Home >

Scoundrels

D --> f001ish attempts at misuse of resources


D --> via http

52 requests from 120.92.150.23
1 requests from 198.54.114.21
1 requests from 101.0.113.91
1 requests from 60.174.69.158
1 requests from 185.45.193.195
1 requests for/phpmyadmin-old/index.php
1 requests for/phpmyadmin0/index.php
1 requests for/phpMyAdminold/index.php
1 requests for/s.php
1 requests for/www/phpMyAdmin/index.php
1 requests for/admin/mysql/index.php
1 requests for/xw.php
1 requests for/phpmyadmin/phpmyadmin/index.php
1 requests for/admin/phpmyadmin2/index.php
1 requests for/PMA2/index.php
1 requests for/phpma/index.php
1 requests for/admin/phpMyAdmin/index.php
1 requests for/pmamy/index.php
1 requests for/sheep.php
1 requests for/wuwu11.php
... 41 items truncated ...

D --> via ssh

28attempts from  159.89.192.0/20
27attempts from  36.66.0.0/16
20attempts from  202.28.0.0/15
18attempts from  158.58.192.0/18
14attempts from  91.112.0.0/14
14attempts from  5.39.0.0/17
14attempts from  164.132.0.0/16
13attempts from  80.158.16.0/21
12attempts from  189.1.96.0/19
12attempts from  185.183.156.0/22
12attempts from  129.213.16.0/20
11attempts from  5.188.10.0/24
11attempts from  181.174.110.0/24
11attempts from  14.139.160.0/19
10attempts from  85.214.0.0/15
10attempts from  14.116.224.0/19
9attempts from  94.23.0.0/16
9attempts from  144.217.0.0/16
8attempts from  60.248.0.0/16
8attempts from  203.219.0.0/16
... 103 items truncated ...
181attempts on root
90attempts on admin
73attempts on test
28attempts on user
18attempts on ubuntu
18attempts on postgres
17attempts on pi
16attempts on oracle
14attempts on hadoop
14attempts on git
13attempts on ftpuser
11attempts on guest
9attempts on ts3
9attempts on tester
8attempts on support
7attempts on student
7attempts on arkserver
7attempts on administrator
6attempts on vbox
6attempts on ftptest
... 228 items truncated ..

D --> via smtp

4 attempts from 195.22.126.39
22 of reject: RCPT from [...]: 554 5.7.1
14 of Client host [...] blocked using bl.spamcop.net;
4 of Received-SPF: softfail
3 of reject: RCPT from [...]: 450 4.1.8
2 of warning: TLS library problem: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:362:
2 of Received-SPF: permerror

D --> blacklisted

The first set are ranges blacklisted by hand
pkts bytes target prot opt in out source destination
40 1774 REFUSE all -- * * 222.176.0.0/12 0.0.0.0/0
511 32893 REFUSE all -- * *  58.192.0.0/11 *
27 1100 REFUSE all -- * *  111.72.0.0/13 *
162 9868 REFUSE all -- * *  111.192.0.0/12 *
20 810 REFUSE all -- * *  125.64.0.0/11 *
100 6793 REFUSE all -- * *  221.224.0.0/13 *
17 1000 REFUSE all -- * *  222.128.0.0/12 *

These were blacklisted automatically by triggering a trap
0 0 REFUSE all -- * *  1.20.146.101 *
0 0 REFUSE all -- * *  5.15.182.137 *
0 0 REFUSE all -- * *  5.62.61.105 *
0 0 REFUSE all -- * *  5.134.51.48 *
0 0 REFUSE all -- * *  5.154.176.2 *
0 0 REFUSE all -- * *  14.183.103.66 *
4 192 REFUSE all -- * *  14.187.174.207 *
0 0 REFUSE all -- * *  24.79.136.67 *
0 0 REFUSE all -- * *  37.16.0.71 *
0 0 REFUSE all -- * *  37.105.109.211 *
0 0 REFUSE all -- * *  39.44.98.206 *
0 0 REFUSE all -- * *  40.133.125.106 *
0 0 REFUSE all -- * *  41.75.77.34 *
0 0 REFUSE all -- * *  41.98.64.63 *
0 0 REFUSE all -- * *  41.109.41.186 *
0 0 REFUSE all -- * *  42.106.44.91 *
6 272 REFUSE all -- * *  43.250.81.138 *
10 424 REFUSE all -- * *  45.33.114.180 *
0 0 REFUSE all -- * *  45.40.165.6 *
10 424 REFUSE all -- * *  45.40.165.142 *
0 0 REFUSE all -- * *  45.40.166.157 *
0 0 REFUSE all -- * *  45.40.166.159 *
0 0 REFUSE all -- * *  46.165.230.5 *
0 0 REFUSE all -- * *  47.96.233.155 *
0 0 REFUSE all -- * *  50.21.180.193 *
0 0 REFUSE all -- * *  50.21.188.76 *
0 0 REFUSE all -- * *  50.28.49.55 *
0 0 REFUSE all -- * *  50.62.160.99 *
0 0 REFUSE all -- * *  50.63.194.39 *
0 0 REFUSE all -- * *  50.87.144.137 *
8 344 REFUSE all -- * *  50.87.248.193 *
0 0 REFUSE all -- * *  50.87.249.135 *
0 0 REFUSE all -- * *  50.87.249.190 *
0 0 REFUSE all -- * *  54.225.90.58 *
0 0 REFUSE all -- * *  64.71.32.77 *
0 0 REFUSE all -- * *  66.7.217.64 *
7 304 REFUSE all -- * *  66.71.188.30 *
0 0 REFUSE all -- * *  66.175.239.12 *
0 0 REFUSE all -- * *  66.175.239.32 *
0 0 REFUSE all -- * *  67.227.213.209 *
0 0 REFUSE all -- * *  69.89.31.125 *
0 0 REFUSE all -- * *  69.195.124.251 *
1 60 REFUSE all -- * *  74.63.218.18 *
0 0 REFUSE all -- * *  77.75.251.205 *
0 0 REFUSE all -- * *  79.47.77.129 *
0 0 REFUSE all -- * *  79.170.44.90 *
0 0 REFUSE all -- * *  79.170.44.108 *
3 152 REFUSE all -- * *  80.88.86.23 *
0 0 REFUSE all -- * *  81.105.54.82 *
0 0 REFUSE all -- * *  81.169.144.135 *
0 0 REFUSE all -- * *  82.77.106.69 *
0 0 REFUSE all -- * *  83.165.146.202 *
0 0 REFUSE all -- * *  84.22.161.25 *
0 0 REFUSE all -- * *  84.117.59.192 *
1 52 REFUSE all -- * *  85.17.21.177 *
0 0 REFUSE all -- * *  85.97.71.252 *
0 0 REFUSE all -- * *  85.128.135.36 *
0 0 REFUSE all -- * *  86.35.153.133 *
0 0 REFUSE all -- * *  89.238.188.41 *
0 0 REFUSE all -- * *  90.175.186.142 *
0 0 REFUSE all -- * *  91.117.40.140 *
0 0 REFUSE all -- * *  91.155.31.6 *
13 648 REFUSE all -- * *  91.204.190.13 *
0 0 REFUSE all -- * *  91.208.99.2 *
0 0 REFUSE all -- * *  91.216.107.137 *
0 0 REFUSE all -- * *  91.235.3.249 *
9 360 REFUSE all -- * *  92.42.36.42 *
0 0 REFUSE all -- * *  92.190.167.91 *
0 0 REFUSE all -- * *  93.87.43.227 *
18 912 REFUSE all -- * *  94.103.9.79 *
0 0 REFUSE all -- * *  94.136.40.100 *
0 0 REFUSE all -- * *  94.176.239.254 *
4 192 REFUSE all -- * *  95.27.141.254 *
0 0 REFUSE all -- * *  96.69.20.133 *
0 0 REFUSE all -- * *  99.234.8.122 *
0 0 REFUSE all -- * *  101.182.15.134 *
0 0 REFUSE all -- * *  102.156.68.54 *
0 0 REFUSE all -- * *  103.78.22.49 *
0 0 REFUSE all -- * *  103.85.63.206 *
8 344 REFUSE all -- * *  104.152.188.16 *
0 0 REFUSE all -- * *  104.155.117.126 *
0 0 REFUSE all -- * *  105.110.136.176 *
0 0 REFUSE all -- * *  107.184.146.164 *
8 344 REFUSE all -- * *  108.179.200.141 *
0 0 REFUSE all -- * *  109.171.60.2 *
0 0 REFUSE all -- * *  110.175.146.95 *
0 0 REFUSE all -- * *  114.215.99.132 *
0 0 REFUSE all -- * *  115.28.17.58 *
0 0 REFUSE all -- * *  115.28.43.234 *
0 0 REFUSE all -- * *  115.28.212.181 *
0 0 REFUSE all -- * *  115.78.14.92 *
0 0 REFUSE all -- * *  115.84.140.172 *
0 0 REFUSE all -- * *  117.214.104.127 *
0 0 REFUSE all -- * *  117.223.199.207 *
0 0 REFUSE all -- * *  118.100.191.46 *
0 0 REFUSE all -- * *  119.160.223.121 *
0 0 REFUSE all -- * *  120.29.76.197 *
0 0 REFUSE all -- * *  121.42.154.116 *
7 304 REFUSE all -- * *  122.28.55.137 *
0 0 REFUSE all -- * *  124.166.232.118 *
0 0 REFUSE all -- * *  125.161.103.230 *
0 0 REFUSE all -- * *  131.153.37.2 *
5 200 REFUSE all -- * *  139.129.40.112 *
0 0 REFUSE all -- * *  146.185.223.25 *
0 0 REFUSE all -- * *  153.136.0.52 *
0 0 REFUSE all -- * *  156.204.50.244 *
1 60 REFUSE all -- * *  158.69.221.182 *
0 0 REFUSE all -- * *  158.181.41.192 *
0 0 REFUSE all -- * *  162.144.177.108 *
0 0 REFUSE all -- * *  162.241.217.168 *
0 0 REFUSE all -- * *  162.254.43.151 *
10 432 REFUSE all -- * *  165.182.186.131 *
0 0 REFUSE all -- * *  167.114.2.90 *
2 80 REFUSE all -- * *  168.62.226.25 *
0 0 REFUSE all -- * *  169.53.28.20 *
3 164 REFUSE all -- * *  173.201.196.98 *
0 0 REFUSE all -- * *  173.201.196.171 *
1 60 REFUSE all -- * *  173.230.252.122 *
1 60 REFUSE all -- * *  173.236.87.210 *
0 0 REFUSE all -- * *  176.40.255.177 *
0 0 REFUSE all -- * *  177.183.252.202 *
0 0 REFUSE all -- * *  178.21.73.83 *
0 0 REFUSE all -- * *  178.137.165.32 *
0 0 REFUSE all -- * *  178.162.214.71 *
0 0 REFUSE all -- * *  180.191.139.154 *
7 352 REFUSE all -- * *  180.191.151.49 *
0 0 REFUSE all -- * *  180.250.128.174 *
19 884 REFUSE all -- * *  181.165.117.80 *
0 0 REFUSE all -- * *  182.183.132.219 *
0 0 REFUSE all -- * *  183.111.174.4 *
0 0 REFUSE all -- * *  184.168.27.3 *
8 344 REFUSE all -- * *  184.168.152.119 *
0 0 REFUSE all -- * *  184.168.152.148 *
0 0 REFUSE all -- * *  185.2.4.27 *
8 344 REFUSE all -- * *  185.2.4.65 *
0 0 REFUSE all -- * *  185.2.4.71 *
0 0 REFUSE all -- * *  185.7.252.97 *
8 320 REFUSE all -- * *  185.23.21.26 *
23 1172 REFUSE all -- * *  185.143.223.162 *
0 0 REFUSE all -- * *  185.183.107.92 *
0 0 REFUSE all -- * *  185.208.164.155 *
6 304 REFUSE all -- * *  185.234.217.33 *
0 0 REFUSE all -- * *  185.234.217.34 *
6 304 REFUSE all -- * *  185.234.217.132 *
12 608 REFUSE all -- * *  185.234.218.43 *
0 0 REFUSE all -- * *  185.234.218.125 *
0 0 REFUSE all -- * *  187.17.98.2 *
0 0 REFUSE all -- * *  189.69.71.251 *
1 60 REFUSE all -- * *  190.90.160.12 *
21 968 REFUSE all -- * *  190.100.209.119 *
0 0 REFUSE all -- * *  190.105.79.135 *
0 0 REFUSE all -- * *  190.228.29.221 *
0 0 REFUSE all -- * *  191.252.44.242 *
0 0 REFUSE all -- * *  192.99.32.43 *
0 0 REFUSE all -- * *  192.185.4.61 *
0 0 REFUSE all -- * *  192.185.4.78 *
0 0 REFUSE all -- * *  192.185.82.240 *
0 0 REFUSE all -- * *  192.185.179.136 *
0 0 REFUSE all -- * *  192.254.250.177 *
0 0 REFUSE all -- * *  192.254.250.187 *
0 0 REFUSE all -- * *  193.109.46.22 *
7 280 REFUSE all -- * *  193.143.77.10 *
0 0 REFUSE all -- * *  193.143.77.16 *
6 304 REFUSE all -- * *  193.201.224.222 *
0 0 REFUSE all -- * *  198.38.82.78 *
4 184 REFUSE all -- * *  198.54.114.21 *
8 344 REFUSE all -- * *  198.57.247.189 *
0 0 REFUSE all -- * *  198.57.247.197 *
10 424 REFUSE all -- * *  198.154.118.88 *
8 344 REFUSE all -- * *  199.116.250.109 *
0 0 REFUSE all -- * *  199.116.251.26 *
0 0 REFUSE all -- * *  200.126.108.253 *
0 0 REFUSE all -- * *  201.171.205.109 *
0 0 REFUSE all -- * *  203.177.172.17 *
0 0 REFUSE all -- * *  204.93.177.164 *
0 0 REFUSE all -- * *  205.186.180.15 *
0 0 REFUSE all -- * *  208.64.137.231 *
0 0 REFUSE all -- * *  209.18.90.150 *
0 0 REFUSE all -- * *  212.227.24.21 *
0 0 REFUSE all -- * *  212.227.29.144 *
0 0 REFUSE all -- * *  212.227.29.211 *
11 1455 REFUSE all -- * *  212.227.109.167 *
0 0 REFUSE all -- * *  213.127.122.19 *
0 0 REFUSE all -- * *  213.251.182.107 *
0 0 REFUSE all -- * *  213.251.182.110 *
8 344 REFUSE all -- * *  216.120.252.102 *
0 0 REFUSE all -- * *  217.131.64.123 *
0 0 REFUSE all -- * *  217.160.62.224 *
0 0 REFUSE all -- * *  217.199.161.222 *
0 0 REFUSE all -- * *  218.205.160.78 *
0 0 REFUSE all -- * *  223.130.24.103 *
0 0 REFUSE all -- * *  223.130.27.20 *

Last updated Sun Jun 24 12:53:19 2018