101.71.38.35

denied traffic to a honeypot network. destination port 23.

Web bot: denial-of-service flood: ["Access denied with code 406 (phase 1)", "Failed to lock global mutex: Invalid argument"]

Web bot: DDoS

[incypit-web] Blocked by SysWarden Firewall [GEO] (Telnet IoT Attack)

tcp/23 (2 or more attempts)

UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=101.71.38.35; proto=TCP; source_port=61354; target ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=101.71.38.35; proto=TCP; source_port=61354; target_port=23; flags=SYN show less

Port Scan Attack proto:TCP src:32782 dst:23

Blocked by UFW (TCP on 23) Source port: 29565 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 101.71.38.35) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

denied traffic to a honeypot network. destination port 23.

Blocked by UFW (TCP on 23) Source port: 39193 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 101.71.38.35) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

2026-08-04 03:53:17 UTC Unauthorized activity to TCP port 23. Telnet

tcp/1433

Web attack

spam

This IP was detected by CrowdSec triggering crowdsecurity/postscreen-rbl