This IP address has been reported a total of
20
times from
11 distinct
sources.
194.59.30.52 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-reported by fail2ban: sshd ban after 3 failures
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 389)
Source port: 34883
TTL: 49
Packet length: 52
TOS: 0x14
This report (for ...
show moreBlocked by UFW (TCP on 389)
Source port: 34883
TTL: 49
Packet length: 52
TOS: 0x14
This report (for 194.59.30.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Jul 12 00:11:29 gateway sshd[486676]: Invalid user jumpserver from 194.59.30.52 port 40368
Jul 12 00 ...
show moreJul 12 00:11:29 gateway sshd[486676]: Invalid user jumpserver from 194.59.30.52 port 40368
Jul 12 00:11:31 gateway sshd[486687]: Invalid user ftpuser from 194.59.30.52 port 40388
Jul 12 00:11:32 gateway sshd[486737]: Invalid user ops from 194.59.30.52 port 43934
Jul 12 00:11:39 gateway sshd[486838]: Invalid user test from 194.59.30.52 port 43962
Jul 12 00:11:41 gateway sshd[486853]: Invalid user inspur from 194.59.30.52 port 43968
...
show less
Jul 4 00:23:22 aliyun-gz sshd[3690694]: Invalid user ftpuser from 194.59.30.52 port 33742
Jul 4 00 ...
show moreJul 4 00:23:22 aliyun-gz sshd[3690694]: Invalid user ftpuser from 194.59.30.52 port 33742
Jul 4 00:23:24 aliyun-gz sshd[3690698]: Invalid user jumpserver from 194.59.30.52 port 33744
Jul 4 00:23:27 aliyun-gz sshd[3690700]: Invalid user ops from 194.59.30.52 port 33750
Jul 4 00:23:32 aliyun-gz sshd[3690708]: Invalid user test from 194.59.30.52 port 49814
Jul 4 00:23:33 aliyun-gz sshd[3690710]: Invalid user inspur from 194.59.30.52 port 49818
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 1812)
Source port: 32852
TTL: 49
Packet length: 52
TOS: 0x14
This report (fo ...
show moreBlocked by UFW (TCP on 1812)
Source port: 32852
TTL: 49
Packet length: 52
TOS: 0x14
This report (for 194.59.30.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-30T22:14:17.813971+08:00 [HOSTNAME] sshd[1235183]: pam_unix(sshd:auth): authentication failu ...
show more2026-06-30T22:14:17.813971+08:00 [HOSTNAME] sshd[1235183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.30.52 user=root
2026-06-30T22:14:19.935062+08:00 [HOSTNAME] sshd[1235183]: Failed password for root from 194.59.30.52 port 35250 ssh2
2026-06-30T22:14:19.068222+08:00 [HOSTNAME] sshd[1235185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.30.52 user=root
2026-06-30T22:14:20.461969+08:00 [HOSTNAME] sshd[1235185]: Failed password for root from 194.59.30.52 port 35262 ssh2
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 60022)
Source port: 55729
TTL: 50
Packet length: 52
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 60022)
Source port: 55729
TTL: 50
Packet length: 52
TOS: 0x14
This report (for 194.59.30.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 427)
Source port: 34679
TTL: 51
Packet length: 52
TOS: 0x14
This report (for ...
show moreBlocked by UFW (TCP on 427)
Source port: 34679
TTL: 51
Packet length: 52
TOS: 0x14
This report (for 194.59.30.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Jun 12 18:30:09 gateway sshd[782802]: Invalid user ftpuser from 194.59.30.52 port 48502
Jun 12 18:30 ...
show moreJun 12 18:30:09 gateway sshd[782802]: Invalid user ftpuser from 194.59.30.52 port 48502
Jun 12 18:30:10 gateway sshd[782834]: Invalid user jumpserver from 194.59.30.52 port 48520
Jun 12 18:30:13 gateway sshd[782836]: Invalid user ops from 194.59.30.52 port 40622
Jun 12 18:30:18 gateway sshd[782865]: Invalid user test from 194.59.30.52 port 40650
Jun 12 18:30:20 gateway sshd[782867]: Invalid user inspur from 194.59.30.52 port 40666
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 60122)
Source port: 39361
TTL: 52
Packet length: 52
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 60122)
Source port: 39361
TTL: 52
Packet length: 52
TOS: 0x14
This report (for 194.59.30.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-18T01:19:48.815862+08:00 rosemary sshd-session[1743380]: Connection closed by authenticating ...
show more2026-05-18T01:19:48.815862+08:00 rosemary sshd-session[1743380]: Connection closed by authenticating user root 194.59.30.52 port 57814 [preauth]
2026-05-18T01:19:50.988920+08:00 rosemary sshd-session[1743391]: Invalid user test from 194.59.30.52 port 57826
...
show less
2026-05-18T00:19:45.373104+08:00 rosemary sshd-session[1712621]: Connection closed by authenticating ...
show more2026-05-18T00:19:45.373104+08:00 rosemary sshd-session[1712621]: Connection closed by authenticating user root 194.59.30.52 port 45782 [preauth]
2026-05-18T00:19:46.203250+08:00 rosemary sshd-session[1712619]: Connection closed by authenticating user root 194.59.30.52 port 45772 [preauth]
2026-05-18T00:19:47.741296+08:00 rosemary sshd-session[1712617]: Connection closed by authenticating user root 194.59.30.52 port 45766 [preauth]
...
show less
194.59.30.52 (BG/Bulgaria/-), more than 10 Apache 403 hits in the last 3600 secs; Ports: 80,443,7080 ...
show more194.59.30.52 (BG/Bulgaria/-), more than 10 Apache 403 hits in the last 3600 secs; Ports: 80,443,7080,7081; Direction: in; Trigger: LF_APACHE_403; Logs:
show less
Port Scan
Showing 1 to
15
of 20 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩