170.246.55.29

Honeypot Finding: verified TCP multi-port scan/probing; 14 application-level events across 7 target ports and 5 source port(s). Ports: 9100/Printer, 443/HTTPS, 1069/service, 2034/service, 2601/service, 5666/service, 27356/service. Sensors: Miniprint, ... show more Honeypot Finding: verified TCP multi-port scan/probing; 14 application-level events across 7 target ports and 5 source port(s). Ports: 9100/Printer, 443/HTTPS, 1069/service, 2034/service, 2601/service, 5666/service, 27356/service. Sensors: Miniprint, Honeytrap, H0neytr4p. show less

2026-11-11T18:58:11.021952-05:00 localhost kernel: [1410357.647630] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=170.246.55.29 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=27502 DF PROTO=TCP SPT=41589 D ... show more 2026-11-11T18:58:11.021952-05:00 localhost kernel: [1410357.647630] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=170.246.55.29 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=27502 DF PROTO=TCP SPT=41589 DPT=32785 SEQ=4257236144 ACK=0 WINDOW=32760 RES=0x00 SYN URGP=0 OPT (020404EC0402080AE5C34FC20000000001030307) 2026-11-11T18:58:11.942379-05:00 localhost kernel: [1410358.642297] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=170.246.55.29 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=12215 DF PROTO=TCP SPT=52097 DPT=9418 SEQ=1591869402 ACK=0 WINDOW=32760 RES=0x00 SYN URGP=0 OPT (020404EC0402080AE5C353AD0000000001030307) 2026-11-11T18:58:12.067527-05:00 localhost kernel: [1410358.675784] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:fe:ff:ff:ff:ff:ff:08:00 SRC=170.246.55.29 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=27503 DF PROTO=TCP SPT=41589 DPT=32785 SEQ=4257236144 ACK=0 WINDOW=32760 RES=0x00 S show less

Honeypot Finding: verified TCP multi-port scan/probing; 17 application-level events across 17 target ports and 17 source port(s). Ports: 1097/service, 1098/service, 1102/service, 1105/service, 1154/service, 1166/service, 1185/service, 1914/service. S ... show more Honeypot Finding: verified TCP multi-port scan/probing; 17 application-level events across 17 target ports and 17 source port(s). Ports: 1097/service, 1098/service, 1102/service, 1105/service, 1154/service, 1166/service, 1185/service, 1914/service. Sensors: Honeytrap. show less

UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=170.246.55.29; proto=TCP; source_port=54413; targe ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=170.246.55.29; proto=TCP; source_port=54413; target_port=8001; flags=SYN show less

T-Pot honeypot: 1 hits on ports [8001] (automated)

Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 40 application-level events across 40 source port(s). Sensor(s): Honeyaml.

Blocked by UFW [3000/tcp] | SPT: 43991 | TTL: 54 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter

Honeypot Finding: verified TCP multi-port scan/probing; 6 application-level events across 6 target ports and 6 source port(s). Ports: 3001/service, 8000/service, 8001/service, 8081/HTTP, 8888/service, 9000/service. Sensors: Honeytrap.

*Port Scan* detected from 170.246.55.29 (US/United States/-). 11 hits in the last 186 seconds (0-195)

portscan on multiple TCP ports : Firewall: Within 2026-10-18 05:48:42 - 2026-10-18 05:48:42 CEST(+0200) identified: port scan from 170.246.55.29/32 on uncommon port/s: 3000(tcp:3000),5000(tcp:5000),3001(tcp:3001),8000(tcp:8000),8081(tproxy) (5 trials ... show more portscan on multiple TCP ports : Firewall: Within 2026-10-18 05:48:42 - 2026-10-18 05:48:42 CEST(+0200) identified: port scan from 170.246.55.29/32 on uncommon port/s: 3000(tcp:3000),5000(tcp:5000),3001(tcp:3001),8000(tcp:8000),8081(tproxy) (5 trials) Fail2ban: Within 2026-10-18 05:48:42 - 2026-10-18 05:48:42 CEST(+0200) banned: 7 times by fail2ban[firewall]; 7 times by fail2ban[recidive] show less

fail2ban:firewall:2026-10-18T05:48:42.604305+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=170.246.55.29 DST=<ANONYMIZED_IP> LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=965 DF PROTO=TCP SPT=43613 DPT=3000 WINDOW=32760 R ... show more fail2ban:firewall:2026-10-18T05:48:42.604305+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=170.246.55.29 DST=<ANONYMIZED_IP> LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=965 DF PROTO=TCP SPT=43613 DPT=3000 WINDOW=32760 RES=0x00 SYN URGP=0 2026-10-18T05:48:42.611306+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=170.246.55.29 DST=<ANONYMIZED_IP> LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=55724 DF PROTO=TCP SPT=49895 DPT=5000 WINDOW=32760 RES=0x00 SYN URGP=0 show less

*Port Scan* detected from 170.246.55.29 (US/United States/-).