城市(city): Pune
省份(region): Maharashtra
国家(country): India
运营商(isp): Hathway Cable and Datacom Limited
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspambots | Nov 9 07:17:13 |
2019-11-09 22:25:07 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.75.191.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15658
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.75.191.208. IN A
;; AUTHORITY SECTION:
. 589 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110900 1800 900 604800 86400
;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 22:25:02 CST 2019
;; MSG SIZE rcvd: 118
Host 208.191.75.116.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.191.75.116.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:01:28 |
| 103.76.14.23 | spamnormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:01:02 |
| 195.133.20.193 | attack | Router logs showing dos and port scanning [DoS attack: TCP Port Scan] from source: 195.133.20.193:65533 Sunday, September 18,2022 16:33:43 Im seeing a ton of initial hits by russian based ip.. followed up after infection by what seems to be chinese methods of digging in below the os and also building a complex networking system to remove chokepoints and provide redundancy.. its happening at scale im not a direct target just a vector potentially to get into very large corporate headquarters in the area.. have found this... well remote access trojan.. in 3 businesses all major transaction business and 2 with a ton of proprietary information and designs. This is alarming and no one seems to take it as serious as it is.. in my own home ive fiddle and tested what it can do and its jaw dropping.. the level of working knowledge across sooo many systems down to the chipset instruction codes and bootloader... even using a non-storage devices rom for other purposes and moving what was originally there to else where with a working path to retrieve it so they system and hardware continues to function as it should.. just with quirks all the while making a bios flash and entirely new drive and os media useless because the malware or rogue code goes into action long before the os does. |
2022-09-20 01:21:00 |
| 103.76.14.23 | normal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 17:59:22 |
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:02:18 |
| 192.168.2.55 | spambotsattackproxynormal | deteils |
2022-09-13 07:36:18 |
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:01:49 |
| 69.174.169.247 | spamattack | ptflixmovies.xyz and icefilms-info.co.uk [69.174.169.247] using host porkbun.com 44.226.112.151 50.112.189.100 52.34.20.72 2600:1f14:35:3002:948d:d1d2:547b:b1d4 2600:1f14:35:3000:2835:cc1f:b228:9acf 2600:1f14:35:3001:f73c:5020:575:efbc |
2022-09-19 03:57:51 |
| 207.154.222.43 | attack | he is hack my roter |
2022-09-30 05:53:46 |
| 159.223.129.170 | attack | Sep 29 07:32:36 host sshd[205691]: Invalid user chenhao from 159.223.129.170 port 48644 Sep 29 07:32:36 host sshd[205693]: Invalid user chenchen from 159.223.129.170 port 48582 Sep 29 07:32:36 host sshd[205697]: Invalid user chengweishao from 159.223.129.170 port 48626 |
2022-09-29 08:56:41 |
| 161.35.208.13 | attack | Sep 27 02:25:06 host sshd[849200]: Failed password for root from 161.35.208.13 port 44004 ssh2 Sep 27 02:25:06 host sshd[849194]: Failed password for root from 161.35.208.13 port 44000 ssh2 Sep 27 02:25:06 host sshd[849203]: Failed password for root from 161.35.208.13 port 44006 ssh2 |
2022-09-27 14:34:48 |
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:01:44 |
| 103.196.234.165 | spamattack | Trying to log in in others' facebook account |
2022-09-13 00:35:27 |
| 69.174.169.247 | spamattack | ptflixmovies.xyz and icefilms-info.co.uk [69.174.169.247] using host porkbun.com 44.226.112.151 50.112.189.100 52.34.20.72 2600:1f14:35:3002:948d:d1d2:547b:b1d4 2600:1f14:35:3000:2835:cc1f:b228:9acf 2600:1f14:35:3001:f73c:5020:575:efbc |
2022-09-19 03:57:46 |
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:02:05 |