162.243.174.92

MikroTik Enterprise Honeypot

denied traffic to a honeypot network. destination port 60000.

Blocked by UFW (TCP on 1911) Source port: 61009 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 162.243.174.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Acc ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8001 [2] TCP show less

Unsolicited connection to port 465

04/26/2026-03:49:06.351458 162.243.174.92 ET SCAN Suspicious inbound to mySQL port 3306

1777167436 # Service_probe # SIGNATURE_SEND # source_ip:162.243.174.92 # dst_port:85 ...

Connection to port 85 with data transfer. Data preview: GET / HTTP/1.1 Host: 104.250.239.52 Connection: keep-alive sec-ch-ua: "Chromium";v="142", "Not:A-

2026-03-17 13:00:31 /

tcp/1000

Blocked by UFW (TCP on 8080) Source port: 61012 TTL: 240 Packet length: 44 TOS: 0x08 This report (for 162.243.174.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Mar 15 23:31:24 docker1 sshd[1398740]: Invalid user pouria from 162.243.174.92 port 50716 Mar 15 23:31:26 docker1 sshd[1398740]: Failed password for invalid user pouria from 162.243.174.92 port 50716 ssh2 Mar 15 23:31:30 docker1 sshd[1401117]: Invali ... show more Mar 15 23:31:24 docker1 sshd[1398740]: Invalid user pouria from 162.243.174.92 port 50716 Mar 15 23:31:26 docker1 sshd[1398740]: Failed password for invalid user pouria from 162.243.174.92 port 50716 ssh2 Mar 15 23:31:30 docker1 sshd[1401117]: Invalid user admin from 162.243.174.92 port 42066 ... show less

Mar 15 23:14:45 docker1 sshd[1361809]: Invalid user from 162.243.174.92 port 58524 Mar 15 23:16:07 docker1 sshd[1363636]: Invalid user admin from 162.243.174.92 port 42724 Mar 15 23:16:16 docker1 sshd[1364129]: Invalid user ftp from 162.243.174.92 p ... show more Mar 15 23:14:45 docker1 sshd[1361809]: Invalid user from 162.243.174.92 port 58524 Mar 15 23:16:07 docker1 sshd[1363636]: Invalid user admin from 162.243.174.92 port 42724 Mar 15 23:16:16 docker1 sshd[1364129]: Invalid user ftp from 162.243.174.92 port 51488 ... show less

Mar 15 22:15:39 apo sshd[19756]: Invalid user from 162.243.174.92 port 38172 Mar 15 22:16:12 apo sshd[20797]: Invalid user admin from 162.243.174.92 port 54456 Mar 15 22:16:12 apo sshd[20797]: Failed password for invalid user admin from 162.243.174. ... show more Mar 15 22:15:39 apo sshd[19756]: Invalid user from 162.243.174.92 port 38172 Mar 15 22:16:12 apo sshd[20797]: Invalid user admin from 162.243.174.92 port 54456 Mar 15 22:16:12 apo sshd[20797]: Failed password for invalid user admin from 162.243.174.92 port 54456 ssh2 Mar 15 22:16:19 apo sshd[21091]: Invalid user ftp from 162.243.174.92 port 47762 ... show less

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).