2018-01-18T08:40:51.632537Z New connection: 195.22.127.83:58345 (192.168.0.253:2222) [session: 104d6947f127]
2018-01-18T08:40:51.845535Z Remote SSH version: SSH-2.0-sshlib-0.2
2018-01-18T08:40:53.099694Z login attempt [] succeeded
2018-01-18T08:40:53.329640Z direct-tcp connection request to 195.22.127.83:443 from 127.0.0.1:22
2018-01-18T08:41:13.208973Z Terminal Size: 24 280
2018-01-18T08:41:13.355712Z Opening TTY Log: log/tty/20180118-094113-104d6947f127-0i.log
2018-01-18T08:41:13.557059Z CMD: /gweerwe323f
2018-01-18T08:41:13.603736Z Command not found: /gweerwe323f
2018-01-18T08:41:13.656522Z CMD: 
2018-01-18T08:41:13.900178Z CMD: /bin/busybox cp; /gweerwe323f
2018-01-18T08:41:13.949066Z Command found: /bin/busybox cp
2018-01-18T08:41:14.005096Z Command found: cp
2018-01-18T08:41:14.063440Z Command not found: /gweerwe323f
2018-01-18T08:41:14.116574Z CMD: 
2018-01-18T08:41:14.357658Z CMD:   mount ;/gweerwe323f
2018-01-18T08:41:14.414782Z Command found: mount 
2018-01-18T08:41:14.473303Z Command not found: /gweerwe323f
2018-01-18T08:41:14.526439Z CMD: 
2018-01-18T08:41:14.941585Z CMD:   echo -e '\x47\x72\x6f\x70/' > //.nippon;   cat //.nippon;   rm -f //.nippon
2018-01-18T08:41:15.006232Z Command found: echo -e '\x47\x72\x6f\x70/' > //.nippon
2018-01-18T08:41:15.074967Z Command found: cat //.nippon
2018-01-18T08:41:15.143453Z Command found: rm -f //.nippon
2018-01-18T08:41:15.205111Z CMD: 
2018-01-18T08:41:15.542257Z CMD:   echo -e '\x47\x72\x6f\x70/tmp' > /tmp/.nippon;   cat /tmp/.nippon;   rm -f /tmp/.nippon
2018-01-18T08:41:15.608822Z Command found: echo -e '\x47\x72\x6f\x70/tmp' > /tmp/.nippon
2018-01-18T08:41:15.678815Z Command found: cat /tmp/.nippon
2018-01-18T08:41:15.747402Z Command found: rm -f /tmp/.nippon
2018-01-18T08:41:15.806469Z CMD: 
2018-01-18T08:41:16.194237Z CMD:   echo -e '\x47\x72\x6f\x70/var/tmp' > /var/tmp/.nippon;   cat /var/tmp/.nippon;   rm -f /var/tmp/.nippon
2018-01-18T08:41:16.262592Z Command found: echo -e '\x47\x72\x6f\x70/var/tmp' > /var/tmp/.nippon
2018-01-18T08:41:16.333486Z Command found: cat /var/tmp/.nippon
2018-01-18T08:41:16.403224Z Command found: rm -f /var/tmp/.nippon
2018-01-18T08:41:16.461788Z CMD: 
2018-01-18T08:41:16.760571Z CMD:   echo -e '\x47\x72\x6f\x70/' > //.nippon;   cat //.nippon;   rm -f //.nippon
2018-01-18T08:41:16.825516Z Command found: echo -e '\x47\x72\x6f\x70/' > //.nippon
2018-01-18T08:41:16.894668Z Command found: cat //.nippon
2018-01-18T08:41:16.963476Z Command found: rm -f //.nippon
2018-01-18T08:41:17.022278Z CMD: 
2018-01-18T08:41:17.460716Z CMD:   echo -e '\x47\x72\x6f\x70/lib/init/rw' > /lib/init/rw/.nippon;   cat /lib/init/rw/.nippon;   rm -f /lib/init/rw/.nippon
2018-01-18T08:41:17.531894Z Command found: echo -e '\x47\x72\x6f\x70/lib/init/rw' > /lib/init/rw/.nippon
2018-01-18T08:41:17.602126Z Command found: cat /lib/init/rw/.nippon
2018-01-18T08:41:17.676038Z Command found: rm -f /lib/init/rw/.nippon
2018-01-18T08:41:17.738446Z CMD: 
2018-01-18T08:41:18.089134Z CMD:   echo -e '\x47\x72\x6f\x70/proc' > /proc/.nippon;   cat /proc/.nippon;   rm -f /proc/.nippon
2018-01-18T08:41:18.160475Z Command found: echo -e '\x47\x72\x6f\x70/proc' > /proc/.nippon
2018-01-18T08:41:18.256887Z Command found: cat /proc/.nippon
2018-01-18T08:41:18.331046Z Command found: rm -f /proc/.nippon
2018-01-18T08:41:18.390286Z CMD: 
2018-01-18T08:41:18.727338Z CMD:   echo -e '\x47\x72\x6f\x70/sys' > /sys/.nippon;   cat /sys/.nippon;   rm -f /sys/.nippon
2018-01-18T08:41:18.793744Z Command found: echo -e '\x47\x72\x6f\x70/sys' > /sys/.nippon
2018-01-18T08:41:18.863523Z Command found: cat /sys/.nippon
2018-01-18T08:41:18.932256Z Command found: rm -f /sys/.nippon
2018-01-18T08:41:18.991196Z CMD: 
2018-01-18T08:41:19.329038Z CMD:   echo -e '\x47\x72\x6f\x70/dev' > /dev/.nippon;   cat /dev/.nippon;   rm -f /dev/.nippon
2018-01-18T08:41:19.402280Z Command found: echo -e '\x47\x72\x6f\x70/dev' > /dev/.nippon
2018-01-18T08:41:19.482124Z Command found: cat /dev/.nippon
2018-01-18T08:41:19.559796Z Command found: rm -f /dev/.nippon
2018-01-18T08:41:19.619539Z CMD: 
2018-01-18T08:41:20.008217Z CMD:   echo -e '\x47\x72\x6f\x70/dev/shm' > /dev/shm/.nippon;   cat /dev/shm/.nippon;   rm -f /dev/shm/.nippon
2018-01-18T08:41:20.083601Z Command found: echo -e '\x47\x72\x6f\x70/dev/shm' > /dev/shm/.nippon
2018-01-18T08:41:20.171269Z Command found: cat /dev/shm/.nippon
2018-01-18T08:41:20.251320Z Command found: rm -f /dev/shm/.nippon
2018-01-18T08:41:20.311156Z CMD: 
2018-01-18T08:41:20.698347Z CMD:   echo -e '\x47\x72\x6f\x70/dev/pts' > /dev/pts/.nippon;   cat /dev/pts/.nippon;   rm -f /dev/pts/.nippon
2018-01-18T08:41:20.773045Z Command found: echo -e '\x47\x72\x6f\x70/dev/pts' > /dev/pts/.nippon
2018-01-18T08:41:20.853321Z Command found: cat /dev/pts/.nippon
2018-01-18T08:41:20.931383Z Command found: rm -f /dev/pts/.nippon
2018-01-18T08:41:20.990307Z CMD: 
2018-01-18T08:41:21.083664Z CMD: /gweerwe323f
2018-01-18T08:41:21.130215Z Command not found: /gweerwe323f
2018-01-18T08:41:21.182850Z CMD: 
2018-01-18T08:41:22.506380Z CMD:  cat /bin/echo ;/gweerwe323f
2018-01-18T08:41:22.569855Z Command found: cat /bin/echo
2018-01-18T08:41:22.627743Z Command not found: /gweerwe323f
2018-01-18T08:41:22.681199Z CMD: