152.42.128.64

Web attack/malicious scanning detected

tcp/6789

FW-PortScan: Traffic Blocked srcport=61014 dstport=8888

Blocked by UFW (TCP on 3210) Source port: 61012 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 152.42.128.64) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

152.42.128.64 - - [09/Oct/2026:23:57:11 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out)" ...

FW-PortScan: Traffic Blocked srcport=61011 dstport=8000

Blocked by UFW [8089/tcp] Source port: 61006 TTL: 241 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

list.rtbh.com.tr report: tcp/0

Unauthorized connection attempt detected, SSH Brute-Force

2026-02-08T03:59:22.642136 gateway sshd[182442]: Failed password for root from 152.42.128.64 port 58404 ssh2 2026-02-08T04:00:02.740243 gateway sshd[182451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152. ... show more 2026-02-08T03:59:22.642136 gateway sshd[182442]: Failed password for root from 152.42.128.64 port 58404 ssh2 2026-02-08T04:00:02.740243 gateway sshd[182451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T04:00:04.725785 gateway sshd[182451]: Failed password for root from 152.42.128.64 port 43958 ssh2 2026-02-08T04:00:46.811746 gateway sshd[182468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T04:00:48.837395 gateway sshd[182468]: Failed password for root from 152.42.128.64 port 32928 ssh2 2026-02-08T04:01:29.519974 gateway sshd[182497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T04:01:31.114221 gateway sshd[182497]: Failed password for root from 152.42.128.64 port 33530 ssh2 2026-02-08T04:02:11.195332 gateway sshd[182518]: pam_unix(sshd:auth): authenti ... show less

SSH brute-force detected on VPS server

US910-RN-LAX-RYZ7950.vps.992969.xyz: SSH Brute Force from 152.42.128.64 at 2026-02-08 15:29:12 IST

2026-02-08T09:57:37.230703+00:00 panel sshd[763460]: Failed password for root from 152.42.128.64 port 42848 ssh2 2026-02-08T09:58:21.148270+00:00 panel sshd[775054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... show more 2026-02-08T09:57:37.230703+00:00 panel sshd[763460]: Failed password for root from 152.42.128.64 port 42848 ssh2 2026-02-08T09:58:21.148270+00:00 panel sshd[775054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T09:58:23.268875+00:00 panel sshd[775054]: Failed password for root from 152.42.128.64 port 41050 ssh2 2026-02-08T09:59:04.176704+00:00 panel sshd[785887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T09:59:06.864853+00:00 panel sshd[785887]: Failed password for root from 152.42.128.64 port 56862 ssh2 ... show less

SSH brute-force on sshd jail (fail2ban auto-report)

2026-02-08T01:57:42.146843-08:00 goldcrest sshd[186529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T01:57:43.912618-08:00 goldcrest sshd[186529]: Failed password for roo ... show more 2026-02-08T01:57:42.146843-08:00 goldcrest sshd[186529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T01:57:43.912618-08:00 goldcrest sshd[186529]: Failed password for root from 152.42.128.64 port 54186 ssh2 2026-02-08T01:58:27.227050-08:00 goldcrest sshd[186531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.128.64 user=root 2026-02-08T01:58:29.504628-08:00 goldcrest sshd[186531]: Failed password for root from 152.42.128.64 port 44488 ssh2 ... show less