🇫🇮
nNordic
2026-04-25 08:41:40
(1 month ago)
Connection attempt blocked by IDS/IPS from 139.59.42.53/32
Hacking
🇩🇪
zupan
2026-04-14 00:58:43
(2 months ago)
Blocked by UFW on vps [8888/tcp] | SPT: 61004 | TTL: 244 | LEN: 44 | TOS: 0x00 • Reported by: github ...
show more
Blocked by UFW on vps [8888/tcp] | SPT: 61004 | TTL: 244 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
asher
2026-04-08 06:40:18
(2 months ago)
SSH Brute Force (251 attempts). Targeted user: d. Active from Apr 05 23:53:05 to Apr 06 00:06:45 PST ...
show more
SSH Brute Force (251 attempts). Targeted user: d. Active from Apr 05 23:53:05 to Apr 06 00:06:45 PST.
show less
Brute-Force
SSH
🇮🇳
Parth Maniar
2026-04-07 08:22:11
(2 months ago)
This IP address carried out 753 SSH credential attack (attempts) on 06-04-2026. For more information ...
show more
This IP address carried out 753 SSH credential attack (attempts) on 06-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
2026-04-06 23:25:01
(2 months ago)
Portscan: TCP/2222 (24x), TCP/2202 (6x), TCP/2022 (6x), TCP/22222 (9x)
Port Scan
🇪🇸
librebit
2026-04-06 12:38:44
(2 months ago)
Brute force
Brute-Force
🇩🇪
london2038.com
2026-04-06 12:10:53
(2 months ago)
Connection atttempts against closed TCP ports
Apr 6 08:09:11 BLOCK SRC=139.59.42.53 LEN=52 TOS=0x00 ...
show more
Connection atttempts against closed TCP ports
Apr 6 08:09:11 BLOCK SRC=139.59.42.53 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=30255 PROTO=TCP SPT=42454 DPT=2202 WINDOW=65535 RES=0x00 SYN
Apr 6 12:53:06 BLOCK SRC=139.59.42.53 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=1470 PROTO=TCP SPT=47974 DPT=22222 WINDOW=65535 RES=0x00 SYN
Apr 6 14:07:43 BLOCK SRC=139.59.42.53 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=55269 PROTO=TCP SPT=49585 DPT=2022 WINDOW=65535 RES=0x00 SYN
show less
Port Scan
🇺🇸
MPL
2026-04-06 11:58:38
(2 months ago)
tcp/2022 (7 or more attempts)
Port Scan
🇫🇮
6kilowatti
2026-04-06 11:48:21
(2 months ago)
2026-04-06T14:48:21.077720+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ...
show more
2026-04-06T14:48:21.077720+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=139.59.42.53 DST=83.148.240.21 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=36040 PROTO=TCP SPT=47718 DPT=2202 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
Petre 21_ip
2026-04-06 11:40:43
(2 months ago)
2026-04-06T13:40:42.117814+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-04-06T13:40:42.117814+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=139.59.42.53 DST=155.133.26.57 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=11945 PROTO=TCP SPT=53067 DPT=2202 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇯🇵
Kinsei Engineering Inc.
2026-04-06 11:39:50
(2 months ago)
UFW:High-frequency access to unused ports
Port Scan
🇭🇰
pengpeng
2026-04-06 11:37:51
(2 months ago)
monitor: on ser162528253480 | port: 2202 | ttl: 54 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on ser162528253480 | port: 2202 | ttl: 54 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2026-04-06 11:36:35
(2 months ago)
Blocked by UFW (TCP on 2202)
Source port: 40120
TTL: 50
Packet length: 52
TOS: 0x08
This report (fo ...
show more
Blocked by UFW (TCP on 2202)
Source port: 40120
TTL: 50
Packet length: 52
TOS: 0x08
This report (for 139.59.42.53) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
bigscoots.com
2026-04-06 11:22:48
(2 months ago)
139.59.42.53 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ...
show more
139.59.42.53 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 6 06:22:37 14421 sshd[19281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.53 user=root
Apr 6 06:22:38 14421 sshd[19281]: Failed password for root from 139.59.42.53 port 55058 ssh2
Apr 6 05:32:53 14421 sshd[15703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.250.184.183 user=root
Apr 6 05:31:06 14421 sshd[15567]: Failed password for root from 87.251.64.145 port 17006 ssh2
Apr 6 05:49:47 14421 sshd[16905]: Failed password for root from 87.251.64.147 port 16174 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
🇩🇪
Admins@FBN
2026-04-06 11:07:57
(2 months ago)
FW-PortScan: Traffic Blocked srcport=58566 dstport=2222
Port Scan