SCARD

Suspicious activity by IP address 172.71.134.122

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Fri, 25 Sep 2026 09:45:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.134.122

Description Count
ET WEB_SERVER WEB-PHP phpinfo access 3
ET WEB_SERVER PHP tags in HTTP POST 3
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 3
ET EXPLOIT Fortigate VPN - Request to /remote/info - Possible CVE-2023-27997 Exploit Attempt 1

Detailed activity by IP address 172.71.134.122

Timestamp Description Protocol Destination Port
2026-09-25 09:45:20 ET EXPLOIT Fortigate VPN - Request to /remote/info - Possible CVE-2023-27997 Exploit Attempt TCP 80
2026-08-25 11:02:10 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-08-25 11:02:10 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-08-25 11:02:10 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-08-25 11:02:10 ET WEB_SERVER PHP tags in HTTP POST TCP 80
2026-08-25 11:02:10 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-08-25 11:02:10 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-06-25 22:40:39 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-06-25 22:40:39 ET WEB_SERVER WEB-PHP phpinfo access TCP 80
2026-06-25 22:40:39 ET WEB_SERVER WEB-PHP phpinfo access TCP 80

 

Back to top