SCARD

Suspicious activity by IP address 172.69.130.253

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 11 Sep 2026 11:39:53 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.69.130.253

Description Count
ET SCAN LeakIX Inbound User-Agent 12
ET EXPLOIT GraphQL Introspection Query Attempt 6
ET WEB_SERVER WEB-PHP phpinfo access 1

Detailed activity by IP address 172.69.130.253

Timestamp Description Protocol Destination Port
2026-09-11 11:39:53 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-07-19 23:35:03 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-19 23:35:02 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-19 22:34:04 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-19 22:34:04 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-15 14:19:02 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-15 14:19:01 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-15 13:18:37 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-15 13:18:37 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 20:00:34 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 20:00:34 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 20:00:32 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 20:00:32 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:59:52 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:59:52 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:59:51 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:59:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:59:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:59:51 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top