City: unknown
Region: unknown
Country: United Kingdom of Great Britain and Northern Ireland (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.239.90.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;92.239.90.46. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 03:45:09 CST 2025
;; MSG SIZE rcvd: 10546.90.239.92.in-addr.arpa domain name pointer mort-07-b2-v4wan-169802-cust2605.vm24.cable.virginm.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
46.90.239.92.in-addr.arpa name = mort-07-b2-v4wan-169802-cust2605.vm24.cable.virginm.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.95.147.10 | attack | Scan port |
2022-09-19 12:48:47 |
| 69.174.169.247 | spamattack | Terminate ptflixmovies.xyz stagevu.co.uk watchingforlinks.xyz icefilms-info.co.uk |
2022-09-19 03:14:28 |
| 82.102.65.127 | spamattack | Someone going in my facebook with this ip code. And makeing problems |
2022-09-18 19:00:31 |
| 45.95.147.10 | attack | DDoS |
2022-09-12 12:44:10 |
| 199.26.100.166 | normal | 不会意思啊03，他喝多了乱说话，视频在卡哥那里，我们没有看过，他乱说的，明天还是你过去陪一下那个啥吧，他小弟怕会闹，我是白榄。 |
2022-09-01 04:25:31 |
| 36.251.161.219 | normal | 快点出来啊大哥，给你安排了总统套间，这几天刚刚来，小弟给你接风洗尘，直接到了墨蒲，报8663有专人负责接待你。 |
2022-09-01 02:53:42 |
| 118.136.62.116 | normal | :D |
2022-09-29 19:32:14 |
| 36.251.161.239 | normal | 在路上 |
2022-09-01 02:32:11 |
| 196.189.91.71 | spambotsattackproxynormal | 196.189.91.71 |
2022-09-24 02:08:57 |
| 45.93.16.157 | attack | Scan port |
2022-09-08 12:33:36 |
| 185.63.253.200 | attack | 185.63.253.200 |
2022-09-04 06:33:57 |
| 195.133.20.193 | attack | Router logs showing dos and port scanning [DoS attack: TCP Port Scan] from source: 195.133.20.193:65533 Sunday, September 18,2022 16:33:43 Im seeing a ton of initial hits by russian based ip.. followed up after infection by what seems to be chinese methods of digging in below the os and also building a complex networking system to remove chokepoints and provide redundancy.. its happening at scale im not a direct target just a vector potentially to get into very large corporate headquarters in the area.. have found this... well remote access trojan.. in 3 businesses all major transaction business and 2 with a ton of proprietary information and designs. This is alarming and no one seems to take it as serious as it is.. in my own home ive fiddle and tested what it can do and its jaw dropping.. the level of working knowledge across sooo many systems down to the chipset instruction codes and bootloader... even using a non-storage devices rom for other purposes and moving what was originally there to else where with a working path to retrieve it so they system and hardware continues to function as it should.. just with quirks all the while making a bios flash and entirely new drive and os media useless because the malware or rogue code goes into action long before the os does. |
2022-09-20 01:21:00 |
| 192.145.168.39 | spambotsattackproxynormal | Asc wsc wsc halka ay magaalada Hackney oo |
2022-09-10 06:06:51 |
| 125.162.208.89 | attack | sy bukan teroris |
2022-09-07 02:53:53 |
| 172.67.185.20 | spam | Spammer using sieraleon.vip to spam peoples emails with. |
2022-09-19 03:34:16 |