iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
country=ES
78 unique IPs · 6.4K events · 1 countries · 24 ASNs
Activity · last 7d
peak 3.8K on 2026-06-30
Top source networks · click to refine
country: ES×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 83 | GET / | 19 · 10 IPs | 37.209.161.228 → |
| HTTP | 8280 | GET /database.yml UA: Mozilla/5.0 (X11; U; FreeBSD i386; de-CH; rv:1.9.2.8) Gecko/20100729 Firefox/3.6.8 | 15 · 7 IPs | 34.175.148.223 → |
| HTTP | 8280 | GET /helm/values.yaml UA: Mozilla/5.0 (Linux; Android 9; RMX1851) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 | 15 · 7 IPs | 34.175.148.223 → |
| HTTP | 50050 | POST / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 | 15 · 2 IPs | 195.170.172.225 → |
| HTTP | 8280 | GET /config/app.php UA: MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0 | 14 · 7 IPs | 34.175.148.223 → |
| HTTP | 8280 | GET /config/database.yml UA: NokiaN73-1/3.0649.0.0.1 Series60/3.0 Profile/MIDP2.0 Configuration/CLDC-1.1 | 14 · 7 IPs | 34.175.148.223 → |
| HTTP | 8280 | GET /api/credentials.json UA: Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 OPR/62.0.3331.116 | 14 · 7 IPs | 34.175.148.223 → |
| HTTP | 8280 | GET /database.php UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 | 14 · 7 IPs | 34.175.148.223 → |
| HTTP | 8280 | GET /private/credentials.json UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1 | 14 · 7 IPs | 34.175.148.223 → |
| - | 445/SMB | ��SMBr S� �� @ b PC NETWORK PROGRAM 1.0 LANMAN1.0 Windows for Workgroups 3.1a LM1.2X002 LANMAN2.1 NT LM 0.12 | 13 · 8 IPs | 77.228.146.211 → |
| HTTP | 8280 | GET /secrets.json UA: Mozilla/4.8 [en] (Windows NT 5.1; U) | 13 · 7 IPs | 34.175.148.223 → |
| - | 445/SMB | 00 00 00 4a ff 53 4d 42 25 00 00 00 00 18 01 28 00 00 00 00 00 00 00 00 …(78 bytes) | 13 · 8 IPs | 77.228.146.211 → |
IPCountryASNTop portsEvents
151.248.21.4242.21.248.151.clientes.avanzafibra.com🇪🇸ESAS209835 Despliegue de Redes de Telecomunicacione39131189
79.149.139.242242.red-79-149-139.dynamicip.rima-tde.net🇪🇸ESAS3352 Telefonica De Espana S.a.u.3913125