/client/update?arch=amd64&commit=08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17&os=windows -- 3 hit(s), AS200651 +/api/checkin -- 3 hit(s), AS200651 +/images/transparentpix.gif -- 3 hit(s), AS200651 +/containers/json -- 2 hit(s), AS210644 +http://proxy.flarevpn.digital:8080/judge -- 2 hit(s), AS51396 +/index.php?lang=../../../../../../../../tmp/index1 -- 1 hit(s), AS210644 +/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"));?>+/tmp/index1.php -- 1 hit(s), AS210644 +/public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello -- 1 hit(s), AS210644 +/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello -- 1 hit(s), AS210644 +/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/lib/phpunit/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 +/lib/phpunit/src/Util/PHP/eval-stdin.php -- 1 hit(s), AS210644 |