2026-08-23 00:34.Categories: Port Scan.
Comment: trying to access non-authorized port
2026-08-23 00:32.Categories: Hacking.
Comment: [rede-44-49] 08/22/2026-21:32:54.055489, 89.125.33.88, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 120
2026-08-22 20:11.Categories: Port Scan.
Comment: Try to connect to Port_Scan_8080_stealth
2026-08-22 19:37.Categories: Port Scan.
Comment: PortscanM
2026-08-22 17:36.Categories: Port Scan.
Comment: p0t honeypot: unknown connection on port 5353/udp, 67 bytes received from client
2026-08-22 13:37.Categories: Port Scan.
Comment: 6881/udp (1 or more attempts)
2026-08-22 12:30.Categories: Hacking, Brute-Force, Exploited Host.
Comment: 89.125.33.88 Blocked by [Attack Vector List] …
2026-08-22 12:22.Categories: Port Scan, Fraud VoIP.
Comment: VoIP Attack proto:UDP src:7705 dst:5060
2026-08-22 12:18.Categories: Hacking.
Comment: [rede-44-49] 08/22/2026-09:18:39.104231, 89.125.33.88, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 120
2026-08-22 07:29.Categories: Hacking.
Comment: unsolicited UDP packet to port 5353 (104 bytes)
2026-08-22 05:11.Categories: Port Scan, Hacking, Exploited Host.
Comment: Hit honeypot r.
2026-08-22 04:08.Categories: Fraud VoIP, Port Scan, Hacking, Brute-Force.
Comment: SIP/5060 Probe, Scan, BF, Hack –
2026-08-22 02:15.Categories: Port Scan, Hacking.
Comment: MultiHost/MultiPort Probe, Scan, Hack –
2026-08-21 22:45.Categories: Port Scan.
Comment: Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
2026-08-21 17:29.Categories: Port Scan.
Comment: 1434/udp (1 or more attempts)
2026-08-21 17:06.Categories: Port Scan.
Comment: Aug 20 23:07:48 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.125.33.88 DST=204.17.205.254 LEN=67 TOS=0x00 PREC=0x00 TTL=49 ID=17750 DF PROTO=UDP SPT=7705 DPT=1027 LEN=47 Aug 21 02:15:51 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.125.33.88 DST=204.17.205.254 LEN=120 TOS=0x00 PREC=0x00 TTL=49 ID=6167 DF PROTO=UDP SPT=7705 DPT=8083 LEN=100 Aug 21 10:06:01 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.125.33.88 DST=204.17.205.254 LEN=85 TOS=0x00 PREC=0x00 TTL=49 ID=9906 DF PROTO=UDP SPT=7705 DPT=30301 LEN=65 …
2026-08-21 11:04.Categories: Port Scan.
Comment: Automated scan detection against redacted protected targets. Hits=1; port 6881 proto 17 detection dark_ip
2026-08-21 08:58.Categories: Port Scan.
Comment: Aug 21 14:43:18 kernel: [1018842.659989] [UFW BLOCK] IN=ens160 OUT= SRC=89.125.33.88 LEN=38 TOS=0x00 PREC=0xA0 TTL=55 ID=15821 DF PROTO=UDP SPT=7705 DPT=30301 LEN=18 …
2026-08-21 07:59.Categories: Hacking.
Comment: [rede-44-49] 08/21/2026-04:59:17.144631, 89.125.33.88, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 117
2026-08-21 07:30.Categories: Port Scan.
Comment: firewall-block, port(s): 8080/udp
2026-08-21 06:30.Categories: Port Scan, Brute-Force.
Comment: NFT blocked 89.125.33.88 on 21-Aug-2026..
2026-08-21 05:06.Categories: Port Scan.
Comment: AutoBlock: 📡 Port Scan (Non Decay-Based)
2026-08-21 05:04.Categories: Brute-Force.
Comment: Blocked by UFW firewall
2026-08-21 04:51.Categories: Hacking.
Comment: [rede-top188] 08/21/2026-01:51:00.076675, 89.125.33.88, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 117
2026-08-21 03:39.Categories: Fraud VoIP, Port Scan, Hacking, Brute-Force.
Comment: SIP/5060 Probe, Scan, BF, Hack –
2026-08-21 03:37.Categories: Port Scan.
Comment: 5353/udp (1 or more attempts)
2026-08-21 02:05.Categories: Port Scan, Hacking.
Comment: MultiHost/MultiPort Probe, Scan, Hack –
2026-08-20 22:01.Categories: Hacking.
Comment: [DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_suspicious_entropy
2026-08-20 20:47.Categories: Port Scan.
Comment: trying to access non-authorized port
2026-08-20 17:49.Categories: Brute-Force, SSH.
Comment: [BloumeGen Security] IP Access: 89.125.33.88. SSH brute-force login attempt. Target: Unknown. Paths: Multiple probes. Hits: 5
2026-08-20 12:32.Categories: Port Scan, Fraud VoIP.
Comment: VoIP Attack proto:UDP src:7705 dst:5060
2026-08-20 10:33.Categories: Hacking.
Comment: Hacker syslog review 1787222034
2026-08-20 08:46.Categories: Port Scan.
Comment: 2026-08-20T10:46:35.526616+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=89.125.33.88 DST=155.133.26.57 LEN=53 TOS=0x00 PREC=0x00 TTL=52 ID=38009 DF PROTO=UDP SPT=7705 DPT=5060 LEN=33 …
2026-08-20 06:51.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=8080
2026-08-20 04:35.Categories: Exploited Host, Hacking.
Comment: IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 117 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 117 | SID: 2403416 | Severity: 2 | Category: Misc Attack === SOURCE === IP: 89.125.33.88 (IPv4) | Port: 7705 | Country: The Netherlands | ISP: Spacecore | rDNS: 450917.vm.spacecore.network === TARGET === Host: insightvm.goline.ch | IP: 185.54.80.24 | Port: 8082 | Protocol: UDP | App: failed === RESPONSE === Time: 2026-08-20 06:35:57 | Action: Blocked
2026-08-20 03:56.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=5060
2026-08-20 03:25.Categories: Port Scan.
Comment: 2026-08-20T03:25:34.308975+00:00 quarktech kernel: [1954514.246462] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=89.125.33.88 DST=172.237.20.248 LEN=80 TOS=0x00 PREC=0x40 TTL=40 ID=3777 DF PROTO=UDP SPT=7705 DPT=5353 LEN=60 …
2026-08-20 03:05.Categories: Port Scan.
Comment: 8080/udp (1 or more attempts)
2026-08-20 02:38.Categories: Fraud VoIP, Port Scan, Hacking, Brute-Force.
Comment: SIP/5060 Probe, Scan, BF, Hack –
2026-08-20 02:20.Categories: Port Scan, Hacking, Brute-Force.
Comment: Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
2026-08-20 01:39.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=8000
2026-08-20 01:21.Categories: Port Scan, Hacking.
Comment: MultiHost/MultiPort Probe, Scan, Hack –
2026-08-19 22:45.Categories: Port Scan.
Comment: Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
2026-08-19 20:28.Categories: Port Scan.
Comment: Unauthorized access attempt (udp/5353)
2026-08-19 15:47.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=8083
2026-08-19 13:49.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=8082
2026-08-19 11:32.Categories: Port Scan.
Comment: FW-PortScan: Traffic Blocked srcport=7705 dstport=4000
2026-08-19 08:50.Categories: Port Scan.
Comment: 4000/udp (1 or more attempts)
2026-08-19 05:23.Categories: Port Scan, Hacking.
Comment: denied traffic to a honeypot network. destination port 6881.
2026-08-19 02:32.Categories: Port Scan.
Comment: Attempt on port 8081 – potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
2026-08-19 02:15.Categories: Port Scan, Hacking.
Comment: denied traffic to a honeypot network. destination port 5353.
2026-08-19 01:20.Categories: Port Scan, Hacking.
Comment: MultiHost/MultiPort Probe, Scan, Hack –
2026-08-19 00:38.Categories: Fraud VoIP, Port Scan, Hacking, Brute-Force.
Comment: SIP/5060 Probe, Scan, BF, Hack –
