178.62.221.53

Excessive crawling : exceed crawl-delay defined in robots.txt

Unauthorized connection to RDP port 3389

Unsolicited TCP traffic on Honeypot, srcport=61009 dstport=85

Blocked by UFW on hk [8089/tcp] Source port: 61008 TTL: 241 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

2026-03-24 04:23:06 UTC Unauthorized activity to TCP port 8443. Web App

tcp ports: 8088,8080 (4 or more attempts)

Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: ... show more Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Full payload: GET / HTTP/1.1 Host: [SOME-IP] User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, defl... on 8086/TCP (2 attempts) show less

tcp/80

tcp port scan (5 or more attempts)

tcp/3306; SCAN Suspicious inbound to mySQL port 3306 @ 2026-03-22T12:38:20Z

Port probing on unauthorized port 3000

tcp/5555 (2 or more attempts)

2026-03-19T12:32:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=178.62.221.53 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11450 DF PROTO=TCP SPT=39900 DPT=80 WIND ... show more 2026-03-19T12:32:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=178.62.221.53 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11450 DF PROTO=TCP SPT=39900 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-19T12:32:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=178.62.221.53 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11451 DF PROTO=TCP SPT=39900 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-19T12:32:55+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=178.62.221.53 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=11452 DF PROTO=TCP SPT=39900 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less

SSH brute force attack detected and blocked automatically by fail2ban/autoban script

SSH abuse or brute-force attack detected by Fail2Ban in ssh jail