SCARD

Suspicious activity by IP address 172.68.164.166

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Apr 2026 18:54:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.68.164.166

Description Count
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 6
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 4

Detailed activity by IP address 172.68.164.166

Timestamp Description Protocol Destination Port
2026-04-14 18:54:30 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-14 18:54:30 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-14 17:54:08 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-14 17:54:08 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-14 17:54:08 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-14 17:54:08 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-03-31 03:05:29 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-31 03:05:28 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-31 02:05:02 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-31 02:05:02 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80

 

Back to top