Attaque de type wp-login.php sur les 60 derniers jours.

[farias]

N°1 : Internet Service Provider, Dhaka, Bangladesh 119-40-84-186.bdcom.com ( https://ipinfo.io/119.40.84.186?lookup_source=search-bar )
N°2 : Company behind the IP traffic. PT Fasma Multi Solusindo Jakarta, Jakarta, ( https://ipinfo.io/103.253.244.95?lookup_source=search-bar )

# zgrep "wp-login.php" /var/log/apache2/access.*.gz | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -20
   1513 165.232.166.79
   1569 157.245.151.185
   1707 129.212.238.200
   1746 168.144.35.138
   1786 165.245.134.45
   1786 51.161.174.174
   1934 37.60.141.252
   2001 194.60.132.195
   2001 195.26.224.52
   2001 212.34.135.143
   2134 134.185.82.95
   2211 104.248.150.181
   2502 144.124.240.71
   3143 188.166.185.148
   3407 138.2.105.157
   3536 138.2.67.95
   4404 176.65.132.122
   4503 91.84.114.159
  12546 103.253.244.95
  18064 119.40.84.186