SCARD

Suspicious activity by IP address 172.71.120.69

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 21:48:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.120.69

Description Count
ET SCAN LeakIX Inbound User-Agent 8
ET HUNTING Request for Webshell in .well-known directory 6
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 4
ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) 2

Detailed activity by IP address 172.71.120.69

Timestamp Description Protocol Destination Port
2026-07-14 21:48:20 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-14 21:48:20 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-14 20:47:40 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-14 20:47:40 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-08 07:54:05 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 07:54:05 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:22 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:22 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-28 15:11:26 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-06-28 15:11:26 ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) TCP 80
2026-06-04 10:36:13 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-06-04 10:36:13 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-06-04 04:54:17 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-06-04 04:54:17 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-05-18 03:47:10 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-05-18 03:47:10 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-04-22 21:12:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 21:12:08 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 20:11:14 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 20:11:14 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top