pfsense source ip

먼가 이상하리 만치 연속되는 놈이 있어서 조회해보니

이상한(?) 사이트가 걸려나온다.

 

불가리아에 악성코드 배포지 중에 하나인가..

C 클래스로 막는게 나을지도?

Entry matching 78.128.114.178 was found in our database. 27 other active domains were found on 378 IP(s) for AS50360 (TAMATIYA-AS) Show the report for AS50360 (TAMATIYA-AS) MalwareURL Domain Reputation Report Domain: 78.128.114.178   Category: Malicious IP     ASN: AS50360 (TAMATIYA-AS Tamatiya EOOD, BG) IP: 78.128.114.178 Country: Bulgaria Reverse IP: ip-114-178.4vendeta.com

[링크 : https://www.malwareurl.com/listing.php?domain=78.128.114.178]

 

%kwhois % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See https://apps.db.ripe.net/docs/HTML-Terms-And-Conditions % Note: this output has been filtered. %       To receive output for a database update, use the "-B" flag. % Information related to '78.128.114.0 - 78.128.114.255' % Abuse contact for '78.128.114.0 - 78.128.114.255' is 'noc@4vendeta.com' inetnum:        78.128.114.0 - 78.128.114.255 netname:        Tamatiya-EOOD descr:          Tamatiya EOOD country:        BG org:            ORG-IPTL2-RIPE admin-c:        PD8817-RIPE tech-c:         PD8817-RIPE status:         ASSIGNED PA mnt-by:         MNT-LIR-BG mnt-by:         TAMATYA-MNT mnt-routes:     TAMATYA-MNT mnt-domains:    TAMATYA-MNT created:        2019-03-26T10:29:00Z last-modified:  2019-10-02T17:39:20Z source:         RIPE % Information related to '78.128.114.0/24AS50360' route:          78.128.114.0/24 origin:         AS50360 mnt-by:         TAMATYA-MNT created:        2018-03-28T16:58:01Z last-modified:  2018-03-28T16:58:01Z source:         RIPE % This query was served by the RIPE Database Query Service version 1.111 (DEXTER)