SCARD

Suspicious activity by IP address 202.70.139.165

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 06:26:25 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 202.70.139.165

Description Count
SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt 2
ET EXPLOIT Netgear DGN Remote Command Execution 2
ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution 2
ET WEB_SERVER WGET Command Specifying Output in HTTP Headers 2
ET INFO Netlink GPON Login Attempt (GET) 1

Detailed activity by IP address 202.70.139.165

Timestamp Description Protocol Destination Port
2026-09-25 06:26:25 ET INFO Netlink GPON Login Attempt (GET) TCP 80
2026-08-23 21:30:36 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-08-23 21:30:36 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-08-23 21:30:36 ET EXPLOIT Netgear DGN Remote Command Execution TCP 80
2026-08-23 21:30:36 SERVER-WEBAPP Netgear DGN1000 series routers authentication bypass attempt TCP 80
2026-07-26 11:26:15 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80
2026-07-26 11:26:15 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-07-26 11:26:15 ET WEB_SERVER WGET Command Specifying Output in HTTP Headers TCP 80
2026-07-26 11:26:15 ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution TCP 80

 

Back to top