SCARD

Suspicious activity by IP address 172.70.248.9

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 28 Mar 2026 09:09:27 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.70.248.9

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 4
ET EXPLOIT GraphQL Introspection Query Attempt 2
ET SCAN LeakIX Inbound User-Agent 2

Detailed activity by IP address 172.70.248.9

Timestamp Description Protocol Destination Port
2026-03-28 09:09:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:26 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:26 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-27 18:31:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:31:51 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:31:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:31:51 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top