City: unknown
Region: unknown
Country: Italy
Internet Service Provider: Vodafone Italia S.p.A.
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Oct 23 05:45:55 * sshd[15840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.116.244 Oct 23 05:45:55 * sshd[15842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.42.116.244 |
2019-10-23 19:39:51 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.116.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24941
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.42.116.244. IN A
;; AUTHORITY SECTION:
. 438 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102300 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 23 19:39:45 CST 2019
;; MSG SIZE rcvd: 116244.116.42.2.in-addr.arpa domain name pointer net-2-42-116-244.cust.vodafonedsl.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
244.116.42.2.in-addr.arpa name = net-2-42-116-244.cust.vodafonedsl.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 160.19.136.83 | attack | Unauthorized connection attempt from IP address 160.19.136.83 on Port 445(SMB) |
2019-07-08 11:46:08 |
| 216.204.174.226 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:32:35,853 INFO [amun_request_handler] PortScan Detected on Port: 445 (216.204.174.226) |
2019-07-08 11:28:35 |
| 31.134.105.211 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:32:42,085 INFO [amun_request_handler] PortScan Detected on Port: 445 (31.134.105.211) |
2019-07-08 11:24:42 |
| 192.82.65.62 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 19:18:09,830 INFO [shellcode_manager] (192.82.65.62) no match, writing hexdump (61dc511cdf5d7ffe7bb6b7bc7854e11a :2403037) - MS17010 (EternalBlue) |
2019-07-08 11:21:54 |
| 103.91.204.172 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:29:36,282 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.91.204.172) |
2019-07-08 11:42:51 |
| 193.112.72.180 | attack | SSH invalid-user multiple login try |
2019-07-08 11:43:57 |
| 193.56.29.73 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:29:25,363 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.73) |
2019-07-08 11:49:16 |
| 131.221.97.186 | attackbots | 3389BruteforceFW23 |
2019-07-08 11:45:29 |
| 94.191.2.228 | attackspam | Jul 7 23:28:37 db sshd\[334\]: Invalid user odoo8 from 94.191.2.228 Jul 7 23:28:37 db sshd\[334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.2.228 Jul 7 23:28:39 db sshd\[334\]: Failed password for invalid user odoo8 from 94.191.2.228 port 27532 ssh2 Jul 7 23:32:58 db sshd\[404\]: Invalid user rg from 94.191.2.228 Jul 7 23:32:58 db sshd\[404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.2.228 ... |
2019-07-08 11:34:20 |
| 213.6.193.190 | attackbots | Unauthorized connection attempt from IP address 213.6.193.190 on Port 445(SMB) |
2019-07-08 11:17:50 |
| 174.99.230.38 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:32:56,996 INFO [amun_request_handler] PortScan Detected on Port: 445 (174.99.230.38) |
2019-07-08 11:16:12 |
| 116.49.37.75 | attackspambots | " " |
2019-07-08 12:02:14 |
| 203.110.86.80 | attackbots | Unauthorized connection attempt from IP address 203.110.86.80 on Port 445(SMB) |
2019-07-08 11:47:08 |
| 89.46.106.94 | attackspam | WP_xmlrpc_attack |
2019-07-08 11:52:51 |
| 177.21.131.122 | attackbots | SMTP-sasl brute force ... |
2019-07-08 11:28:07 |