Bambooz

photo.scr coin mining malware spreading attempt

Jan 2nd, 2017
129
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.66 KB | None | 0 0
  1. (076120)02.01.2017 18:59:53 - (not logged in) (5.141.127.43)> Connected on port 21, sending welcome message...
  2. (076120)02.01.2017 18:59:53 - (not logged in) (5.141.127.43)> 220 ohai! :o)
  3. (076120)02.01.2017 18:59:54 - (not logged in) (5.141.127.43)> USER anonymous
  4. (076120)02.01.2017 18:59:54 - (not logged in) (5.141.127.43)> 331 Password required for anonymous
  5. (076120)02.01.2017 18:59:54 - (not logged in) (5.141.127.43)> PASS qwerty
  6. (076120)02.01.2017 18:59:54 - anonymous (5.141.127.43)> 230 Logged on
  7. (076120)02.01.2017 18:59:54 - anonymous (5.141.127.43)> TYPE A
  8. (076120)02.01.2017 18:59:54 - anonymous (5.141.127.43)> 200 Type set to A
  9. (076120)02.01.2017 18:59:55 - anonymous (5.141.127.43)> PASV
  10. (076120)02.01.2017 18:59:55 - anonymous (5.141.127.43)> 227 Entering Passive Mode
  11. (076120)02.01.2017 18:59:56 - anonymous (5.141.127.43)> LIST /pub/download/bios/ic7-g
  12. (076120)02.01.2017 18:59:56 - anonymous (5.141.127.43)> 150 Opening data channel for directory listing of "/pub/download/bios/ic7-g"
  13. (076120)02.01.2017 18:59:56 - anonymous (5.141.127.43)> 226 Successfully transferred "/pub/download/bios/ic7-g"
  14. (076120)02.01.2017 18:59:58 - anonymous (5.141.127.43)> TYPE I
  15. (076120)02.01.2017 18:59:58 - anonymous (5.141.127.43)> 200 Type set to I
  16. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> PASV
  17. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> 227 Entering Passive Mode
  18. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> STOR /pub/download/bios/ic7-g/Photo.scr
  19. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> 550 Permission denied
  20. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> TYPE I
  21. (076120)02.01.2017 19:00:01 - anonymous (5.141.127.43)> 200 Type set to I
  22. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> PASV
  23. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> 227 Entering Passive Mode
  24. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> SIZE /pub/download/bios/ic7-g/index.htm
  25. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> 213 7703
  26. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> RETR /pub/download/bios/ic7-g/index.htm
  27. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> 150 Opening data channel for file download from server of "/pub/download/bios/ic7-g/index.htm"
  28. (076120)02.01.2017 19:00:02 - anonymous (5.141.127.43)> 226 Successfully transferred "/pub/download/bios/ic7-g/index.htm"
  29. (076120)02.01.2017 19:00:03 - anonymous (5.141.127.43)> TYPE I
  30. (076120)02.01.2017 19:00:03 - anonymous (5.141.127.43)> 200 Type set to I
  31. (076120)02.01.2017 19:00:03 - anonymous (5.141.127.43)> PASV
  32. (076120)02.01.2017 19:00:03 - anonymous (5.141.127.43)> 227 Entering Passive Mode
  33. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> STOR /pub/download/bios/ic7-g/index.htm
  34. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> 550 Permission denied
  35. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> TYPE I
  36. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> 200 Type set to I
  37. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> PASV
  38. (076120)02.01.2017 19:00:04 - anonymous (5.141.127.43)> 227 Entering Passive Mode
  39. (076120)02.01.2017 19:00:05 - anonymous (5.141.127.43)> SIZE /pub/download/bios/ic7-g/Photo.scr
  40. (076120)02.01.2017 19:00:05 - anonymous (5.141.127.43)> 550 File not found
  41. (076120)02.01.2017 19:00:05 - anonymous (5.141.127.43)> RETR /pub/download/bios/ic7-g/Photo.scr
  42. (076120)02.01.2017 19:00:05 - anonymous (5.141.127.43)> 550 File not found
  43. (076120)02.01.2017 19:00:05 - anonymous (5.141.127.43)> disconnected.
  44.  
  45.  
  46. This shit is getting annoying.. bloating my logs to no end. You'd think they would stop if they can't upload after x tries but nah.. they go through EVERY. SINGLE. DIRECTORY. ...
Advertisement
Add Comment
Please, Sign In to add comment