SCARD

Suspicious activity by IP address 172.71.124.224

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 01 Apr 2026 10:45:34 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.124.224

Description Count
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 12
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 2

Detailed activity by IP address 172.71.124.224

Timestamp Description Protocol Destination Port
2026-04-01 10:45:34 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 10:45:33 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-01 09:45:11 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-03-31 02:04:51 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-31 02:04:51 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80

 

Back to top