City: unknown
Region: unknown
Country: Russia
Internet Service Provider: Siberian Telecommunications Ltd.
Hostname: unknown
Organization: Siberian Telecommunications Ltd.
Usage Type: Commercial
| Type | Details | Datetime |
|---|---|---|
| attack | spam: cross checked with Brightcloud, Cisco Talos Intelligence |
2019-12-19 20:45:34 |
| attack | proto=tcp . spt=45330 . dpt=25 . (Found on Dark List de Dec 10) (780) |
2019-12-11 00:36:56 |
| attackspam | 2019-11-25 08:37:11 H=(82.147.67.70.static.trnet.ru) [82.147.67.70]:54143 I=[192.147.25.65]:25 F= |
2019-11-26 01:46:10 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 82.147.67.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58675
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;82.147.67.70. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070302 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 04 05:23:05 CST 2019
;; MSG SIZE rcvd: 116
70.67.147.82.in-addr.arpa domain name pointer 82.147.67.70.static.trnet.ru.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
70.67.147.82.in-addr.arpa name = 82.147.67.70.static.trnet.ru.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.66.134.3 | spamattack | "GET","\\/xmlrpc.php" |
2023-08-08 19:41:22 |
| 52.226.139.121 | attack | This is someone who lives in Akron Ohio with a girl named Jennifer Edwards on Newton st. His name is Shane Holder. I believe he moved here a few months ago from Georgia. He hacked into my laptop using Ubuntu and his Linux PC. I let him use my laptop for something and he was using the command prompt and typed something in real quick and gave me back my laptop. I find out now a month later he has access to my everything. He used to ask me if I knew anything about Ubuntu and sudo. So now that I found the IP address that's been hacking my stuff, I looked it up and what do u know..... It's Ubuntu! I know for a fact he is the one controlling this IP address and attacking people. |
2023-08-23 01:45:10 |
| 59.126.185.61 | spambotsattackproxynormal | 59.126.185.61 |
2023-08-02 15:15:51 |
| 89.248.165.245 | attack | Scan port |
2023-08-02 12:50:33 |
| 92.63.196.175 | botsattack | Scan port |
2023-08-09 12:46:07 |
| 82.180.39.253 | spamattackproxy | PBX: blocked for too many failed authentications; User-Agent: 3CX Phone System |
2023-08-09 19:49:50 |
| 92.63.196.51 | attack | Scan port |
2023-08-11 13:08:41 |
| 89.248.165.17 | attack | Scan port |
2023-08-02 12:52:40 |
| 185.224.128.192 | attack | Scan port |
2023-08-18 21:34:37 |
| 2.22.1.175 | attack | Scan port |
2023-08-23 12:42:17 |
| 92.63.196.97 | botsattack | Scan port |
2023-08-24 21:38:57 |
| 92.63.196.27 | attack | Scan port |
2023-08-02 21:20:02 |
| 54.227.28.186 | attack | Scan port |
2023-08-09 21:29:16 |
| 114.116.220.106 | attack | Scan port |
2023-08-02 21:22:15 |
| 45.130.97.87 | spambotsattackproxynormal | tuitu |
2023-08-06 11:12:06 |