SCARD

Suspicious activity by IP address 121.11.239.253

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 19:03:54 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 121.11.239.253

Description Count
ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) 5
ET WEB_SERVER WGET Command Specifying Output in HTTP Headers 2
ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution 2

Detailed activity by IP address 121.11.239.253

Timestamp Description Protocol Destination Port
2026-09-25 19:03:54 ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) UDP 9034
2026-09-23 03:32:08 ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) UDP 9034
2026-09-21 19:04:25 ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) UDP 9034
2026-09-19 12:51:09 ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) UDP 9034
2026-09-14 23:13:57 ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) UDP 9034
2026-06-25 20:13:02 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-06-25 20:13:02 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-06-25 20:13:02 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-06-25 20:13:02 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80

 

Back to top