Attack Report for Observation

Header

Time

2023/11/11, 19:39:01 (GMT)

Transaction ID

1ZHAO2QXZ1VTU0L1

Service

telnet

Location

CN (China)

Attacker

49.70.46.39

Classification

Cisco device detection

Harm Potential

Medium

Description

Shell commands execute for cisco device detection

Content

49.70.46.39:50840 is connected to telnet server
login:
root

Password:
zsun1188

OK
TSrv >
enable
system
shell
sh

ERROR : Unrecognized command
TSrv >
49.70.46.39:50840 is disconnected

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate