π―π΅
demonsword
2026-05-29 14:17:32
(3 months ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: kulo4d-resmi.com:443:443
show less
Open Proxy
Port Scan
π§πΎ
lns.bz
2025-12-10 01:44:47
(9 months ago)
Too many 404 requests [BY]
Web App Attack
Anonymous
2025-12-09 15:02:19
(9 months ago)
High Connection Diversity
Port Scan
π©πͺ
london2038.com
2025-12-09 01:04:01
(9 months ago)
Probing for exploits
143.198.91.51 - - [09/Dec/2025:02:03:57 +0100] "GET /wp-content/uploads/ HTTP/1 ...
show more
Probing for exploits
143.198.91.51 - - [09/Dec/2025:02:03:57 +0100] "GET /wp-content/uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [09/Dec/2025:02:03:57 +0100] "GET /wp-content/plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
show less
Hacking
Web App Attack
π«π·
uhlhosting
2025-12-08 07:39:59
(9 months ago)
elements.uhl.cloud 143.198.91.51 - - [08/Dec/2025:08:39:54.062113 +0100] "GET /wp-content/uploads/ H ...
show more
elements.uhl.cloud 143.198.91.51 - - [08/Dec/2025:08:39:54.062113 +0100] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "-" aTaAymVra6ZWIB5orvCaNwAAAAQ "-" /apache/20251208/20251208-0839/20251208-083954-aTaAymVra6ZWIB5orvCaNwAAAAQ 0 1372 md5:cafde02ffbcfd787aaeb908623670857
elements.uhl.cloud 143.198.91.51 - - [08/Dec/2025:08:39:54.788297 +0100] "GET /wp-includes/ HTTP/1.1" 403 199 "-" "-" aTaAymVra6ZWIB5orvCaOgAAAAw "-" /apache/20251208/20251208-0839/20251208-083954-aTaAymVra6ZWIB5orvCaOgAAAAw 0 1358 md5:6ff41a155593756de4575cecd121d8a0
stage.uhl.cloud 143.198.91.51 - - [08/Dec/2025:08:39:56.008788 +0100] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "-" aTaAzGVra6ZWIB5orvCaPgAAAAk "-" /apache/20251208/20251208-0839/20251208-083956-aTaAzGVra6ZWIB5orvCaPgAAAAk 0 1369 md5:7b59919c656b40d60955322f09541c8d
stage.uhl.cloud 143.198.91.51 - - [08/Dec/2025:08:39:57.112143 +0100] "GET /wp-includes/ HTTP/1.1" 403 199 "-" "-" aTaAzWVra6ZWIB5orvCaQQAAAAA "-" /apache/20251208/20251208-0839/2
...
show less
DDoS Attack
Brute-Force
π¬π§
www.elivecd.org
2025-12-07 23:21:31
(9 months ago)
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible ...
show more
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:29 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [07/Dec/2025:23:21:30 +0000] "GET /download/ HTTP/1.1" 200 33744 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0
...
show less
DDoS Attack
π©πͺ
Interceptor_HQ
2025-12-06 18:52:24
(9 months ago)
request_uri: / -- automatic report --
Hacking
Brute-Force
πΊπ¦
URAN Publishing Service
2025-12-05 20:13:40
(9 months ago)
143.198.91.51 - - [05/Dec/2025:22:13:38 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 196 "-" "Mozi ...
show more
143.198.91.51 - - [05/Dec/2025:22:13:38 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
143.198.91.51 - - [05/Dec/2025:22:13:39 +0200] "GET /wp-content/plugins/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
Web App Attack
π©πͺ
David Ferneding
2025-12-04 23:45:11
(9 months ago)
Blocked by UFW (TCP on 80)
Source port: 61372
TTL: 118
Packet length: 52
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 80)
Source port: 61372
TTL: 118
Packet length: 52
TOS: 0x00
This report (for 143.198.91.51) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
Anonymous
2025-12-04 22:13:12
(9 months ago)
Bot / seems abusive / Apache connections: 123
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
πΊπΈ
GreekCity
2025-12-03 12:55:07
(9 months ago)
bad-bot hacking for vulnerable links.
Hacking
Exploited Host
π²πΎ
syokadmin
2025-12-03 03:19:27
(9 months ago)
143.198.91.51 (SG/Singapore/-), more than 2 Apache 403 hits in the last 3600 secs
Brute-Force
π°π·
Betatester
2025-12-03 02:46:00
(9 months ago)
GET /wp-admin/ status=301 UA=Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)
Port Scan
π¨πΏ
ddw
2025-12-02 14:03:29
(9 months ago)
Access Violation Attempts - Multiple 403 Forbidden responses.
Hacking
Bad Web Bot
Web App Attack
π«π·
Phenix Info
2025-12-02 02:54:36
(9 months ago)
SmallGuard.fr/Prestashop Honeypot
Web App Attack