mvvvmd

I have not seen any indication of the attack being successful, my AV software is stopping the attempts. I also have done various checks to see if anything is out of order, this is not the case.

I would like to know if there is a way to block these uploads to /tmp. Idealy I would like to figure out what they are exactly doing to get the files written /tmp.