MSI provides DNS and/or Proxy Servers???

Status
Not open for further replies.

Xyber

New member
Joined
Feb 23, 2022
Messages
0
Was attacked today by a Sloppy Shlacker.
Investigated the IP Address back to (web.06.msi.com). Does MSI provide DNS or Proxy servers?
The additional info I gained about this attacker.
IP: 46.244.5.186
host: web.06.msi.com
Org; As51088 A28 IP B.V.
City: Amsterdam
Region: North Holland
Postal: 1012
Country: NL
Coordinates: (removed)

1. Lost count of all the port scans i caught him doing.. even opened a couple just to help him out..
2. Tried to drop Worm in on TCP 1433
3. Tried to drop Trojan using Back Orifice on TCP 1349



Any ideas? It really was a terrible attempt so I didn't raise much attention, but
caught me off guard seeing the server name.
Not sure if this is relevant here, if not remove it, but just more curious about my question.
 
Last edited:

Nichrome

Friday? Deploy to prod!
Global Moderator
Joined
Nov 7, 2013
Messages
20,162
Hi
No they don't. My best guess is someone has some virus on their PC and it's doing scans now :)
 
Status
Not open for further replies.
Top