|
|
|
|
|
|
by amckenna
4126 days ago
|
|
|
When did the server make the switch between the two IPs? According to the internet census data gathered in 2012 the 24.187.234.187 address had the following ports open (note SMTP and RDP): ool-18bbeabb.static.optonline.net - 24.187.234.187:25 ool-18bbeabb.static.optonline.net - 24.187.234.187:80 ool-18bbeabb.static.optonline.net - 24.187.234.187:443 ool-18bbeabb.static.optonline.net - 24.187.234.187:3389 http://www.exfiltrated.com/query.php?startIP=24.187.234.187&... There was nothing returned for the 64.94.172.146 address. |
|
|