Spider Script Pastebin ((top))

| Type | Value | |--------------------------|-------------------------------------------------| | File path (Linux) | /tmp/.cache/spider.py , /var/tmp/systemd-update | | C2 domain | data-collector[.]top (resolves to 45.155.205.233 ) | | User-Agent | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (spoofed) | | Cron entry | */5 * * * * python3 /tmp/.cache/spider.py | | Network signature | POST to /log with JSON body containing "url" and "forms" |

If you find a malicious spider script on Pastebin: spider script pastebin

User-agent: * Disallow: /private/ Disallow: /admin/ Disallow: /api/ spider script pastebin