Blocage du jours

[farias]

https://ipinfo.io/159.65.3.221?lookup_source=search-bar

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 158.173.77.132
      1 158.173.77.214
      1 173.249.147.169
      1 206.189.37.221
      2 135.119.73.164
      2 156.253.1.241
      2 45.136.24.214
      2 64.227.9.136
      2 68.183.204.21
   1737 159.65.3.221

[farias]

# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 34.11.139.77
      1 34.12.211.97
      1 34.171.78.118
      1 35.185.202.223
      2 135.119.73.164
      2 192.42.116.13
      2 192.42.116.19
      2 217.160.144.92
      9 51.89.39.37
   1664 35.225.248.71

[farias]

Encore du google …

# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 176.65.148.30
      1 34.12.68.4
      1 34.7.122.63
      4 34.12.86.105
      4 34.178.33.131
    101 31.219.231.143
   1107 136.66.54.20

[farias]

DigitalOcean, LLC …

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      4 152.42.137.70
      4 167.99.197.34
      4 185.68.18.52
      4 195.3.220.7
      4 45.134.20.103
      4 45.134.20.69
      4 45.134.20.71
      8 151.246.1.47
      8 185.176.8.77
   1098 168.144.99.68

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      8 94.126.17.100
      9 109.228.59.224
     12 151.246.1.47
     12 173.247.255.22
     13 103.14.97.109
     17 148.113.47.200
     17 97.74.87.194
     19 104.244.124.135
    955 89.163.146.197
   2474 152.42.192.202

[farias]

https://ipinfo.io/203.175.125.185

 zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      2 41.141.122.205
      2 45.84.107.101
  11323 203.175.125.185

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
     17 198.46.211.159
     17 209.182.214.99
     19 148.251.47.87
     20 103.133.214.160
     20 195.15.227.114
     22 167.233.44.241
     36 162.0.226.2
    126 213.202.253.4
    294 165.232.170.62
   1711 91.92.42.225

[farias]

Encore Google :

# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 193.3.23.243
      1 34.62.84.31
      1 34.74.191.138
      1 45.151.145.156
      1 52.243.62.144
      1 88.181.227.45
      8 34.178.183.79
      8 34.32.236.161
    114 35.236.214.167
    121 34.59.41.227

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
     12 84.247.172.23
     12 95.129.96.156
     14 82.223.1.221
     16 152.228.213.32
     18 107.23.46.179
     20 147.135.138.90
     20 80.15.48.50
     33 141.95.65.57
     35 161.97.129.228
    772 143.198.194.237

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
     10 27.255.166.191
     11 170.244.94.204
     12 188.164.197.230
     12 91.142.222.105
     17 97.74.93.24
     24 68.178.160.25
     28 18.61.192.253
     37 152.228.213.32
    806 167.172.77.70
   1186 104.194.8.156

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 147.185.132.12
      1 45.198.224.5
      2 138.197.176.141
      2 162.252.54.221
      2 193.42.245.138
      2 195.26.237.240
      2 45.145.128.116
      2 45.147.234.121
    346 176.123.8.39
   1786 161.118.238.173

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 104.234.19.150
      1 45.198.224.5
      2 165.22.129.142
   1168 178.128.51.72

[farias]

# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
   2770 34.105.37.155

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 203.25.124.69
      1 216.24.212.53
      1 84.75.220.158
      2 134.122.7.252
      2 169.58.39.189
      2 31.134.3.217
      2 45.147.233.61
      4 52.157.32.48
   1148 104.64.214.216
   1288 5.231.28.68

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 185.198.240.253
      1 45.142.193.149
      1 74.248.139.103
      2 165.22.214.22
      2 52.238.192.78
    350 165.22.111.224
    584 172.237.87.100
   1710 161.33.167.35
   1848 188.166.237.142

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      1 159.26.119.228
      1 20.189.123.229
      1 45.4.3.144
      1 85.10.16.50
      2 31.134.12.65
   1186 149.36.48.81

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      2 135.136.48.43
      2 135.136.48.45
      2 45.3.47.220
      2 52.238.199.152
      2 95.182.90.246
      3 68.221.186.136
      5 135.136.48.73
      8 135.136.48.188
    310 104.234.4.3
    482 217.60.241.250

[farias]

# grep "wp-login.php" /var/log/apache2/access.*.log.1 | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
      4 91.246.51.140
      6 165.231.121.77
      6 191.102.165.71
     22 2.57.23.72
     24 38.253.224.3
     58 178.128.84.251
   1454 139.162.58.217
   1472 165.22.58.190
   1868 139.162.58.164
   4216 172.104.172.245