SCARD

Suspicious activity by IP address 103.239.185.31

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Apr 2026 03:28:40 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.239.185.31

Description	Count
ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	6
ET HUNTING Suspicious PHP Code in HTTP POST (Outbound)	2

Detailed activity by IP address 103.239.185.31

Timestamp	Description	Protocol	Destination Port
2026-04-14 03:28:40	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80
2026-04-13 14:33:01	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80
2026-04-13 14:33:00	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80
2026-04-12 00:36:51	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80
2026-04-12 00:36:51	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80
2026-04-10 22:47:06	ET HUNTING Suspicious PHP Code in HTTP POST (Outbound)	TCP	80
2026-04-10 22:47:03	ET HUNTING Suspicious PHP Code in HTTP POST (Outbound)	TCP	80
2026-04-10 22:47:01	ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2	TCP	80