---
title: "Nouveau scan sur Ngnix : system_api.php ( Drupal )"
url: https://www.cyber-neurones.org/2021/01/nouveau-scan-sur-ngnix-system_api-php-drupal/
date: 2021-01-21
modified: 2021-01-21
author: "Frederic"
description: "Dans les logs : 143.110.212.186 - - [20/Jan/2021:20:33:15 +0100] \"GET /system_api.php HTTP/1.1\" 404 490 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36\" 143.110.212.186 - -..."
categories:
  - "Sécurité"
tags:
  - "iptables"
word_count: 110
---

# Nouveau scan sur Ngnix : system_api.php ( Drupal )

Dans les logs :
143.110.212.186 - - [20/Jan/2021:20:33:15 +0100] "GET /system_api.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
143.110.212.186 - - [20/Jan/2021:20:33:15 +0100] "GET /system_api.php HTTP/1.1" 404 4079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
143.110.212.186 - - [20/Jan/2021:20:33:16 +0100] "GET /system_api.php HTTP/1.1" 404 4078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"

Je filtre donc l'IP :
# iptables -A INPUT -s 143.110.212.186 -j DROP
# iptables-save > /etc/iptables/rules.v4

## Propriété de l'adresse IP 143.110.212.186

| Localisation | États-Unis |
| ------------ | ----------- |
| Réputation | 86 % |
| Anonymat | Aucun détection |
| Usage | Attribué |
| Source | ARIN |
| Nom d'hote | 143.110.212.186 |