Anonymous
2026-08-01 13:36:52
(10 hours ago)
Portscan: TCP/3389 (20x), TCP/990 (11x)
Port Scan
๐ฉ๐ช
Tsumugi Kotobuki
2026-08-01 12:19:39
(11 hours ago)
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 250 | Len: 44B | Win ...
show more
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 250 | Len: 44B | Win: 1025(1) | rDNS: 71.200.140.34.bc.googleusercontent.com | F2B/ufw-honeypot@2026-08-01T12:19:39Z
show less
Port Scan
Hacking
๐ฉ๐ช
zupan
2026-08-01 12:08:18
(11 hours ago)
Blocked by UFW on vps [990/tcp] | SPT: 50109 | TTL: 248 | LEN: 44 | TOS: 0x00 โข Reported by: github. ...
show more
Blocked by UFW on vps [990/tcp] | SPT: 50109 | TTL: 248 | LEN: 44 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ต๐ฑ
mkey
2026-08-01 12:05:12
(12 hours ago)
Source IP from blacklist AbuseIPDB is still actively scanning our network. (6 hits in last hour, las ...
show more
Source IP from blacklist AbuseIPDB is still actively scanning our network. (6 hits in last hour, last seen 2026-08-01 13:55:09)
show less
Port Scan
๐บ๐ธ
MPL
2026-08-01 11:55:06
(12 hours ago)
tcp ports: 990,3389 (6 or more attempts)
Port Scan
๐ซ๐ท
sthoyer.de
2026-08-01 11:53:28
(12 hours ago)
Aug 1 13:53:27 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Aug 1 13:53:27 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=34.140.200.71 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x60 TTL=249 ID=57726 PROTO=TCP SPT=50093 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐บ๐ธ
shaunc
2026-08-01 11:48:37
(12 hours ago)
Aug 1 06:48:31 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ...
show more
Aug 1 06:48:31 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=34.140.200.71 DST=[redacted] LEN=44 TOS=0x00 PREC=0x60 TTL=249 ID=58537 PROTO=TCP SPT=50109 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
Aug 1 06:48:33 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=34.140.200.71 DST=[redacted] LEN=44 TOS=0x00 PREC=0x60 TTL=249 ID=1407 PROTO=TCP SPT=50093 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
Aug 1 06:48:34 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=34.140.200.71 DST=[redacted] LEN=44 TOS=0x00 PREC=0x60 TTL=249 ID=1407 PROTO=TCP SPT=50093 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
show less
Port Scan
๐ฏ๐ต
jay hung
2026-08-01 11:35:00
(12 hours ago)
2026-08-01T11:35:00.057074+00:00 quarktech kernel: [342275.692738] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ...
show more
2026-08-01T11:35:00.057074+00:00 quarktech kernel: [342275.692738] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=34.140.200.71 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x40 TTL=236 ID=22691 PROTO=TCP SPT=50093 DPT=990 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ซ๐ท
Altai
2026-08-01 11:22:28
(12 hours ago)
Blocked by UFW on Jellyfin [990/tcp]
Source port: 50109
TTL: 249
Packet length: 44
TOS: 0x00
This r ...
show more
Blocked by UFW on Jellyfin [990/tcp]
Source port: 50109
TTL: 249
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ฉ๐ช
ValtonTahiri
2026-08-01 11:05:21
(13 hours ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=34.140.200.71; proto=TCP; source_port=50093; target_port=990; flags=SYN
show less
Port Scan
๐บ๐ธ
MPL
2026-08-01 11:03:28
(13 hours ago)
tcp ports: 990,3389 (10 or more attempts)
Port Scan
๐ฉ๐ช
iNetWorker
2026-08-01 11:00:13
(13 hours ago)
firewall-block, port(s): 3389/tcp
Port Scan
๐ซ๐ฎ
iamxorum
2026-08-01 10:49:15
(13 hours ago)
2026-08-01T10:49:14.658352+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ...
show more
2026-08-01T10:49:14.658352+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=34.140.200.71 DST=46.62.222.43 LEN=44 TOS=0x00 PREC=0x60 TTL=248 ID=24156 PROTO=TCP SPT=50093 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ฏ๐ต
Kinsei Engineering Inc.
2026-08-01 10:42:35
(13 hours ago)
UFW:High-frequency access to non-released NetBIOS, SMB and WindowsAdmin ports
Hacking
Port Scan
Anonymous
2026-08-01 10:42:27
(13 hours ago)
2026-08-01T12:42:24.758514+02:00 vps kernel: [1951792.488854] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more
2026-08-01T12:42:24.758514+02:00 vps kernel: [1951792.488854] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=34.140.200.71 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x60 TTL=240 ID=41116 PROTO=TCP SPT=50093 DPT=3389 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force