Tag: ssh attacks

zomro.com Content Scraper: Research, Ban

midex.zomro.com scrapes my site for awstat tags. I do not know why, and they do it multiple times. It is very annoying.

There is a ransomware listing for crasher121.zomro.com 93.170.169.52. There are other comments such as “109.248.33.212 is involved in malware incidents, spamming activity, ssh attacks, ddos” so caution is required. I did not research zomro.net, as I do not know if the .com and .net sites are related.

Observation:
midex.zomro.com
178.159.39.142 anconsul.ru 2016-nov-06 zomro

Research:
midex.zomro.com 93.171.158.189 93.171.158.0 – 93.171.159.255 93.171.158.0/23
elk91.zomro.com 93.171.158.47

midex.zomro.com 93.170.141.97 93.170.141.0/24

zuahbbazek1.zomro.com 93.170.253.11 93.170.253.0/24