Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz?, (Sat, Dec 5th)

SANS Internet Storm Center, InfoCON: green 2020-12-05

Summary:

Scanning by IP 91.199.118.137 (first reported in DShield end September) began early this morning which appears to be testing access to site aahwwx.52host.xyz [2] and currently there is little information available for this host. The scan is alternating between ports TCP/81 and TCP/8088. Domaintools [7] shows the root domain 52host.xyz was last updated yesterday.

Link:

https://isc.sans.edu/diary/rss/26852

From feeds:

Intel Hub ยป T01 - SANS Internet Storm Center, InfoCON: green

Tags:

Date tagged:

12/05/2020, 21:38

Date published:

12/05/2020, 14:31