AutoShun

We'll be migrating our autoshun.org website and API endpoints to a new server tonight between 9PM-11PM CDT (0200-0400 UTC).

the revenge of the machines nitter.cf/SportsCenter/status/89…

SOC life at @riskanalytics HQ with a little @Hak5 in the background. Lots of WordPress bots this morning!

Shun Of The Day: 192.99.14.169 appears to be scanning the entire Internet for open SIP (VoIP) on port 5060. ~575,000 blocks in the past 24H.

Shun of the day: 91.197.234.20/30 Almost 35 million Remote Desktop brute force attacks blocked across 89% of our customers in the past month

Shun of the day: 46.172.91.5 scouring for easily-guessed MS Remote Desktop logins. About 800,000 blocked attacks in the last 24 hours.

An up-close look at the most pervasive fast flux domains, IPs and ASNs we're seeing today, as rendered with @Paterva Maltego

We made a few changes to the autoshun.org API that should reduce the frustrations caused by not quoting our feed URL in scripts.

Shun Of The Day: 121.14.31.18 is targeting SNMP. 1.6 million shunned connections today.

Shun Of The Day: 1.2 Million SIP/VoIP connections shunned from addresses in the 173.231.189.37/30 subnet today.

Shun Of The Day: SSH brute force moved to 221.229.172.35. We've blocked ~15 MILLION SSH connections from it today. nitter.cf/autoshun/status/768927…

Shun Of The Day: 185.93.185.235 scans the entire Internet looking for open RDP servers. We've shunned 840,000 connections from it today!

Shun Of The Day: 221.229.172.103 with 4.2 million blocked SSH attempts in the last 24 hours!

Malware operators have access to world class cloud services: riskanalytics.com/Dark_Cloud…

mt employer and co-workers in the news! krebsonsecurity.com/

#SB50 @deathwishcoffee Love the viking theme!!