SCARD

Suspicious activity by IP address 172.68.210.204

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 09:45:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.68.210.204

Description Count
ET SCAN LeakIX Inbound User-Agent 29
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) 4
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 3
ET WEB_SERVER PHP tags in HTTP POST 3
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 2
ET INFO Python aiohttp User-Agent Observed Inbound 2
ET INFO ChatGPT-User Traffic Detected Inbound M2 1
ET WEB_SERVER WEB-PHP phpinfo access 1
ET INFO ChatGPT-User Traffic Detected Inbound M1 1

Detailed activity by IP address 172.68.210.204

Timestamp Description Protocol Destination Port
2026-09-25 09:45:30 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-09-24 19:21:43 ET INFO ChatGPT-User Traffic Detected Inbound M1 TCP 80
2026-09-24 19:21:43 ET INFO ChatGPT-User Traffic Detected Inbound M2 TCP 80
2026-09-07 00:08:07 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-07 00:08:07 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-06 23:07:24 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-06 23:07:24 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-08-01 22:45:53 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-01 22:45:51 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-01 21:45:20 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-01 21:45:20 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-17 13:52:50 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-07-17 13:52:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-17 13:52:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-17 13:52:50 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-07-17 12:52:06 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-17 12:52:06 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-17 12:52:06 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 19:17:21 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 19:17:21 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 18:16:22 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 18:16:22 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-27 19:19:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-27 19:19:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-27 18:18:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-27 18:18:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-25 23:04:13 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-06-25 23:04:13 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-06-25 23:04:13 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-06-25 23:04:13 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-06-25 23:04:13 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-06-25 23:04:13 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-06-21 05:41:26 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-21 05:41:24 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-21 04:40:41 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-21 04:40:41 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 17:35:09 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 17:35:09 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 16:34:36 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 16:34:36 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-04 17:17:01 ET INFO Python aiohttp User-Agent Observed Inbound TCP 80
2026-04-04 17:17:01 ET INFO Python aiohttp User-Agent Observed Inbound TCP 80
2026-04-03 17:37:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 17:37:07 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:36:10 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-03 16:36:10 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top