City: unknown
Region: unknown
Country: Italy
Internet Service Provider: Aruba S.p.A. - Cloud Services Farm
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Jan 18 07:58:29 ny01 sshd[23347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Jan 18 07:58:31 ny01 sshd[23347]: Failed password for invalid user test from 31.14.142.109 port 49310 ssh2 Jan 18 07:59:58 ny01 sshd[23510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 |
2020-01-18 21:15:47 |
| attackspam | Jan 16 08:13:32 ns37 sshd[23936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 |
2020-01-16 15:17:25 |
| attack | Unauthorized connection attempt detected from IP address 31.14.142.109 to port 2220 [J] |
2020-01-15 05:48:51 |
| attack | 2020-01-11T05:57:29.513818centos sshd\[29208\]: Invalid user user from 31.14.142.109 port 49257 2020-01-11T05:57:29.518553centos sshd\[29208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 2020-01-11T05:57:31.002478centos sshd\[29208\]: Failed password for invalid user user from 31.14.142.109 port 49257 ssh2 |
2020-01-11 14:18:07 |
| attackbots | $f2bV_matches |
2019-12-30 07:14:25 |
| attackspam | Dec 21 05:34:10 Tower sshd[40865]: Connection from 31.14.142.109 port 51762 on 192.168.10.220 port 22 Dec 21 05:34:11 Tower sshd[40865]: Invalid user tmp from 31.14.142.109 port 51762 Dec 21 05:34:11 Tower sshd[40865]: error: Could not get shadow information for NOUSER Dec 21 05:34:11 Tower sshd[40865]: Failed password for invalid user tmp from 31.14.142.109 port 51762 ssh2 Dec 21 05:34:11 Tower sshd[40865]: Received disconnect from 31.14.142.109 port 51762:11: Bye Bye [preauth] Dec 21 05:34:11 Tower sshd[40865]: Disconnected from invalid user tmp 31.14.142.109 port 51762 [preauth] |
2019-12-21 22:01:07 |
| attack | 20 attempts against mh-ssh on echoip.magehost.pro |
2019-12-21 04:23:33 |
| attackspambots | Dec 20 08:26:17 Ubuntu-1404-trusty-64-minimal sshd\[27423\]: Invalid user stacey from 31.14.142.109 Dec 20 08:26:17 Ubuntu-1404-trusty-64-minimal sshd\[27423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Dec 20 08:26:19 Ubuntu-1404-trusty-64-minimal sshd\[27423\]: Failed password for invalid user stacey from 31.14.142.109 port 43563 ssh2 Dec 20 08:37:05 Ubuntu-1404-trusty-64-minimal sshd\[4747\]: Invalid user zombie from 31.14.142.109 Dec 20 08:37:05 Ubuntu-1404-trusty-64-minimal sshd\[4747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 |
2019-12-20 15:49:47 |
| attack | Dec 14 11:28:47 ny01 sshd[16692]: Failed password for root from 31.14.142.109 port 39848 ssh2 Dec 14 11:34:24 ny01 sshd[17224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Dec 14 11:34:26 ny01 sshd[17224]: Failed password for invalid user yawming from 31.14.142.109 port 43256 ssh2 |
2019-12-15 02:59:57 |
| attack | Dec 10 03:42:41 TORMINT sshd\[5677\]: Invalid user paribhi from 31.14.142.109 Dec 10 03:42:41 TORMINT sshd\[5677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Dec 10 03:42:43 TORMINT sshd\[5677\]: Failed password for invalid user paribhi from 31.14.142.109 port 35804 ssh2 ... |
2019-12-10 17:47:01 |
| attackspambots | F2B jail: sshd. Time: 2019-11-09 17:43:00, Reported by: VKReport |
2019-11-10 02:44:48 |
| attackbots | $f2bV_matches |
2019-09-21 16:56:51 |
| attack | Sep 10 09:25:52 saschabauer sshd[13677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Sep 10 09:25:53 saschabauer sshd[13677]: Failed password for invalid user user01 from 31.14.142.109 port 46201 ssh2 |
2019-09-10 16:10:47 |
| attackbotsspam | Aug 30 05:34:39 dallas01 sshd[27801]: Failed password for root from 31.14.142.109 port 50971 ssh2 Aug 30 05:40:29 dallas01 sshd[29074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Aug 30 05:40:31 dallas01 sshd[29074]: Failed password for invalid user db2fenc1 from 31.14.142.109 port 53742 ssh2 |
2019-08-30 18:44:15 |
| attackbots | Splunk® : Brute-Force login attempt on SSH: Aug 13 08:05:15 testbed sshd[14522]: Disconnected from 31.14.142.109 port 50947 [preauth] |
2019-08-13 20:07:52 |
| attack | Aug 9 20:18:07 mail sshd\[8325\]: Invalid user data from 31.14.142.109\ Aug 9 20:18:09 mail sshd\[8325\]: Failed password for invalid user data from 31.14.142.109 port 59295 ssh2\ Aug 9 20:22:34 mail sshd\[8356\]: Invalid user toor from 31.14.142.109\ Aug 9 20:22:36 mail sshd\[8356\]: Failed password for invalid user toor from 31.14.142.109 port 56379 ssh2\ Aug 9 20:27:05 mail sshd\[8372\]: Invalid user user5 from 31.14.142.109\ Aug 9 20:27:07 mail sshd\[8372\]: Failed password for invalid user user5 from 31.14.142.109 port 53276 ssh2\ |
2019-08-10 09:32:44 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 31.14.142.110 | attackbots | Total attacks: 2 |
2020-05-21 03:43:24 |
| 31.14.142.225 | attackspam | Invalid user jts3bot from 31.14.142.225 port 36918 |
2020-05-14 17:00:52 |
| 31.14.142.225 | attackspambots | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-05-07 15:05:34 |
| 31.14.142.110 | attackbotsspam | 2020-04-29T09:42:49.849530homeassistant sshd[9638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.110 user=root 2020-04-29T09:42:52.074550homeassistant sshd[9638]: Failed password for root from 31.14.142.110 port 54512 ssh2 ... |
2020-04-29 18:47:31 |
| 31.14.142.110 | attack | Invalid user git from 31.14.142.110 port 40362 |
2020-04-24 15:22:37 |
| 31.14.142.110 | attack | Apr 15 23:10:46 icinga sshd[27092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.110 Apr 15 23:10:48 icinga sshd[27092]: Failed password for invalid user deploy from 31.14.142.110 port 40330 ssh2 Apr 15 23:19:18 icinga sshd[41664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.110 ... |
2020-04-16 06:46:24 |
| 31.14.142.162 | attack | Mar 24 08:31:49 ns381471 sshd[16055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 Mar 24 08:31:51 ns381471 sshd[16055]: Failed password for invalid user patalano from 31.14.142.162 port 55175 ssh2 |
2020-03-24 15:37:53 |
| 31.14.142.162 | attack | Tried sshing with brute force. |
2020-03-23 03:51:19 |
| 31.14.142.162 | attackspambots | Mar 18 19:32:25 ns3042688 sshd\[15578\]: Invalid user cpanelphpmyadmin from 31.14.142.162 Mar 18 19:32:25 ns3042688 sshd\[15578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 Mar 18 19:32:27 ns3042688 sshd\[15578\]: Failed password for invalid user cpanelphpmyadmin from 31.14.142.162 port 39403 ssh2 Mar 18 19:36:38 ns3042688 sshd\[15939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 user=root Mar 18 19:36:40 ns3042688 sshd\[15939\]: Failed password for root from 31.14.142.162 port 49656 ssh2 ... |
2020-03-19 03:01:01 |
| 31.14.142.162 | attack | Mar 10 09:49:14 wbs sshd\[21473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 user=root Mar 10 09:49:16 wbs sshd\[21473\]: Failed password for root from 31.14.142.162 port 60857 ssh2 Mar 10 09:54:08 wbs sshd\[21941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 user=root Mar 10 09:54:10 wbs sshd\[21941\]: Failed password for root from 31.14.142.162 port 50857 ssh2 Mar 10 09:59:02 wbs sshd\[22481\]: Invalid user super from 31.14.142.162 Mar 10 09:59:02 wbs sshd\[22481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 |
2020-03-11 06:07:03 |
| 31.14.142.162 | attackbotsspam | invalid login attempt (ftg) |
2020-02-10 02:46:52 |
| 31.14.142.162 | attack | Failed password for invalid user bzn from 31.14.142.162 port 56569 ssh2 Invalid user cdj from 31.14.142.162 port 41421 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 Failed password for invalid user cdj from 31.14.142.162 port 41421 ssh2 Invalid user gen from 31.14.142.162 port 54507 |
2020-02-07 01:10:27 |
| 31.14.142.162 | attack | 2020-01-31T22:51:47.529326luisaranguren sshd[3315172]: Invalid user hayakawa from 31.14.142.162 port 32812 2020-01-31T22:51:49.227600luisaranguren sshd[3315172]: Failed password for invalid user hayakawa from 31.14.142.162 port 32812 ssh2 ... |
2020-01-31 20:44:34 |
| 31.14.142.162 | attackspam | Invalid user igor from 31.14.142.162 port 39592 |
2020-01-15 04:17:55 |
| 31.14.142.162 | attack | Dec 9 14:10:12 server sshd\[26905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 user=root Dec 9 14:10:14 server sshd\[26905\]: Failed password for root from 31.14.142.162 port 52142 ssh2 Dec 9 14:21:12 server sshd\[29894\]: Invalid user mythtv from 31.14.142.162 Dec 9 14:21:12 server sshd\[29894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.162 Dec 9 14:21:14 server sshd\[29894\]: Failed password for invalid user mythtv from 31.14.142.162 port 33617 ssh2 ... |
2019-12-09 20:35:41 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.14.142.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61089
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.14.142.109. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080902 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 09:32:36 CST 2019
;; MSG SIZE rcvd: 117109.142.14.31.in-addr.arpa domain name pointer host109-142-14-31.serverdedicati.aruba.it.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
109.142.14.31.in-addr.arpa name = host109-142-14-31.serverdedicati.aruba.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.109.255.34 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(06240931) |
2019-06-25 05:55:48 |
| 153.126.217.113 | attack | 153.126.217.113 - - \[25/Jun/2019:00:05:48 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 153.126.217.113 - - \[25/Jun/2019:00:05:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 153.126.217.113 - - \[25/Jun/2019:00:05:51 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 153.126.217.113 - - \[25/Jun/2019:00:05:53 +0200\] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 153.126.217.113 - - \[25/Jun/2019:00:05:53 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 153.126.217.113 - - \[25/Jun/2019:00:05:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\ |
2019-06-25 06:15:49 |
| 188.69.207.92 | attackspambots | Autoban 188.69.207.92 AUTH/CONNECT |
2019-06-25 06:17:34 |
| 188.251.197.31 | attackspam | Autoban 188.251.197.31 AUTH/CONNECT |
2019-06-25 06:31:19 |
| 188.76.61.21 | attack | Autoban 188.76.61.21 AUTH/CONNECT |
2019-06-25 06:12:31 |
| 188.79.24.81 | attack | Autoban 188.79.24.81 AUTH/CONNECT |
2019-06-25 06:11:11 |
| 188.253.225.59 | attackbots | Autoban 188.253.225.59 AUTH/CONNECT |
2019-06-25 06:27:56 |
| 188.37.79.126 | attackspambots | Autoban 188.37.79.126 AUTH/CONNECT |
2019-06-25 06:20:57 |
| 37.235.134.217 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(06240931) |
2019-06-25 06:01:54 |
| 188.3.96.123 | attackbots | Autoban 188.3.96.123 AUTH/CONNECT |
2019-06-25 06:23:41 |
| 134.209.15.14 | attackspambots | 24.06.2019 18:14:16 SSH access blocked by firewall |
2019-06-25 05:49:19 |
| 188.29.164.53 | attackbotsspam | Autoban 188.29.164.53 AUTH/CONNECT |
2019-06-25 06:25:58 |
| 171.248.32.219 | attackspambots | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(06240931) |
2019-06-25 05:46:57 |
| 188.247.39.14 | attackspam | Autoban 188.247.39.14 AUTH/CONNECT |
2019-06-25 06:34:10 |
| 124.65.136.134 | attackspam | [portscan] tcp/22 [SSH] [scan/connect: 4 time(s)] *(RWIN=29200)(06240931) |
2019-06-25 05:49:53 |