Blocage du jours
-
Aie …
# grep "xmlrpc.php" /var/log/apache2/access.*.log.1 | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 4 194.5.48.130 4 36.212.183.29 4 84.17.43.213 8 34.141.187.11 8 34.158.89.172 8 34.32.236.161 242 136.113.189.75 242 34.121.222.169 242 34.31.215.6 9000 162.243.212.182 -
Taille actuelle :
# du -sh /etc/pve/firewall/cluster.fw 72K /etc/pve/firewall/cluster.fw # wc -l /etc/pve/firewall/cluster.fw 30886 /etc/pve/firewall/cluster.fw -
Encore attaque via Google .
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 194.5.48.104 1 194.5.48.109 1 194.5.48.159 1 194.5.48.162 1 219.136.244.21 1 219.136.244.38 2 192.42.116.15 3 194.5.48.118 3 194.5.48.132 3396 34.158.164.29 -
Comme toujours Google LLC : https://ipinfo.io/8.231.242.192?lookup_source=search-bar
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 146.70.40.70 1 159.223.43.16 1 194.5.48.114 1 194.5.48.138 2 194.5.48.180 2726 8.231.242.192 -
Comme toujours Google LLC : https://ipinfo.io/34.158.164.29?lookup_source=search-bar
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log.1 | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 2 194.5.48.167 2 194.5.48.170 2 194.5.48.173 2 219.136.244.21 2 219.136.244.38 4 192.42.116.15 6 194.5.48.118 6 194.5.48.132 8 34.141.187.11 6792 34.158.164.29 -
Aspiration de mon GIT par 39.100.0.0/14 … Hangzhou Alibaba Advertising Co.,Ltd.
Utilisaton de 1235 IP différentes afin de ne pas être bloqué.
Du beau travail … -
2# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 194.5.48.147 1 194.5.48.152 1 194.5.48.155 1 84.17.60.236 1 95.91.239.129 4 34.141.193.233 4 34.32.178.242 4 34.34.43.119 2314 136.111.202.87 16265 152.42.253.231Blocage de 152.42.240.0/20 : Digital Ocean.
Blocage de 136.111.0.0/16 : Google LLC. -
https://ipinfo.io/91.92.40.173?lookup_source=search-bar
Blocage de 91.92.40.0/24
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 2 207.246.106.68 2 213.128.70.19 2 217.160.212.27 2 45.198.224.5 2 68.183.22.192 3 188.240.191.168 4 104.37.86.14 4 162.254.36.150 5 103.13.112.90 1288 91.92.40.173 -
https://ipinfo.io/157.245.57.78?lookup_source=search-bar
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 405 45.91.22.64 408 45.91.22.77 413 45.91.22.95 418 45.91.22.62 420 45.91.22.68 420 45.91.22.97 422 45.91.22.59 426 45.91.22.75 431 45.91.22.65 15224 157.245.57.78 -
https://ipinfo.io/159.65.3.221?lookup_source=search-bar
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 158.173.77.132 1 158.173.77.214 1 173.249.147.169 1 206.189.37.221 2 135.119.73.164 2 156.253.1.241 2 45.136.24.214 2 64.227.9.136 2 68.183.204.21 1737 159.65.3.221 -
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 34.11.139.77 1 34.12.211.97 1 34.171.78.118 1 35.185.202.223 2 135.119.73.164 2 192.42.116.13 2 192.42.116.19 2 217.160.144.92 9 51.89.39.37 1664 35.225.248.71 -
Encore du google …
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 176.65.148.30 1 34.12.68.4 1 34.7.122.63 4 34.12.86.105 4 34.178.33.131 101 31.219.231.143 1107 136.66.54.20 -
DigitalOcean, LLC …
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 4 152.42.137.70 4 167.99.197.34 4 185.68.18.52 4 195.3.220.7 4 45.134.20.103 4 45.134.20.69 4 45.134.20.71 8 151.246.1.47 8 185.176.8.77 1098 168.144.99.68 -
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 8 94.126.17.100 9 109.228.59.224 12 151.246.1.47 12 173.247.255.22 13 103.14.97.109 17 148.113.47.200 17 97.74.87.194 19 104.244.124.135 955 89.163.146.197 2474 152.42.192.202 -
https://ipinfo.io/203.175.125.185
zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 2 41.141.122.205 2 45.84.107.101 11323 203.175.125.185 -
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 17 198.46.211.159 17 209.182.214.99 19 148.251.47.87 20 103.133.214.160 20 195.15.227.114 22 167.233.44.241 36 162.0.226.2 126 213.202.253.4 294 165.232.170.62 1711 91.92.42.225 -
Encore Google :
# zgrep "xmlrpc.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 193.3.23.243 1 34.62.84.31 1 34.74.191.138 1 45.151.145.156 1 52.243.62.144 1 88.181.227.45 8 34.178.183.79 8 34.32.236.161 114 35.236.214.167 121 34.59.41.227 -
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 12 84.247.172.23 12 95.129.96.156 14 82.223.1.221 16 152.228.213.32 18 107.23.46.179 20 147.135.138.90 20 80.15.48.50 33 141.95.65.57 35 161.97.129.228 772 143.198.194.237 -
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 10 27.255.166.191 11 170.244.94.204 12 188.164.197.230 12 91.142.222.105 17 97.74.93.24 24 68.178.160.25 28 18.61.192.253 37 152.228.213.32 806 167.172.77.70 1186 104.194.8.156 -
# grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10 1 147.185.132.12 1 45.198.224.5 2 138.197.176.141 2 162.252.54.221 2 193.42.245.138 2 195.26.237.240 2 45.145.128.116 2 45.147.234.121 346 176.123.8.39 1786 161.118.238.173
Bonjour ! Vous semblez intéressé par cette conversation, mais vous n’avez pas encore de compte.
Marre de refaire défiler les mêmes messages ? Créez un compte pour retrouver votre position, recevoir des notifications des nouvelles réponses, sauvegarder vos favoris et voter pour les messages que vous appréciez.
Grâce à votre participation, ce message peut devenir encore meilleur 💗
S'inscrire Se connecter