SCARD

Suspicious activity by IP address 172.70.189.139

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 21:47:25 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.70.189.139

Description Count
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 10
ET WEB_SERVER Wordpress Login Bruteforcing Detected 2

Detailed activity by IP address 172.70.189.139

Timestamp Description Protocol Destination Port
2026-07-14 21:47:25 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-07-14 21:47:25 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-10 07:04:30 ET WEB_SERVER Wordpress Login Bruteforcing Detected TCP 80
2026-05-10 07:04:30 ET WEB_SERVER Wordpress Login Bruteforcing Detected TCP 80
2026-04-10 20:48:01 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 20:48:00 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-10 19:47:38 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80

 

Back to top