A new pattern has emerged in hacking that requires great firepower and little skill. The ammunition required is a /22 of IP addresses acquired from vendors who specialize in exactly this item. Here is an example of a pattern that is active right now. I could show you a video of the fast scrolling attacks in my log from a set of these addresses, ostensibly from Brazil, but the store where I shopped said they could make me look like I was coming from anywhere I chose. Further study with timing and triangulation is required in order to get an idea of where the source is.
Brazil is a confusing choice of apparent venue, because this could be US soldiers staging an operation against Venezuela: and this is is how they have behaved online since the Gulf War of 1991. I watched them, and still have some printed evidence of the malice they dish out from those military laptops. But let's continue with examples:
(CREATED IN 2018: align that with history: and where this wire is connected)
inetnum: 138.121.245.128/25
aut-num: AS264323
abuse-c: LTEME9
owner: OXMAN SISTEMAS LTDA
ownerid: 22.902.058/0001-63
responsible: Oxman Tecnologia
country: BR
owner-c: MAMSE158
tech-c: MAMSE158
created: 20230810
changed: 20230810
inetnum-up: 138.121.244.0/22
nic-hdl-br: MAMSE158
person: Maria Arminda de Macedo Seara
e-mail: oxman@oxman.com.br
country: BR
created: 20230710
changed: 20230710
nic-hdl-br: LTEME9
person: LVNetworks & Telecomunica�oes Eireli ME
e-mail: security@lvnetwork.com.br
country: BR
created: 20180622
changed: 20251112
another example just visited 13Dec. 2025
inetnum: 181.191.120.0/22
aut-num: AS266005
abuse-c: LTEME9
owner: C. X. B. TELECOMUNICACOES LTDA - ME
ownerid: 27.057.030/0001-90
responsible: CARLOS XAVIER BRAGA
country: BR
owner-c: CXBTM
tech-c: CXBTM
inetrev: 181.191.120.0/22
nserver: ns1.cxbtelecom.com.br
nsstat: 20251212 AA
nslastaa: 20251212
nserver: ns2.cxbtelecom.com.br
nsstat: 20251212 AA
nslastaa: 20251212
created: 20170725
changed: 20170725
nic-hdl-br: CXBTM
person: C. X. B. TELECOMUNICA��ES LTDA - ME
e-mail: carlos.xavier.11@gmail.com
country: BR
created: 20170602
changed: 20180604
nic-hdl-br: LTEME9
person: LVNetworks & Telecomunica�oes Eireli ME
e-mail: security@lvnetwork.com.br
country: BR
created: 20180622
changed: 20251112
As we slowly continue, we gathered more hits from another Nazi telco with a /22
Here is one more of many
inetnum: 45.65.220.0/22
aut-num: AS266539
abuse-c: RUPCU4
owner: LINQ TELECOMUNICACOES
ownerid: 26.329.734/0001-02
responsible: D�bora Queiroz de Camargo Rosa
country: BR
owner-c: DQCRO
tech-c: RUPCU4
inetrev: 45.65.220.0/22
nserver: ns1.linqtelecom.com.br