Date and Time : February 1, 2025, at 8:07 PM, Source IP : 192.168.128.2 (Internal network), Destinat ...
show moreDate and Time : February 1, 2025, at 8:07 PM, Source IP : 192.168.128.2 (Internal network), Destination IP : 185.12.59.118 (External network) Detection Details : A potential Command-and-Control (C2) or generic threat (Generic-A) was detected by Sophos UTM ATP
Additional Notes : The detection utilized Iptables, a firewall tool on Linux systems, as part of its monitoring and blocking mechanisms.
This entry suggests that the IP address 185.12.59.118 may be involved in malicious activities, such as command-and-control communications. Further investigation is recommended to assess the nature of this threat and take appropriate action.
show less
Amazing 11,048 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Jan 13, 2023 @ 20:40 to Jan 14 ...
show moreAmazing 11,048 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Jan 13, 2023 @ 20:40 to Jan 14, 2023 @ 21:08
show less
Amazing 9,483 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 14, 2022 @ 01:02 to Dec 14, ...
show moreAmazing 9,483 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 14, 2022 @ 01:02 to Dec 14, 2022 @ 15:48 UTC+1
show less
Amazing 12,562 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 14, 2022 @ 00:33 to Dec 19 ...
show moreAmazing 12,562 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 14, 2022 @ 00:33 to Dec 19, 2022 @ 08:07 UTC+1
show less
Amazing 10,845 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 7, 2022 @ 21:30 to Dec 11, ...
show moreAmazing 10,845 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 7, 2022 @ 21:30 to Dec 11, 2022 @ 13:17
show less
95,075 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Jul 23, 2022 @ 02:08 to Aug 1, 2022 @ ...
show more95,075 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Jul 23, 2022 @ 02:08 to Aug 1, 2022 @ 10:01
show less
3 hits on all there services each...but why?
TCP/51869
TCP/51662
TCP/51669
TCP/51690
TCP/51 ...
show more3 hits on all there services each...but why?
TCP/51869
TCP/51662
TCP/51669
TCP/51690
TCP/51667
TCP/51694
TCP/51660
TCP/51676
TCP/51673
TCP/51679
TCP/51678
TCP/51677
TCP/51672
TCP/51692
TCP/51670
TCP/51861
TCP/54713
TCP/51687
TCP/51691
TCP/51686
show less
Amazing 145,856 Cowrie (Honeypot) Port 22 (SMB) and 1 Honeytrap (Honeypot) - Attacks on Port 2222 be ...
show moreAmazing 145,856 Cowrie (Honeypot) Port 22 (SMB) and 1 Honeytrap (Honeypot) - Attacks on Port 2222 between Jun 1, 2022 @ 22:04 to Jun 2, 2022 @ 12:05
show less
Amazing 144,762 Mailoney - Attacks (Honeypots) on Port 25 between Mar 28, 2022 @ 07:09 to Mar 29, 20 ...
show moreAmazing 144,762 Mailoney - Attacks (Honeypots) on Port 25 between Mar 28, 2022 @ 07:09 to Mar 29, 2022 @ 01:21
show less
Amazing 133,596 and 1 Honeytrap - Attacks (Honeypots) on Port 22 and 2222 between Feb 12, 2022 @ 01: ...
show moreAmazing 133,596 and 1 Honeytrap - Attacks (Honeypots) on Port 22 and 2222 between Feb 12, 2022 @ 01:50 to Feb 12, 2022 @ 16:19
show less
13 Tanner - Attacks, 10 Dionaea - Attacks (Honeypots) on Port 80 and 81 (looks for /HNAP1) between ...
show more13 Tanner - Attacks, 10 Dionaea - Attacks (Honeypots) on Port 80 and 81 (looks for /HNAP1) between
Jan 16, 2022 @ 19:14 to Jan 23, 2022 @ 05:48
show less
61,835 Cowrie and 1 Honeytrap - Attacks (Honeypots) on Port 22 and 2222 between Jan 10, 2022 @ 11:55 ...
show more61,835 Cowrie and 1 Honeytrap - Attacks (Honeypots) on Port 22 and 2222 between Jan 10, 2022 @ 11:55 to Jan 10, 2022 @ 20:24
show less
6,286 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 22, 2021 @ 15:54 to Dec 28, 2021 @ ...
show more6,286 Dionaea - Attacks (Honeypot) on Port 445 (SMB) between Dec 22, 2021 @ 15:54 to Dec 28, 2021 @ 19:00
show less
11,044 Dionaea - Attacks - Attacks (Honeypot) on Port 445 (SMB) between Dec 11, 2021 @ 23:10 to Dec ...
show more11,044 Dionaea - Attacks - Attacks (Honeypot) on Port 445 (SMB) between Dec 11, 2021 @ 23:10 to Dec 12, 2021 @ 00:35
show less
Amazing 124,370 Cowrie - Attacks in 12 hours (Honeypot) on Port 22 (SMB), 1 Honeytrap - Attacks (Hon ...
show moreAmazing 124,370 Cowrie - Attacks in 12 hours (Honeypot) on Port 22 (SMB), 1 Honeytrap - Attacks (Honeypot) on Port 2222 between Dec 11, 2021 @ 01:14 to Dec 11, 2021 @ 16:29
show less
14 Cowrie - Attacks (Honeypots) on Port 22 with the nice password "fuckyou" between Oct 13, 2021 @ 0 ...
show more14 Cowrie - Attacks (Honeypots) on Port 22 with the nice password "fuckyou" between Oct 13, 2021 @ 08:23 to Oct 14, 2021 @ 02:04
show less