SCARD

Suspicious activity by IP address 1.117.233.202

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 13 Apr 2026 01:36:50 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 1.117.233.202

Description Count
SURICATA HTTP Host header invalid 12
ET WEB_SERVER WebShell Generic - wget http - POST 6
ET EXPLOIT F5 BIG-IP iControl REST Authentication Bypass Attempt (CVE-2022-1388) M3 2
ET INFO F5 BIG-IP - Command Execution via util/bash 2
ET HUNTING Suspicious Chmod Usage in URI (Inbound) 2
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials 1

Detailed activity by IP address 1.117.233.202

Timestamp Description Protocol Destination Port
2026-04-13 01:36:50 SURICATA HTTP Host header invalid TCP 80
2026-04-13 01:36:50 SURICATA HTTP Host header invalid TCP 80
2026-04-13 01:36:50 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-04-13 01:36:50 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-04-12 07:40:23 ET HUNTING Suspicious Chmod Usage in URI (Inbound) TCP 80
2026-04-12 07:40:23 SURICATA HTTP Host header invalid TCP 80
2026-04-12 07:40:23 SURICATA HTTP Host header invalid TCP 80
2026-04-12 07:40:23 ET HUNTING Suspicious Chmod Usage in URI (Inbound) TCP 80
2026-04-08 00:48:16 ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials TCP 80
2026-04-06 18:36:20 SURICATA HTTP Host header invalid TCP 80
2026-04-06 18:36:20 SURICATA HTTP Host header invalid TCP 80
2026-04-06 18:36:20 SURICATA HTTP Host header invalid TCP 80
2026-04-06 18:36:20 SURICATA HTTP Host header invalid TCP 80
2026-04-06 12:47:47 SURICATA HTTP Host header invalid TCP 80
2026-04-06 12:47:47 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-04-06 12:47:47 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-04-06 12:47:47 SURICATA HTTP Host header invalid TCP 80
2026-03-31 22:04:17 ET WEB_SERVER WebShell Generic - wget http - POST TCP 443
2026-03-31 22:04:17 ET EXPLOIT F5 BIG-IP iControl REST Authentication Bypass Attempt (CVE-2022-1388) M3 TCP 443
2026-03-31 22:04:17 ET INFO F5 BIG-IP - Command Execution via util/bash TCP 443
2026-03-31 22:04:17 SURICATA HTTP Host header invalid TCP 443
2026-03-31 22:04:17 ET WEB_SERVER WebShell Generic - wget http - POST TCP 443
2026-03-31 22:04:17 ET EXPLOIT F5 BIG-IP iControl REST Authentication Bypass Attempt (CVE-2022-1388) M3 TCP 443
2026-03-31 22:04:17 ET INFO F5 BIG-IP - Command Execution via util/bash TCP 443
2026-03-31 22:04:17 SURICATA HTTP Host header invalid TCP 443

 

Back to top