Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 2017-01-20T09:59:10+0200 [cowrie.telnet.transport.HoneyPotTelnetFactory] New connection: 171.246.144.226:33561 (192.168.0.103:23) [session: TT5]
- 2017-01-20T09:59:15+0200 [CowrieTelnetTransport,5,171.246.144.226] login attempt [root/dreambox] succeeded
- 2017-01-20T09:59:15+0200 [CowrieTelnetTransport,5,171.246.144.226] Opening TTY Log: log/tty/20170120-095915-None-5i.log
- 2017-01-20T09:59:15+0200 [CowrieTelnetTransport,5,171.246.144.226] Warning: state changed and new state returned
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: enable
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: enable
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Reading txtcmd from "txtcmds/bin/enable"
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: shell
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Command not found: shell
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: sh
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: sh
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: cat /proc/mounts; /bin/busybox FBLCE
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: cat /proc/mounts
- 2017-01-20T09:59:16+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: /bin/busybox FBLCE
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: cd /dev/shm; (cat .s || cp /bin/echo .s); /bin/busybox FBLCE
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: cd /dev/shm
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: cat .s
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: cp /bin/echo .s
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: /bin/busybox FBLCE
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: nc; wget; /bin/busybox FBLCE
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command not found: nc
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: wget
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: /bin/busybox FBLCE
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: (dd bs=52 count=1 if=.s || cat .s)
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command not found: dd bs=52 count=1 if=.s
- 2017-01-20T09:59:17+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: cat /dev/shm/.s
- 2017-01-20T09:59:18+0200 [CowrieTelnetTransport,5,171.246.144.226] CMD: /bin/busybox FBLCE
- 2017-01-20T09:59:18+0200 [CowrieTelnetTransport,5,171.246.144.226] Command found: /bin/busybox FBLCE
- 2017-01-20T09:59:18+0200 [CowrieTelnetTransport,5,171.246.144.226] Closing TTY Log: log/tty/20170120-095915-None-5i.log after 2 seconds
- 2017-01-20T09:59:18+0200 [CowrieTelnetTransport,5,171.246.144.226] honeypot terminal protocol connection lost [Failure instance: Traceback (failure with no frames): <class 'twisted.internet.error.ConnectionLost'>: Connection to the other side was lost in a non-clean fashion.
- 2017-01-20T09:59:18+0200 [CowrieTelnetTransport,5,171.246.144.226] Connection lost after 7 seconds
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
