shadowwhisperer / ips Goto Github PK

Hi.
Not sure if this makes any difference, but I'm reporting it here anyway.

I am one of the sysadmins of the network at the IP 89.11.150.231 which is in this Hackers list.
The network is owned by a friend of mine, which have a Debian based homelab in his apartment.

Earlier today he complained on a Linux IRC channel that several services and sites blocked his IP, and he could not figure out why.
After a short investigation by me, it was determined that a virtual machine had an unsecured selfmade web application, and someone managed to use it to deploy an SSH Bot malware.

The server is now secured, the malware deleted and the VM shutdown.
After shutting it down, the abuseIPDB site no longer reports any atcivity from this IP.
It was also decided that this application will be locked behind a htaccess login, and will Not be available on the internet
as he only really need it at home..

Just wanted to let you know, as when I googled his IP it showed up in this github repo.

Greetings from a helpfull sysadmin.

it belongs to a group called censys which probes for port vunerabilities.

In the description of Brute Foce's degree,What is the specific meaning of this "connects"？
thanks

Dear Sean,

In below link I found that system blocking Google DNS which 8.8.8.8 while in reality Google DNS not using to host malware activities for that reason kindly remove it from your list.
https://github.com/ShadowWhisperer/IPs/blob/master/Malware/Hosting