Proxy Attack Summaries 2016/03/03 thru 2016/03/28

Sorted by Source Network Range
Sorted by Total Connections From Source Network
Sorted by Source Country
Sorted by Total Connections From Source Country
Counts by fetch target URL.
Counts by fetch target URL - sorted by URL in rev. domain order.

Sorted by Source Network Range


Source Network Registered owner Local Target IP or range Target Ports
2.28.0.0 - 2.31.255.255 Orange WBC Broadband GB attacked MULTIPLE-IPs for ports 22x8
37.48.64.0 - 37.48.127.255 LeaseWeb Netherlands B.V. Postbus 93054 1090BB Amsterdam NETHERLANDS P.O. Box 93054 NL attacked MULTIPLE-IPS for ports 22x12
46.227.244.0 - 46.227.247.255 Systemia.pl Sp. z o.o. PL attacked MULTIPLE-IPS for ports 22x4
49.32.0.0 - 49.47.255.255 Reliance Jio Infocomm Limited IN attacked MULTIPLE-IPS for ports 22x4
67.0.0.0 - 67.7.255.255 Qwest Communications Company, LLC Monroe, LA, US attacked MULTIPLE-IPs for ports 22x12
68.184.0.0 - 68.191.255.255 Charter Communications St. Louis, MO, US attacked 132.235.1.13 for ports 22x69
75.128.0.0 - 75.143.255.255 Charter Communications St. Louis, MO, US attacked 132.235.1.13 for ports 22x79
80.87.205.0 - 80.87.205.255 DATAFLOW New Horizon Building, Ground Floor, 3 ? Miles Philip S.W. Goldson Highway, Belize BZ attacked MULTIPLE-IPS for ports 22x11
81.138.213.200 - 81.138.213.207 BT-ADSL GB attacked MULTIPLE-IPS for ports 22x4
82.221.102.32 - 82.221.102.55 Cyberghost S.R.L. IP Network Soseaua Nicolae Titulescu Soseaua Nicolae Titulescu Nr. 1, Bl A7, SC 4, Et 2, Apt 99 Sector 1, 011131 Bucharest IS attacked 132.235.1.2 for ports 22x3
91.218.208.0 - 91.218.211.255 FIBERWAY Sp. z o.o. ul. Jagiellonska 6, 32-005 Niepolomice, PL ul. Jagiellonska 6 PL attacked MULTIPLE-IPs for ports 22x4
91.236.74.0 - 91.236.75.255 Przedsiebiorstwo Uslug Specjalistycznych ELAN mgr inz. Andrzej Niechcial 26-065 Piekoszˇw, ul. Jarz?binowa 50 PL attacked MULTIPLE-IPS for ports 22x68
162.244.8.0 - 162.244.15.255 Power Up Hosting, Inc. Los Angeles, CA, US attacked MULTIPLE-IPs for ports 22x126
173.213.69.192 - 173.213.69.223 Ling Wang Tech Co., Ltd. xiamen, FUJIAN, CN attacked MULTIPLE-IPs for ports 22x66
195.154.0.0 - 195.154.127.255 ONLINE SAS 8 rue de la ville l'eveque 75008 PARIS 8, rue de la ville l'eveque 75008 Paris FR attacked MULTIPLE-IPs for ports 22x2140
209.126.96.0 - 209.126.127.255 server4you Inc. Saint Louis, MO, US attacked MULTIPLE-IPS for ports 22x20
212.83.160.0 - 212.83.191.255 Iliad Online SAS FR attacked MULTIPLE-IPS for ports 22x12

Sorted By Total Connections From Source Network

Count Source Network Registered Owner Local Target IP or Range Target Ports
3 82.221.102.32 - 82.221.102.55 Cyberghost S.R.L. IP Network Soseaua Nicolae Titulescu Soseaua Nicolae Titulescu Nr. 1, Bl A7, SC 4, Et 2, Apt 99 Sector 1, 011131 Bucharest IS attacked 132.235.1.2 for ports 22x3
4 46.227.244.0 - 46.227.247.255 Systemia.pl Sp. z o.o. PL attacked MULTIPLE-IPS for ports 22x4
4 49.32.0.0 - 49.47.255.255 Reliance Jio Infocomm Limited IN attacked MULTIPLE-IPS for ports 22x4
4 81.138.213.200 - 81.138.213.207 BT-ADSL GB attacked MULTIPLE-IPS for ports 22x4
4 91.218.208.0 - 91.218.211.255 FIBERWAY Sp. z o.o. ul. Jagiellonska 6, 32-005 Niepolomice, PL ul. Jagiellonska 6 PL attacked MULTIPLE-IPs for ports 22x4
8 2.28.0.0 - 2.31.255.255 Orange WBC Broadband GB attacked MULTIPLE-IPs for ports 22x8
11 80.87.205.0 - 80.87.205.255 DATAFLOW New Horizon Building, Ground Floor, 3 ? Miles Philip S.W. Goldson Highway, Belize BZ attacked MULTIPLE-IPS for ports 22x11
12 37.48.64.0 - 37.48.127.255 LeaseWeb Netherlands B.V. Postbus 93054 1090BB Amsterdam NETHERLANDS P.O. Box 93054 NL attacked MULTIPLE-IPS for ports 22x12
12 67.0.0.0 - 67.7.255.255 Qwest Communications Company, LLC Monroe, LA, US attacked MULTIPLE-IPs for ports 22x12
12 212.83.160.0 - 212.83.191.255 Iliad Online SAS FR attacked MULTIPLE-IPS for ports 22x12
20 209.126.96.0 - 209.126.127.255 server4you Inc. Saint Louis, MO, US attacked MULTIPLE-IPS for ports 22x20
66 173.213.69.192 - 173.213.69.223 Ling Wang Tech Co., Ltd. xiamen, FUJIAN, CN attacked MULTIPLE-IPs for ports 22x66
68 91.236.74.0 - 91.236.75.255 Przedsiebiorstwo Uslug Specjalistycznych ELAN mgr inz. Andrzej Niechcial 26-065 Piekoszˇw, ul. Jarz?binowa 50 PL attacked MULTIPLE-IPS for ports 22x68
69 68.184.0.0 - 68.191.255.255 Charter Communications St. Louis, MO, US attacked 132.235.1.13 for ports 22x69
79 75.128.0.0 - 75.143.255.255 Charter Communications St. Louis, MO, US attacked 132.235.1.13 for ports 22x79
126 162.244.8.0 - 162.244.15.255 Power Up Hosting, Inc. Los Angeles, CA, US attacked MULTIPLE-IPs for ports 22x126
2140 195.154.0.0 - 195.154.127.255 ONLINE SAS 8 rue de la ville l'eveque 75008 PARIS 8, rue de la ville l'eveque 75008 Paris FR attacked MULTIPLE-IPs for ports 22x2140

Summarized By Source Country

Source Country Local Target IP or Range Target Ports
BZ attacked MULTIPLE-IPS for ports 22x11
CN attacked MULTIPLE-IPs for ports 22x66
FR attacked MULTIPLE-IPs for ports 22x2152
GB attacked MULTIPLE-IPs for ports 22x12
IN attacked MULTIPLE-IPS for ports 22x4
IS attacked 132.235.1.2 for ports 22x3
NL attacked MULTIPLE-IPS for ports 22x12
PL attacked MULTIPLE-IPs for ports 22x76
US attacked MULTIPLE-IPs for ports 22x306

Summarized By Source Country

Total Connection Counts Source Country Local Target IP or Range Target Ports
3 IS attacked 132.235.1.2 for ports 22x3
4 IN attacked MULTIPLE-IPS for ports 22x4
11 BZ attacked MULTIPLE-IPS for ports 22x11
12 GB attacked MULTIPLE-IPs for ports 22x12
12 NL attacked MULTIPLE-IPS for ports 22x12
66 CN attacked MULTIPLE-IPs for ports 22x66
76 PL attacked MULTIPLE-IPs for ports 22x76
306 US attacked MULTIPLE-IPs for ports 22x306
2152 FR attacked MULTIPLE-IPs for ports 22x2152

Summarized By Target URL to Fetch - sorted by attempts made

Count Target host name GET/PUT/etc Target URL to Fetch
1 /
1 104.100.48.31:80
1 104.31.85.236:80
1 198.105.254.24:80
1 199.59.148.73:443
1 208.82.237.226:80
1 208.82.238.226:80
1 23.203.210.36:80
1 23.203.224.74:80
1 23.211.233.208:80
1 23.56.112.45:80
1 31.13.77.36:443
1 52.71.110.19:80
1 54.239.17.7:80
1 54.239.26.128:80
1 54.88.39.163:80
1 64.233.185.106:80
1 67.229.168.43:80
1 74.125.138.106:80
1 http://www.google.com/search?q=lenovo
1 http://www.stopforumspam.com/ipcheck/132.235.1.11
1 http://www.stopforumspam.com/ipcheck/132.235.1.222
1 http://www.stopforumspam.com/ipcheck/132.235.1.223
1 http://www.stopforumspam.com/ipcheck/132.235.1.224
1 http://www.stopforumspam.com/ipcheck/132.235.1.228
1 http://www.stopforumspam.com/ipcheck/132.235.1.231
1 http://www.stopforumspam.com/ipcheck/132.235.1.233
1 http://www.stopforumspam.com/ipcheck/132.235.1.234
1 http://www.stopforumspam.com/ipcheck/132.235.1.236
1 http://www.stopforumspam.com/ipcheck/132.235.1.237
1 http://www.stopforumspam.com/ipcheck/132.235.1.238
1 http://www.stopforumspam.com/ipcheck/132.235.1.241
1 http://www.stopforumspam.com/ipcheck/132.235.1.247
1 http://www.stopforumspam.com/ipcheck/132.235.1.54
1 http://www.stopforumspam.com/ipcheck/132.235.1.56
1 http://www.stopforumspam.com/ipcheck/132.235.1.57
1 http://www.stopforumspam.com/ipcheck/132.235.1.58
1 http://www.stopforumspam.com/ipcheck/132.235.1.62
1 http://www.stopforumspam.com/ipcheck/132.235.1.66
1 http://www.stopforumspam.com/ipcheck/132.235.1.67
1 http://www.stopforumspam.com/ipcheck/132.235.1.69
1 http://www.stopforumspam.com/ipcheck/132.235.1.70
1 http://www.stopforumspam.com/ipcheck/132.235.1.72
1 http://www.stopforumspam.com/ipcheck/132.235.1.73
1 http://www.stopforumspam.com/ipcheck/132.235.1.74
1 http://www.stopforumspam.com/ipcheck/132.235.1.81
1 http://www.stopforumspam.com/ipcheck/132.235.2.83
2 104.28.17.9:80
2 199.16.156.107:443
2 216.58.198.100:80
2 23.211.245.144:80
2 37.48.104.177:3333
2 66.96.147.106:80
2 87.237.19.44:80
2 98.137.250.95:80
2 http://37.48.104.177:3333/azenv.php
2 http://www.stopforumspam.com/ipcheck/132.235.1.13
2 http://www.stopforumspam.com/ipcheck/132.235.1.6
2 http://www.stopforumspam.com/ipcheck/132.235.1.82
3 http://www.google.com/search?q=amazon
3 http://www.google.com/search?q=dugduggo
3 www.ticketmaster.com
4 212.74.50.8:80
4 http://simpleapi.majestic.com/sapi/GetBacklinkStats?items=3&item0=http%3A%2F%2Fwww.google.com%2F
4 http://www.baidu.com/
5 172.217.2.228:80
5 http://search.yahoo.com/search?p=bing
5 http://search.yahoo.com/search?p=lenovo
5 https://www.yandex.com/search/?text=bing
5 https://www.yandex.com/search/?text=lenovo
6 206.214.211.166:80
6 http://search.yahoo.com/search?p=wikipedia
6 http://www.sbjudge2.com/ip4.php
6 https://www.yandex.com/search/?text=wikipedia
7 http://search.yahoo.com/search?p=amazon
7 https://www.yandex.com/search/?text=amazon
7 https://www.yandex.com/search/?text=dugduggo
8 http://search.yahoo.com/search?p=dugduggo
15
15 http://www.bing.com/search?q=wikipedia
19 http://www.bing.com/search?q=amazon
20 http://www.bing.com/search?q=lenovo
21 http://www.bing.com/search?q=bing
25 http://www.bing.com/search?q=dugduggo
28 54.239.25.200:80
29 104.244.42.198:443
29 104.28.16.9:80
29 173.243.115.131:80
29 179.60.192.36:443
29 188.125.66.104:80
29 208.82.237.146:80
29 216.58.211.100:80
29 23.206.37.5:80
29 23.206.38.87:80
29 54.86.94.204:80
29 66.96.149.16:80
29 http://bham.craigslist.org/search/sss/?excats=&sort=date&cat_id=150%2C169&cat_id=149%2C162&cat_i
30 104.31.84.236:80
30 46.165.197.129:80
30 64.15.148.105:80
30 67.222.35.66:80
30 72.52.99.44:80
30 94.23.209.142:80
30 http://judge.gear.host/
30 http://stoutdata.com/checker/proxyjudge.php
30 http://www.anonymousproxylist.net/azenv2.php
30 http://www.bdsmpichunter.com/dde32.php
30 http://www.mesregies.com/azz.php
30 http://www.sbjudge4.com/ip4.php
30 https://m.facebook.com/
31 164.132.135.241:80
31 18.181.0.43:80
31 193.178.223.25:80
31 198.41.202.157:443
31 204.246.56.80:80
31 209.227.234.202:80
31 212.27.63.114:80
31 213.180.204.62:443
31 49.129.255.101:80
31 50.56.126.107:80
31 64.62.216.151:80
31 87.106.158.3:80
31 http://azenv.net/
31 http://birdingonthe.net/cgi-bin/env.pl
31 http://jagerman.com/env.cgi
31 http://jaliuzi.com/azenv.php
31 http://pascal.hoez.free.fr/azenv.php
31 http://proxydetect.com/
31 http://scripts.mit.edu/~jbarnold/demo/env.pl
31 http://whatismyipaddress.com/proxy-check
31 http://www.30tech.com/iptest.php
31 http://www.amazon.com
31 http://www.babaip.com/
31 http://www.cooleasy.com/azenv.php
31 http://www.dvdshop.it/cgi-bin/ev.pl
31 http://www.ebay.com/
31 http://www.energoautomatika.ru/opg.php
31 http://www.ingosander.net/azenv.php
31 http://www.knowops.com/cgi-bin/textenv.pl
31 http://www.meow.org.uk/cgi-bin/env.pl
31 http://www.stilllistener.com/checkpoint1/ssi/
31 http://www2t.biglobe.ne.jp/~take52/test/env.cgi
31 https://www.whatismyip.com/
33 195.20.205.9:80
33 http://toolbarqueries.google.com/tbr?client=navclient-auto&ch=78804486762&features=Rank&q=info:h
33 https://mobile.twitter.com/i/guest
60 :80
100 204.79.197.200:80
139 http://proxyjudge.us/judge.php
170 45.33.54.195:80

Summarized By Target URL to Fetch - sorted in reverse domain order

Target host name Count GET/PUT/etc Target URL to Fetch
15
/ 1
104.100.48.31:80 1
104.244.42.198:443 29
104.28.16.9:80 29
104.28.17.9:80 2
104.31.84.236:80 30
104.31.85.236:80 1
164.132.135.241:80 31
172.217.2.228:80 5
173.243.115.131:80 29
179.60.192.36:443 29
18.181.0.43:80 31
188.125.66.104:80 29
193.178.223.25:80 31
195.20.205.9:80 33
198.105.254.24:80 1
198.41.202.157:443 31
199.16.156.107:443 2
199.59.148.73:443 1
204.246.56.80:80 31
204.79.197.200:80 100
206.214.211.166:80 6
208.82.237.146:80 29
208.82.237.226:80 1
208.82.238.226:80 1
209.227.234.202:80 31
212.27.63.114:80 31
212.74.50.8:80 4
213.180.204.62:443 31
216.58.198.100:80 2
216.58.211.100:80 29
23.203.210.36:80 1
23.203.224.74:80 1
23.206.37.5:80 29
23.206.38.87:80 29
23.211.233.208:80 1
23.211.245.144:80 2
23.56.112.45:80 1
31.13.77.36:443 1
37.48.104.177:3333 2
45.33.54.195:80 170
46.165.197.129:80 30
49.129.255.101:80 31
50.56.126.107:80 31
52.71.110.19:80 1
54.239.17.7:80 1
54.239.25.200:80 28
54.239.26.128:80 1
54.86.94.204:80 29
54.88.39.163:80 1
64.15.148.105:80 30
64.233.185.106:80 1
64.62.216.151:80 31
66.96.147.106:80 2
66.96.149.16:80 29
67.222.35.66:80 30
67.229.168.43:80 1
72.52.99.44:80 30
74.125.138.106:80 1
87.106.158.3:80 31
87.237.19.44:80 2
94.23.209.142:80 30
98.137.250.95:80 2
:80 60
http://37.48.104.177:3333/azenv.php 2
http://azenv.net/ 31
http://bham.craigslist.org/search/sss/?excats=&sort=date&cat_id=150%2C169&cat_id=149%2C162&cat_i 29
http://birdingonthe.net/cgi-bin/env.pl 31
http://jagerman.com/env.cgi 31
http://jaliuzi.com/azenv.php 31
http://judge.gear.host/ 30
http://pascal.hoez.free.fr/azenv.php 31
http://proxydetect.com/ 31
http://proxyjudge.us/judge.php 139
http://scripts.mit.edu/~jbarnold/demo/env.pl 31
http://search.yahoo.com/search?p=amazon 7
http://search.yahoo.com/search?p=bing 5
http://search.yahoo.com/search?p=dugduggo 8
http://search.yahoo.com/search?p=lenovo 5
http://search.yahoo.com/search?p=wikipedia 6
http://simpleapi.majestic.com/sapi/GetBacklinkStats?items=3&item0=http%3A%2F%2Fwww.google.com%2F 4
http://stoutdata.com/checker/proxyjudge.php 30
http://toolbarqueries.google.com/tbr?client=navclient-auto&ch=78804486762&features=Rank&q=info:h 33
http://whatismyipaddress.com/proxy-check 31
http://www.30tech.com/iptest.php 31
http://www.amazon.com 31
http://www.anonymousproxylist.net/azenv2.php 30
http://www.babaip.com/ 31
http://www.baidu.com/ 4
http://www.bdsmpichunter.com/dde32.php 30
http://www.bing.com/search?q=amazon 19
http://www.bing.com/search?q=bing 21
http://www.bing.com/search?q=dugduggo 25
http://www.bing.com/search?q=lenovo 20
http://www.bing.com/search?q=wikipedia 15
http://www.cooleasy.com/azenv.php 31
http://www.dvdshop.it/cgi-bin/ev.pl 31
http://www.ebay.com/ 31
http://www.energoautomatika.ru/opg.php 31
http://www.google.com/search?q=amazon 3
http://www.google.com/search?q=dugduggo 3
http://www.google.com/search?q=lenovo 1
http://www.ingosander.net/azenv.php 31
http://www.knowops.com/cgi-bin/textenv.pl 31
http://www.meow.org.uk/cgi-bin/env.pl 31
http://www.mesregies.com/azz.php 30
http://www.sbjudge2.com/ip4.php 6
http://www.sbjudge4.com/ip4.php 30
http://www.stilllistener.com/checkpoint1/ssi/ 31
http://www.stopforumspam.com/ipcheck/132.235.1.11 1
http://www.stopforumspam.com/ipcheck/132.235.1.13 2
http://www.stopforumspam.com/ipcheck/132.235.1.222 1
http://www.stopforumspam.com/ipcheck/132.235.1.223 1
http://www.stopforumspam.com/ipcheck/132.235.1.224 1
http://www.stopforumspam.com/ipcheck/132.235.1.228 1
http://www.stopforumspam.com/ipcheck/132.235.1.231 1
http://www.stopforumspam.com/ipcheck/132.235.1.233 1
http://www.stopforumspam.com/ipcheck/132.235.1.234 1
http://www.stopforumspam.com/ipcheck/132.235.1.236 1
http://www.stopforumspam.com/ipcheck/132.235.1.237 1
http://www.stopforumspam.com/ipcheck/132.235.1.238 1
http://www.stopforumspam.com/ipcheck/132.235.1.241 1
http://www.stopforumspam.com/ipcheck/132.235.1.247 1
http://www.stopforumspam.com/ipcheck/132.235.1.54 1
http://www.stopforumspam.com/ipcheck/132.235.1.56 1
http://www.stopforumspam.com/ipcheck/132.235.1.57 1
http://www.stopforumspam.com/ipcheck/132.235.1.58 1
http://www.stopforumspam.com/ipcheck/132.235.1.6 2
http://www.stopforumspam.com/ipcheck/132.235.1.62 1
http://www.stopforumspam.com/ipcheck/132.235.1.66 1
http://www.stopforumspam.com/ipcheck/132.235.1.67 1
http://www.stopforumspam.com/ipcheck/132.235.1.69 1
http://www.stopforumspam.com/ipcheck/132.235.1.70 1
http://www.stopforumspam.com/ipcheck/132.235.1.72 1
http://www.stopforumspam.com/ipcheck/132.235.1.73 1
http://www.stopforumspam.com/ipcheck/132.235.1.74 1
http://www.stopforumspam.com/ipcheck/132.235.1.81 1
http://www.stopforumspam.com/ipcheck/132.235.1.82 2
http://www.stopforumspam.com/ipcheck/132.235.2.83 1
http://www2t.biglobe.ne.jp/~take52/test/env.cgi 31
https://m.facebook.com/ 30
https://mobile.twitter.com/i/guest 33
https://www.whatismyip.com/ 31
https://www.yandex.com/search/?text=amazon 7
https://www.yandex.com/search/?text=bing 5
https://www.yandex.com/search/?text=dugduggo 7
https://www.yandex.com/search/?text=lenovo 5
https://www.yandex.com/search/?text=wikipedia 6
www.ticketmaster.com 3