It's been extremely hard to keep this one under wraps.

[intaglio_dragon@furry.engineer]

@Dio9sys I'm reminded of the book "The Cuckoo's Egg" by Clifford Stoll, who similarly stumbled upon foreign hacker activity in the computer system at Lawrence Berkley National Laboratory, because of a $0.75 accounting discrepancy in computer usage.

https://en.wikipedia.org/wiki/The_Cuckoo%27s_Egg_(book)

[dio9sys@haunted.computer]

@Epic_Null
Tencent is a megabrand tho. They are basically the chinese AWS if AWS also had a movies division, blogging platform, and game studio

[dio9sys@haunted.computer]

@Intaglio_Dragon
oh, I should give that one a read

[epic_null@infosec.exchange]

@Dio9sys Okay so this is more "Someone buying file storage and runtime to run this operation" than "tencent is running cryptominers"

[crazypedia@masto.hackers.town]

@Dio9sys I love @greynoise 🤓

[csolisr@hub.azkware.net]

So, Amazon (minus the blog platform)

[mia@void.rehab]

@Dio9sys

No immediately visible MX server. I wonder if they’re actually using an email protocol or if it’s a front end for sending log files.

this doesn't seem right. your query was for mail.deepgtp.net/health, which is a url, not a domain. querying the domain gives proper mailserver data:

$ dig +short deepgtp.net mx
10 mail.deepgtp.net.
$ dig +short mail.deepgtp.net a
43.160.236.90

[0xabad1dea@infosec.exchange]

@Dio9sys me at 7:30 am: ahh what a lovely morning to read a hang on let me get my dictionary.

[aburka@hachyderm.io]

@Dio9sys I've never seen cyberchef before! That looks extremely useful

[grosskopfgames@mastodon.social]

@Dio9sys that reminds me of the one time my university was attacked by a phishing operation, and the operator of the phishing operation had the stolen auth data publicly visible on their website, got in touch with the university, told them that and they wrote a cron job to see who fell for the phishing site and deactivate their accounts xD

[grosskopfgames@mastodon.social]

@Dio9sys Oh and thank you, was a fun read and very impressive deduction sequence, hope you had a good night of sleep afterwards :D