« previous next »
Pages: [1]   Go Down

Author Topic: Abuse and misused server, forum spammer and content spammer, tor relay!  (Read 2263 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Abuse and misused server, forum spammer and content spammer, tor relay!
« on: August 09, 2017, 10:46:53 PM »
Flagged here as a tor relay node and  for " request to a *.tk domain".

52/100 suspicious accordinbg to https://zulu.zscaler.com/submission/1993e63c-7230-4cfd-8f24-e12ae9924459
8 lines of content on the public Interwebs: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=redjohn.tk&ref_sel=GSP2&ua_sel=ff&fs=1
IP abuse reports: https://www.abuseipdb.com/check/62.210.92.11  (Boris Nagaev)
Quite some dubious activities distributed from that destination: https://otx.alienvault.com/indicator/ip/62.210.92.11/
Quite some collection of malware launched from that IP: https://www.threatcrowd.org/ip.php?ip=62.210.92.11
Another report: http://www.malware-traffic-analysis.net/2015/09/18/index.html
On the tor-relay: https://tor-explorer-10kapart2016.azurewebsites.net/node/387B065A38E4DAA16D9D41C2964ECBC4B31D30FF

Should fit any blocklist i.nm.h.o.  :P

polonus (volunteer website security analyst and website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Abuse and misused server, forum spammer and content spammer, tor relay!
« Reply #1 on: August 09, 2017, 11:17:51 PM »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »