Hauu! You must login or signup first!

Fredrick Brennan @HW BEAT_THAT Someone asked how I know Yalishanda, that is to say, Media Land LLC, a criminal organization that facilitates cybercrime including phishing, ransomware, and malware, masterminded by Alexander Volosovik, is hosting 8chan right now. So let's have a thread. krebsonsecurity.com/2019/07/meet-t 5:36 AM - 5 Nov 2019 11 Retweets 38 Likes 7 38 t 11 Fredrick Brennan @HW_BEAT_THAT 23h 8chan is currently going by the name "8kun" and using the domain 8KUN.NET. If we ask for its IP, we get 185.254.121.200. This is where some journalists are getting confused: if you do a normal WHOIS, this IP should not be usable: no useful information is returned. dig A 8kun.net 4.7 < A 8kun.net ons: +cmd opcode: QUERY, status: NOERROR, id: 502 dra QUERY: 1, ANSWER: 1, AUTHORITY: 0, ECTION: h: 0, flags: ; udp: 512 CTION: IN A tON: 59 IN 185.254 203 msec 8.8#53(8.8.8.8) v 05 21:37:16 PST 2019 vd: 53 1 20 Fredrick Brennan @HW_BEAT_THAT 23h So what's going on? 185.254.121.200 is what's called a «bogon». It's an IP that should not be routable according to the authority on this sort of thing, @TeamARIN. Yet, clandestine operators don't care about rules, and see these IPs as free real estate techopedia.com/definition/238.. Bogon Definition- What does Bogon mean? A bogon is an bogus IP address from the bogon space, which is a set of IP addresses not yet officially assigned to any entity by the Internet Assigned Number Authority (IANA) or a regional Internet registration institute. Bogon IP addresses are legitimate addresses. You may see a bogon IP address as a result of a misconfiguration (whether intentional or unintentional) that fools a recipient about a sender's legitimate IP address. Bogon IP addresses are popular in hacking or malicious activities and are used by spammers and those who initiate distributed denial-of- service attacks. As such, many Internet service providers and firewalls block bogons. A bogon is also known as a bogon space or bogon IP address. 2 19 t 2 Fredrick Brennan @HW_BEAT_THAT 23h So how can we figure out which clandestine operator is announcing a route to 185.254.121.200? This is where BGP (Border Gateway Protocol) comes in. BGP is how ISPS announce their routes. So, we can quite simply ask: which AS is claiming to have a route to 185.254.121.200? [ fred@pc tmp ] $ whois -h whois .cymru.com 185.254.121. 200 AS 206728 [fred@pc tmp]$ [ AS Name IP 185.254.121.200 MEDIALAND-AS, RU O 1 15 Fredrick Brennan t@HW_BEAT_THAT 23h So, AS206728 claims to have a route to bogon IP 185.254.121.200. Many ISPS filter bogon ranges and ignore announcements of their routes, so 8kun's clearnet gateway may not work for you; if you ask for a route to 185.254.121.200, your ISP might refuse. (M) 24 Seven Hunting for bogons and the ISPS that announce them In the coming weeks, I will be monitoring bogons in the wild and the ISPS that announce them. But first, what the heck is a bogon anyway? Bogon is badpackets.net 3 14 Fredrick Brennan @HW_BEAT_THAT 23h I know journalists love third party verification, so @henet, a large ISP, runs a service that allows you to lookup autonomous services and IPs without using the Linux command line. @henet confirms, Media Land LLC is announcing a route to 185.254.121.200. FHURRICANE ELECTRIC INTERNET SERVICES Search 185.254.121.200 IP Info WhoisDNS RBL Quick Links BGP Toolkit Home BGP Prefix Report GP Peer Report Exchanoe Rcnart Bon Routes World Report Multi Oriain Routes DNS Benon Iop Host Report Internet Statistics Leoking Glass Network Tools ApR Eree IE Tunnel Pv6 Certification Pr6 Progress Going Natire 185.254.121.200 Announced By Description Origin AS Announcement AS205728 185.254.121.0/24 Internet Assigned Numbers. Autharity Address has 0 hosts associated with it. 14 1 Fredrick Brennan t@HW_BEAT_THAT 23h There is simply no doubt about it: 8kun is relying on a cybercriminal to get online. 8kun's host is best known for hosting ransomware and phishing websites. 8kun is using an unallocated IP, which is if not illegal, extremely bad practice that many ISPS, @henet included, shun. AS Info Graph v4 Prefixes v4 Peers v4 Whais IRR Quick Links BGP Teolkit Heme BGP Prefix Regort BGP Peer Reaart Exchange Repert Bogon Routes World Report Multi Origin Rautes DNS Report Top Hest Report Internet Statistics Looking Glass Network Tools App AS206728 announces bogons Country of Origin Russian Federation Prefixes Originated (all): 3 Prefixes Originated (v4): 3 Prefixes Originated (v6): 0 Prefixes Announced (all: 3 Prefixes Announced (v4): 30 Prefixes Announced (v6): 0 BGP Peers Observed (all): 1 BGP Peers Observed (v4): 1 IPs Originated (v4): 1,536 AS Paths Observed (v4): 516 AS Paths Observed (v6): 0 Eree Py Tunnel Pv6 Certification Pv6 Progress Saing Native Contact Us BGP Peers Observed (v6): 0 Average AS Path Length (all): 4.531 Average AS Path Length (v4): 4.531 Average AS Path Length (v6): 0.000 AS206728 IPv4 Peers A53216 AS206728 IPv4 Prefixes Anncunced AS206728 IPvd Prefixes Originated 13 t8 29 Σ

8kun Media Land LLC Thread by Fredrick Brennan


Uploaded by Philipp Nov 06, 2019 at 07:52AM EST

Share Pin Download More

Origin Entry: 8chan / 8kun

File type: jpg

Resolution: (640px x 3577px)

File size: 1010 KB


Anonymous 03/07/17 (Tue) 14:36:50 ID: eda5b9 No.9438625 2>0438092 22438711 File (hide): 68a08450909e709ipg (94.04 KB, 040007, 040:007. Sassy-Cat-PieA40007 ipa) Anonymous 03/07/17 (Tue) 14:23:37 D. 547999 No.9438549 >>43553 22433022 File (bide): ef8620a82157eb3.. png (550.30 KB. 1380x708, 85:48, CIA meme and suska eng) What dark secrets are hidden in these cat File (hide): 41143bad5c bbb5.. jpg (125.35 KB. pictures? >Sassy-Cat-Pic-640x607 jpg 930x800. 03:80. 41143baPdscbbo52078ela1900a) IT HASN'T EVEN BEGUN WikiLcaks >literally memegenerator tier Who knew we'd get f------ memes out of this from Julian? Anonymous 03/07/17 (Tue) 14:47:54 (D: Ofbb43 No.9438692 220438701 22043871 File (hide): 941b0e6de5b2d27.. png (120.81 KB. 700545, 708:545. 211.ona) 2>9439625 >>9438549 CIA are literally shitposters. So, shouldn't we be able to search for these images in the board archives and find their posts? Shee what they've been shilling? Saying? Postin? Pro-tip: Dont restrict searches to /pol/ boards. CIA are big guys. out or b wAI wEN MDON IMPALL URCAT2 MUDPONY COMING > Anonymous 03/07/17 (Tue) 14:51:52 (D: Ofbb43 No.9438711 222438718 220438724 228438728 220438733 220438730 220438738 220438748 220438753 222438754 220438701 220438782 220438705 220438820 File (hide): 16e286d4706c92. jpeg (0.01 KB. 225225. 1:1. geee of poeripen) THROUGH UNICORN SWERVE UKU CAN EVN WHEN ONEM A TL r of ho BET U DION EVN KNO THAT ponychan.net >>9438625 > Sassy-Cat-Pic-640x607.jpg >>9438692 > Sassy-Cat-Pic-640x607 jpg 229439701 > Sassy-Cat-Pic-640x607.jpg /rp/ - Roleplay https://archive.is/wzUfy The place for, well, roleplaying. Feel free to jump in NO F------ WAY [-) Mystic Bolt!UJnMD8882 13 Jan 2016 10:21:58 AM No.41217677 Replies: >>41217678 https://www.ponychan.net/m/res/41215539+50 html https://archive is/wzUfy >>41217676 I am growing stronger' she blinked AAAAAAAAAAAAAAAAAAAAAAAAAAA!!! "I like the flavor too!.it's just also that they mostly have the higher sugar content as well-" she thought for a moment "Gah I've been here so many times I feel like a native. hmm..what do you wanna do?" Mysty MareEe2W3E 13 Jan 2016 10:23:53 AM No 41217678 Replies: >41217680 File: 1452680633136 png (67.51 KB, 265x400, Dash pag) [-1 > Anonymous 03/07/17 (Tue) 14:53:15 ID: acb6b1 No.9438718 220438702 File (hide): 70739df410aße42gif (1.00 MB. 300x174, 103:58. ghananaf >>41217677 >>9438711 ".. hm. what in your opinion is the most fun place here? Anonymous 03/07/17 (Tue) 14:54:39 ID. 6d0ad8 No.9438728 29438202 File (hite): 82568d06495c603- ipg (100.08 KB, 589570, 31:30. 1487192301054a) [-1 O Avedon!Void. Eul.c 13 Jan 2016 10:24:44 AM No.41217679 Replies: >>41217680 File: 1452680684379 jpg (94.12 KB. 640x607, Sassy-Cat-Pic-640x607 jpg) 2>9438711 >>41217674 You know.balls are meant to be warm and safe not cold.um.f-forget I said anything. Want to hang out? [-1 Mystic Bolt!UJNMDS882 13 Jan 2016 10:28:28 AM No.41217680 Replies >41217681 >>41217682 >>41217684 Anonymous 03/07/17 (Tue) 14:54:16 ID: c8c8c7 No.9438726 >s9438702 File (hide): 169138a87ecd5cd ipg (19.22 KB. 372x330. 124:113. 20AP0e7dba33444502cb.sa) File: 1452680908369 pag (154.78 KB, 798x1002. excited scratch_by_sirhex-d645..) File (hide): BIRedadb68cdb78. png (237.55 KB. 400.500, 4.5. Bane i dont know what te >>41217678 she smiled "well.we could tour the castle of the emperor.or maybe go see how my ancestors were made at a factory!.or.we could go the the spring beginning festival" >>41217679 "Sure!.so um I have some weird news. Mystic- err. Mom?. whoa, it's gonna be though to call her that. though she's been mom like to me for a long time. She's thinking of having another kıd." DON'T KNOW WHAT TO BELIEVE Anonymous 03/07/17 (Tue) 14:55:34 ID: 75cd02 No.9438736 >>9438711 >checked >>9438711 The CIA uses ponyfag autists to code their electronic malware bugs. >CIA roleplaying as ponyfag Ive f------ seen everything. Ive seen it all. Nah actually not surprised such a f----- would be CIA code fodder. Anonymous 03/07/17 (Tue) 14:55:46 ID. fea08a No.9438738 2004287a Anonymous 03/07/17 (Tue) 14:56:59 (ID: Ged381 No.9438748 >9438776 File (hide): 52e491725c46f1f. png (239.15 KB, 704x808, 101:217, 28.2 TEB.pna) Anonymous 03/07/17 (Tue) 14:54:48 (D: cald89 No.9438733 >>438762 File (hide): 91d5bb0e1436398. jpg (14.20 KB. 231x244, 231:244. pene toipa) >>9438711 God the CIA needs to be >>9438711 >the CIA are bronies >>9438711 > Anonymous 03/07/17 (Tue) 14:57:31 ID: 64a216 No.9438753 Jesus 2>9438711 so this is the power of the CIA? impressive. Anonymous 03/07/17 (Tue) 14:59:14 D e01709 No.9438761 2>9438711 >inb4 all imageboards are just cia agents shitposting >inb4 there's a pepe folder in a future leak Anonymous 03/07/17 (Tue) 14:59:42 ID Ged381 No.9438763 THE BRONY'S TRIP IS !Void.Eul.c Anonymous 03/07/17 (Tue) 15:05:45 ID: 19724d No.9438795 File (hide): 6c84bb34f86f497.. png (43.52 KB, 220.503. 220.503. IMO 1504.PNQ) Anonymous 03/07/17 (Tue) 14:59.20 (D: 205049 No. 9438762 220438772 220428770 2204247A7 229438920 22043829 ১১৭438711 If there is >>9438711 >>9438718 29438726 >>9438728 >>9438733 a god. Looking at us all. And all that we do. He has a sense of humor Tripfag named Avedon. Richard Avedon is a photographer who takes pictures of powerful people, Including George Bush Sr. http://forward.com/culture/306415/richard-avedon-photographer-of-powerl Anonymous 03/07/17 (Tue) 15:09.49 D. cald89 No.9438829 What does it mean? Anonymous 03/07/17 (Tue) 15:08:47 ID: 11fc71 No.9438820 >>9438762 2>9438711 >CIAnigger >browsing ponychan enot just browsing ponychan, but browsing /rp/ board This is why they are never going to become big guys. They are f------ brony tripfaggots, who don't get what imageboards are about. Anonymous 03/07/17 (Tue) 15:01:36 (D: 205049 No.9438772 20438829 >Be a CIA agent >Namefag as your actual surname on Ponychan in a roleplay thread 229438762 Oh, and he's a f------ k---. The world just keeps getting more retarded by the second.
the Ithe chinesethe nazbol the brazilian the nazi the facist the the commie the "democratic" korean communist monarchist theocrat uncle of the the china the the the hardcore christian the the statist" "conservative" nationalist the the trotskyist supporter anti-facist russian spy traditionalist the lenninist the trump the alt-right supporter the socialist the SJW the NSA agent the edgy teen the the edgelord superstitious troll AAT AGAN the marxist the ripolitics user the edgy atheist the federal the radical the patriot the "libertarian" conservative the anti- socialist the banker centrist the centerist the facebook boomer the ben shapiro the 4chan supporter the biden supporter the leftist the democratic the democrat socialist the republican user Bernie the classic the college liberal the conservative redneck the journalist the drifting the swing voter the karen the boomer the environmentalist centrist NSTE the anti- communist the doomer the tumblr user the twitter the protester the high school pothead the sovereign the bitcoin the billionaire citizen feminist BORN TO Zoomer FEEL 05-3120A the socialist libertarian the libertarian the conspiracy theorist the depressed teen the hippie the stoner the georgist the e-thot the tax evador the ancom the furry the LGBTQ+ the drug dealer the anarchist cowboy the onserre the weeb the the ancap "ephebophile" dbin
View All 242 Images


More:

0
0

8chan / 8kun - 8kun Media Land LLC Thread by Fredrick Brennan

PROTIP: Press the ← and → keys to navigate the gallery, 'g' to view the gallery, or 'r' to view a random image.


◄ Previous View Gallery Random Image Next ►

More:

+ Add an Image

Image Details

532 views (5 from today)

Uploaded Nov 06, 2019 at 07:52AM EST

Origin Entry

8chan / 8kun

Source

Twitter

Tags

8kun, 8chan, jim watkins, fredrick brennan, media land llc

Claim Authorship Edit History
Textile Embed