2026-08-25 19:43:51
(6 days ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇫🇷
security.rdmc.fr
2026-08-25 19:05:43
(6 days ago)
Port Scan Attack proto:TCP src:27899 dst:23
Port Scan
🇫🇷
Petre 21_ip
2026-08-25 18:13:25
(6 days ago)
2026-08-25T20:13:24.281589+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-08-25T20:13:24.281589+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=211.140.232.66 DST=155.133.26.57 LEN=60 TOS=0x14 PREC=0x60 TTL=45 ID=17750 DF PROTO=TCP SPT=45221 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
kosada.com
2025-10-05 08:25:20
(10 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-22 08:52:01
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 04:51:57.345499 2025] [security2:error] [pid 7073:tid 7073] [client 211.140.232.66:3784] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/165552"] [unique_id "aNEOLY3XOhU3I0ABI_TkZAAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 13:00:13
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 09:00:02.256760 2025] [security2:error] [pid 25671:tid 25671] [client 211.140.232.66:62670] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1841/game/67777/"] [unique_id "aM1T0svyH5TPHnLl_6Z52gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 03:18:09
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 211.140.232.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 23:17:53.608149 2025] [security2:error] [pid 27275:tid 27275] [client 211.140.232.66:31842] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/3114/game/159039/"] [unique_id "aMjW4dXTgQ0EGhsIKmcP1AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-19 06:47:37
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
cybsecaoccol
2024-01-07 03:07:34
(2 years ago)
unauthorized connection or malicious port scan attempted on tcp port 445 - dr
Port Scan
Hacking