Advertisement
bontchev

Unknown Mirai variant

Jan 20th, 2017
306
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.36 KB | None | 0 0
  1. 2017-01-18T19:50:05+0200 [cowrie.telnet.transport.HoneyPotTelnetFactory] New connection: 125.25.70.26:50169 (192.168.0.102:23) [session: TT10]
  2. 2017-01-18T19:50:06+0200 [CowrieTelnetTransport,10,125.25.70.26] login attempt [root/admin] succeeded
  3. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] Opening TTY Log: log/tty/20170118-195007-None-10i.log
  4. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] Warning: state changed and new state returned
  5. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] Received unhandled keyID: '\x00'
  6. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] CMD: enable
  7. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] Command found: enable
  8. 2017-01-18T19:50:07+0200 [CowrieTelnetTransport,10,125.25.70.26] Reading txtcmd from "txtcmds/bin/enable"
  9. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] Received unhandled keyID: '\x00'
  10. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] CMD: system
  11. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] Command not found: system
  12. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] Received unhandled keyID: '\x00'
  13. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] CMD: shell
  14. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] Command not found: shell
  15. 2017-01-18T19:50:08+0200 [CowrieTelnetTransport,10,125.25.70.26] Received unhandled keyID: '\x00'
  16. 2017-01-18T19:50:09+0200 [CowrieTelnetTransport,10,125.25.70.26] CMD: sh
  17. 2017-01-18T19:50:09+0200 [CowrieTelnetTransport,10,125.25.70.26] Command found: sh
  18. 2017-01-18T19:50:09+0200 [CowrieTelnetTransport,10,125.25.70.26] Received unhandled keyID: '\x00'
  19. 2017-01-18T19:50:09+0200 [CowrieTelnetTransport,10,125.25.70.26] CMD: /bin/busybox MIRAI
  20. 2017-01-18T19:50:09+0200 [CowrieTelnetTransport,10,125.25.70.26] Command found: /bin/busybox MIRAI
  21. 2017-01-18T19:50:10+0200 [CowrieTelnetTransport,10,125.25.70.26] Closing TTY Log: log/tty/20170118-195007-None-10i.log after 3 seconds
  22. 2017-01-18T19:50:10+0200 [CowrieTelnetTransport,10,125.25.70.26] honeypot terminal protocol connection lost [Failure instance: Traceback (failure with no frames): <class 'twisted.internet.error.ConnectionDone'>: Connection was closed cleanly.
  23. 2017-01-18T19:50:10+0200 [CowrieTelnetTransport,10,125.25.70.26] Connection lost after 5 seconds
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement