SCARD

Suspicious activity by IP address 172.71.152.20

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Tue, 21 Apr 2026 00:01:59 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.71.152.20

Description Count
ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML 2
SERVER-WEBAPP PHPUnit PHP remote code execution attempt 2
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak 2
ET SCAN SFTP/FTP Password Exposure via sftp-config.json 2

Detailed activity by IP address 172.71.152.20

Timestamp Description Protocol Destination Port
2026-04-21 00:01:59 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-21 00:01:59 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML TCP 80
2026-04-05 17:12:00 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-04-05 17:12:00 ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak TCP 80
2026-04-05 16:11:33 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-04-05 16:11:33 ET SCAN SFTP/FTP Password Exposure via sftp-config.json TCP 80
2026-03-30 14:57:23 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80
2026-03-30 14:57:23 SERVER-WEBAPP PHPUnit PHP remote code execution attempt TCP 80

 

Back to top