SCARD

Suspicious activity by IP address 142.248.80.132

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 20:55:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 142.248.80.132

Description Count
SERVER-WEBAPP Joomla SP Page Builder webshell upload attempt 4
ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body 3
ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body 3
ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 2

Detailed activity by IP address 142.248.80.132

Timestamp Description Protocol Destination Port
2026-09-25 20:55:43 SERVER-WEBAPP Joomla SP Page Builder webshell upload attempt TCP 80
2026-09-25 20:55:40 SERVER-WEBAPP Joomla SP Page Builder webshell upload attempt TCP 80
2026-09-25 20:55:19 SERVER-WEBAPP Joomla SP Page Builder webshell upload attempt TCP 80
2026-09-25 20:55:18 SERVER-WEBAPP Joomla SP Page Builder webshell upload attempt TCP 80
2026-09-07 08:58:33 ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body TCP 80
2026-09-07 08:58:33 ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body TCP 80
2026-09-07 08:58:33 ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body TCP 80
2026-09-07 08:58:33 ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 TCP 80
2026-09-07 08:58:33 ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body TCP 80
2026-09-05 19:57:45 ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 TCP 80
2026-09-05 19:57:45 ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body TCP 80
2026-09-05 19:57:45 ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body TCP 80

 

Back to top