SCARD

Suspicious activity by IP address 139.135.44.252

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 07:13:50 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 139.135.44.252

Description Count
ET INFO Netlink GPON Login Attempt (GET) 4
ET WEB_SERVER WebShell Generic - wget http - POST 2
ET EXPLOIT HackingTrio UA (Hello, World) 2
ET SCAN Mirai Variant User-Agent (Inbound) 2
SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt 1
ET EXPLOIT Netgear DGN Remote Command Execution 1

Detailed activity by IP address 139.135.44.252

Timestamp Description Protocol Destination Port
2026-09-25 07:13:50 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-09-25 07:13:50 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-06-26 08:06:50 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-06-26 08:06:49 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-06-26 08:04:38 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-06-26 08:04:38 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-06-26 08:04:38 ET SCAN Mirai Variant User-Agent (Inbound) TCP 80
2026-06-26 08:04:38 ET EXPLOIT HackingTrio UA (Hello, World) TCP 80
2026-06-20 11:16:08 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-06-20 11:16:08 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-02 13:27:39 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-05-02 13:27:39 ET INFO Netlink GPON Login Attempt (GET) TCP 80

 

Back to top