Check an IP Address, Domain Name, Subnet, or ASN
176.65.139.27 has a threat confidence score of 90%. This IP address from Germany (AS51396, Pfcloud UG (haftungsbeschrankt)) has been observed in 65 honeypot sessions and reported 30 times targeting HTTP, HTTPS protocols. First observed on March 12, 2026, most recently active March 28, 2026.
Automated probe attempting to determine whether the target HTTP service functions as a forward proxy by requesting an external host and port (/google.com:443). Commonly observed in internet-wide open proxy discovery scanning.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
| Reporter | Date | Category | Protocol | Comment |
|---|---|---|---|---|
| User | Mar 22, 2026, 16:17 | Brute Force | HTTPS | SikkerGuard: 2 blocked packets |
| User | Mar 22, 2026, 04:20 | Brute Force | HTTPS | SikkerGuard: 2 blocked packets |
| User | Mar 22, 2026, 01:28 | Brute Force | HTTPS | SikkerGuard: 2 blocked packets |
| User | Mar 21, 2026, 22:26 | Brute Force | HTTPS | SikkerGuard: 2 blocked packets |
| User | Mar 21, 2026, 20:00 | Brute Force | HTTPS | SikkerGuard: 2 blocked packets |