Oct 14 04:48:47 104.28.208.137 TCP SPT=50772 DPT=1111 SYN
Oct 14 04:48:48 104.28.208.137 TCP SPT=507 ...
show moreOct 14 04:48:47 104.28.208.137 TCP SPT=50772 DPT=1111 SYN
Oct 14 04:48:48 104.28.208.137 TCP SPT=50772 DPT=1111 SYN
Oct 14 04:48:49 104.28.208.137 TCP SPT=50772 DPT=1111
...
show less
Oct 11 17:37:57 104.28.208.137 TCP SPT=41740 DPT=1111 SYN
Oct 11 17:37:58 104.28.208.137 TCP SPT=417 ...
show moreOct 11 17:37:57 104.28.208.137 TCP SPT=41740 DPT=1111 SYN
Oct 11 17:37:58 104.28.208.137 TCP SPT=41740 DPT=1111 SYN
Oct 11 17:37:59 104.28.208.137 TCP SPT=41740 DPT=1111
...
show less
Blocked by UFW on vps3 [2053/tcp]
Source port: 44455
TTL: 56
Packet length: 60
TOS: 0x00
This repor ...
show moreBlocked by UFW on vps3 [2053/tcp]
Source port: 44455
TTL: 56
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense cou ...
show moreFailed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 2. Last seen 2026-09-26 11:24 UTC, first seen 2026-09-24 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earlier, latest 2026-09-24 08:32 UTC). AS13335 Cloudflare, Inc..
show less
MikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:09 UTC. Part of ...
show moreMikroTik RouterOS: single unauthorized login attempt (user 'admin') at 2026-09-24 08:09 UTC. Part of a distributed credential-stuffing campaign: 12 distinct source IPs attempted the same username against our infrastructure within the same hour. Automated detection. AS13335 Cloudflare, Inc..
show less