SCARD

Suspicious activity by IP address 172.64.198.162

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 17:21:11 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.64.198.162

Description	Count
ET WEB_SERVER WEB-PHP phpinfo access	5
ET SCAN SFTP/FTP Password Exposure via sftp-config.json	4
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak	4

Detailed activity by IP address 172.64.198.162

Timestamp	Description	Protocol	Destination Port
2026-09-25 17:21:11	ET WEB_SERVER WEB-PHP phpinfo access	TCP	80
2026-08-27 04:42:44	ET WEB_SERVER WEB-PHP phpinfo access	TCP	80
2026-08-27 04:42:44	ET WEB_SERVER WEB-PHP phpinfo access	TCP	80
2026-08-11 05:49:17	ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak	TCP	80
2026-08-11 05:49:16	ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak	TCP	80
2026-08-11 04:48:43	ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak	TCP	80
2026-08-11 04:48:43	ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak	TCP	80
2026-08-08 11:46:37	ET SCAN SFTP/FTP Password Exposure via sftp-config.json	TCP	80
2026-08-08 11:46:36	ET SCAN SFTP/FTP Password Exposure via sftp-config.json	TCP	80
2026-08-08 10:46:08	ET SCAN SFTP/FTP Password Exposure via sftp-config.json	TCP	80
2026-08-08 10:46:08	ET SCAN SFTP/FTP Password Exposure via sftp-config.json	TCP	80
2026-07-27 22:52:07	ET WEB_SERVER WEB-PHP phpinfo access	TCP	80
2026-07-27 22:52:07	ET WEB_SERVER WEB-PHP phpinfo access	TCP	80