HTTP: D-Link Admin Password Probe
This signature detects attempts to use an admin password on a D-Link network device. A successful attack can lead to an attacker controlling the router. This activity is often used by a worm called "TheMoon" to find new D-Link devices to infect - the source is most likely compromised by this worm.
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3