Networm activity detected...Telnet worms and scanners & aother abuse

Viruses and worms
1

What has been flagged by GreyNoise?

Name Category Intention Confidence First Seen Last Updated
HNAP_WORM_CVE_2016_6563 worm malicious high 2019-03-14 2019-03-19
MIRAI worm malicious high 2019-03-12 2019-03-24
TELNET_WORM_HIGH worm malicious high 2019-01-31 2019-01-31
MIRAI worm malicious high 2019-01-31 2019-02-01
TELNET_SCANNER_LOW activity Null low 2019-01-31 2019-01-31
Where? Re: 83.110.79.16 Emirates Telecommunications Corporation AS5384 -bba448580.alshamil.net.ae Linux 2.2.x-3.x (Embedded) 2019-03-14 2019-03-19

See services and vulnerabilities: https://www.shodan.io/host/83.110.79.16
see: https://toolbar.netcraft.com/site_report?url=bba448580.alshamil.net.ae

bind DnsMasq and the seven flaws: https://www.cvedetails.com/vulnerability-list.php?vendor_id=8351&product_id=14557&version_id=235852&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=1&sha=1335c7d3d2b6cb8cd6e530fc86d0a42bb6cc2db2 & https://www.exploit-db.com/exploits/42942

Has been reported four times: https://www.abuseipdb.com/check/83.110.79.16

Most recent report was 3 days ago,

polonus (volunteer website security analyst and website error-hunter)