City: Nouméa
Region: South Province
Country: New Caledonia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.69.217.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.69.217.101. IN A
;; AUTHORITY SECTION:
. 360 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019123101 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 01 15:26:52 CST 2020
;; MSG SIZE rcvd: 118Host 101.217.69.114.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 101.217.69.114.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 50.112.189.100 | spamattack | This IP Address using host porkbun.com that never terminate there websites. |
2022-09-19 03:54:33 |
| 104.21.64.248 | spam | Spammer Website using 104.21.64.248 |
2022-09-19 03:38:20 |
| 125.162.208.89 | attack | sy bukan teroris |
2022-09-07 02:53:53 |
| 117.184.37.20 | attack | Brute-Force to Windows RDP |
2022-09-17 11:26:27 |
| 186.65.114.215 | attack | tried logging into my account, please ban |
2022-09-07 01:17:26 |
| 195.133.20.193 | attack | Router logs showing dos and port scanning [DoS attack: TCP Port Scan] from source: 195.133.20.193:65533 Sunday, September 18,2022 16:33:43 Im seeing a ton of initial hits by russian based ip.. followed up after infection by what seems to be chinese methods of digging in below the os and also building a complex networking system to remove chokepoints and provide redundancy.. its happening at scale im not a direct target just a vector potentially to get into very large corporate headquarters in the area.. have found this... well remote access trojan.. in 3 businesses all major transaction business and 2 with a ton of proprietary information and designs. This is alarming and no one seems to take it as serious as it is.. in my own home ive fiddle and tested what it can do and its jaw dropping.. the level of working knowledge across sooo many systems down to the chipset instruction codes and bootloader... even using a non-storage devices rom for other purposes and moving what was originally there to else where with a working path to retrieve it so they system and hardware continues to function as it should.. just with quirks all the while making a bios flash and entirely new drive and os media useless because the malware or rogue code goes into action long before the os does. |
2022-09-20 01:21:00 |
| 45.95.147.10 | attack | DdoS |
2022-09-19 12:50:54 |
| 104.131.82.44 | attack | Scan port |
2022-09-07 12:57:00 |
| 89.248.163.130 | attack | Port Scan |
2022-09-09 12:37:41 |
| 45.95.147.10 | attack | Scan port |
2022-09-19 12:48:47 |
| 196.189.91.71 | spambotsattackproxynormal | 196.189.91.71 |
2022-09-24 02:08:50 |
| 167.99.248.252 | attack | Sep 3 05:31:57 host sshd[2214]: Failed password for root from 167.99.248.252 port 40276 ssh2 Sep 3 05:31:57 host sshd[2203]: Failed password for root from 167.99.248.252 port 39580 ssh2 Sep 3 05:31:57 host sshd[2179]: Failed password for root from 167.99.248.252 port 38018 ssh2 Sep 3 05:31:57 host sshd[2196]: Failed password for root from 167.99.248.252 port 39254 ssh2 |
2022-09-05 08:21:45 |
| 200.68.159.87 | spambotsproxy | Roban mi información |
2022-08-29 19:43:19 |
| 2001:0002:14:5:1:2:bf35:2610 | proxy | Hacking in email |
2022-08-27 07:09:18 |
| 45.95.147.10 | attack | DDoS |
2022-09-12 12:44:10 |