Honeypot Activity for 5-11 June 2023

Posted: June 12th, 2023 | Author: | Filed under: IT Related | No Comments »

Top 5 source of IPs for few protocols, hitting my honeypot last week (5-11 June 2023)

Apache:

153,143.110.222.166
143,77.68.98.209
127,80.211.51.121
127,54.36.102.11
127,182.16.248.237

SSH:

1757,180.242.128.226
1008,179.166.57.219
670,202.161.190.82
246,171.244.53.224
164,57.128.113.49

DNS:

17,47.100.101.182
4,71.6.199.23
3,45.128.232.145
3,185.94.111.1
3,152.32.200.113

Few IPs observed coming from Malaysian ISP

4788    | 210.187.80.132   | TMNET-AS-AP TM Net, Internet Service Provider, MY
9930    | 211.24.12.162    | TTNET-MY TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Alam Selangor, Malaysia, MY
9930    | 211.25.119.142   | TTNET-MY TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Alam Selangor, Malaysia, MY
23678   | 27.131.36.170    | MYKRIS-AS-MY Mykris Asia, Managed Network and Service Provider, MY

If you like to see the complete data captured within last week, you may visit the github page



Leave a Reply