SCARD

Suspicious activity by IP address 159.196.12.146

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 15 May 2026 04:00:56 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 159.196.12.146

Description Count
SURICATA HTTP request field missing colon 4
SURICATA HTTP request header invalid 4
SURICATA HTTP URI terminated by non-compliant character 4
SURICATA HTTP METHOD terminated by non-compliant character 3
ET WEB_SERVER WebShell Generic - ELF File Uploaded 2

Detailed activity by IP address 159.196.12.146

Timestamp Description Protocol Destination Port
2026-05-15 04:00:56 SURICATA HTTP METHOD terminated by non-compliant character TCP 8080
2026-05-15 04:00:56 SURICATA HTTP request header invalid TCP 8080
2026-05-15 04:00:56 SURICATA HTTP URI terminated by non-compliant character TCP 8080
2026-05-15 04:00:56 SURICATA HTTP request field missing colon TCP 8080
2026-05-01 19:02:45 SURICATA HTTP URI terminated by non-compliant character TCP 8080
2026-05-01 19:02:45 SURICATA HTTP request header invalid TCP 8080
2026-05-01 19:02:45 SURICATA HTTP request field missing colon TCP 8080
2026-04-19 02:40:18 ET WEB_SERVER WebShell Generic - ELF File Uploaded TCP 8080
2026-04-19 02:40:18 ET WEB_SERVER WebShell Generic - ELF File Uploaded TCP 8080
2026-04-01 14:36:56 SURICATA HTTP request field missing colon TCP 8080
2026-04-01 14:36:56 SURICATA HTTP URI terminated by non-compliant character TCP 8080
2026-04-01 14:36:56 SURICATA HTTP METHOD terminated by non-compliant character TCP 8080
2026-04-01 14:36:56 SURICATA HTTP request header invalid TCP 8080
2026-03-30 16:25:03 SURICATA HTTP request field missing colon TCP 8080
2026-03-30 16:25:03 SURICATA HTTP METHOD terminated by non-compliant character TCP 8080
2026-03-30 16:25:03 SURICATA HTTP URI terminated by non-compliant character TCP 8080
2026-03-30 16:25:03 SURICATA HTTP request header invalid TCP 8080

 

Back to top