Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ...
show moreAttribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Aggressive search filter manipulation / web scraper probe on port 443 | URI: Excessive filters used: /catalogsearch/result/?cat=33&mode=list&product_vc_type=101%2C102&q=north+face | UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_11_7 rv:3.0; kn-IN) AppleWebKit/532.38.2 (KHTML, like Gecko) Version/4.1 Safari/532.38.2 | (Magento Site)
show less
Hacking
Bad Web Bot
Anonymous
Failed login attempt detected by Fail2Ban in ssh jail
2026-05-26T17:39:17.830719-05:00 nextcloud sshd[3391951]: Invalid user systemd from 80.209.114.42 po ...
show more2026-05-26T17:39:17.830719-05:00 nextcloud sshd[3391951]: Invalid user systemd from 80.209.114.42 port 35380
2026-05-26T17:42:05.434070-05:00 nextcloud sshd[3435567]: Invalid user ubuntu from 80.209.114.42 port 35680
2026-05-26T17:44:48.694843-05:00 nextcloud sshd[3477418]: Invalid user ubuntu from 80.209.114.42 port 34278
2026-05-26T17:46:12.407802-05:00 nextcloud sshd[3499847]: Invalid user david from 80.209.114.42 port 58274
2026-05-26T17:47:35.399764-05:00 nextcloud sshd[3521514]: Invalid user chatbot from 80.209.114.42 port 44474
...
show less
2026-05-27T00:32:38.625486+02:00 axisverse sshd-session[3282140]: Invalid user systemd from 80.209.1 ...
show more2026-05-27T00:32:38.625486+02:00 axisverse sshd-session[3282140]: Invalid user systemd from 80.209.114.42 port 44682
2026-05-27T00:41:18.315787+02:00 axisverse sshd-session[3303056]: Invalid user ubuntu from 80.209.114.42 port 42702
2026-05-27T00:44:01.981741+02:00 axisverse sshd-session[3309247]: Invalid user ubuntu from 80.209.114.42 port 59294
...
show less
Brute-Force
SSH
Anonymous
2026-05-27T00:42:23.020572+02:00 ubuntu sshd-session[806808]: pam_unix(sshd:auth): authentication fa ...
show more2026-05-27T00:42:23.020572+02:00 ubuntu sshd-session[806808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42 user=root
2026-05-27T00:42:25.424100+02:00 ubuntu sshd-session[806808]: Failed password for root from 80.209.114.42 port 35716 ssh2
2026-05-27T00:43:46.198475+02:00 ubuntu sshd-session[806983]: Invalid user ubuntu from 80.209.114.42 port 43368
2026-05-27T00:43:46.215238+02:00 ubuntu sshd-session[806983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42
2026-05-27T00:43:48.514958+02:00 ubuntu sshd-session[806983]: Failed password for invalid user ubuntu from 80.209.114.42 port 43368 ssh2
...
show less
May 26 22:26:10 proxy-xeon sshd[441190]: Invalid user ubuntu from 80.209.114.42 port 51354
May 26 22 ...
show moreMay 26 22:26:10 proxy-xeon sshd[441190]: Invalid user ubuntu from 80.209.114.42 port 51354
May 26 22:26:10 proxy-xeon sshd[441190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42
May 26 22:26:12 proxy-xeon sshd[441190]: Failed password for invalid user ubuntu from 80.209.114.42 port 51354 ssh2
May 26 22:28:06 proxy-xeon sshd[441718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42 user=root
May 26 22:28:09 proxy-xeon sshd[441718]: Failed password for root from 80.209.114.42 port 46862 ssh2
...
show less
May 26 22:11:13 proxy-xeon sshd[438985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 26 22:11:13 proxy-xeon sshd[438985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42
May 26 22:11:15 proxy-xeon sshd[438985]: Failed password for invalid user systemd from 80.209.114.42 port 37826 ssh2
May 26 22:13:01 proxy-xeon sshd[439177]: Invalid user mike from 80.209.114.42 port 56178
May 26 22:13:01 proxy-xeon sshd[439177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.209.114.42
May 26 22:13:03 proxy-xeon sshd[439177]: Failed password for invalid user mike from 80.209.114.42 port 56178 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-05-26T21:36:28.418712+00:00 mail sshd[1833165]: Invalid user username from 80.209.114.42 port 4 ...
show more2026-05-26T21:36:28.418712+00:00 mail sshd[1833165]: Invalid user username from 80.209.114.42 port 41810
2026-05-26T21:41:53.148556+00:00 mail sshd[1833347]: Invalid user newuser from 80.209.114.42 port 41668
2026-05-26T21:44:36.154006+00:00 mail sshd[1833370]: Invalid user jerry from 80.209.114.42 port 42862
...
show less