Honeypots.tk

Attack Report for Observation

Header

Time

2024/07/01, 22:40:03 (GMT)

Transaction ID

W3OUXJ7KXVUUCSCR

Service

telnet

Location

HK (Hong Kong)

Attacker

202.126.212.118

Classification

Cisco device detection

Harm Potential

Medium

Description

Shell commands execute for cisco device detection

Content

202.126.212.118:62402 is connected to telnet server
login:
root
Password:


OK
TSrv >
anko

ERROR : Unrecognized command
TSrv >
enable

ERROR : Unrecognized command
TSrv >
system

ERROR : Unrecognized command
TSrv >
shell

ERROR : Unrecognized command
TSrv >
sh

ERROR : Unrecognized command
TSrv >
ping; sh

ERROR : Unrecognized command
TSrv >
/bin/busybox dd if=/bin/busybox bs=22 count=1||while read i;do /bin/busybox echo -n $i;done</bin/busybox||cat /proc/self/exe

ERROR : Unrecognized command
TSrv >

202.126.212.118:62402 is disconnected

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate

honeypots.tk ©2020