SCARD

Suspicious activity by IP address 161.97.173.12

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 27 Mar 2026 22:07:27 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 161.97.173.12

Description Count
ET WEB_SERVER WGET Command Specifying Output in HTTP Headers 2
OS-OTHER Bash CGI environment variable injection attempt 2
ET WEB_SERVER WebShell Generic - wget http - POST 2
ET WEB_SERVER CURL Command Specifying Output in HTTP Headers 2

Detailed activity by IP address 161.97.173.12

Timestamp Description Protocol Destination Port
2026-03-27 22:07:27 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-03-27 22:07:25 ET WEB_SERVER WebShell Generic - wget http - POST TCP 80
2026-03-27 22:05:23 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-03-27 22:05:23 OS-OTHER Bash CGI environment variable injection attempt TCP 80
2026-03-27 22:05:23 OS-OTHER Bash CGI environment variable injection attempt TCP 80
2026-03-27 22:05:23 ET WEB_SERVER CURL Command Specifying Output in HTTP Headers TCP 80
2026-03-27 22:05:23 ET WEB_SERVER CURL Command Specifying Output in HTTP Headers TCP 80
2026-03-27 22:05:23 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80

 

Back to top