Attack Report for Observation

Header

Time

2022/06/14, 10:04:12 (GMT)

Transaction ID

EYUFYUBZI7H0AN52

Service

telnet

Location

KR (South Korea)

Attacker

14.49.208.122

Classification

Busybox command execution

Harm Potential

High

Description

BusyBox - The swiss army knife of embedded linux - command execution

Content

14.49.208.122:54204 is connected to telnet server
login:
admin

Password:
zhongxing

OK
TSrv >
enable
system
shell
sh

ERROR : Unrecognized command
TSrv >
cat /proc/mounts; /bin/busybox CVEDF

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

ERROR : Unrecognized command
TSrv >

14.49.208.122:54204 is disconnected

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate