City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: PT. Telekomunikasi Indonesia
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | [English version follows below] Buna ziua, Aceasta este o alerta de securitate cibernetica. Conform informatiilor detinute de WHITEHAT-RO, anumite adrese IP si/sau domenii web detinute, utilizate sau administrate de dvs. (sau organizatia dvs.), au fost identificate ca fiind asociate unor sisteme/servicii informatice vulnerabile, compromise sau implicate in diferite tipuri de atacuri cibernetice. Cu stima, Echipa WhiteHat ---------- English ---------- Dear Sir/Madam, This is a cyber security alert. WHITEHAT-RO has become aware of one or more IP addresses and/or web domains owned, used, or administered by you (or your organisation), that were identified as beeing associated with information systems/services that are vulnerable, compromised or used in different cyber attacks. Kind regards, WhiteHat Team |
2019-09-04 05:34:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.124.129.170
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20068
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.124.129.170. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061900 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 19 18:06:36 CST 2019
;; MSG SIZE rcvd: 119170.129.124.222.in-addr.arpa domain name pointer 170.subnet222-124-129.astinet.telkom.net.id.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
170.129.124.222.in-addr.arpa name = 170.subnet222-124-129.astinet.telkom.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.182.59.222 | attack | IPv4 123.182.59.222 převedená z IP na číselnou adresu 2075540446 mapovaná na kompatibilní adresu IPv6 ::FFFF:7BB6:3BDE Adresa IPv6 tunelu 6to4 2002:7BB6:3BDE:: IP patří do Qiaoxi District, Zhangjiaoxi District Provincie Che-pej, čínské telekomunikace IP adresa a atribuce stroje 89.102.130.196 Informace o prohlížeči pro tento přístup k internetu Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, jako Gecko) Chrome/108.0.0.0 Safari/537.36 |
2022-12-05 09:45:29 |
| 95.156.230.173 | attack | DdoS |
2022-12-06 13:53:11 |
| 216.158.238.194 | attack | Port scan |
2022-12-05 13:59:52 |
| 45.142.192.11 | attack | DDoS |
2022-12-01 13:53:34 |
| 5.34.207.94 | attack | becareful with this one |
2022-11-20 00:38:21 |
| 89.248.165.66 | attack | Scan port |
2022-11-16 13:55:25 |
| 2607:fb91:105:d088:7862:883d:1fd0:a558 | spamattackproxy | He is playing games at 45 years old and I am not picking his ass up. Get out the damn car |
2022-12-02 08:13:34 |
| 89.248.165.206 | attackproxy | scan rdp |
2022-11-23 13:42:23 |
| 66.254.114.38 | attack | Scan port |
2022-12-01 22:35:44 |
| 123.24.131.22 | spambotsattackproxynormal | 333 |
2022-12-02 16:32:53 |
| 192.241.198.196 | attack | Agresive attack RDP |
2022-12-05 14:15:32 |
| 104.152.52.129 | attack | Port scan attack |
2022-11-26 21:56:41 |
| 45.134.144.101 | attack | Brute scan |
2022-11-29 13:40:26 |
| 104.236.174.101 | attack | Hack port |
2022-11-25 13:41:13 |
| 64.62.197.214 | attack | Attack RDP |
2022-12-01 14:13:50 |