Anonymous
2026-11-10 19:49:52
UTC ·
(4 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
Zundapper
2026-11-08 08:42:31
UTC ·
(2 days ago)
51.158.248.220 - - [08/Nov/2026:09:42:25 +0100] "GET /favicon.ico HTTP/2.0" 404 167 "https://cdn2.idealmuseums.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3"
51.158.248.220 - - [08/Nov/202 ...
show more
51.158.248.220 - - [08/Nov/2026:09:42:25 +0100] "GET /favicon.ico HTTP/2.0" 404 167 "https://cdn2.idealmuseums.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3"
51.158.248.220 - - [08/Nov/2026:09:42:30 +0100] "GET /favicon.ico HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3"
51.158.248.220 - - [08/Nov/2026:09:42:30 +0100] "GET /sellers.json HTTP/1.1" 404 117 "-" "python-requests/2.34.2"
51.158.248.220 - - [08/Nov/2026:09:42:30 +0100] "GET /ads.txt HTTP/1.1" 404 117 "-" "python-requests/2.34.2"
51.158.248.220 - - [08/Nov/2026:09:42:30 +0100] "GET /app-ads.txt HTTP/1.1" 404 117 "-" "python-requests/2.34.2"
...
show less
Web App Attack
Port Scan
🇮🇱
spd.co.il
2026-10-29 03:03:16
UTC ·
(1 week ago)
Web application attack detected
Hacking
Web App Attack
🇬🇧
consul.to
2026-10-10 11:04:01
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-07 07:40:47
UTC ·
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
consul.to
2026-10-06 07:46:59
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-10-05 06:48:08
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇱
spd.co.il
2026-09-15 03:02:01
UTC ·
(1 month ago)
Web application attack detected
Hacking
Web App Attack
🇧🇪
FrankNeirynck
2026-08-23 08:35:36
UTC ·
(2 months ago)
51.158.248.220 - - [23/Aug/2026:10:35:32 +0200] "HEAD / HTTP/1.1" 400 0 "-" "python-httpx/0.28.1"
51.158.248.220 - - [23/Aug/2026:10:35:32 +0200] "HEAD / HTTP/1.1" 400 0 "-" "python-httpx/0.28.1"
51.158.248.220 - - [23/Aug/2026:10:35:35 +0200] "GET / ...
show more
51.158.248.220 - - [23/Aug/2026:10:35:32 +0200] "HEAD / HTTP/1.1" 400 0 "-" "python-httpx/0.28.1"
51.158.248.220 - - [23/Aug/2026:10:35:32 +0200] "HEAD / HTTP/1.1" 400 0 "-" "python-httpx/0.28.1"
51.158.248.220 - - [23/Aug/2026:10:35:35 +0200] "GET /favicon.ico HTTP/1.1" 404 508 "https://leesbaar.be/overzicht" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3"
...
show less
Hacking
Web App Attack
🇫🇷
EvoX
2026-08-05 04:49:07
UTC ·
(3 months ago)
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 3128
HEAD /
User-Agent: python-httpx/0.28.1
Accept: */*
Accept-Encoding: gzip, deflate; 3128 [2] TCP
Hacking
Bad Web Bot
🇳🇱
donarev419
2026-08-01 06:26:35
UTC ·
(3 months ago)
Connection to port 8085 with data transfer.
Data preview: HEAD / HTTP/1.1
Host: 87.229.95.155:8085
Accept: */*
Accept-Encoding: gzip, deflate
Connection:
Port Scan
Hacking
🇮🇳
nadnitin
2026-08-01 03:23:18
UTC ·
(3 months ago)
Automated trigger via Nginx Police. Reason: MALICIOUS-HEX. Trigger Log: Aug 1 08:53:17 e2e-32-133 python3[1822954]: 51.158.248.220 - - [01/Aug/2026 08:53:17] "\x16\x03\x01\x02\x00\x01\x00\x01ü\x03\x03Ö\x1dë½:¦À·\x7f¡\x1cüß° \x80¥ë]\x12½\x06\x95Av\x ...
show more
Automated trigger via Nginx Police. Reason: MALICIOUS-HEX. Trigger Log: Aug 1 08:53:17 e2e-32-133 python3[1822954]: 51.158.248.220 - - [01/Aug/2026 08:53:17] "\x16\x03\x01\x02\x00\x01\x00\x01ü\x03\x03Ö\x1dë½:¦À·\x7f¡\x1cüß° \x80¥ë]\x12½\x06\x95Av\x98õ\x7fqWu n¸ÂY\x16Þ\x80\x10»\x0ce}ö\x0b12\x01\x048Ük 8s\x8fë)lsÅG}\x00$\x13\x02\x13\x03\x13\x01À,À0À+À/̨̩À$À(À#À'\x00\x9f\x00\x9e\x00k\x00g\x00ÿ\x01\x00\x01\x8f\x00\x0b\x00\x04\x03\x00\x01\x02\x00" HTTPStatus.BAD_REQUEST -
show less
Web App Attack
🇨🇦
Slackin' Jack
2026-08-01 01:16:04
UTC ·
(3 months ago)
Triggered honeypot on port 3128. (51.158.248.220)
Port Scan
Anonymous
2026-07-25 16:59:20
UTC ·
(3 months ago)
[Sat Jul 25 18:59:06.975693 2026] [authz_core:error] [pid 30436:tid 30498] [client 51.158.248.220:44286] AH01630: client denied by server configuration: /var/www/html/
[Sat Jul 25 18:59:13.795394 2026] [authz_core:error] [pid 30436:tid 30504] [client ...
show more
[Sat Jul 25 18:59:06.975693 2026] [authz_core:error] [pid 30436:tid 30498] [client 51.158.248.220:44286] AH01630: client denied by server configuration: /var/www/html/
[Sat Jul 25 18:59:13.795394 2026] [authz_core:error] [pid 30436:tid 30504] [client 51.158.248.220:35699] AH01630: client denied by server configuration: /var/www/html/
[Sat Jul 25 18:59:19.013653 2026] [authz_core:error] [pid 30437:tid 30462] [client 51.158.248.220:41515] AH01630: client denied by server configuration: /var/www/html/favicon.ico, referer: http://maquinillos.xyz/
[Sat Jul 25 18:59:19.704540 2026] [authz_core:error] [pid 30436:tid 30499] [client 51.158.248.220:57102] AH01630: client denied by server configuration: /var/www/html/favicon.ico
[Sat Jul 25 18:59:19.984421 2026] [authz_core:error] [pid 30437:tid 30452] [client 51.158.248.220:57116] AH01630: client denied by server configuration: /var/www/html/ads.txt
...
show less
Web App Attack
🇬🇧
consul.to
2026-06-03 05:21:13
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack