SCARD

Suspicious activity by IP address 139.87.112.228

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 27 Mar 2026 06:32:08 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 139.87.112.228

Description Count
ET EXPLOIT Apache HTTP Server SSRF (CVE-2021-40438) 4
ET EXPLOIT Microsoft Exchange Pre-Auth Path Confusion M1 (CVE-2021-31207) 4
SURICATA HTTP Host header invalid 2
SERVER-APACHE Apache HTTP server SSRF attempt 2
SERVER-WEBAPP Microsoft Exchange autodiscover server side request forgery attempt 2

Detailed activity by IP address 139.87.112.228

Timestamp Description Protocol Destination Port
2026-03-27 06:32:08 ET EXPLOIT Apache HTTP Server SSRF (CVE-2021-40438) TCP 80
2026-03-27 06:32:08 ET EXPLOIT Apache HTTP Server SSRF (CVE-2021-40438) TCP 80
2026-03-27 06:32:08 SERVER-APACHE Apache HTTP server SSRF attempt TCP 80
2026-03-27 06:32:08 SERVER-APACHE Apache HTTP server SSRF attempt TCP 80
2026-03-27 06:32:07 ET EXPLOIT Microsoft Exchange Pre-Auth Path Confusion M1 (CVE-2021-31207) TCP 80
2026-03-27 06:32:07 ET EXPLOIT Microsoft Exchange Pre-Auth Path Confusion M1 (CVE-2021-31207) TCP 80
2026-03-27 06:32:07 SERVER-WEBAPP Microsoft Exchange autodiscover server side request forgery attempt TCP 80
2026-03-27 06:32:07 SERVER-WEBAPP Microsoft Exchange autodiscover server side request forgery attempt TCP 80
2026-03-27 06:16:09 ET EXPLOIT Apache HTTP Server SSRF (CVE-2021-40438) TCP 443
2026-03-27 06:16:09 ET EXPLOIT Apache HTTP Server SSRF (CVE-2021-40438) TCP 443
2026-03-27 06:16:08 ET EXPLOIT Microsoft Exchange Pre-Auth Path Confusion M1 (CVE-2021-31207) TCP 443
2026-03-27 06:16:08 ET EXPLOIT Microsoft Exchange Pre-Auth Path Confusion M1 (CVE-2021-31207) TCP 443
2026-03-27 06:00:04 SURICATA HTTP Host header invalid TCP 443
2026-03-27 06:00:04 SURICATA HTTP Host header invalid TCP 443

 

Back to top