Telnet Curl Remote Script Stdout Execution

Identifies Telnet session activity where the attacker uses curl to retrieve a remote shell script over HTTP and outputs it directly to stdout using -o-, typically for immediate in-memory execution via piping to a shell (e.g., | sh) or command substitution. This pattern is commonly used in IoT botnet propagation chains and loader-based malware infections.