SCARD

Suspicious activity by IP address 172.70.248.9

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 23 May 2026 17:35:36 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.70.248.9

Description Count
ET SCAN LeakIX Inbound User-Agent 10
ET EXPLOIT GraphQL Introspection Query Attempt 4
ET WEB_SERVER WEB-PHP phpinfo access 4
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 2

Detailed activity by IP address 172.70.248.9

Timestamp Description Protocol Destination Port
2026-05-23 17:35:36 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-23 17:35:36 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-23 17:35:34 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-23 17:35:34 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-05-23 16:34:44 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-23 16:34:44 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-26 22:44:01 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-04-26 22:44:01 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-04-16 23:44:50 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-16 23:44:49 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-16 22:44:05 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-16 22:44:05 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-28 09:09:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:26 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-28 09:09:26 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-03-27 18:31:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-03-27 18:31:51 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:31:51 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-03-27 18:31:51 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80

 

Back to top