TIUTIUN (dot) COM
Resume Articles Projects Blog

Attacking hosts

29 March 2008

As system administrator of a server, where are hosted some dozens of pretty popular sites, I often see SSH brute force attacks or even SYN attacks. So, here is the list of some assertive hosts.

IP Domain name Attack Type Provider
85.9.21.196 85.9.21.196 SYN GTSTelecom Romania
204.96.140.242 204.96.140.242 SSH Bruteforce Sting Communications SPRINTLINK
121.180.100.16 121.180.100.16 SSH Bruteforce Korea Telecom
82.78.147.7 82.78.147.7 SSH Bruteforce Romania Data Systems SA
74.200.78.227 74.200.78.227 SSH Bruteforce Defender Technologies Group, LLC
88.110.122.252 88.110.122.252 XSS Injection Tiscali UK Ltd
79.66.75.69 79.66.75.69 XSS Injection Tiscali UK Ltd
91.153.69.9 91.153.69.9 XSS Injection Elisa Oyj
83.85.163.152 83.85.163.152 XSS Injection Casema NV
70.55.9.127 70.55.9.127 XSS Injection Bell Canada BELLNEXXIA-11
92.4.109.197 92.4.109.197 XSS Injection Carphone Warehouse Broadband Services
222.192.176.2 222.192.176.2 SSH Bruteforce Nanjing Technical College of Special Education
210.21.221.146 210.21.221.146 SSH Bruteforce Shenzhen branch, china netcom corp
Full database of blacklisted IPs you can find here:
http://blacklist.tiutiun.com