SCARD

Suspicious activity by IP address 103.46.186.85

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 19:11:31 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.46.186.85

Description Count
ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 26
ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) 7
SERVER-WEBAPP PHP PHP-CGI command execution attempt 4

Detailed activity by IP address 103.46.186.85

Timestamp Description Protocol Destination Port
2026-09-25 19:11:31 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-25 12:28:28 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-25 03:14:39 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-25 03:14:38 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-25 03:14:37 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-25 03:14:36 SERVER-WEBAPP PHP PHP-CGI command execution attempt TCP 80
2026-09-25 03:14:36 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-25 03:14:35 SERVER-WEBAPP PHP PHP-CGI command execution attempt TCP 80
2026-09-25 03:14:35 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-25 03:14:34 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-24 14:43:52 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-24 14:43:52 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-23 09:46:19 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-23 09:46:18 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-22 10:00:28 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-22 00:16:32 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-22 00:16:32 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-21 23:35:55 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-21 23:35:55 SERVER-WEBAPP PHP PHP-CGI command execution attempt TCP 80
2026-09-21 23:35:52 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-21 18:24:11 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-21 18:24:11 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-21 02:15:36 SERVER-WEBAPP PHP PHP-CGI command execution attempt TCP 80
2026-09-21 02:15:36 ET HUNTING Suspicious PHP Code in HTTP POST (Outbound) TCP 80
2026-09-21 02:15:35 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-19 12:44:21 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-19 12:44:19 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-15 16:31:45 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-14 23:58:21 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-14 23:58:21 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-04 11:32:40 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-03 14:59:49 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-03 14:59:49 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-02 15:08:58 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-02 15:08:58 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-02 04:28:59 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80
2026-09-02 04:28:58 ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2 TCP 80

 

Back to top