SCARD

Suspicious activity by IP address 119.160.215.50

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 27 Jun 2026 07:18:09 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 119.160.215.50

Description Count
ET INFO Netlink GPON Login Attempt (GET) 44
ET EXPLOIT Netgear DGN Remote Command Execution 20
SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt 18
ET EXPLOIT HackingTrio UA (Hello, World) 6
ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution 6
ET SCAN Mirai Variant User-Agent (Inbound) 6
ET WEB_SERVER WGET Command Specifying Output in HTTP Headers 6
ET WEB_SERVER WebShell Generic - wget http - POST 6

Detailed activity by IP address 119.160.215.50

Timestamp Description Protocol Destination Port
2026-06-27 07:18:09 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-06-27 07:18:09 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-06-06 16:15:55 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-06-06 16:15:55 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-06-06 16:15:55 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-06-06 16:15:55 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-06-01 12:07:09 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-06-01 12:07:09 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-06-01 02:24:12 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-06-01 02:24:12 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-06-01 02:24:12 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-06-01 02:24:12 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-05-29 13:45:00 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-29 13:45:00 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-26 17:31:56 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-26 17:31:56 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-26 17:31:56 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-26 17:31:56 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-26 17:31:56 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-26 17:31:56 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-26 13:13:57 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-26 13:13:57 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-26 13:13:57 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-26 13:13:57 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-25 13:46:30 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-25 13:46:30 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-25 13:46:30 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-25 13:46:30 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-25 09:30:35 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-25 09:30:35 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-25 09:30:35 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-25 09:30:35 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-24 12:58:29 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-24 12:58:29 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-24 12:58:29 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-24 12:58:29 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-24 12:58:29 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-24 12:58:29 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-24 03:09:56 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-24 03:09:56 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-24 03:09:56 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-05-24 03:09:56 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-24 03:09:56 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-05-24 03:09:56 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-05-20 16:21:18 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-20 16:21:18 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-20 16:21:18 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-20 16:21:18 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-18 12:15:40 ET INFO Netlink GPON Login Attempt (GET) TCP 8080
2026-05-16 23:44:03 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-16 23:44:03 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-16 16:45:02 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-05-16 16:45:02 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-05-16 16:45:02 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-05-16 16:45:02 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-05-16 11:52:08 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-16 11:52:08 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-12 12:07:04 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-12 03:18:00 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-12 03:18:00 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-12 03:18:00 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-05-12 03:18:00 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-12 02:57:15 ET EXPLOIT Netgear DGN Remote Command Execution TCP 8080
2026-05-10 12:13:17 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-10 12:13:17 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-09 20:17:40 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-09 20:17:40 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-08 21:28:58 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-05-07 05:34:32 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-07 05:34:32 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-04 16:34:03 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-04 16:34:03 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-02 06:30:28 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-02 06:30:28 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-01 21:42:34 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-01 21:42:34 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-26 14:42:12 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-26 14:42:12 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-24 20:50:59 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-24 20:50:59 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-22 11:17:50 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-22 11:17:50 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-21 23:22:43 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-21 07:39:36 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-21 07:39:34 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-20 06:17:20 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-20 06:17:20 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-20 06:17:20 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-20 06:17:20 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-16 21:57:05 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-16 21:57:05 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-16 21:57:05 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-16 21:57:05 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-12 06:22:40 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-08 09:33:14 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-08 09:33:14 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-07 10:37:56 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-07 10:37:56 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-04-07 10:37:56 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-07 10:37:56 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-04-04 11:46:33 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-04 11:46:32 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-04 04:44:05 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-04 04:44:05 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-04-03 17:48:53 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-04-03 17:48:53 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-04-03 17:48:53 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-04-03 17:48:53 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-03-31 12:38:50 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-03-31 12:38:50 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-03-27 14:08:22 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-03-27 14:08:22 ET INFO Netlink GPON Login Attempt (GET) TCP 80

 

Back to top