SCARD

Suspicious activity by IP address 172.70.208.108

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 13:13:44 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.70.208.108

Description Count
ET SCAN LeakIX Inbound User-Agent 8
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 2
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 2

Detailed activity by IP address 172.70.208.108

Timestamp Description Protocol Destination Port
2026-07-14 13:13:44 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 13:13:43 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 12:12:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-14 12:12:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 17:35:03 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 17:35:01 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 16:34:35 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-27 16:34:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 16:34:35 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-27 16:34:35 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-24 20:00:48 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-05-24 20:00:46 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-05-24 19:00:12 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-05-24 19:00:12 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80

 

Back to top