SCARD

Suspicious activity by IP address 172.71.120.70

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 14 Jul 2026 18:37:23 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.120.70

Description Count
ET SCAN LeakIX Inbound User-Agent 8
ET WEB_SERVER WEB-PHP phpinfo access 2
ET HUNTING Request for Webshell in .well-known directory 2
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2

Detailed activity by IP address 172.71.120.70

Timestamp Description Protocol Destination Port
2026-07-14 18:37:23 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-14 18:37:23 ET HUNTING Request for Webshell in .well-known directory TCP 80
2026-07-08 07:54:22 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 07:54:21 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:39 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-08 06:53:39 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-06-04 10:35:31 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-06-04 10:35:31 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-05-23 19:38:08 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-23 19:38:08 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-04-22 21:12:47 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 21:12:46 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 20:12:03 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-04-22 20:12:03 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top