Showing posts with label Attackers. Show all posts
Showing posts with label Attackers. Show all posts

Wednesday, February 4, 2015

ATTACKER: The Preston Law Firm of Houston Texas

Hey guys you may want to check out your systems because we have been seeing attacks from you all day. As some of you know that fact that we report on breaches in advance of some people really causes them to get angry. Either this law firm is owned by hackers or they have hired hackers to try and infiltrate our infrastructure.

It started out as simple SMTP probes but we are starting to see web server probes. We hope you like playing with our honeypot systems because that's what your hitting folks.

Next time please try and do your homework before blatantly just attacking what you think is our infrastructure. Thanks and have a great day.

Maybe you didn't like us reporting on the Texas A&M activity or some other such nonsense but this is a free country, we have data to back up our claims so if you want to play this game please by all means let's do this...

I would love to be able to put out all of the information we have and then charge you for your resource usage today since it was so extensive and you achieved absolutely NOTHING!

Monday, November 3, 2014

Today's Naughty List - 3 Nov 2014


50.74.234.66   United States (USA)   New York New York  
  81.137.204.83   United Kingdom (GBR)   n/a n/a  
  37.159.209.6   Italy (ITA)   n/a n/a  
  95.48.123.105   Poland (POL)   Kujawsko-Pomorskie Polska  
  200.241.45.146   Brazil (BRA)   n/a n/a  
  81.137.204.83   United Kingdom (GBR)   n/a n/a  
  196.38.228.2   South Africa (ZAF)   n/a n/a  
  151.236.52.44   United Kingdom (GBR)   n/a n/a  

Wednesday, October 29, 2014

Today's Naughty List - 28 Oct 2014

  89.248.169.94   Netherlands (NLD)   n/a n/a  
  208.105.81.202   United States (USA)   New York New York  
  121.52.209.123   China (CHN)   n/a n/a  
  115.205.159.65   China (CHN)   Zhejiang Hangzhou

Tuesday, October 28, 2014

Noisy Much?

 kevin109.190.158.183smtp2014-10-27 16:42:51
 kevin109.190.158.183system2014-10-27 16:41:37
 kevin109.190.158.183smtp2014-10-27 16:42:15

Didn't we already report you guys in a previous compromised host report? I thought so!


109.190.158.183   France (FRA)   n/a n/a

Wednesday, October 22, 2014

ALERT: Organized Chinese Hacking Attacks NET 117.25.130.0/24

We highly recommend you block the netblock listed above. We have seen a serious rise in the number of reports of hacking from this IP space.

SNORT RULE:
alert tcp any any -> 117.25.130.0/24 80 (msg: "SLC Security Alert of Malicious 
Activity"; classtype:network-scan; sid:2014102201)

Today's Naughty List - 22 Oct 2014


120.113.70.54   Taiwan (TWN)   T'ai-pei Taipei
111.93.244.98   India (IND)   n/a n/a
124.81.241.104   Indonesia (IDN)   Jawa Tengah Mega
188.112.63.11   Poland (POL)   n/a n/a
189.75.50.236   Brazil (BRA)   n/a n/a
190.99.77.3   Ecuador (ECU)   Tungurahua Ambato
213.55.107.150   Ethiopia (ETH)   n/a n/a
37.159.209.6   Italy (ITA)   n/a n/a
71.6.165.200*   United States (USA)   California San Diego
81.137.204.83   United Kingdom (GBR)   n/a n/a
93.150.8.8   Italy (ITA)   Lombardia Milan
95.241.210.73   Italy (ITA)   n/a n/a


NOTE:
* = Earlier report
See related story

Tuesday, October 21, 2014

Today's Naughty List - Increased Activity 21 oct 2014


201.205.250.2   Costa Rica (CRI)   n/a n/a  
  110.136.246.195   Indonesia (IDN)   n/a n/a  
  111.93.244.98   India (IND)   n/a n/a  
  115.64.243.173   Australia (AUS)   Queensland Glenview  
  124.81.241.104   Indonesia (IDN)   Jawa Tengah Mega  
  139.0.4.177   Indonesia (IDN)   Jakarta Raya Jakarta  
  162.219.179.101   Canada (CAN)   n/a n/a  
  188.66.86.88   United Kingdom (GBR)   n/a n/a  
  189.75.50.236   Brazil (BRA)   n/a n/a  
  190.213.95.18   Trinidad and Tobago (TTO)   Saint George Valsayn  
  195.56.111.217   Hungary (HUN)   Budapest Budapest  
  201.205.250.2   Costa Rica (CRI)   n/a n/a  
  209.190.42.138   United States (USA)   Ohio Columbus  
  213.203.148.151   Italy (ITA)   Lazio Rome  
  213.55.107.137   Ethiopia (ETH)   n/a n/a  
  37.159.209.6   Italy (ITA)   n/a n/a  
  54.68.211.27   United States (USA)   New Jersey Woodbridge  
  65.111.183.31   United States (USA)   Florida Miami  
  67.224.110.132   United States (USA)   California Los Angeles  
  67.224.110.133   United States (USA)   California Los Angeles  
  72.182.33.119   United States (USA)   Texas Round Rock  
  77.89.56.146   Italy (ITA)   Emilia-Romagna Carpi  
  80.254.189.53   Switzerland (CHE)   Aargau Brugg  
  93.150.8.8   Italy (ITA)   Lombardia Milan  
  95.241.210.73   Italy (ITA)   n/a n/a