SCARD

Suspicious activity by IP address 172.71.120.9

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 19:23:41 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.120.9

Description Count
ET SCAN LeakIX Inbound User-Agent 10
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) 5
ET EXPLOIT GraphQL Introspection Query Attempt 4
ET WEB_SERVER WEB-PHP phpinfo access 2
ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) 2
ET WEB_SERVER Wordpress Login Bruteforcing Detected 1
ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) 1

Detailed activity by IP address 172.71.120.9

Timestamp Description Protocol Destination Port
2026-09-25 19:23:41 ET WEB_SERVER Wordpress Login Bruteforcing Detected TCP 80
2026-09-24 03:11:27 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-24 03:11:22 ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) TCP 80
2026-09-24 03:11:22 ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) TCP 80
2026-09-24 03:11:22 ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) TCP 80
2026-09-24 03:11:22 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-24 03:11:18 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-24 03:11:15 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-09-24 03:11:03 ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) TCP 80
2026-08-05 18:31:16 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-05 18:31:16 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-08-05 18:31:16 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-08-05 18:31:16 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-05 17:30:32 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-08-05 17:30:32 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-08-05 17:30:32 ET EXPLOIT GraphQL Introspection Query Attempt TCP 80
2026-08-05 17:30:32 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-23 17:38:13 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-23 17:38:12 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-23 16:37:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-07-23 16:37:31 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-25 20:50:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-25 20:50:27 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-05-23 16:34:38 ET SCAN LeakIX Inbound User-Agent TCP 80
2026-05-23 16:34:38 ET SCAN LeakIX Inbound User-Agent TCP 80

 

Back to top