34.
Bad Packets Report
@bad_packets
Top 10 Countries β Feb. 13, 2020
New unique Mirai-like (DDoS malware) hosts detected by country:
Taiwan: 518
β¦ twitter.com/i/web/status/1β¦
New unique Mirai-like (DDoS malware) hosts detected by country:
Taiwan: 518
β¦ twitter.com/i/web/status/1β¦
35.
Bad Packets Report
@bad_packets
Mass scanning activity detected from 82.102.16.220 () checking for Citrix NetScaler Gateway endpoints vulnerableβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @bad_packets
36.
37.
38.
39.
40.
Bad Packets Report
@bad_packets
ππππ₯π§
Active DDoS botnet C2 server detected!
IP address: 5.79.70.165 ()
Hosting provider: Leaseweb (AS60781)β¦ twitter.com/i/web/status/1β¦
Active DDoS botnet C2 server detected!
IP address: 5.79.70.165 ()
Hosting provider: Leaseweb (AS60781)β¦ twitter.com/i/web/status/1β¦
Bad Packets Report
@bad_packets
ππππ₯π§
Active DDoS botnet C2 server detected!
IP address: 194.50.171.185 ()
Hosting provider: JustHost[.]ru (β¦ twitter.com/i/web/status/1β¦
Active DDoS botnet C2 server detected!
IP address: 194.50.171.185 ()
Hosting provider: JustHost[.]ru (β¦ twitter.com/i/web/status/1β¦
Bad Packets Report
@bad_packets
ππππ₯π§
Active DDoS botnet C2 server detected!
IP address: 194.15.36.41 ()
Hosting provider: private-hosting[.β¦ twitter.com/i/web/status/1β¦
Active DDoS botnet C2 server detected!
IP address: 194.15.36.41 ()
Hosting provider: private-hosting[.β¦ twitter.com/i/web/status/1β¦
Bad Packets Report
@bad_packets
Mass scanning activity detected from 3.9.16.169 () checking for Pulse Secure VPN servers vulnerable to CVE-2019-11510.
#threatintel
#threatintel
Bad Packets Report
@bad_packets
πππππ¬ π§π’π£ π± π£π₯π’π©ππππ₯π¦
New unique Mirai-like botnet hosts detected by ASN:
AS4837: 517 -- @ChinaUnicomGlob
AS8β¦ twitter.com/i/web/status/1β¦
New unique Mirai-like botnet hosts detected by ASN:
AS4837: 517 -- @ChinaUnicomGlob
AS8β¦ twitter.com/i/web/status/1β¦
41.
42.
43.
44.
Bad Packets Report
@bad_packets
πππππ¬ π§π’π£ π± π£π₯π’π©ππππ₯π¦
New unique Mirai-like botnet hosts detected by ASN:
AS4837: 886 -- @ChinaUnicomGlob
AS4β¦ twitter.com/i/web/status/1β¦
New unique Mirai-like botnet hosts detected by ASN:
AS4837: 886 -- @ChinaUnicomGlob
AS4β¦ twitter.com/i/web/status/1β¦
Bad Packets Report
@bad_packets
ππππ₯π§
Active DDoS botnet C2 server detected!
IP address: 147.135.124.113 ()
Hosting provider: OVH (AS16276)β¦ twitter.com/i/web/status/1β¦
Active DDoS botnet C2 server detected!
IP address: 147.135.124.113 ()
Hosting provider: OVH (AS16276)β¦ twitter.com/i/web/status/1β¦
Bad Packets Report
@bad_packets
Active botnet C2 and payload:
http://185.244.25.241/b/mips ( KV Solutions AS60355)
virustotal.com/gui/file/c48ccβ¦β¦ twitter.com/i/web/status/1β¦
http://185.244.25.241/b/mips ( KV Solutions AS60355)
virustotal.com/gui/file/c48ccβ¦β¦ twitter.com/i/web/status/1β¦
Retweet of status by @bad_packets
Bad Packets Report
@bad_packets
WARNING
New payload targeting D-Link devices detected:
http://62.210.207.229/t ()
http://62.210.207.229/binβ¦ twitter.com/i/web/status/1β¦
New payload targeting D-Link devices detected:
http://62.210.207.229/t ()
http://62.210.207.229/binβ¦ twitter.com/i/web/status/1β¦
...but wait! There's more!
34.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
