59.52.103.8

denied traffic to a non-approved destination port. destination port 5552.

Unauthorized connection attempt

Blocked by UFW on LAXHH [8094/tcp] | SPT: 60329 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter

UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=59.52.103.8; proto=TCP; source_port=10560; target_ ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=59.52.103.8; proto=TCP; source_port=10560; target_port=16000; flags=SYN show less

Blocked by UFW (TCP on 3790) Source port: 25733 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 59.52.103.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Port scan / connection attempts on port 10010/TCP to unused IP

Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud

1778490462 # Service_probe # SIGNATURE_SEND # source_ip:59.52.103.8 # dst_port:995 ...

05/11/2026-02:53:30.084560 src=59.52.103.8 dst=89.144.63.133:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306

Automated scan detected on 0t.systems: /wp

Port probing on unauthorized port 6665

ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.52.103.8 2026-03-16 10:58:24 /

Scanning for port/service exploits on tpc-001.mach3builders.nl

Blocked by UFW (TCP on 12217) Source port: 52138 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.103.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Honeypot hit: Unauthorized traffic (16 bytes of payload); 12370 [1] TCP