Author Topic: Malicious router configuration page blocked?  (Read 2115 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Malicious router configuration page blocked?
« on: August 03, 2020, 12:10:53 AM »
L.S.

Where we stumbled upon it and what it is reported for: https://viz.greynoise.io/ip/113.11.95.254
Also see: https://www.shodan.io/host/113.11.95.254 -> ERR_NAME_NOT_RESOLVED...
Results from scanning URL: -http://113.11.95.254
Number of sources found: 7
Number of sinks found: 14
filter: progid:DXImageTransform.Microsoft.gradient/RouterOS router configuration page Public HTML
BruteForce scanner and Mirai infested..See: https://www.virustotal.com/gui/ip-address/113.11.95.254/detection
Netcraft risk status 8 red out of 10: https://sitereport.netcraft.com/?url=113.11.95.254

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
« Last Edit: August 03, 2020, 01:19:04 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!