Honeypot Activity for 5-11 June 2023
Posted: June 12th, 2023 | Author: xanda | Filed under: IT Related | No Comments »Top 5 source of IPs for few protocols, hitting my honeypot last week (5-11 June 2023)
Apache:
153,143.110.222.166 143,77.68.98.209 127,80.211.51.121 127,54.36.102.11 127,182.16.248.237 |
SSH:
1757,180.242.128.226 1008,179.166.57.219 670,202.161.190.82 246,171.244.53.224 164,57.128.113.49 |
DNS:
17,47.100.101.182 4,71.6.199.23 3,45.128.232.145 3,185.94.111.1 3,152.32.200.113 |
Few IPs observed coming from Malaysian ISP
4788 | 210.187.80.132 | TMNET-AS-AP TM Net, Internet Service Provider, MY 9930 | 211.24.12.162 | TTNET-MY TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Alam Selangor, Malaysia, MY 9930 | 211.25.119.142 | TTNET-MY TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Alam Selangor, Malaysia, MY 23678 | 27.131.36.170 | MYKRIS-AS-MY Mykris Asia, Managed Network and Service Provider, MY |
If you like to see the complete data captured within last week, you may visit the github page
Leave a Reply